last executing test programs:

4.928279771s ago: executing program 4 (id=491):
r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)

4.502205965s ago: executing program 4 (id=496):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xc0)

4.319908077s ago: executing program 2 (id=498):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.84746964s ago: executing program 2 (id=501):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000180)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.52684272s ago: executing program 2 (id=504):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r1, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)

3.199923255s ago: executing program 2 (id=508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x105, 0x70bd2d, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.936558097s ago: executing program 3 (id=511):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008802, &(0x7f00000003c0)={[{@dmask={'dmask', 0x3d, 0x1}}, {@namecase}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@gid={'gid', 0x3d, 0xee01}}, {@utf8}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0xd}}, {}, {@utf8}]}, 0x1, 0x1529, &(0x7f00000037c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file0/file1\x00')

2.757134307s ago: executing program 5 (id=512):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@sysvgroups}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

2.697397506s ago: executing program 0 (id=513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1], 0x2c}}, 0x80)

2.665850128s ago: executing program 2 (id=514):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=")
open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)

2.428701961s ago: executing program 1 (id=515):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020)

2.297511331s ago: executing program 0 (id=516):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0xea, &(0x7f0000001380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @gre={{0x25, 0x4, 0x1, 0x3d, 0xd8, 0x64, 0x0, 0xf4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x22, 0x3, [{0x1, 0x12, "298246d2ab3cd232c18a287339962fda"}, {0x2, 0xa, "bec433519f3f0600"}]}, @noop, @cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "5664f1bdc6fa88ba2c08"}]}, @ssrr={0x89, 0x7, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @cipso={0x86, 0x19, 0x2, [{0x1, 0x7, "e2fc3ad1bf"}, {0x2, 0xc, "250ee1dd51e5851ca944"}]}, @ssrr={0x89, 0x27, 0x5f, [@empty, @loopback, @empty, @private=0xa010100, @multicast1, @loopback, @local, @multicast1, @remote]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x73, 0x1, 0x1, 0x0, 0x5, 0x2}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0xa, 0x3, 0x1, 0x2, 0x6, 0x5}, 0x2, {0x7, 0xfffc, 0x0, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x800002}}}}}}, 0x0)

2.060565313s ago: executing program 4 (id=517):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r1, r2, 0x0, 0x9e, 0x4, 0xf7, {0x0, 0xc, 0x1, 0x9, 0x9, 0x9, 0x200, 0x6, 0x80, 0x6, 0x4081, 0xc, 0x38, 0x62, "bcddcb51bad91240ebb5a0c4350bc05988b348e72c1608bf9c568d1e9b403b5a"}})

2.055582329s ago: executing program 1 (id=518):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendto(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0)

1.999732137s ago: executing program 3 (id=519):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000180)=0x8000)

1.924258567s ago: executing program 0 (id=520):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r1, 0x40187013, &(0x7f0000000040))

1.903233136s ago: executing program 5 (id=521):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800)

1.802647606s ago: executing program 1 (id=522):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0])

1.667202235s ago: executing program 4 (id=523):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x3f7ff, 0x4)
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000000))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x46ea, 0xf, 0x1, 0xfffffffd})

1.645725261s ago: executing program 0 (id=524):
setrlimit(0xf, &(0x7f0000000000)={0x3, 0x4000005})
timer_create(0x3, 0x0, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usbip_server_init(0x4)

1.493035207s ago: executing program 3 (id=525):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

1.266983027s ago: executing program 1 (id=526):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0xc02, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000500)={0x0, 0x1})

1.256847852s ago: executing program 5 (id=527):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000640)={r2, 0x0, 0x4, 0x1, 0x3})

1.25501358s ago: executing program 4 (id=528):
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1.088527416s ago: executing program 3 (id=529):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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")
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

905.673159ms ago: executing program 4 (id=530):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)=0x2)
r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{r1}, 0x1, &(0x7f0000000340)=[0x80000000000004], 0x3fe, 0x6, 0x1})

863.873596ms ago: executing program 5 (id=531):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f00000010c0)=0x6)
accept4$rose(r0, 0x0, 0x0, 0x0)

777.223915ms ago: executing program 1 (id=532):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800800034000000072"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

627.497394ms ago: executing program 0 (id=533):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r1 = syz_open_pts(r0, 0x141601)
ioctl$TIOCCBRK(r1, 0x5428)

618.49147ms ago: executing program 3 (id=534):
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3cd4e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d42822f7346b616fe28ed0b9f42b0efdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af829500000000", 0x13c}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})

516.011415ms ago: executing program 5 (id=535):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff})
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x1)
write(r0, &(0x7f0000000000)='G\x00\x00\x00', 0x4)

208.3848ms ago: executing program 0 (id=536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="018027bd7000fddbdf259200001008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x10)

150.686553ms ago: executing program 5 (id=537):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

136.807293ms ago: executing program 3 (id=538):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)

25.681977ms ago: executing program 2 (id=539):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000005f80)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x5, 0x6bd, &(0x7f0000000cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

