last executing test programs:

13m41.593888787s ago: executing program 32 (id=6400):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000040)={0x78969284})

12m15.395459154s ago: executing program 2 (id=7215):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="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", @ANYRES16], 0xfe, 0x1518, &(0x7f00000022c0)="$eJzs3AuYjtX6MPB1r7UehqS3SQ7Dutf98KbBMkmSQ0IOSZIkSU4JSZMkCYkhp6QhCTlOmhyGkBymMWmcz4eckyZbmiQJySlZ38Vub7uv/W/v/7f39/e/9ty/61rXrPt93nu99zP3XPOu55lr3u96jqrXon7tZkQk/iXw5y9JQogYIcQwIcR1QohACFEptlLspeP5FCT9ay/C/r0eTrvaFbCrifufu3H/czfuf+7G/c/duP+5G/c/d+P+527cf8Zys22zi13PI/cOvv+fm/H7/3+QnPKTv9pQ/sZe/40U7n/uxv3P3bj/uRv3P3fj/udu3P//fLX+4Bj3P3fj/jOWm/31XvAF7/3/gvvRPP5nx9X++WOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljuc9VdoIcRf5le7LsYYY4wxxhhjjP37+LxXuwLGGGOMMcYYY4z9/wdCCiW0CEQekVfEiHwiv7hGFBDXioLiOhER14tYcYMoJG4UhUURUVQUE3GiuCghjEBhBYlQlBSlRFTcJEqLm0W8KCPKinLCifIiQdwiKohbRUVxm6gkbheVxR2iiqgqqonq4k5RQ9wlaopaora4W9QRdUU9UV/cIxqIe0VDcZ9oJO4XjcUDool4UDQVD4lm4mHRXDwiWohHRUvxmGglWos2oq1o9/+U/5LoK14W/UR/kSQGiIHiFTFIDBZDxFAxTLwqhovXxAjxukgWI8Uo8YYYLd4UY8RbYqwYJ8aLt8UEMVFMEpPFFDFVpIh3xDTxrkgV74npYoaYKWaJNDFbzBHvi7linpgvPhALxIdioVgkFoslIl18JDLEUpEpPhbLxCciSywXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU18KraLHWKn2CV2iz1ir/hM7BOfi/3iC5Etvvxv5p/5v/J7gQABEiRo0JAH8kAMxEB+yA8FoAAUhIIQgQjEQiwUgkJQGApDUSgKcRAHJaAEICAQEJSEkhCFKJSG0hAP8VAWyoIDBwmQABXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCiZAIXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB2SYSSMgjfgDXgTxsBpGAvjYDyMhxpyIkyCyUByKqRACkyDaZAKqTAdZsAMmAVpMBvmwByYC/NgHnwAC+BD+BAWwSJYAumQDhmwFDIhE5bBGciC5bACVsIqWA2rYC2sg7WwATbCBtgMm2ErbIVP4VPYATtgF+yCPbAHPoPP4HP4HJIhG7LhAByAg3AQDsEhyIEcOAyH4QgcgaNwFI7BMTgOJ+AknIBTcApOwxk4C2fhPJyHC/BC3DfN95RZnyzkJVpqmUfmkTEyRuaX+WUBWUAWlAVlREZkrIyVhWQhWVgWlkVlURkn42QJWUKiREkylCVlSRmVUVlalpbxMl6WlWWlk04myARZQVaQFWVFWUneLivLO2QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUT+aBsKgfAEHhYXupMCzkSWspR0Eq2lm1kW/kmPC7byzHQQXaUneSTchyMhS6yvUuUz8iuchJ0k8/JyfC87CGnQk/5ouwle8s+8iXZV3Zw/WR/OR0GyIFyFgySg+UQOVTOhbryUsfqyddlshwpR8k35BJ4U46Rb8mxcpwcL9+WE+REOUlOllPkVJki35HT5LsyVb4np8sZcqacJdPkbDlHvi/nynlyvvxALpAfyoVykVwsl8h0+ZHMkEtlpvxYLpOfyCy5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2+ancLnfInXKX3C33yL3yM7lPfi73yy9ktvxSHpB/kgflV/KQ/FrmyG/kYfmtPCK/k0fl9/KY/EEelyfkSfmjPCV/kqflGXlWnpPn5c/ygvxFXpReCgVKKqW0ClQelVfFqHwqv7pGFVDXqoLqOhVR16tYdYMqpG5UhVURVVQVU3GquCqhjEJlFalQlVSlVFTdpEqrm1W8KqPKqnLKqfIqQd2iKqhbVUV1m6qkbleV1R2qiqqqqqnq6k5VQ92laqpaqra6W9VRdVU9VV/doxqoe1VDdZ9qpO5XjdUDqol6UDVVD6lm6mHVXD2iWqhHVUv1mGqlWqs2qq1qpx5X7dUTqoPqqDqpJ1Vn9ZTqop5WieoZ1VU9q7qp51R39bzqoV5QPdWLqpfqrfqoX9RF5VU/1V8lqQFqoHpFDVKD1RA1VA1Tr6rh6jU1Qr2uktVINUq9oUarN9UY9ZYaq8ap8eptNUFNVJPUZDVFTVUp6h01Tb2rUtV7arqaoWaqWSpNzVZDfl1p/j+R/+7fyR9x+dW3qm3qU7Vd7VA71S61W+1Re9VetU/tU/vVfpWtstUBdUAdVAfVIXVI5agcdVgdVkfUEXVUHVXH1DF1XJ1Q59SP6pT6SZ1WZ9QZdU6dV+fVhV+/B0KDllpprQOdR+fVMTqfzq+v0QX0tbqgvk5H9PU6Vt+gC+kbdWFdRBfVxXScLq5LaKNRW0061CV1KR3VN+nS+mYdr8vosrqcdrq8TtC3/Mv5/6i+drqdbq/b6w66g+6kO+nOurPuorvoRJ2ou+quupvuprvr7rqH7qF76p66l+6l++g+uq/uq/vpfjpJJ+mB+hU9SA/WQ/RQPUy/qofr4XqEHqGTdbIepUfp0Xq0HqPH6LF6rB6vx+sJeoKepCfpKXqKTtEpepqeplN1qp6up+uZeqZO02l6jp6j5+q5er6erxfoBXqhXqgX68U6XafrDJ2hM3WmXqaX6Sy9XC/XK/VKvVqv1mv1Wr1er9cb9Ua9WW/WWXqb3qa36+16p96pd+vdeq/eq/fpfXq/3q+zdbY+oA/og/qgPqQP6Rydow/rw/qIPqKP6qP6mD6mj+vj+qQ+qU/pU/q0Pq3P6rP6vD6vL+gL+qK+eGnbF8hABjrQQZ4gTxATxAT5g/xBgaBAUDAoGESCSBAbxAaFghuDwkGRoGhQLIgLigclAhNgYAMKwqBkUCqIBjcFpYObg/igTFA2KBe4oHyQENwSVAhuDSoGtwWVgtuDysEdQZWgalAtqB7cGdQI7gpqBrWC2sHdQZ2g7l/+DhXcGzQM7gsaBfcHjYMHgibBg0HT4KGgWfBw0Dx4JGgRPBq0DB4LWgWtgzZB26DdP7t+UC+oH9wTNPjD9b0/XeQJ18/0N0lmgBloXjGDzGAzxAw1w8yrZrh5zYwwr5tkM9KMMm+Y0eZNM8a8ZcaacWa8edtMMBPNJDPZTDFTTYp5x0wz75pU856ZbmaYmWaWSTOzzRzzvplr5pn55gOzwHxoFppFZrFZYtLNRybDLDWZ5mOzzHxissxys8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMp2a72WF2ml1mt9lj9prPzD7zudlvvjDZ5ktzwPzJHDRfmUPma5NjvjGHzbfmiPnOHDXfm2PmB3PcnDAnzY/mlPnJnDZnzFlzzpw3P5sL5hdz0fhLm/tLb++oUWMezIMxGIP5MT8WwAJYEAtiBCMYi7FYCAthYSyMRbEoxmEclsASeAkhYUksiVGMYmksjfEYj2WxLDp0mIAJWAErYEWsiJWwElbGylgFq2A1rIZ34p14F96FtbAW3o13Y12si/WxPjbABtgQG2IjbISNsTE2wSbYFJtiM2yGzbE5tsAW2BJbYitshW2wDbbDdtge22MH7ICdsBN2xs7YBbtgIiZiV+yK3bAbdsfu2AN7YE/sib2wF/bBPtgX+2K/c/0wCZNwIA7EQTgIh+AQHIbDcDgOxxE4ApMxGUfhKByNo3EMjsGxOA7H49s4ASfiJJyMU3AqpmAKTsNpmIqpOB2n40yciWmYhnNwDs7FuTgf5+MCXIALcSEuxsWYjumYgRmYiZm4DJdhFmbhClyBq3AVrsE1uA7X4QbcgJtwE27BLbgNt+F23I47cSfuxt24F/fiPtyH+3E/ZmM2HsADeBAP4iE8hDmYg4fxMB7BI3gUj+IxPIbH8TiexJN4Ck/haTyNZ/Esnsef8QL+ghfRY4yVIr+9xhaw19qC9jobY/PZv42L2mI2zha3JayxhW2R38RorY23ZWxZW846W94m2Ft+F1exVW01W93eaWvYu2zN38UN7L22ob3PNrL32/r2nt/Eje0Dtol91Da1j9lmtrVtbtvaFvZR29I+ZlvZ1raNbWs726dsF/u0TbTP2K722d/FGXapXWfX2w12o91nP7dn7Tl7xH5nz9ufbT/b3w6zr9rh9jU7wr5ukxuN/G1sR9rx9m07wU60k+xkO8VO/V08086yaXa2nWPft3PtvN/F6fYju8Bm2oV2kV1sl1yOL9WUaT+2y+wnNssutyvsSrvKrrZr7Nq/1rrSbrZb7Fa7135mt9sddqfdZXfbPZfjS+ex335hs+2X9rD91h60X9lD9qjNsd9cji+d31H7vT1mf7DH7Ql70v5oT9mf7Gl75vL5Xzr3H+0v9qL1VhCQJEWaAspDeSmG8lF+uoYK0LVUkK6jCF1PsXQDFaIbqTAVoaJUjOKoOJUgQ0iWiEIqSaUoSjdRabqZ4qkMlaVy5Kg8JdAtVIFupYp0G1Wi26ky3UFVqCpVo+p0J9Wgu6gm1aLadDfVobpUj+rTPdSA7qWGdB81ovupMT1ATehBakoPUTN6mJrTI9SCHqWW9Bi1otbUhtpSO3qc2tMT1IE6Uid6kjrTU9SFnqZEeoa60rPUjZ6j7vQ89aAXqCe9SL2oN/Whl6gvvUz9qD8l0QAaSK/QIBpMQ2goDaNXaTi9RiPodUqmkTSK3qDR9CaNobdoLI2j8fQ2TaCJNIkm0xSaSin0Dk2jdymV3qPpNINm0ixKo9k0h96nuTSP5tMHtIA+pIW0iBbTEkqnjyiDllImfUzL6BPKouW0glbSKlpNa2gtraP1tIE20ibaTFtoK22jT2k77aCdtIt20x7aS5/RPvqc9tMXlE1f0gH6Ex2kr+gQfU059A0dpm/pCH1HR+l7OkY/0HE6QSfpRzpFP9FpOkNn6Rydp5/pAv1CF8mTCCGUoQp1GIR5wrxhTJgvzB9eExYIrw0LhteFkfD6MDa8ISwU3hgWDouERcNiYVxYPCwRmhBDG1IYhiXDUmE0vCksHd4cxodlwrJhudCF5cOE8JawQnhrWDG8LawU3h5WDu8Iq4RVw0fvrx7eGdYI7wprhrXC2uHdYZ2wblgvrB/eEzYI7w0bhveFjcL7w4rhA2GT8MGwafhQ2Cx8OGwePhK2CB8NW4aPha3C1mGbsG3YLnw8bB8+EXYIO4adwifDzuFTYZfw6TAxfCbsGj77D48nhQPCgeEr4Suh9/epxdEl0fToR9GM6NJoZvTj6LLoJ9Gs6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18woHTjrltAtcHpfXxbh8Lr+7xhVw17qC7joXcde7WHeDK+RudIVdEVfUFXNxrrgr4YxDZx250JV0pVzU3eRKu5tdvCvjyrpyzrnyLsG1de1cO9fePeE6uI6uk3vSPemeck+5p93T7hnX1T3rurnnXHf3vOvhXnAvuBddL9fb9XEvub7uZdfP9XdJLskNdAPdIDfIDXFD8vy6B3Mj3AiX7JLdKDfKjXaj3Rg3xo11Y914N95NcBPcJDfJTXFTXIpLcdPcNJfqUt10N93NdDNdmktzc9wcN9fNdfPdfLcgfoFb6Ba6xW6xS3fpLsNluEyX6Za5ZS7LZbkVboVb5Va5NW6NW+fWuQ1ug9vkNrktbovb5ra57W672+l2ut1ut9vr9rp9bp/b7/a7bJftDrgD7qA76A65r12O+8Yddt+6I+47d9R97465H9xxd8KddD+6U+4nd9qdcWfdOXfe/ewuuF/cReddSuSdyLTIu5HUyHuR6ZEZkZmRWZG0yOzInMj7kbmReZH5kQ8iCyIfRhZGFkUWR5ZE0iMfRTIiSyOZkY8jyyKfRLIiyyMrIisjqyKrI94X3x76kr6Uj/qbfGl/s4/3ZXxZX847X94n+Ft8BX+rr+hv85X87b6yv8NX8VV9Nf+Yb+Vb+za+rW/nH/ft/RO+g+/oO/knfWf/lO/in/aJ/hnf1T/ru/nnfHf/vO/hX/A9/Yu+l+/t+/iXfF//su/n+/skP8AP9K/4QX6wH+KH+mH+VT/cv+ZH+Nd9sh/pR/k3/Gj/ph/j3/Jj/Tg/3r/tJ/iJfpKf7Kf4qT7Fv+On+Xd9qn/PT/cz/Ew/y6f52X6Of9/P9fP8fP+BX+A/9Av9Ir/YL/Hp/iOf4Zf6TP+xX+Y/8Vl+uV/hV/pVfrVf49f6dX693+A3+k1+s9/it/pt/lO/3e/wO/0uv9vv8Xv9Z36f/9zv91/4bP+lP+D/5A/6r/wh/7XP8d/4w/5bf8R/54/67/0x/4M/7k/4k/5Hf8r/5E/7M/6sP+fP+5/9Bf+Lv8j/s8YYY4wx9k9JPfTHxwf8ncfkr+OSgUKIa3cUy/nb41oIsanwn+eDZVzniBDimf49H/7LqFMnKSnp1+dmKRGUWiSEiFzJv3wZ8mu8XHQST4lE0VFU+Lv1DZa9z9MfrA/HvY/eLkT+v8mJEVfiK+vf+l+s//iT4zMqh2djf7v+hV/3m5fqjy4SIr7UlZx84kp8Zf2K/8X6Rdr/Uf1ZSuT7KkWIDn+TU0Bcia+snyCeEM+KxN88kzHGGGOMMcYY+7PBslr3f3D9efn6PE5fDi8/nFf8Nf6H1+eMMcYYY4wxxhi7+p7v3efpxxMTO3bnCU94wpO/Tq72bybGGGOMMcbYv9uVTf/VroQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/ic+TuxqnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2fAAAA///9QkNA")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