0s ago: executing program 1 (id=540):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts.
[  100.426528][ T5810] cgroup: Unknown subsys name 'net'
[  100.585848][ T5810] cgroup: Unknown subsys name 'cpuset'
[  100.595818][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  101.432739][   T10] cfg80211: failed to load regulatory.db
[  102.371447][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  105.235314][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.241598][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.246497][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.261427][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.270206][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.270479][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.285388][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.303230][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.311099][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.316547][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.319872][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.326550][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.339657][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.341291][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.355241][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.359937][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.364785][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.410278][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.420551][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.426363][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.428905][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.435904][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.443734][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.449549][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.456679][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.470506][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.481843][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.489351][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.498276][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.520714][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  106.331505][ T5829] chnl_net:caif_netlink_parms(): no params data found
[  106.569095][ T5843] chnl_net:caif_netlink_parms(): no params data found
[  106.648329][ T5834] chnl_net:caif_netlink_parms(): no params data found
[  106.678429][ T5839] chnl_net:caif_netlink_parms(): no params data found
[  106.690346][ T5844] chnl_net:caif_netlink_parms(): no params data found
[  106.778409][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.785666][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.793642][ T5829] bridge_slave_0: entered allmulticast mode
[  106.801269][ T5829] bridge_slave_0: entered promiscuous mode
[  106.839496][ T5831] chnl_net:caif_netlink_parms(): no params data found
[  106.873900][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.881120][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.888243][ T5829] bridge_slave_1: entered allmulticast mode
[  106.896343][ T5829] bridge_slave_1: entered promiscuous mode
[  107.096444][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.113110][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.120232][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.128150][ T5843] bridge_slave_0: entered allmulticast mode
[  107.135763][ T5843] bridge_slave_0: entered promiscuous mode
[  107.182014][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.206646][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.213904][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.221198][ T5843] bridge_slave_1: entered allmulticast mode
[  107.228769][ T5843] bridge_slave_1: entered promiscuous mode
[  107.257129][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.264611][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.271963][ T5844] bridge_slave_0: entered allmulticast mode
[  107.279724][ T5844] bridge_slave_0: entered promiscuous mode
[  107.338979][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.346560][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.353923][ T5839] bridge_slave_0: entered allmulticast mode
[  107.361582][ T5839] bridge_slave_0: entered promiscuous mode
[  107.370099][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.377487][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.384908][ T5839] bridge_slave_1: entered allmulticast mode
[  107.392487][ T5839] bridge_slave_1: entered promiscuous mode
[  107.399196][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.406747][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.414027][ T5844] bridge_slave_1: entered allmulticast mode
[  107.422273][ T5844] bridge_slave_1: entered promiscuous mode
[  107.431892][ T5835] Bluetooth: hci0: command tx timeout
[  107.437482][ T5835] Bluetooth: hci1: command tx timeout
[  107.443309][ T5838] Bluetooth: hci2: command tx timeout
[  107.450233][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.457492][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.464704][ T5834] bridge_slave_0: entered allmulticast mode
[  107.472335][ T5834] bridge_slave_0: entered promiscuous mode
[  107.553237][ T5829] team0: Port device team_slave_0 added
[  107.576285][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.583704][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.591387][ T5838] Bluetooth: hci3: command tx timeout
[  107.591443][ T5834] bridge_slave_1: entered allmulticast mode
[  107.596972][ T5838] Bluetooth: hci5: command tx timeout
[  107.603002][ T5835] Bluetooth: hci4: command tx timeout
[  107.616556][ T5834] bridge_slave_1: entered promiscuous mode
[  107.627354][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.637137][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.644493][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.651702][ T5831] bridge_slave_0: entered allmulticast mode
[  107.659154][ T5831] bridge_slave_0: entered promiscuous mode
[  107.683695][ T5829] team0: Port device team_slave_1 added
[  107.692671][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.719081][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.744224][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.751585][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.758711][ T5831] bridge_slave_1: entered allmulticast mode
[  107.766511][ T5831] bridge_slave_1: entered promiscuous mode
[  107.776958][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.803157][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.875905][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.917958][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.929387][ T5843] team0: Port device team_slave_0 added
[  107.965915][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.972929][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.999817][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.013866][ T5844] team0: Port device team_slave_0 added
[  108.020534][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.027475][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.053844][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.068101][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.095116][ T5843] team0: Port device team_slave_1 added
[  108.104103][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.130687][ T5844] team0: Port device team_slave_1 added
[  108.138504][ T5839] team0: Port device team_slave_0 added
[  108.185171][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.210962][ T5839] team0: Port device team_slave_1 added
[  108.219653][ T5834] team0: Port device team_slave_0 added
[  108.314217][ T5834] team0: Port device team_slave_1 added
[  108.321009][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.327944][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.354217][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.380723][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.387669][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.413758][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.468432][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.475997][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.502220][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.514931][ T5831] team0: Port device team_slave_0 added
[  108.521838][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.528782][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.555418][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.567280][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.574304][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.600798][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.618581][ T5829] hsr_slave_0: entered promiscuous mode
[  108.625504][ T5829] hsr_slave_1: entered promiscuous mode
[  108.658504][ T5831] team0: Port device team_slave_1 added
[  108.672685][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.679627][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.705684][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.718202][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.725409][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.751464][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.764439][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.771471][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.798508][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.857974][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.865428][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.891443][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.904846][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.911823][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.937866][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.084315][ T5844] hsr_slave_0: entered promiscuous mode
[  109.091106][ T5844] hsr_slave_1: entered promiscuous mode
[  109.097376][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[  109.103490][ T5844] Cannot create hsr debugfs directory
[  109.132500][ T5843] hsr_slave_0: entered promiscuous mode
[  109.138993][ T5843] hsr_slave_1: entered promiscuous mode
[  109.145366][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[  109.151455][ T5843] Cannot create hsr debugfs directory
[  109.163440][ T5839] hsr_slave_0: entered promiscuous mode
[  109.169948][ T5839] hsr_slave_1: entered promiscuous mode
[  109.176982][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[  109.182744][ T5839] Cannot create hsr debugfs directory
[  109.209937][ T5834] hsr_slave_0: entered promiscuous mode
[  109.216769][ T5834] hsr_slave_1: entered promiscuous mode
[  109.223185][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[  109.228910][ T5834] Cannot create hsr debugfs directory
[  109.416571][ T5831] hsr_slave_0: entered promiscuous mode
[  109.423706][ T5831] hsr_slave_1: entered promiscuous mode
[  109.429910][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[  109.435829][ T5831] Cannot create hsr debugfs directory
[  109.510587][ T5835] Bluetooth: hci1: command tx timeout
[  109.520616][ T5835] Bluetooth: hci2: command tx timeout
[  109.520755][ T5838] Bluetooth: hci0: command tx timeout
[  109.670796][ T5838] Bluetooth: hci4: command tx timeout
[  109.670818][ T5835] Bluetooth: hci5: command tx timeout
[  109.671231][ T5840] Bluetooth: hci3: command tx timeout
[  110.044118][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  110.057849][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  110.089170][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  110.100366][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  110.152604][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  110.171744][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  110.187945][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  110.209305][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  110.316069][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.327002][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.339036][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.367162][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  110.472198][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.499407][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.527729][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.540152][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.638336][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  110.650243][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  110.694920][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.706399][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  110.740780][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.750248][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  110.820247][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[  110.834577][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.844457][ T5831] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  110.876357][ T5831] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  110.887774][ T5831] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  110.898771][ T5831] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  110.925335][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.932557][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.953097][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[  110.972778][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.979900][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.011663][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[  111.023401][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.030558][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.063948][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.071115][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.134405][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.141572][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.192408][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.199537][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.319215][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.441806][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.463281][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[  111.501875][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.554667][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.561966][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.593276][ T5840] Bluetooth: hci0: command tx timeout
[  111.601749][ T5840] Bluetooth: hci2: command tx timeout
[  111.607167][ T5840] Bluetooth: hci1: command tx timeout
[  111.617147][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.624327][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.676013][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[  111.736930][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.744133][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.760620][ T5835] Bluetooth: hci5: command tx timeout
[  111.766045][ T5835] Bluetooth: hci3: command tx timeout
[  111.767988][ T5840] Bluetooth: hci4: command tx timeout
[  111.806990][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[  111.851489][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.858646][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.942207][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.949372][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.983225][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.990393][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.126776][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.158963][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.178318][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.198918][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.498763][ T5829] veth0_vlan: entered promiscuous mode
[  112.550127][ T5844] veth0_vlan: entered promiscuous mode
[  112.603202][ T5829] veth1_vlan: entered promiscuous mode
[  112.702975][ T5844] veth1_vlan: entered promiscuous mode
[  112.823883][ T5829] veth0_macvtap: entered promiscuous mode
[  112.846403][ T5829] veth1_macvtap: entered promiscuous mode
[  112.867546][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.975102][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.997130][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.014280][ T5844] veth0_macvtap: entered promiscuous mode
[  113.026965][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.054098][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.062444][ T5844] veth1_macvtap: entered promiscuous mode
[  113.089583][ T3010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.101650][ T3010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.140884][ T3010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.151392][ T5834] veth0_vlan: entered promiscuous mode
[  113.177112][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.211416][ T3010] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.224979][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.276176][ T5843] veth0_vlan: entered promiscuous mode
[  113.299618][ T5843] veth1_vlan: entered promiscuous mode
[  113.308526][ T3010] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.355066][ T3010] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.365320][ T5834] veth1_vlan: entered promiscuous mode
[  113.396402][ T3010] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.405675][ T3010] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.436346][ T5839] veth0_vlan: entered promiscuous mode
[  113.525237][ T5839] veth1_vlan: entered promiscuous mode
[  113.574773][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.595138][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.618992][ T5834] veth0_macvtap: entered promiscuous mode
[  113.629946][ T5834] veth1_macvtap: entered promiscuous mode
[  113.647553][ T5843] veth0_macvtap: entered promiscuous mode
[  113.670724][ T5840] Bluetooth: hci1: command tx timeout
[  113.671748][ T5838] Bluetooth: hci2: command tx timeout
[  113.676157][ T5840] Bluetooth: hci0: command tx timeout
[  113.691945][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.699770][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.725386][ T5843] veth1_macvtap: entered promiscuous mode
[  113.786376][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.815066][ T5839] veth0_macvtap: entered promiscuous mode
[  113.831287][ T5840] Bluetooth: hci3: command tx timeout
[  113.835424][ T5838] Bluetooth: hci5: command tx timeout
[  113.836714][ T5840] Bluetooth: hci4: command tx timeout
[  113.846657][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.882543][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.884592][ T5839] veth1_macvtap: entered promiscuous mode
[  113.899539][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.900996][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.940110][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.950958][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.959762][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.986627][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.009066][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.011194][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.024129][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.052256][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  114.053491][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.120289][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.142974][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.165682][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.178261][ T5831] veth0_vlan: entered promiscuous mode
[  114.224576][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.235968][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.317166][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.342536][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.371078][ T3010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.460332][ T5831] veth1_vlan: entered promiscuous mode
[  114.478670][ T3010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.512537][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.540495][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.611120][ T5973] loop1: detected capacity change from 0 to 2048
[  114.618941][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.634851][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.666512][ T5975] loop2: detected capacity change from 0 to 512
[  114.674234][ T5973] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  114.713687][ T5975] EXT4-fs: Ignoring removed bh option
[  114.725805][ T5973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.766002][ T5975] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  114.784520][ T5975] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  114.825680][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.845250][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.901618][ T5831] veth0_macvtap: entered promiscuous mode
[  114.991773][ T5831] veth1_macvtap: entered promiscuous mode
[  115.000115][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.013873][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.140279][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.198931][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.220549][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.228468][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.269011][ T3010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.294235][ T3010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.406180][ T3010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.427516][ T3010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.615876][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.638880][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.745723][ T5989] loop3: detected capacity change from 0 to 256
[  115.788716][ T5989] exfat: Deprecated parameter 'utf8'
[  115.835837][ T5989] exfat: Deprecated parameter 'namecase'
[  115.869941][ T5989] exfat: Deprecated parameter 'utf8'
[  115.954389][ T5989] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  115.962254][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.007526][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.042075][ T5991] input: syz0 as /devices/virtual/input/input5
[  116.155661][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.164030][ T5993] loop4: detected capacity change from 0 to 1024
[  116.175610][ T5993] EXT4-fs: inline encryption not supported
[  116.211611][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.232786][ T5993] EXT4-fs: Ignoring removed orlov option
[  116.281519][ T5993] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  116.366378][ T5993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  116.426660][ T5993] System zones: 0-1, 3-12
[  116.545019][ T5993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.074587][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.177829][ T6012] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[  117.758798][ T6003] loop1: detected capacity change from 0 to 40427
[  117.793431][ T6003] F2FS-fs (loop1): invalid crc value
[  118.038285][ T6003] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  118.094775][ T6003] F2FS-fs (loop1): Start checkpoint disabled!
[  118.190255][ T6003] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  118.247762][ T6003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  118.474838][ T6032] loop5: detected capacity change from 0 to 256
[  118.485893][ T6033] loop3: detected capacity change from 0 to 8
[  118.524090][ T6032] =======================================================
[  118.524090][ T6032] WARNING: The mand mount option has been deprecated and
[  118.524090][ T6032]          and is ignored by this kernel. Remove the mand
[  118.524090][ T6032]          option from the mount to silence this warning.
[  118.524090][ T6032] =======================================================
[  118.602929][ T6032] exfat: Deprecated parameter 'namecase'
[  118.618300][ T6033] SQUASHFS error: Unable to read directory block [631:72]
[  118.632217][ T6033] SQUASHFS error: Unable to read directory block [631:72]
[  118.664645][ T3010] kworker/u8:8: attempt to access beyond end of device
[  118.664645][ T3010] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  118.703764][ T3010] CPU: 1 UID: 0 PID: 3010 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  118.703812][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  118.703837][ T3010] Workqueue: writeback wb_workfn (flush-7:1)
[  118.703901][ T3010] Call Trace:
[  118.703914][ T3010]  <TASK>
[  118.703928][ T3010]  dump_stack_lvl+0x16c/0x1f0
[  118.703981][ T3010]  f2fs_handle_critical_error+0x624/0x9f0
[  118.704025][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.704071][ T3010]  ? f2fs_build_fault_attr+0x53/0x1f0
[  118.704146][ T3010]  f2fs_write_end_io+0x958/0xcf0
[  118.704196][ T3010]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  118.704248][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.704313][ T3010]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  118.704363][ T3010]  bio_endio+0x713/0x860
[  118.704421][ T3010]  submit_bio_noacct+0x306/0x1f60
[  118.704476][ T3010]  __submit_merged_bio+0x33c/0x770
[  118.704528][ T3010]  __submit_merged_write_cond+0x319/0x3f0
[  118.704589][ T3010]  f2fs_write_cache_pages+0x2067/0x2570
[  118.704676][ T3010]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  118.704732][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.704777][ T3010]  ? ieee80211_inform_bss+0x781/0x1140
[  118.704854][ T3010]  ? __pfx_ieee80211_inform_bss+0x10/0x10
[  118.704942][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.704987][ T3010]  ? trace_cfg80211_return_bss+0x17f/0x200
[  118.705026][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.705149][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.705202][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.705257][ T3010]  f2fs_write_data_pages+0x4ad/0xd90
[  118.705320][ T3010]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  118.705393][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.705441][ T3010]  ? __lock_acquire+0xb8a/0x1c90
[  118.705506][ T3010]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  118.705563][ T3010]  do_writepages+0x27a/0x600
[  118.705610][ T3010]  ? __pfx_do_writepages+0x10/0x10
[  118.705645][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.705690][ T3010]  ? reacquire_held_locks+0xcd/0x1f0
[  118.705752][ T3010]  ? writeback_sb_inodes+0x3b0/0xfa0
[  118.705809][ T3010]  __writeback_single_inode+0x160/0xfb0
[  118.705863][ T3010]  ? __pfx___writeback_single_inode+0x10/0x10
[  118.705910][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.705955][ T3010]  ? do_raw_spin_unlock+0x172/0x230
[  118.706000][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.706053][ T3010]  writeback_sb_inodes+0x60d/0xfa0
[  118.706129][ T3010]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  118.706175][ T3010]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  118.706298][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.706348][ T3010]  ? rcu_is_watching+0x12/0xc0
[  118.706398][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.706443][ T3010]  ? queue_io+0x3f6/0x520
[  118.706490][ T3010]  wb_writeback+0x419/0xb70
[  118.706552][ T3010]  ? __pfx_wb_writeback+0x10/0x10
[  118.706596][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.706657][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.706701][ T3010]  ? mark_held_locks+0x49/0x80
[  118.706772][ T3010]  wb_workfn+0x14d/0xbe0
[  118.706828][ T3010]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  118.706877][ T3010]  ? __pfx_wb_workfn+0x10/0x10
[  118.706932][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.706983][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707035][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707080][ T3010]  ? rcu_is_watching+0x12/0xc0
[  118.707138][ T3010]  process_one_work+0x9cf/0x1b70
[  118.707204][ T3010]  ? __pfx_process_one_work+0x10/0x10
[  118.707247][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707306][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707356][ T3010]  ? assign_work+0x1a0/0x250
[  118.707400][ T3010]  worker_thread+0x6c8/0xf10
[  118.707455][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707503][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707547][ T3010]  ? __kthread_parkme+0x19e/0x250
[  118.707600][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707649][ T3010]  ? __pfx_worker_thread+0x10/0x10
[  118.707690][ T3010]  kthread+0x3c5/0x780
[  118.707728][ T3010]  ? __pfx_kthread+0x10/0x10
[  118.707768][ T3010]  ? srso_alias_return_thunk+0x5/0xfbef5
[  118.707812][ T3010]  ? rcu_is_watching+0x12/0xc0
[  118.707861][ T3010]  ? __pfx_kthread+0x10/0x10
[  118.707901][ T3010]  ret_from_fork+0x675/0x7d0
[  118.707933][ T3010]  ? __pfx_kthread+0x10/0x10
[  118.707989][ T3010]  ret_from_fork_asm+0x1a/0x30
[  118.708074][ T3010]  </TASK>
[  119.137878][    C1] vkms_vblank_simulate: vblank timer overrun
[  119.161403][ T6032] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  119.174253][ T3010] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  119.604850][ T6045] SQUASHFS error: Failed to read block 0x0: -5
[  119.703876][ T6047] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  119.722849][ T6047] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  120.277055][ T6061] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2
[  120.486365][ T5976] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  120.600925][ T6071] netlink: 108 bytes leftover after parsing attributes in process `syz.3.46'.
[  120.624772][ T6072] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1'
[  120.653837][ T6071] netlink: 108 bytes leftover after parsing attributes in process `syz.3.46'.
[  120.672205][ T5976] usb 5-1: Using ep0 maxpacket: 8
[  120.705627][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  120.711572][ T6071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.46'.
[  120.736914][ T6076] loop0: detected capacity change from 0 to 128
[  120.747075][ T6076] EXT4-fs (loop0): Test dummy encryption mode enabled
[  120.749093][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.778828][ T6074] netlink: 108 bytes leftover after parsing attributes in process `syz.3.46'.
[  120.807024][ T6076] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  120.820249][ T5976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  120.834231][ T6074] netlink: 108 bytes leftover after parsing attributes in process `syz.3.46'.
[  120.846591][ T6074] netlink: 48 bytes leftover after parsing attributes in process `syz.3.46'.
[  120.850568][ T6076] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  120.855960][ T6074] Zero length message leads to an empty skb
[  120.900541][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  120.960962][ T5976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  120.978700][ T6076] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  121.024179][ T5976] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  121.034340][ T6081] loop5: detected capacity change from 0 to 128
[  121.054410][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.092326][ T5976] usb 5-1: config 0 descriptor??
[  121.111819][ T6058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  121.217692][ T5839] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.443754][ T6086] tmpfs: Cannot retroactively limit size