12m14.934947096s ago: executing program 2 (id=7221):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x9})

12m14.661526913s ago: executing program 2 (id=7225):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000480))

12m14.46881772s ago: executing program 2 (id=7229):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES16], 0x6, 0x2ae, &(0x7f0000001180)="$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")
mkdir(&(0x7f0000001940)='./file0\x00', 0x40)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

12m14.097399276s ago: executing program 2 (id=7234):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0)

12m13.625435019s ago: executing program 2 (id=7239):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d)

12m13.15051334s ago: executing program 33 (id=7239):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d)

11m53.58996163s ago: executing program 7 (id=7446):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c00048018000180080001006c6f67000c0002800600044000070000400001800e000100627974656f726465720000002c000280080001400000000e080004400000009d080002400000000a08000140000000110800ea40000000030900010073797a30000000000900020073797a32"], 0xb0}}, 0x0)

11m53.252710318s ago: executing program 7 (id=7452):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)

11m52.881444508s ago: executing program 7 (id=7457):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100bc"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)

11m52.588329504s ago: executing program 7 (id=7460):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file1\x00', 0x2008010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6e1, &(0x7f0000002d00)="$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")
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04022420"], 0x7)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)

11m51.865715168s ago: executing program 7 (id=7468):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7fffffffffffffff)

11m50.944837896s ago: executing program 7 (id=7476):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