[  121.612223][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.667718][ T6089] netlink: 143 bytes leftover after parsing attributes in process `syz.3.52'.
[  121.685313][ T6090] loop5: detected capacity change from 0 to 256
[  121.776420][ T6090] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  121.958513][ T6090] exFAT-fs (loop5): start_clu is invalid cluster(0x0)
[  121.988179][ T5838] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  122.128139][ T6096] netlink: 92 bytes leftover after parsing attributes in process `syz.3.56'.
[  122.320999][ T5838] Bluetooth: hci6: command 0x1003 tx timeout
[  122.330653][ T5840] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  122.417470][ T6098] loop1: detected capacity change from 0 to 4096
[  122.575416][ T6098] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  122.656267][ T6098] ntfs3(loop1): ino=1a, mi_enum_attr
[  122.711549][ T6098] ntfs3(loop1): ino=1a, mi_enum_attr
[  122.722197][ T6098] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  123.290615][ T5835] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  123.293481][ T5976] usb 5-1: USB disconnect, device number 2
[  123.536473][ T6092] loop0: detected capacity change from 0 to 32768
[  123.689859][ T6092] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.850480][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  123.852349][  T804] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  123.919697][ T6106] loop5: detected capacity change from 0 to 32768
[  123.947163][ T6092] XFS (loop0): Ending clean mount
[  123.973877][ T6106] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  123.976902][ T6092] XFS (loop0): Quotacheck needed: Please wait.
[  124.008973][ T5815] usb 2-1: Using ep0 maxpacket: 32
[  124.034413][ T5815] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  124.058217][ T5815] usb 2-1: config 0 has no interface number 0
[  124.080468][  T804] usb 3-1: Using ep0 maxpacket: 8
[  124.097644][  T804] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  124.117762][  T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.118465][ T6106] XFS (loop5): Ending clean mount
[  124.133823][ T6092] XFS (loop0): Quotacheck: Done.
[  124.137778][  T804] usb 3-1: Product: syz
[  124.147910][  T804] usb 3-1: Manufacturer: syz
[  124.158035][  T804] usb 3-1: SerialNumber: syz
[  124.165264][ T5815] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  124.186509][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.190298][  T804] usb 3-1: config 0 descriptor??
[  124.233911][ T5815] usb 2-1: Product: syz
[  124.244008][  T804] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  124.268334][ T5815] usb 2-1: Manufacturer: syz
[  124.329240][ T5815] usb 2-1: SerialNumber: syz
[  124.363920][ T5815] usb 2-1: config 0 descriptor??
[  124.413159][ T5815] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  124.457070][ T5831] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.509130][ T6143] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  124.555589][ T5839] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  124.615631][ T6146] vcan0: tx address claim with dlc 0
[  124.675510][ T5815] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  124.762138][ T5815] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  124.920219][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 32
[  125.057984][ T6148] loop3: detected capacity change from 0 to 256
[  125.065278][  T804] gspca_sonixj: reg_r err -71
[  125.082577][ T6148] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  125.099848][  T804] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  125.132254][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  125.133765][ T5924] usb 2-1: USB disconnect, device number 2
[  125.182538][  T804] usb 3-1: USB disconnect, device number 2
[  125.195243][ T6148] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  125.347494][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  125.413066][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  125.456409][ T5924] quatech2 2-1:0.51: device disconnected
[  126.097878][ T6174] loop0: detected capacity change from 0 to 256
[  126.152178][ T6174] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  126.274495][ T6178] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  126.301854][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.310617][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.727734][ T6185] loop6: detected capacity change from 0 to 524288000
[  126.810590][ T6185] support for the xor transformation has been removed.
[  126.867402][ T6191] misc userio: Can't change port type on an already running userio instance
[  127.009177][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  127.182573][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.216727][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.247594][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  127.312184][ T5924] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  127.334024][ T6162] loop4: detected capacity change from 0 to 32768
[  127.347253][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.406020][ T5924] usb 6-1: config 0 descriptor??
[  127.414286][ T6162] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  127.611683][ T6162] XFS (loop4): Ending clean mount
[  127.853568][ T5924] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xe
[  127.916923][ T6188] loop3: detected capacity change from 0 to 32768
[  127.921542][ T5924] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  127.924052][ T5843] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.002941][ T5924] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  128.020603][ T5976] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  128.093482][ T6188] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.198746][ T6188] XFS (loop3): Ending clean mount
[  128.213765][ T5924] usb 6-1: USB disconnect, device number 2
[  128.228746][ T5976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.243014][ T6188] XFS (loop3): Quotacheck needed: Please wait.
[  128.268783][ T5976] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  128.346475][ T5976] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.358828][ T6188] XFS (loop3): Quotacheck: Done.
[  128.371112][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.389354][ T5976] usb 3-1: Product: syz
[  128.393659][ T5976] usb 3-1: Manufacturer: syz
[  128.398267][ T5976] usb 3-1: SerialNumber: syz
[  128.626400][ T6226] fido_id[6226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  128.661851][ T6217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.712222][ T6217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.781909][ T6237] loop1: detected capacity change from 0 to 512
[  128.792069][ T5976] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  128.842030][ T5976] usb 3-1: USB disconnect, device number 3
[  128.870339][ T6237] EXT4-fs error (device loop1): ext4_iget_extra_inode:5074: inode #15: comm syz.1.106: corrupted in-inode xattr: invalid ea_ino
[  129.023455][ T6237] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.106: couldn't read orphan inode 15 (err -117)
[  129.068798][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'.
[  129.106855][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.129269][ T6241] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  129.151515][ T5834] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.194385][ T6237] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6331: inode #18: comm syz.1.106: bad extra_isize 10 (inode size 256)
[  129.361998][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  129.390513][ T5976] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  129.445273][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.538586][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.580980][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.581710][ T5976] usb 3-1: Using ep0 maxpacket: 8
[  129.644284][   T24] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  129.646237][ T5976] usb 3-1: config index 0 descriptor too short (expected 301, got 72)
[  129.691820][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.708504][ T5976] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  129.723613][ T6253] loop1: detected capacity change from 0 to 1024
[  129.739089][ T5976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  129.764200][   T24] usb 5-1: config 0 descriptor??
[  129.781390][ T5976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  129.816357][ T5976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  129.850629][ T5976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.890555][ T5976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  129.930189][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.168399][ T5976] usb 3-1: usb_control_msg returned -71
[  130.174192][ T5976] usbtmc 3-1:16.0: can't read capabilities
[  130.222565][ T5976] usb 3-1: USB disconnect, device number 4
[  130.222585][   T24] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[  130.269922][   T24] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[  130.284347][ T6263] loop3: detected capacity change from 0 to 1024
[  130.310674][   T24] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[  130.354910][   T24] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[  130.367122][ T6263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.390107][   T24] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[  130.414786][   T24] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[  130.463737][   T24] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[  130.489641][   T24] steelseries 0003:1038:12B6.0002: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0
[  130.576754][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.863743][ T6257] loop5: detected capacity change from 0 to 32768
[  130.941244][ T6257] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  131.057171][ T5924] usb 5-1: USB disconnect, device number 3
[  131.065962][ T6257] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  131.144787][ T6277] loop3: detected capacity change from 0 to 64
[  131.160463][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  131.220458][ T6277] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  131.298586][   T30] audit: type=1800 audit(1762853260.848:2): pid=6257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.114" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  131.517874][ T5831] ocfs2: Unmounting device (7,5) on (node local)
[  131.578998][ T6286] serio: Serial port ptm0
[  131.638408][ T6290] loop2: detected capacity change from 0 to 1024
[  131.774165][ T6294] loop0: detected capacity change from 0 to 512
[  131.893867][ T6294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.961366][ T6294] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.111367][ T6303] process 'syz.3.133' launched './file1' with NULL argv: empty string added
[  132.236633][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.446296][ T6309] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  132.630371][ T6315] batadv_slave_1: entered promiscuous mode
[  132.649161][ T6314] batadv_slave_1: left promiscuous mode
[  132.979218][ T6325] loop1: detected capacity change from 0 to 128
[  133.103087][   T30] audit: type=1800 audit(1762853262.658:3): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.142" name="file2" dev="loop1" ino=1048618 res=0 errno=0
[  133.127017][ T6299] loop4: detected capacity change from 0 to 32768
[  133.139716][ T6325] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[  133.190340][ T6327] loop0: detected capacity change from 0 to 512
[  133.198274][ T6325] FAT-fs (loop1): Filesystem has been set read-only
[  133.283233][ T6299] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  133.315420][   T30] audit: type=1800 audit(1762853262.868:4): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.131" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  133.339771][ T6327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.354798][ T6327] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.629562][ T5843] ocfs2: Unmounting device (7,4) on (node local)
[  133.665640][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.724961][ T6338] loop5: detected capacity change from 0 to 512
[  133.776298][ T6338] EXT4-fs: Ignoring removed mblk_io_submit option
[  133.839992][ T6338] EXT4-fs: inline encryption not supported
[  133.868552][ T6338] EXT4-fs: Ignoring removed mblk_io_submit option
[  133.915704][ T6338] EXT4-fs (loop5): Test dummy encryption mode enabled
[  133.944601][ T6338] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  133.971139][ T6343] sg_read: process 67 (syz.0.148) changed security contexts after opening file descriptor, this is not allowed.
[  134.016715][ T6338] EXT4-fs (loop5): 1 truncate cleaned up
[  134.032736][ T6338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.131898][ T6344] netlink: 'syz.4.147': attribute type 29 has an invalid length.
[  134.168577][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'.
[  134.368097][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.835126][ T6366] use of bytesused == 0 is deprecated and will be removed in the future,
[  134.891544][ T6366] use the actual size instead.
[  135.650719][ T5815] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  135.703851][ T6388] binder: BC_ACQUIRE_RESULT not supported
[  135.769207][ T6388] binder: 6385:6388 ioctl c0306201 2000000001c0 returned -22
[  135.837647][ T5815] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  135.869067][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.894712][ T5815] usb 6-1: Product: syz
[  135.922632][ T5815] usb 6-1: Manufacturer: syz
[  135.927284][ T5815] usb 6-1: SerialNumber: syz
[  135.957651][ T5815] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  136.016060][   T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  136.846333][ T6408] loop0: detected capacity change from 0 to 2048
[  136.894254][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.911771][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.920554][ T6408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.190682][   T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  137.218849][   T10] ath9k_htc: Failed to initialize the device
[  137.303762][   T10] usb 6-1: ath9k_htc: USB layer deinitialized
[  137.362358][    T9] usb 6-1: USB disconnect, device number 3
[  137.674502][ T6418] loop4: detected capacity change from 0 to 512
[  137.718563][ T6418] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  137.782123][ T6418] EXT4-fs (loop4): 1 truncate cleaned up
[  137.843434][ T6418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.862671][ T6403] loop1: detected capacity change from 0 to 32768
[  137.926490][ T6418] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters
[  137.957361][ T6403] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.172 (6403)
[  138.173408][ T6403] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.210571][ T6403] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  138.245613][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.681915][ T6403] BTRFS info (device loop1): enabling ssd optimizations
[  138.708314][ T6403] BTRFS info (device loop1): turning on async discard
[  138.727654][ T6403] BTRFS info (device loop1): enabling free space tree
[  138.757738][ T6403] BTRFS info (device loop1): enabling auto defrag
[  138.823287][ T6450] loop4: detected capacity change from 0 to 128
[  138.888728][ T6450] EXT4-fs (loop4): Test dummy encryption mode enabled
[  138.956341][ T6450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.004410][ T6450] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  139.114910][ T6453] loop2: detected capacity change from 0 to 128
[  139.167569][ T6453] FAT-fs (loop2): Directory bread(block 414) failed
[  139.200372][ T6453] FAT-fs (loop2): Directory bread(block 415) failed
[  139.243869][ T6453] FAT-fs (loop2): Directory bread(block 416) failed
[  139.261749][ T6453] FAT-fs (loop2): Directory bread(block 417) failed
[  139.290186][ T6453] FAT-fs (loop2): Directory bread(block 418) failed
[  139.322404][ T6453] FAT-fs (loop2): Directory bread(block 419) failed
[  139.347007][ T6453] FAT-fs (loop2): Directory bread(block 420) failed
[  139.370587][ T6453] FAT-fs (loop2): Directory bread(block 421) failed
[  139.374155][ T5829] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.393166][ T6455] loop5: detected capacity change from 0 to 256
[  139.415760][ T6423] loop0: detected capacity change from 0 to 32768
[  139.448026][ T6453] FAT-fs (loop2): Directory bread(block 414) failed
[  139.461676][ T6455] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  139.486356][ T6423] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.179 (6423)
[  139.534970][ T6453] FAT-fs (loop2): Directory bread(block 415) failed
[  139.593416][ T6423] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.599750][ T5843] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.672570][ T6423] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  140.012705][ T6423] BTRFS info (device loop0): enabling ssd optimizations
[  140.019697][ T6423] BTRFS info (device loop0): turning on async discard
[  140.057031][ T6423] BTRFS info (device loop0): enabling free space tree
[  140.359929][ T6475] loop5: detected capacity change from 0 to 4096
[  140.563229][ T6475] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  140.596530][ T5839] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  140.624411][ T6475] ntfs3(loop5): Failed to load $Extend (-22).
[  140.656080][ T6475] ntfs3(loop5): Failed to initialize $Extend.
[  140.842429][ T6475] ntfs3(loop5): ino=1b, "file0" ntfs_readdir
[  141.106358][ T6497] loop3: detected capacity change from 0 to 64
[  142.352316][ T5924] hid-generic 0005:16C0:5505.0003: item fetching failed at offset 0/1
[  142.400321][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  142.410493][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  142.453404][ T5924] hid-generic 0005:16C0:5505.0003: probe with driver hid-generic failed with error -22
[  142.508633][ T6524] loop0: detected capacity change from 0 to 512
[  142.574555][ T6524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  142.732079][ T6524] EXT4-fs (loop0): 1 orphan inode deleted
[  142.739987][ T6524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.772552][   T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  142.793606][ T6528] loop4: detected capacity change from 0 to 4096
[  142.816148][ T6524] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.826726][ T6528] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  142.841539][   T12] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 1
[  142.894701][ T6537] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  142.894701][ T6537] The task syz.3.214 (6537) triggered the difference, watch for misbehavior.
[  142.962883][ T6528] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  142.987117][ T6528] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  143.183294][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.513790][ T6544] ntfs3(loop4): ino=1b, mi_enum_attr
[  144.011143][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'.
[  144.448688][ T6565] loop4: detected capacity change from 0 to 8
[  144.476754][   T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0)
[  144.886613][ T6546] loop0: detected capacity change from 0 to 32768
[  144.998304][ T6546] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.172272][ T6546] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  145.214720][ T6572] loop1: detected capacity change from 0 to 4096
[  145.237037][ T6546] XFS (loop0): Starting recovery (logdev: internal)
[  145.280492][ T6572] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  145.325773][ T6546] XFS (loop0): Ending recovery (logdev: internal)
[  145.572548][ T6546] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3a5/0x870, xfs_bnobt block 0x8
[  145.586735][ T6588] capability: warning: `syz.4.234' uses deprecated v2 capabilities in a way that may be insecure
[  145.619898][ T6586] warning: `syz.3.232' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  145.620914][ T6572] ntfs3(loop1): ino=19, mi_enum_attr
[  145.638755][ T6546] XFS (loop0): Unmount and run xfs_repair
[  145.660863][ T6572] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  146.103568][ T5839] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.150060][ T5839] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  146.381560][ T6595] netlink: 'syz.2.240': attribute type 1 has an invalid length.
[  146.447884][ T6575] loop5: detected capacity change from 0 to 32768
[  146.471826][ T6597] @: renamed from vlan0 (while UP)
[  146.535595][ T6575] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.710318][ T6575] XFS (loop5): Ending clean mount
[  146.771503][ T6575] XFS (loop5): Quotacheck needed: Please wait.
[  146.780897][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  146.865241][ T6575] XFS (loop5): Quotacheck: Done.
[  146.985361][   T10] usb 4-1: Using ep0 maxpacket: 32
[  147.018088][   T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  147.032221][ T5831] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.042885][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.111631][   T10] usb 4-1: config 0 descriptor??
[  147.340597][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  147.393137][ T6623] Set syz1 is full, maxelem 2 reached
[  147.419215][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  147.471190][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  147.479054][   T10] usb 4-1: media controller created
[  147.682946][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  147.794351][   T10] az6027: usb out operation failed. (-71)
[  147.851769][   T10] az6027: usb out operation failed. (-71)
[  147.857527][   T10] stb0899_attach: Driver disabled by Kconfig
[  147.901071][ T6635] loop1: detected capacity change from 0 to 512
[  147.913109][   T10] az6027: no front-end attached
[  147.913109][   T10] 
[  147.940539][   T10] az6027: usb out operation failed. (-71)
[  147.958146][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  147.991649][ T6635] FAT-fs (loop1): unable to read block(512) for building NFS inode
[  148.000667][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  148.024995][ T5193] udevd[5193]: worker [5846] terminated by signal 33 (Unknown signal 33)
[  148.045726][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  148.060537][ T5193] udevd[5193]: worker [5846] failed while handling '/devices/virtual/block/loop1'
[  148.090132][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  148.118007][   T10] usb 4-1: USB disconnect, device number 2
[  148.448783][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  148.663461][ T6651] loop4: detected capacity change from 0 to 256
[  148.764371][   T30] audit: type=1800 audit(2000000003.109:5): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.259" name="file2" dev="loop4" ino=1048621 res=0 errno=0
[  148.786343][ T6654] loop1: detected capacity change from 0 to 2048
[  148.796992][ T6651] exFAT-fs (loop4): error, data size is invalid(34359738378)
[  148.839310][ T6651] exFAT-fs (loop4): Filesystem has been set read-only
[  148.923899][ T6654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.017493][   T30] audit: type=1800 audit(2000000003.359:6): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.261" name="file1" dev="loop1" ino=1346 res=0 errno=0
[  149.047673][ T6626] loop0: detected capacity change from 0 to 32768
[  149.061925][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  149.143357][ T6626] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.251974][ T6626] XFS (loop0): Ending clean mount
[  149.261260][   T10] usb 6-1: Using ep0 maxpacket: 8
[  149.265569][ T6671] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  149.269016][   T10] usb 6-1: config 0 has no interfaces?
[  149.306830][ T6626] XFS (loop0): Quotacheck needed: Please wait.
[  149.332134][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  149.371286][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.379299][   T10] usb 6-1: Product: syz
[  149.437453][   T10] usb 6-1: Manufacturer: syz
[  149.466913][   T10] usb 6-1: SerialNumber: syz
[  149.468516][ T6626] XFS (loop0): Quotacheck: Done.
[  149.498411][   T10] usb 6-1: config 0 descriptor??
[  149.602114][   T30] audit: type=1800 audit(2000000003.939:7): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  149.778533][   T10] usb 6-1: USB disconnect, device number 4
[  149.952303][ T6678] loop3: detected capacity change from 0 to 32768
[  149.964255][ T6678] (syz.3.266,6678,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  149.978893][ T5839] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.988543][ T6678] (syz.3.266,6678,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  150.037309][ T6678] JBD2: Ignoring recovery information on journal
[  150.122306][ T6678] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  150.139853][ T6678] (syz.3.266,6678,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  150.330162][ T6678] (syz.3.266,6678,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  150.380501][ T6678] (syz.3.266,6678,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  150.396418][ T6678] (syz.3.266,6678,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  150.409775][ T6678] (syz.3.266,6678,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  150.418611][ T6678] (syz.3.266,6678,1):ocfs2_quota_read:201 ERROR: status = -5
[  150.426068][ T6678] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6
[  150.436176][ T6678] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  150.446070][ T6678] (syz.3.266,6678,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  150.455599][ T6678] (syz.3.266,6678,1):ocfs2_mknod:317 ERROR: status = -5
[  150.463921][ T6678] (syz.3.266,6678,1):ocfs2_mknod:505 ERROR: status = -5
[  150.471658][ T6678] (syz.3.266,6678,1):ocfs2_mkdir:661 ERROR: status = -5
[  150.677440][ T5834] ocfs2: Unmounting device (7,3) on (node local)
[  151.518598][ T6675] loop1: detected capacity change from 0 to 32768
[  151.637173][ T6675] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  151.710594][ T6675] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  151.851646][ T6675] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  151.906735][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  151.923089][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  152.049542][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms
[  152.063291][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  152.070180][ T6675] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  152.248466][ T6727] loop5: detected capacity change from 0 to 4096
[  152.414241][ T6729] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.426104][ T6675] gfs2: fsid=syz:syz.0: found 1 quota changes
[  152.525571][ T6727] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  152.578324][ T6727] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12)
[  152.623879][ T6727] Remounting filesystem read-only
[  152.637056][ T6727] NILFS (loop5): error -5 truncating bmap (ino=12)
[  152.759410][ T5831] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  152.836938][ T5829] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 404
[  152.863968][ T5829] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  152.928866][ T5829] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5829 [syz-executor] gfs2_quota_sync+0x322/0x570
[  152.960363][ T5829] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  152.993779][ T5829] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  153.080902][ T5829] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  153.089722][ T5829] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  153.127316][ T5829] gfs2: fsid=syz:syz.0: File system withdrawn
[  153.158078][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  153.158133][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  153.158155][ T5829] Call Trace:
[  153.158166][ T5829]  <TASK>
[  153.158180][ T5829]  dump_stack_lvl+0x16c/0x1f0
[  153.158232][ T5829]  gfs2_withdraw+0xa8b/0x1130
[  153.158294][ T5829]  ? __pfx_gfs2_withdraw+0x10/0x10
[  153.158343][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  153.158388][ T5829]  ? gfs2_meta_buffer+0x194/0x3d0
[  153.158437][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  153.158490][ T5829]  inode_go_instantiate+0xe68/0x1290
[  153.158535][ T5829]  ? __pfx___schedule+0x10/0x10
[  153.158584][ T5829]  ? __pfx_inode_go_instantiate+0x10/0x10
[  153.158632][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  153.158689][ T5829]  gfs2_instantiate+0x16c/0x250
[  153.158752][ T5829]  gfs2_glock_wait+0x214/0x330
[  153.158787][ T5829]  ? __pfx_gfs2_glock_wait+0x10/0x10
[  153.158833][ T5829]  gfs2_glock_nq+0xd24/0x17a0
[  153.158881][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  153.158933][ T5829]  do_sync+0x70d/0xd60
[  153.158966][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  153.159010][ T5829]  ? do_raw_spin_unlock+0x172/0x230
[  153.159069][ T5829]  ? __pfx_do_sync+0x10/0x10
[  153.159102][ T5829]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  153.159167][ T5829]  ? gfs2_quota_sync+0x322/0x570
[  153.159207][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  153.159265][ T5829]  gfs2_quota_sync+0x322/0x570
[  153.159318][ T5829]  gfs2_sync_fs+0x44/0xb0
[  153.159369][ T5829]  ? __pfx_gfs2_sync_fs+0x10/0x10
[  153.159420][ T5829]  sync_filesystem+0x111/0x290
[  153.159486][ T5829]  generic_shutdown_super+0x74/0x390
[  153.159536][ T5829]  kill_block_super+0x3b/0x90
[  153.159582][ T5829]  gfs2_kill_sb+0x371/0x420
[  153.159642][ T5829]  deactivate_locked_super+0xc1/0x1a0
[  153.159696][ T5829]  deactivate_super+0xde/0x100
[  153.159750][ T5829]  cleanup_mnt+0x225/0x450
[  153.159809][ T5829]  task_work_run+0x150/0x240
[  153.159853][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  153.159892][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  153.159940][ T5829]  ? __pfx___x64_sys_umount+0x10/0x10
[  153.160010][ T5829]  exit_to_user_mode_loop+0xec/0x130
[  153.160053][ T5829]  do_syscall_64+0x426/0xfa0
[  153.160105][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.160150][ T5829] RIP: 0033:0x7f70939909f7
[  153.160178][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  153.160212][ T5829] RSP: 002b:00007ffe591dada8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  153.160247][ T5829] RAX: 0000000000000000 RBX: 00007f7093a11d7d RCX: 00007f70939909f7
[  153.160271][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe591dae60
[  153.160294][ T5829] RBP: 00007ffe591dae60 R08: 0000000000000000 R09: 0000000000000000
[  153.160317][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe591dbef0
[  153.160341][ T5829] R13: 00007f7093a11d7d R14: 0000000000024817 R15: 00007ffe591dbf30
[  153.160392][ T5829]  </TASK>
[  153.590927][ T6747] loop4: detected capacity change from 0 to 128
[  153.852253][ T6747] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  153.899653][ T6747] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.124485][ T5843] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.331636][ T6758] loop0: detected capacity change from 0 to 40427
[  155.360700][ T6758] F2FS-fs (loop0): Image doesn't support compression
[  155.389579][ T6758] F2FS-fs (loop0): build fault injection rate: 690
[  155.421368][ T6758] F2FS-fs (loop0): build fault injection type: 0x35f7