11m49.995811543s ago: executing program 34 (id=7476):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

9m43.054658653s ago: executing program 1 (id=8665):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0xbb5a, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x804, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x7, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x20000001, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff6, 0x7, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x80, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x1, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xb)

9m42.601210874s ago: executing program 1 (id=8671):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x4, 0x8001, 0x9})
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@map_normal}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@check_relaxed}, {@cruft}, {@overriderock}, {@check_strict}, {@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@hide}, {@cruft}, {@unhide}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@map_normal}]}, 0x4, 0xa02, &(0x7f0000001880)="$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")

9m40.862664453s ago: executing program 1 (id=8692):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

9m40.285690258s ago: executing program 1 (id=8699):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

9m39.882095295s ago: executing program 1 (id=8702):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9c002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

9m39.456656548s ago: executing program 1 (id=8707):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(r0, &(0x7f0000000300), 0x6)

9m38.929050542s ago: executing program 35 (id=8707):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000300)=0x20, 0x4)
write$binfmt_misc(r0, &(0x7f0000000300), 0x6)

2m47.370110373s ago: executing program 9 (id=12692):
pipe(&(0x7f0000000080))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2m47.235697812s ago: executing program 9 (id=12693):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x17f)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m45.941033019s ago: executing program 9 (id=12703):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x1, 0x2, 0xb3ff, 0x0, 0x0, "71a4b85f10d0554b"})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000480)=0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x8400, 0xfffffffd, 0x0, 0x7, 0x19, "4415274a88b82c501113fb235942af2503c6b6"})

2m44.17554687s ago: executing program 9 (id=12715):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