[  155.472335][ T6758] F2FS-fs (loop0): invalid crc value
[  155.696348][ T6792] loop5: detected capacity change from 0 to 512
[  155.707587][ T6758] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.713822][ T6792] EXT4-fs (loop5): Test dummy encryption mode enabled
[  155.743145][ T6792] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  155.753758][ T6758] F2FS-fs (loop0): Start checkpoint disabled!
[  155.773047][ T6792] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.310: bad orphan inode 131083
[  155.796021][ T6758] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  155.806368][ T6792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.843685][ T6758] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  155.989265][ T6758] syz.0.297: attempt to access beyond end of device
[  155.989265][ T6758] loop0: rw=2049, sector=45096, nr_sectors = 136 limit=40427
[  156.006321][ T6792] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  156.057498][ T6792] EXT4-fs error (device loop5): ext4_generic_delete_entry:2667: inode #2: block 13: comm syz.5.310: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  156.123881][ T6798] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x236/0x1090
[  156.149169][ T6792] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem
[  156.329604][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.474578][   T13] kworker/u8:1: attempt to access beyond end of device
[  156.474578][   T13] loop0: rw=2049, sector=45232, nr_sectors = 8 limit=40427
[  156.535974][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  156.536021][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  156.536045][   T13] Workqueue: writeback wb_workfn (flush-7:0)
[  156.536105][   T13] Call Trace:
[  156.536117][   T13]  <TASK>
[  156.536137][   T13]  dump_stack_lvl+0x16c/0x1f0
[  156.536185][   T13]  f2fs_handle_critical_error+0x624/0x9f0
[  156.536228][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.536272][   T13]  ? f2fs_build_fault_attr+0x53/0x1f0
[  156.536342][   T13]  f2fs_write_end_io+0x958/0xcf0
[  156.536390][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  156.536439][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.536494][   T13]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  156.536536][   T13]  bio_endio+0x713/0x860
[  156.536590][   T13]  submit_bio_noacct+0x306/0x1f60
[  156.536641][   T13]  __submit_merged_bio+0x33c/0x770
[  156.536690][   T13]  __submit_merged_write_cond+0x319/0x3f0
[  156.536746][   T13]  f2fs_write_cache_pages+0x2067/0x2570
[  156.536826][   T13]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  156.536883][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.536928][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.536971][   T13]  ? find_held_lock+0x2b/0x80
[  156.537021][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.537069][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.537113][   T13]  ? do_raw_spin_unlock+0x172/0x230
[  156.537178][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.537222][   T13]  ? f2fs_available_free_memory+0x279/0xa30
[  156.537348][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.537391][   T13]  ? lock_acquire+0x179/0x350
[  156.537426][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.537478][   T13]  f2fs_write_data_pages+0x4ad/0xd90
[  156.537538][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  156.537602][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.537646][   T13]  ? __lock_acquire+0xb8a/0x1c90
[  156.537709][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  156.537764][   T13]  do_writepages+0x27a/0x600
[  156.537814][   T13]  ? __pfx_do_writepages+0x10/0x10
[  156.537850][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.537894][   T13]  ? reacquire_held_locks+0xcd/0x1f0
[  156.537955][   T13]  ? writeback_sb_inodes+0x3b0/0xfa0
[  156.538008][   T13]  __writeback_single_inode+0x160/0xfb0
[  156.538060][   T13]  ? __pfx___writeback_single_inode+0x10/0x10
[  156.538107][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.538158][   T13]  ? do_raw_spin_unlock+0x172/0x230
[  156.538201][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.538252][   T13]  writeback_sb_inodes+0x60d/0xfa0
[  156.538322][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  156.538367][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.538410][   T13]  ? find_held_lock+0x2b/0x80
[  156.538520][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.538564][   T13]  ? rcu_is_watching+0x12/0xc0
[  156.538613][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.538656][   T13]  ? queue_io+0x3f6/0x520
[  156.538701][   T13]  wb_writeback+0x419/0xb70
[  156.538759][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  156.538802][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.538859][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.538904][   T13]  ? mark_held_locks+0x49/0x80
[  156.538973][   T13]  wb_workfn+0x14d/0xbe0
[  156.539026][   T13]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  156.539074][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  156.539134][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.539182][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.539232][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.539277][   T13]  ? rcu_is_watching+0x12/0xc0
[  156.539334][   T13]  process_one_work+0x9cf/0x1b70
[  156.539395][   T13]  ? __pfx_process_one_work+0x10/0x10
[  156.539437][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.539493][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.539537][   T13]  ? assign_work+0x1a0/0x250
[  156.539580][   T13]  worker_thread+0x6c8/0xf10
[  156.539643][   T13]  ? __pfx_worker_thread+0x10/0x10
[  156.539684][   T13]  kthread+0x3c5/0x780
[  156.539723][   T13]  ? __pfx_kthread+0x10/0x10
[  156.539762][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  156.539806][   T13]  ? rcu_is_watching+0x12/0xc0
[  156.539855][   T13]  ? __pfx_kthread+0x10/0x10
[  156.539894][   T13]  ret_from_fork+0x675/0x7d0
[  156.539925][   T13]  ? __pfx_kthread+0x10/0x10
[  156.539963][   T13]  ret_from_fork_asm+0x1a/0x30
[  156.540041][   T13]  </TASK>
[  157.162214][ T6799] loop3: detected capacity change from 0 to 32768
[  157.183699][   T13] F2FS-fs (loop0): Remounting filesystem read-only
[  157.225776][   T30] audit: type=1800 audit(2000000779.754:8): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="file1" dev="loop3" ino=4 res=0 errno=0
[  157.251419][ T6799] read_mapping_page failed!
[  158.280190][ T6807] loop1: detected capacity change from 0 to 32768
[  158.386260][ T6807] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  158.565946][ T6807] XFS (loop1): Ending clean mount
[  158.758538][ T5829] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  159.049233][ T5835] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  159.230495][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[  159.431069][ T6841] loop1: detected capacity change from 0 to 4096
[  159.455960][ T6841] nilfs2: Unknown parameter '00000000000000000000003'
[  159.646951][ T6858] netlink: 428 bytes leftover after parsing attributes in process `syz.4.333'.
[  159.657305][ T6852] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  159.715515][ T6858] netlink: 32 bytes leftover after parsing attributes in process `syz.4.333'.
[  160.038280][   T30] audit: type=1326 audit(2000000782.704:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.136249][   T30] audit: type=1326 audit(2000000782.704:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.200557][ T6861] loop0: detected capacity change from 0 to 4096
[  160.236409][   T30] audit: type=1326 audit(2000000782.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.301230][ T6861] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  160.326201][   T30] audit: type=1326 audit(2000000782.725:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.410070][   T30] audit: type=1326 audit(2000000782.736:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.488928][ T6861] ntfs3(loop0): ino=1a, mi_enum_attr
[  160.495594][   T30] audit: type=1326 audit(2000000782.736:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.507352][ T6861] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  160.540638][ T6861] ntfs3(loop0): ino=1a, mi_enum_attr
[  160.545955][ T6861] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  160.605132][   T30] audit: type=1326 audit(2000000782.736:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.732926][   T30] audit: type=1326 audit(2000000782.736:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.4.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  160.879379][ T6881] sctp: [Deprecated]: syz.5.346 (pid 6881) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.879379][ T6881] Use struct sctp_sack_info instead
[  161.100679][  T804] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  161.276717][  T804] usb 3-1: Using ep0 maxpacket: 32
[  161.295373][  T804] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  161.329089][  T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.392154][  T804] usb 3-1: Product: syz
[  161.420562][  T804] usb 3-1: Manufacturer: syz
[  161.452923][  T804] usb 3-1: SerialNumber: syz
[  161.499406][ T6890] loop4: detected capacity change from 0 to 32768
[  161.510427][ T6890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.349 (6890)
[  161.515260][  T804] usb 3-1: config 0 descriptor??
[  161.562564][ T6890] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.573901][ T6890] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  161.754943][ T6890] BTRFS info (device loop4): enabling ssd optimizations
[  161.761970][ T6890] BTRFS info (device loop4): turning on async discard
[  161.770896][ T6890] BTRFS info (device loop4): enabling free space tree
[  161.835042][ T6874] loop3: detected capacity change from 0 to 32768
[  161.843259][   T30] audit: type=1326 audit(2000000784.594:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.5.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  161.869814][  T804] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 005
[  161.942003][ T6874] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.996633][   T30] audit: type=1326 audit(2000000784.646:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.5.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  162.025391][   T30] audit: type=1326 audit(2000000784.646:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.5.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  162.058750][ T6922] netlink: 'syz.1.354': attribute type 4 has an invalid length.
[  162.089493][  T804] usb 3-1: USB disconnect, device number 5
[  162.164182][ T5843] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  162.316160][ T6874] XFS (loop3): Ending clean mount
[  162.571556][ T6874] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 
[  162.640745][ T6874] XFS (loop3): Unmount and run xfs_repair
[  162.658039][ T6874] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  162.686114][ T6874] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  162.704891][ T6934] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  162.741451][ T6874] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  162.779953][ T6874] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  162.788994][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  162.834010][ T6874] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  162.863093][ T6874] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  162.881781][ T6874] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  162.929820][ T6874] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  162.938756][ T6874] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  162.951536][ T6938] loop1: detected capacity change from 0 to 512
[  162.952416][ T6939] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  162.968585][   T10] usb 5-1: Using ep0 maxpacket: 8
[  162.983102][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  163.004704][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.019410][ T6874] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x23f/0x4f0" at daddr 0x14 len 4 error 74
[  163.031861][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  163.046415][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 4
[  163.069608][ T6874] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x400/0x970 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  163.097431][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  163.158327][ T6938] EXT4-fs error (device loop1): ext4_iget_extra_inode:5074: inode #15: comm syz.1.361: corrupted in-inode xattr: invalid ea_ino
[  163.171704][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.198249][ T6874] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  163.225858][ T6938] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.361: couldn't read orphan inode 15 (err -117)
[  163.229790][   T10] usb 5-1: config 0 descriptor??
[  163.258969][    T9] loop3: writeback error on inode 9286, offset 0, sector 18692
[  163.283026][ T6930] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  163.293381][ T6938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.419674][ T5834] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.436153][ T6938] EXT4-fs error (device loop1): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz.1.361: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  163.654059][ T5835] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  163.661065][   T10] usb 5-1: USB disconnect, device number 4
[  163.727729][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.825403][ T6928] loop5: detected capacity change from 0 to 32768
[  164.765176][ T6968] ubi31: attaching mtd0
[  165.640007][ T6962] loop0: detected capacity change from 0 to 131072
[  165.682620][ T6962] F2FS-fs (loop0): invalid crc value
[  165.782130][ T6962] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.812470][ T6962] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  166.134079][ T6966] loop2: detected capacity change from 0 to 32768
[  166.202700][ T6966] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.373 (6966)
[  166.363879][ T6966] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  166.396935][ T6966] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  166.817159][ T6966] BTRFS info (device loop2): enabling ssd optimizations
[  166.875927][ T6966] BTRFS info (device loop2): turning on async discard
[  166.901910][ T6966] BTRFS info (device loop2): enabling free space tree
[  167.412315][ T5844] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  167.522642][ T7023] loop4: detected capacity change from 0 to 256
[  167.621931][ T7021] loop5: detected capacity change from 0 to 4096
[  167.651401][ T7023] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  167.714381][ T7021] NILFS (loop5): invalid segment: Checksum error in segment payload
[  167.768605][ T7021] NILFS (loop5): trying rollback from an earlier position
[  167.835715][ T7021] NILFS (loop5): recovery complete
[  167.854739][ T7027] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.667504][ T7033] loop4: detected capacity change from 0 to 4096
[  168.944303][ T7044] loop1: detected capacity change from 0 to 512
[  169.042502][ T7044] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.399: iget: bad i_size value: 38620345925642
[  169.110880][ T7044] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.399: couldn't read orphan inode 15 (err -117)
[  169.181040][ T7044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.323093][ T7044] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm syz.1.399: bg 0: block 5: invalid block bitmap
[  169.561196][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.779001][ T7059] syz_tun: entered allmulticast mode
[  169.798306][ T7059] syz_tun: left allmulticast mode