2m43.885744066s ago: executing program 9 (id=12719):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x1018084, &(0x7f000000cfc0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f696e6c696e655f646174612c6261636b67726f756e645f67633d6f6e2c6661756c745f747970653d30303030303030303030303030303030303030362c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6e6f696e6c696e655f78617474722c6a71666d743d7666736f6c642c6e6f61636c2c00a1a75ac439087a5b11ab7891dd39dd9bc0d7"], 0x1, 0x5509, &(0x7f00000079c0)="$eJzs3E1rY+UXAPCTdjrv//kXceFuLgxCC5PQ9GXQXdUZfMEOZdSFK02TNGQmyS1NmtauXLgUF34TUXDl0s/gwrU7caG4E5Tce6NTX0Bs2kynvx/cnPs8eXLuecIwcO4tCeDcmk9+/rEUN+JKRMxGxPWI7LxUHJn1PDwXETcjYuaxYzz/+8TFiLgaETdGyfOcpeKtT28Pb6398MZPX31z6cK1z778djo7Bp4Ez0dEdyc/3+/mMW3l8WExXxu2s9hdHRYxf6P7qBinedxvbmUZ9mvjdbUsrrTy9enOXn8Utzu1+ii22tvZ/E4vv2B/2BrnyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsgSx+DwTjm882DZr6fnUdZrPcGxXyeN200D0ZxWMTiclFPO42sjq3jfNNPtjfbvb2DZNjc7bfTXrJWqb5Qqd4pV3fTRnPQXC3Xuo07q8lCqzNaVh40a931Vpq2Os1KPe0uJguter1crSYLd5tb7VovqVYrK5Wl8tpicXY7efX+O0mnkSyM4svt3t6g3ekn2+lukn9iMVmurLy4mNyqJm9tbCabD+7d29h8+727795/aeP1V4pFfykrWVheWl4uV5fKy9XFc7T/j4qiJ7h/OJbStAsAOHuO2/+X9P/Af3By/f/ug4iT7/9D/z8RZ6r/Pe/9/wnsH45F/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcG59N/f5a9nJfD6+Vsz/r5h6phiXImImIn79G7Nx8UjO2SLP3D+sn/tTDV+XIsswusal4rgaEevF8cv/T/pbAAAAgKfXFx/e/CTv1vOX+WkXxGnKb9rMXH9/QvlKETE3//2Ess2MXp6dULLs3/eFOJhQtuwG1uUJJctvuV2YVLZ/ZfZIuPxYKOVh5lTLAQAATsXRTuB0uxAAAABO08fTLoDpKMX4Ueb4WXD2l/d/PBC8cmQEAAAAnEGlaRcAAAAAnLis//f7fwAAAPB0y3//DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/YuZ/bxIEoDsDPBi/sPy1a7X1b2RuUsSXscY8RBaQJCsiBtJAGqIHcUkIEER6HQMQhkse2En2f5EzGMj/eIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABduq/Wi9ur39dtc3b7dvKMBgAAALhkW60X9T+z1P/a3P/e3PrZ9IuIKCPi0tx9FJ/OMkdNTvXy/M3p89WrGu4i6oTDe0ya60tE/Gmuxx9dfwoAAADwcW2Wq3marac/s6ELok9p0ab89jdTXhER1ewhU1p5yPuVKaz+fo/jf6a0egFrmiksLbmNc6W9Sf1zP67aTU+aIjXlxZcdi8w2dgAAoEejs6bfWQgAAAB9+jd0AQyjiOetzONW4CQ1zfbe57MeAAAA8A4VQxcAAAAAdK6e//d0/t/e+X8AAAAwjHT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3aVuvFZrmat83Z7dvJMxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe2J93FAiBMAiDves7k7n/YaVBU1OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi535e46jiAIC/mdnZ2qq4RtlDRBQ86MVut7W1N/GgBA/+CUJItzV26482B1uKmIs3ybkX0aOIoMRb/4ecE8gl3nLYQwTPyszOZCc/wPXXzCb5fODN++4wzPu+WQj5znsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlEZvT+IkO3TGcVyc29x7uJT1W4f6zOO17fmsZXFUZ9Inw4vVD1G3uUQAAAA4O5Kyvg8h7KTrC1kfd/L6Py2vyWr+b58ex2U9f7juL/uy9s/aLz/vPr8/UGc8TnbTm8vDwaWjqbT+v1nOtmf+8opW/uTzdy9J/oXE760+N0rz5xl9vbHxTjsPz9WRLQDwT1ws+yIofx/K+n6TiQFwZrQqhXdZ/yedZnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqMNoNTxZxlEIYb41iTNbew+Xjusfr23Pl+3ao0dr4cvJPbNbpCGEm8vDwaVaZzPb7t1/cHtxOBzcrT94KYTQ1OhvFdO//cEUF4fQyPMR/EdBXHzZs5LPyQga/KEEAMCplBYtq+t30vWF7Fw0F8If3x2s/1+txGHK+n/3w2ub1bGq9X+/thnOvt7KnU979+4/eH35zuKtwa3Bx29c7r/Zv3L96tXrvfxdSc8bEwAAAP6ddtGq9X88d3T9/0IlDlPW/5990/+iOlai/j/WZNGv6UwAAADOtmdf/v236JjzUbsdPl9cWbnbHx/3P18eHxtI9W87V7Rq/Z/MNZ0VAAAAUIfRanRg/f9GJQ5Trv8/9f0LP1bvmYQQzhfr/xeXPhneqG86M62OPydueo4AAAA063zRquv/ab7/P97f8hCHEF57ZRwX/wZwqvo/eferH6pjVff/X6lvijMp7o6fR953Q2h1m84IAACA0+yJomXF/q/p+sJHP114v23/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/gwAAP//lKU+kQ==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20)

2m43.189832226s ago: executing program 9 (id=12726):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0002003cdb0000000000000000e6ff0000000000", @ANYRES32=0x1], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3})

2m42.484884004s ago: executing program 36 (id=12726):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0002003cdb0000000000000000e6ff0000000000", @ANYRES32=0x1], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3})

7.417454957s ago: executing program 6 (id=13986):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x400009, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x8, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xc, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x8, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0xfffffff9, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

6.916174231s ago: executing program 6 (id=13989):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={0x0, 0x4999, 0x7fffffff})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

5.999350973s ago: executing program 5 (id=13992):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
socket$igmp(0x2, 0x3, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5.999215504s ago: executing program 8 (id=13994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0)

5.77511078s ago: executing program 5 (id=13996):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x6ec8, 0x80, 0x2, 0x103c6}, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x20, 0x0, 0x0)

5.676190702s ago: executing program 8 (id=13998):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000040)=0x1)

5.258006044s ago: executing program 8 (id=14000):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c022ceb888cc8efa81040100dc3ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230", @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRESDEC=0x0, @ANYRES16, @ANYRES8=0x0], 0x1, 0x1059a, &(0x7f0000010640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.894086913s ago: executing program 5 (id=14002):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xce64, 0x6}}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x64}}, 0x24040084)

4.146585742s ago: executing program 0 (id=14010):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040))

4.054315201s ago: executing program 5 (id=14011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x0)

3.876458745s ago: executing program 3 (id=14012):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1, 0x7ff})

3.553152193s ago: executing program 6 (id=14013):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000540)={0x0, 0x88d3, 0x80, 0x1, 0xbfdffffc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
io_uring_enter(r0, 0x4e14, 0x912a, 0x41, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

3.441880517s ago: executing program 8 (id=14015):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000a40)={0x28, 0x2, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000180)={0x10, 0x0, r3})

3.425391726s ago: executing program 3 (id=14016):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.424236406s ago: executing program 5 (id=14017):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x0, 0x0, 0x800000, 0x0, 0xffffffff}, &(0x7f0000000480)=0x98)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

3.423237843s ago: executing program 0 (id=14028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc)

3.060189714s ago: executing program 0 (id=14018):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file1\x00'}, 0x6e)
listen(r0, 0xe5)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000004880)={0x2020}, 0x2020)

2.677983193s ago: executing program 0 (id=14019):
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="69710c3e7b90", 0x5dc}], 0x2, 0x0, 0x0, 0xc0090}, 0x4000000)

2.677025037s ago: executing program 6 (id=14032):
r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
pread64(r2, &(0x7f0000000100)=""/8, 0x8, 0x0)

2.516983414s ago: executing program 8 (id=14020):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x80, r2})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2})

2.516846493s ago: executing program 3 (id=14021):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffb, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e)

2.358204103s ago: executing program 6 (id=14022):
r0 = gettid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sched_getparam(r0, &(0x7f0000000080))

2.162422096s ago: executing program 4 (id=14023):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb)
fcntl$dupfd(r0, 0x0, r0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)

2.161025858s ago: executing program 5 (id=14024):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$eJzs3T9sVPcdAPDfe3aLTYHalIFKlXpSUVu1lWUz0RqpxhiMDS4VLQxdjrN9gJuzD9nnKAODoyxImSJliDKgRMrmCXnLRJZIGbNkJDNSMmSJFAnlort7Z99758MX4sMBfT4S/t37/be/9373e8PxixOVO0truaW1XGElV164tXY693q5tL5cDHHWp205+6Lr8TlQvYiT2B+cq+cv/ufG6RA+WfziSbVarYaa/rCrsZbX335zb6E1bYpbL95q9Lt7b/vlfyGEE23zqukLIQwkr88l6WSSDoYQjoUQohDCjXtv38zt02wePi6ezT+du781fmp288FW5989CuH90m//dnv5qz/0jX/5l30aHgAAAAAAAAAAAAAAAACAl9z0tavX/z06Fh5FoX8zav++7nSSdvp+bHXf/L73vywAAAAAAAAAAAAAAAAAAAD8TO18/z8XHd/l+/9TSTrRoX31n92N88efOE96Y+ZfV6cujI4l579HbeVnkqyvz/WF4eb56p91Pv/9XKb97ue/t4/zvJrza447FKJ4JHUdxyMjIXyYHPx+Mjocl8prlb/eKq+vLO7bNF5a6fg3Tu9PRSc50D8V/2ec/z+Z6b/35///pu3dVLu+uX9vsVdaOv59Het99Gb0jPj/crve+Uy7FxF/nl86/v31vMHWChONBaAW/3f6977/pzL99yr+x0IIuag211xqBajtYWr5nfYrpKXj/4t6XmrpTP6Qne7/7zLxv5Dp/6DW/43sBxG7Sse/sY4PpGrs3P/D8d73/8VM/wcR/9r8N3z+dyUd/0ONzP5Ulfpfstv1fzrTf6/ifz1O5nksSr0DNqNGfqf/r460dPwH2sp3nv/irvb/lzLtX9TzX3Pc5vNfc/n/c9R4/mN32/HfCk+q1cGO9bq9/2cy7Xq9/k/U939tzpzo5aCvkPT9f7iel947D9V/dop/NRP/2Uz/zxH/jzs/he6o70oGmvHfWU++P9TI/8D+ryvp+P+qkRm31tio/6zv/6K99/+XM/0fxP6vNv+NuLejvirS8T/SsV4t/p938fl/JdOu9/EPYbT5BmjfvrCHdPyPdqxXv/8H9o7/XKZdr+P/p152DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPASmEzSoRDFI6nrOB4ZCeF8cn0yHI7mC4v5+VJ54bW1EKaS/Fw4Ht0ulecLpfzSSnmxmC+USuWFEC4k5SfCQLRWKlfyy4W7F7f7GozuFAurlflioRJCmE7yfxeONvuaX6osF+6GEC5tl/06Lq/evVNYyS8urf5jdHR0NMxsz2E4Kr5RKa5UGqM3SkOY3W47FLVMrl58eXsuR6L/l9dXVwqlev6Vljal8kKh1NJmLil7NwxHldX1lYVCpZgvlW83xztIE0k6NXPtv9eujLWV34wa6eSLnRYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9Kj8b+/F0Lob1zFIYRclLyIkn8pDx8Xz+afzt3fGj81u/lg68ludQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4gR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KA0EUB+A3Y6Glx7BadjvbFUW0cEXwBHoMD6NH8RLewSJF2hQhkMxC2D+wTVJ9X/Ngfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//9HQIRk=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0xfff0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.920647363s ago: executing program 8 (id=14025):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, 0x0)