[  170.130743][   T30] audit: type=1326 audit(2000000793.297:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  170.248911][   T30] audit: type=1326 audit(2000000793.297:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  170.369513][   T30] audit: type=1326 audit(2000000793.297:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  170.435609][   T30] audit: type=1326 audit(2000000793.297:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  170.488821][   T30] audit: type=1326 audit(2000000793.297:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.4.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8898f6c9 code=0x7ffc0000
[  171.195045][ T7099] loop1: detected capacity change from 0 to 128
[  171.324800][ T7099] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  171.371433][ T7099] hpfs: filesystem error: improperly stopped
[  171.408950][ T7099] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  171.445461][ T7099] hpfs: You really don't want any checks? You are crazy...
[  171.471645][ T7099] hpfs: hpfs_map_sector(): read error
[  171.520488][ T7099] hpfs: code page support is disabled
[  171.560280][ T7099] hpfs: hpfs_map_4sectors(): unaligned read
[  171.566414][ T7099] hpfs: hpfs_map_4sectors(): unaligned read
[  171.593365][ T7075] loop5: detected capacity change from 0 to 32768
[  171.626343][ T7075] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.411 (7075)
[  171.652424][ T7099] hpfs: filesystem error: unable to find root dir
[  171.730200][ T7075] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.778878][ T7075] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  172.135723][ T7075] BTRFS info (device loop5): enabling ssd optimizations
[  172.188376][ T7075] BTRFS info (device loop5): turning on async discard
[  172.224439][ T7075] BTRFS info (device loop5): enabling free space tree
[  172.303430][ T7133] loop0: detected capacity change from 0 to 256
[  172.337150][ T7135] loop1: detected capacity change from 0 to 256
[  172.803863][ T5831] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.709401][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  174.907607][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.959268][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  175.013213][    T9] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  175.057185][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.119811][    T9] usb 3-1: config 0 descriptor??
[  175.323119][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  175.475124][   T24] usb 1-1: Using ep0 maxpacket: 16
[  175.482761][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  175.503969][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  175.530409][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  175.542573][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.560810][   T24] usb 1-1: Product: syz
[  175.565934][   T24] usb 1-1: Manufacturer: syz
[  175.575052][   T24] usb 1-1: SerialNumber: syz
[  175.622173][   T24] usb 1-1: config 0 descriptor??
[  175.676371][    T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0004/input/input8
[  175.683158][   T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  175.753116][   T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  175.816240][    T9] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v40.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0
[  175.908957][ T7189] block nbd5: NBD_DISCONNECT
[  175.934266][    T9] usb 3-1: USB disconnect, device number 6
[  176.213903][ T7190] fido_id[7190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  176.287682][   T24] em28xx 1-1:0.0: chip ID is em2882/3
[  176.418821][ T7175] loop1: detected capacity change from 0 to 40427
[  176.458285][ T7199] loop3: detected capacity change from 0 to 512
[  176.480214][   T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  176.497566][   T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  176.509144][ T7199] EXT4-fs: Ignoring removed oldalloc option
[  176.528873][   T24] em28xx 1-1:0.0: No AC97 audio processor
[  176.609702][   T24] usb 1-1: USB disconnect, device number 2
[  176.639904][ T7199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.654065][   T24] em28xx 1-1:0.0: Disconnecting em28xx
[  176.726548][ T7199] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.743973][ T7175] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  176.748905][   T24] em28xx 1-1:0.0: Freeing device
[  176.764074][ T7175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.957423][ T7199] EXT4-fs error (device loop3): ext4_empty_dir:3077: inode #12: comm syz.3.460: invalid size
[  177.146650][ T5829] syz-executor: attempt to access beyond end of device
[  177.146650][ T5829] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  177.187400][ T7218] sg_write: data in/out 65500/17 bytes for SCSI command 0x8-- guessing data in;
[  177.187400][ T7218]    program syz.2.466 not setting count and/or reply_len properly
[  177.214385][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  177.214431][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  177.214453][ T5829] Call Trace:
[  177.214464][ T5829]  <TASK>
[  177.214477][ T5829]  dump_stack_lvl+0x16c/0x1f0
[  177.214530][ T5829]  f2fs_handle_critical_error+0x624/0x9f0
[  177.214573][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.214617][ T5829]  ? f2fs_build_fault_attr+0x53/0x1f0
[  177.214688][ T5829]  f2fs_write_end_io+0x958/0xcf0
[  177.214736][ T5829]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  177.214786][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.214839][ T5829]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  177.214878][ T5829]  bio_endio+0x713/0x860
[  177.214929][ T5829]  submit_bio_noacct+0x306/0x1f60
[  177.214975][ T5829]  __submit_merged_bio+0x33c/0x770
[  177.215021][ T5829]  __submit_merged_write_cond+0x319/0x3f0
[  177.215073][ T5829]  f2fs_write_cache_pages+0x2067/0x2570
[  177.215152][ T5829]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  177.215203][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.215258][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.215298][ T5829]  ? __lock_acquire+0x622/0x1c90
[  177.215442][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.215490][ T5829]  f2fs_write_data_pages+0x4ad/0xd90
[  177.215545][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.215590][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.215641][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.215687][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.215737][ T5829]  do_writepages+0x27a/0x600
[  177.215778][ T5829]  ? __pfx_do_writepages+0x10/0x10
[  177.215810][ T5829]  ? do_raw_spin_unlock+0x172/0x230
[  177.215849][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.215890][ T5829]  ? _raw_spin_unlock+0x28/0x50
[  177.215932][ T5829]  filemap_fdatawrite_wbc+0x104/0x160
[  177.215972][ T5829]  __filemap_fdatawrite_range+0xb9/0x100
[  177.216020][ T5829]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  177.216121][ T5829]  ? find_held_lock+0x2b/0x80
[  177.216170][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.216212][ T5829]  ? do_raw_spin_unlock+0x172/0x230
[  177.216251][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.216298][ T5829]  f2fs_sync_dirty_inodes+0x2a2/0x980
[  177.216366][ T5829]  block_operations+0x2b0/0xfe0
[  177.216426][ T5829]  ? __pfx_block_operations+0x10/0x10
[  177.216527][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.216570][ T5829]  ? ktime_get+0x200/0x310
[  177.216620][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.216660][ T5829]  ? lockdep_hardirqs_on+0x7c/0x110
[  177.216703][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.216743][ T5829]  ? rcu_is_watching+0x12/0xc0
[  177.216797][ T5829]  f2fs_write_checkpoint+0x32b/0x5300
[  177.216856][ T5829]  ? kfree+0x2b8/0x6d0
[  177.216894][ T5829]  ? f2fs_stop_gc_thread+0x79/0xd0
[  177.216951][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.216991][ T5829]  ? rcu_is_watching+0x12/0xc0
[  177.217035][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.217076][ T5829]  ? kthread_stop+0x272/0x630
[  177.217112][ T5829]  kill_f2fs_super+0x3d6/0x490
[  177.217168][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  177.217235][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.217290][ T5829]  deactivate_locked_super+0xc1/0x1a0
[  177.217341][ T5829]  deactivate_super+0xde/0x100
[  177.217391][ T5829]  cleanup_mnt+0x225/0x450
[  177.217444][ T5829]  task_work_run+0x150/0x240
[  177.217484][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  177.217523][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.217570][ T5829]  ? __pfx___x64_sys_umount+0x10/0x10
[  177.217639][ T5829]  exit_to_user_mode_loop+0xec/0x130
[  177.217682][ T5829]  do_syscall_64+0x426/0xfa0
[  177.217733][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.217769][ T5829] RIP: 0033:0x7f70939909f7
[  177.217797][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  177.217832][ T5829] RSP: 002b:00007ffe591dada8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  177.217866][ T5829] RAX: 0000000000000000 RBX: 00007f7093a11d7d RCX: 00007f70939909f7
[  177.217887][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe591dae60
[  177.217912][ T5829] RBP: 00007ffe591dae60 R08: 0000000000000000 R09: 0000000000000000
[  177.217932][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe591dbef0
[  177.217953][ T5829] R13: 00007f7093a11d7d R14: 000000000002b7da R15: 00007ffe591dbf30
[  177.218000][ T5829]  </TASK>
[  177.687388][ T5829] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  177.694439][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  177.694485][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  177.694508][ T5829] Call Trace:
[  177.694519][ T5829]  <TASK>
[  177.694532][ T5829]  dump_stack_lvl+0x16c/0x1f0
[  177.694614][ T5829]  f2fs_handle_critical_error+0x624/0x9f0
[  177.694658][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.694704][ T5829]  ? f2fs_build_fault_attr+0x53/0x1f0
[  177.694775][ T5829]  f2fs_write_end_io+0x958/0xcf0
[  177.694824][ T5829]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  177.694874][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.694930][ T5829]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  177.694972][ T5829]  bio_endio+0x713/0x860
[  177.695029][ T5829]  submit_bio_noacct+0x306/0x1f60
[  177.695080][ T5829]  __submit_merged_bio+0x33c/0x770
[  177.695130][ T5829]  __submit_merged_write_cond+0x319/0x3f0
[  177.695187][ T5829]  f2fs_write_cache_pages+0x2067/0x2570
[  177.695268][ T5829]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  177.695325][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.695393][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.695437][ T5829]  ? __lock_acquire+0x622/0x1c90
[  177.695593][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.695647][ T5829]  f2fs_write_data_pages+0x4ad/0xd90
[  177.695709][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.695758][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.695815][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.695865][ T5829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  177.695921][ T5829]  do_writepages+0x27a/0x600
[  177.695966][ T5829]  ? __pfx_do_writepages+0x10/0x10
[  177.696002][ T5829]  ? do_raw_spin_unlock+0x172/0x230
[  177.696046][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.696090][ T5829]  ? _raw_spin_unlock+0x28/0x50
[  177.696143][ T5829]  filemap_fdatawrite_wbc+0x104/0x160
[  177.696187][ T5829]  __filemap_fdatawrite_range+0xb9/0x100
[  177.696241][ T5829]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  177.696351][ T5829]  ? find_held_lock+0x2b/0x80
[  177.696411][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.696457][ T5829]  ? do_raw_spin_unlock+0x172/0x230
[  177.696500][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.696552][ T5829]  f2fs_sync_dirty_inodes+0x2a2/0x980
[  177.696627][ T5829]  block_operations+0x2b0/0xfe0
[  177.696694][ T5829]  ? __pfx_block_operations+0x10/0x10
[  177.696804][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.696852][ T5829]  ? ktime_get+0x200/0x310
[  177.696907][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.696951][ T5829]  ? lockdep_hardirqs_on+0x7c/0x110
[  177.696999][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.697043][ T5829]  ? rcu_is_watching+0x12/0xc0
[  177.697100][ T5829]  f2fs_write_checkpoint+0x32b/0x5300
[  177.697165][ T5829]  ? kfree+0x2b8/0x6d0
[  177.697207][ T5829]  ? f2fs_stop_gc_thread+0x79/0xd0
[  177.697269][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.697314][ T5829]  ? rcu_is_watching+0x12/0xc0
[  177.697362][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.697416][ T5829]  ? kthread_stop+0x272/0x630
[  177.697456][ T5829]  kill_f2fs_super+0x3d6/0x490
[  177.697513][ T5829]  ? __pfx_kill_f2fs_super+0x10/0x10
[  177.697586][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.697648][ T5829]  deactivate_locked_super+0xc1/0x1a0
[  177.697703][ T5829]  deactivate_super+0xde/0x100
[  177.697758][ T5829]  cleanup_mnt+0x225/0x450
[  177.697817][ T5829]  task_work_run+0x150/0x240
[  177.697861][ T5829]  ? __pfx_task_work_run+0x10/0x10
[  177.697899][ T5829]  ? srso_alias_return_thunk+0x5/0xfbef5
[  177.697947][ T5829]  ? __pfx___x64_sys_umount+0x10/0x10
[  177.698017][ T5829]  exit_to_user_mode_loop+0xec/0x130
[  177.698062][ T5829]  do_syscall_64+0x426/0xfa0
[  177.698114][ T5829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.698150][ T5829] RIP: 0033:0x7f70939909f7
[  177.698178][ T5829] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  177.698213][ T5829] RSP: 002b:00007ffe591dada8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  177.698248][ T5829] RAX: 0000000000000000 RBX: 00007f7093a11d7d RCX: 00007f70939909f7
[  177.698272][ T5829] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe591dae60
[  177.698294][ T5829] RBP: 00007ffe591dae60 R08: 0000000000000000 R09: 0000000000000000
[  177.698317][ T5829] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe591dbef0
[  177.698341][ T5829] R13: 00007f7093a11d7d R14: 000000000002b7da R15: 00007ffe591dbf30
[  177.698403][ T5829]  </TASK>
[  177.698416][ T5829] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  177.954194][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.629328][ T7257] netlink: 27 bytes leftover after parsing attributes in process `syz.4.479'.
[  179.800677][ T7259] nbd0: detected capacity change from 0 to 127
[  179.812138][ T5835] block nbd0: Receive control failed (result -32)
[  179.831640][ T5849] block nbd0: Send control failed (result -32)
[  179.873680][ T5849] block nbd0: Request send failed, requeueing
[  179.893263][   T25] block nbd0: Dead connection, failed to find a fallback
[  179.901174][   T25] block nbd0: shutting down sockets
[  179.916491][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  179.927814][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  179.938231][ T5849] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  179.948649][ T5849] Buffer I/O error on dev nbd0, logical block 1, async page read
[  179.957030][ T5849] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  179.966142][ T5849] Buffer I/O error on dev nbd0, logical block 2, async page read
[  179.980610][ T5849] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  179.991698][ T5849] Buffer I/O error on dev nbd0, logical block 3, async page read
[  180.001566][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.017702][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  180.025754][ T5849] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.035810][ T5849] Buffer I/O error on dev nbd0, logical block 1, async page read
[  180.044889][ T5849] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.054708][ T5849] Buffer I/O error on dev nbd0, logical block 2, async page read
[  180.063644][ T5849] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.072813][ T5849] Buffer I/O error on dev nbd0, logical block 3, async page read
[  180.082954][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.126867][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[  180.139533][ T5849] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.150799][ T5849] Buffer I/O error on dev nbd0, logical block 1, async page read
[  180.164348][ T5849] ldm_validate_partition_table(): Disk read failed.
[  180.177358][ T5849] Dev nbd0: unable to read RDB block 0
[  180.193154][ T5849]  nbd0: unable to read partition table
[  180.240391][ T5849] ldm_validate_partition_table(): Disk read failed.
[  180.251327][ T5849] Dev nbd0: unable to read RDB block 0
[  180.269742][ T5849]  nbd0: unable to read partition table
[  180.392003][ T7272] loop4: detected capacity change from 0 to 256
[  180.399813][ T7272] exfat: Deprecated parameter 'utf8'
[  180.409020][ T7233] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  180.423266][ T7272] exfat: Deprecated parameter 'namecase'
[  180.461080][ T7273] overlayfs: statfs failed on './file0'
[  180.464573][ T7272] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  180.524854][ T7246] loop3: detected capacity change from 0 to 32768
[  180.570300][ T7246] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.586349][   T30] audit: type=1800 audit(2000000804.278:25): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.486" name="file1" dev="loop4" ino=1048626 res=0 errno=0
[  180.711437][ T7246] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  180.888692][ T7246] XFS (loop3): Starting recovery (logdev: internal)
[  181.026916][ T7246] XFS (loop3): Ending recovery (logdev: internal)
[  181.164687][   T30] audit: type=1326 audit(2000000804.887:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.254468][   T30] audit: type=1326 audit(2000000804.887:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.288781][   T30] audit: type=1326 audit(2000000804.887:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.350679][   T30] audit: type=1326 audit(2000000804.887:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.431943][   T30] audit: type=1326 audit(2000000804.887:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.517386][   T30] audit: type=1326 audit(2000000804.887:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.551543][ T7300] loop5: detected capacity change from 0 to 512
[  181.614932][   T30] audit: type=1326 audit(2000000804.887:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.626447][ T5834] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.654160][ T7300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.681623][   T30] audit: type=1326 audit(2000000804.887:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  181.687139][ T7300] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.705203][   T30] audit: type=1326 audit(2000000804.887:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186618f6c9 code=0x7ffc0000
[  182.115305][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.347911][ T7290] loop1: detected capacity change from 0 to 32768
[  182.403554][ T7290] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  182.559801][ T5815] hid-generic 0005:15C2:1010.0005: hidraw0: BLUETOOTH HID v10.c3 Device [syz1] on aa:aa:aa:aa:aa:aa
[  182.968828][ T5829] ocfs2: Unmounting device (7,1) on (node local)
[  183.092470][ T7337] loop3: detected capacity change from 0 to 256
[  183.161348][ T7337] exfat: Deprecated parameter 'namecase'
[  183.209368][ T7337] exfat: Deprecated parameter 'namecase'
[  183.215139][ T7337] exfat: Deprecated parameter 'utf8'
[  183.263998][ T7337] exfat: Deprecated parameter 'utf8'
[  183.297738][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'.
[  183.312196][ T7339] loop5: detected capacity change from 0 to 4096
[  183.347511][ T7339] EXT4-fs (loop5): Test dummy encryption mode enabled
[  183.375020][ T7339] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  183.425519][ T7337] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5417aa89, utbl_chksum : 0xe619d30d)
[  183.477335][ T7339] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  183.485579][ T7339] System zones: 0-5
[  183.533260][ T5835] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  183.565376][ T7339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.930347][ T5835] Bluetooth: hci5: link tx timeout
[  183.940533][ T5835] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  183.950938][ T5835] Bluetooth: hci5: link tx timeout
[  183.956838][ T5835] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.983038][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.395990][ T7364] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  184.402938][ T7364] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  184.500489][ T7364] vhci_hcd vhci_hcd.0: Device attached
[  184.545672][ T7365] vhci_hcd: connection closed
[  184.548868][ T3010] vhci_hcd: stop threads
[  184.583230][ T3010] vhci_hcd: release socket
[  184.587699][ T3010] vhci_hcd: disconnect device
[  184.667793][ T7345] loop2: detected capacity change from 0 to 40427
[  184.687955][ T7345] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  184.694580][ T7345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  184.814333][ T7380] binder: 7378:7380 ioctl 400c620e 200000000500 returned -22
[  184.883672][ T7383] loop3: detected capacity change from 0 to 64
[  185.183740][ T7345] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  185.261506][ T7345] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  185.314057][ T7345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  185.448111][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'.
[  185.489424][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'.
[  185.581529][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  185.581555][   T30] audit: type=1800 audit(2000000809.516:38): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.514" name="bus" dev="loop2" ino=10 res=0 errno=0
[  185.724192][   T30] audit: type=1804 audit(2000000809.558:39): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.514" name="/newroot/103/file2/bus" dev="loop2" ino=10 res=1 errno=0
[  185.745558][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.792116][ T5844] syz-executor: attempt to access beyond end of device
[  185.792116][ T5844] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.872607][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  185.872655][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  185.872677][ T5844] Call Trace:
[  185.872689][ T5844]  <TASK>
[  185.872702][ T5844]  dump_stack_lvl+0x16c/0x1f0
[  185.872754][ T5844]  f2fs_handle_critical_error+0x624/0x9f0
[  185.872799][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.872845][ T5844]  ? f2fs_build_fault_attr+0x53/0x1f0
[  185.872917][ T5844]  f2fs_write_end_io+0x958/0xcf0
[  185.872966][ T5844]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  185.873016][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.873070][ T5844]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  185.873113][ T5844]  bio_endio+0x713/0x860
[  185.873169][ T5844]  submit_bio_noacct+0x306/0x1f60
[  185.873220][ T5844]  __submit_merged_bio+0x33c/0x770
[  185.873271][ T5844]  __submit_merged_write_cond+0x319/0x3f0
[  185.873328][ T5844]  f2fs_write_cache_pages+0x2067/0x2570
[  185.873416][ T5844]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  185.873473][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.873537][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.873582][ T5844]  ? __lock_acquire+0x622/0x1c90
[  185.873685][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.873730][ T5844]  ? find_held_lock+0x2b/0x80
[  185.873814][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.873860][ T5844]  ? __lock_acquire+0x622/0x1c90
[  185.873928][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.873981][ T5844]  f2fs_write_data_pages+0x4ad/0xd90
[  185.874043][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.874110][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.874156][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.874211][ T5844]  do_writepages+0x27a/0x600
[  185.874256][ T5844]  ? __pfx_do_writepages+0x10/0x10
[  185.874291][ T5844]  ? do_raw_spin_unlock+0x172/0x230
[  185.874334][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.874385][ T5844]  ? _raw_spin_unlock+0x28/0x50
[  185.874431][ T5844]  filemap_fdatawrite_wbc+0x104/0x160
[  185.874474][ T5844]  __filemap_fdatawrite_range+0xb9/0x100
[  185.874528][ T5844]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  185.874637][ T5844]  ? find_held_lock+0x2b/0x80
[  185.874687][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.874733][ T5844]  ? do_raw_spin_unlock+0x172/0x230
[  185.874776][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.874828][ T5844]  f2fs_sync_dirty_inodes+0x2a2/0x980
[  185.874903][ T5844]  block_operations+0x2b0/0xfe0
[  185.874955][ T5844]  ? bpf_ksym_find+0x124/0x1c0
[  185.875020][ T5844]  ? __pfx_block_operations+0x10/0x10
[  185.875072][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.875117][ T5844]  ? __kernel_text_address+0xd/0x40
[  185.875215][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.875263][ T5844]  ? ktime_get+0x200/0x310
[  185.875317][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.875365][ T5844]  ? lockdep_hardirqs_on+0x7c/0x110
[  185.875418][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.875462][ T5844]  ? rcu_is_watching+0x12/0xc0
[  185.875518][ T5844]  f2fs_write_checkpoint+0x32b/0x5300
[  185.875604][ T5844]  kill_f2fs_super+0x3d6/0x490
[  185.875661][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  185.875734][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.875795][ T5844]  deactivate_locked_super+0xc1/0x1a0
[  185.875851][ T5844]  deactivate_super+0xde/0x100
[  185.875906][ T5844]  cleanup_mnt+0x225/0x450
[  185.875965][ T5844]  task_work_run+0x150/0x240
[  185.876008][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  185.876047][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  185.876095][ T5844]  ? __pfx___x64_sys_umount+0x10/0x10
[  185.876167][ T5844]  exit_to_user_mode_loop+0xec/0x130
[  185.876211][ T5844]  do_syscall_64+0x426/0xfa0
[  185.876262][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.876298][ T5844] RIP: 0033:0x7f68559909f7
[  185.876326][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  185.876362][ T5844] RSP: 002b:00007ffe4bd32ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  185.876403][ T5844] RAX: 0000000000000000 RBX: 00007f6855a11d7d RCX: 00007f68559909f7
[  185.876427][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4bd32c60
[  185.876449][ T5844] RBP: 00007ffe4bd32c60 R08: 0000000000000000 R09: 0000000000000000
[  185.876471][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe4bd33cf0
[  185.876495][ T5844] R13: 00007f6855a11d7d R14: 000000000002db38 R15: 00007ffe4bd33d30
[  185.876547][ T5844]  </TASK>
[  186.333982][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[  186.429331][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  186.470823][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'.
[  186.497092][ T7390] loop4: detected capacity change from 0 to 32768
[  186.506251][ T7390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.530 (7390)
[  186.585080][ T5840] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI
[  186.597198][ T5840] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  186.605625][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  186.615115][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  186.625179][ T5840] Workqueue: hci5 hci_cmd_sync_work
[  186.630412][ T5840] RIP: 0010:klist_put+0x4d/0x1b0
[  186.635369][ T5840] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c
[  186.654987][ T5840] RSP: 0018:ffffc9000419f8d0 EFLAGS: 00010212
[  186.661067][ T5840] RAX: dffffc0000000000 RBX: ffff888055b08460 RCX: 0000000000000000
[  186.669039][ T5840] RDX: 000000000000000b RSI: ffffffff8b5472f5 RDI: 0000000000000058
[  186.677010][ T5840] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20cb11c
[  186.684983][ T5840] R10: ffffffff906588e3 R11: 0000000000002b81 R12: 0000000000000000
[  186.692960][ T5840] R13: 0000000000000001 R14: 1ffff92000833f22 R15: ffffffff906588a0
[  186.700931][ T5840] FS:  0000000000000000(0000) GS:ffff888124a07000(0000) knlGS:0000000000000000
[  186.709863][ T5840] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  186.716462][ T5840] CR2: 0000001b31420ff8 CR3: 00000000794df000 CR4: 0000000000350ef0
[  186.724434][ T5840] Call Trace:
[  186.727705][ T5840]  <TASK>
[  186.730636][ T5840]  klist_remove+0x13f/0x2e0
[  186.735157][ T5840]  ? __pfx_klist_remove+0x10/0x10
[  186.740199][ T5840]  ? kobject_move+0x15d/0x260
[  186.744897][ T5840]  ? __pfx_kobject_move+0x10/0x10
[  186.749945][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.755593][ T5840]  ? get_device_parent+0x1ed/0x4e0
[  186.760727][ T5840]  device_move+0x12d/0x10d0
[  186.765262][ T5840]  hci_conn_del_sysfs+0x81/0x180
[  186.770223][ T5840]  hci_conn_del+0x657/0x1180
[  186.774828][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.780477][ T5840]  hci_abort_conn_sync+0x76a/0xb20
[  186.785611][ T5840]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  186.791268][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.796918][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.802565][ T5840]  ? find_held_lock+0x2b/0x80
[  186.807261][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.812917][ T5840]  abort_conn_sync+0x197/0x360
[  186.817696][ T5840]  hci_cmd_sync_work+0x1ab/0x430
[  186.822658][ T5840]  process_one_work+0x9cf/0x1b70
[  186.827615][ T5840]  ? __pfx_process_one_work+0x10/0x10
[  186.832996][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.838647][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.844293][ T5840]  ? assign_work+0x1a0/0x250
[  186.848892][ T5840]  worker_thread+0x6c8/0xf10
[  186.853503][ T5840]  ? __pfx_worker_thread+0x10/0x10
[  186.858624][ T5840]  kthread+0x3c5/0x780
[  186.862733][ T5840]  ? __pfx_kthread+0x10/0x10
[  186.867328][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  186.872980][ T5840]  ? rcu_is_watching+0x12/0xc0
[  186.877761][ T5840]  ? __pfx_kthread+0x10/0x10
[  186.882366][ T5840]  ret_from_fork+0x675/0x7d0
[  186.886958][ T5840]  ? __pfx_kthread+0x10/0x10
[  186.891556][ T5840]  ret_from_fork_asm+0x1a/0x30
[  186.896352][ T5840]  </TASK>
[  186.899362][ T5840] Modules linked in:
[  186.903327][    C0] vkms_vblank_simulate: vblank timer overrun
[  186.910887][ T5840] ---[ end trace 0000000000000000 ]---
[  186.943271][ T5840] RIP: 0010:klist_put+0x4d/0x1b0
[  186.948344][ T5840] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c
[  186.967994][    C0] vkms_vblank_simulate: vblank timer overrun
[  186.974447][ T5840] RSP: 0018:ffffc9000419f8d0 EFLAGS: 00010212
[  186.980591][ T5840] RAX: dffffc0000000000 RBX: ffff888055b08460 RCX: 0000000000000000
[  186.988679][ T5840] RDX: 000000000000000b RSI: ffffffff8b5472f5 RDI: 0000000000000058
[  186.997015][ T5840] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20cb11c
[  187.005120][ T5840] R10: ffffffff906588e3 R11: 0000000000002b81 R12: 0000000000000000
[  187.014673][ T5840] R13: 0000000000000001 R14: 1ffff92000833f22 R15: ffffffff906588a0
[  187.022875][ T5840] FS:  0000000000000000(0000) GS:ffff888124a07000(0000) knlGS:0000000000000000
[  187.031958][ T5840] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  187.038947][ T5840] CR2: 00007f4c5d343e9c CR3: 0000000077a62000 CR4: 0000000000350ef0
[  187.046960][ T5840] Kernel panic - not syncing: Fatal exception
[  187.053256][ T5840] Kernel Offset: disabled
[  187.057668][ T5840] Rebooting in 86400 seconds..