1.845788924s ago: executing program 4 (id=14026):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r0, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)

1.649260608s ago: executing program 3 (id=14027):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x48f, &(0x7f0000000840)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @a}})

1.603786878s ago: executing program 4 (id=14029):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'veth1_to_team\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x29, 0xc, 0x8, {0x1, @usr_ip6_spec={@rand_addr=' \x01\x00', @private2, 0x4, 0x2, 0x3}, {0x0, @random="838d7dc09563", 0x9, 0x1, [0x91, 0x3]}, @ether_spec={@multicast, @multicast, 0x68}, {0x0, @broadcast, 0x4, 0xfffd, [0x7, 0x60]}, 0x3, 0xfff}}})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x32})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1)

1.288841271s ago: executing program 4 (id=14030):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0x10002, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c00de55dfc2b1240b195c91"], 0x5, 0x6188, &(0x7f0000004940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x186)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

554.722087ms ago: executing program 0 (id=14031):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

554.565262ms ago: executing program 3 (id=14033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
close(0x3)

356.801196ms ago: executing program 4 (id=14034):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf253400000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10)

112.423878ms ago: executing program 0 (id=14035):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

112.247448ms ago: executing program 3 (id=14036):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0)

53.072781ms ago: executing program 6 (id=14037):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x808000, &(0x7f0000000000)=ANY=[], 0xf, 0x2b1, &(0x7f00000001c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0)
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000))

0s ago: executing program 4 (id=14038):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x3, 0x1}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

kernel console output (not intermixed with test programs):

ropagating
[ 1362.772109][ T5833] Bluetooth: hci3: command tx timeout
[ 1362.812459][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[ 1362.852524][T27642] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1362.859759][T27642] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1362.973998][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1362.981236][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1363.716799][ T5833] Bluetooth: hci6: command 0xfc11 tx timeout
[ 1363.727952][T26639] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[ 1363.988826][ T4346] loop8: detected capacity change from 0 to 32768
[ 1364.111466][ T4346] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1364.153769][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1364.546630][ T4346] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1364.667716][ T4346] XFS (loop8): Starting recovery (logdev: internal)
[ 1364.760773][ T4346] XFS (loop8): Ending recovery (logdev: internal)
[ 1364.845370][T26639] Bluetooth: hci3: command tx timeout
[ 1364.951519][   T31] kauditd_printk_skb: 1 callbacks suppressed
[ 1364.951545][   T31] audit: type=1800 audit(1770288721.909:603): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.12795" name="file0" dev="loop8" ino=4420 res=0 errno=0
[ 1365.014474][ T4405] XFS (loop8): Metadata corruption detected at xfs_btree_lookup_get_block+0x3f1/0x870, xfs_bnobt block 0x8
[ 1365.099124][ T4405] XFS (loop8): Unmount and run xfs_repair
[ 1365.168954][ T4346] XFS (loop8): Metadata corruption detected at xfs_inobt_verify+0xa1/0x230, xfs_finobt block 0x8 
[ 1365.170483][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12808'.
[ 1365.226668][ T4346] XFS (loop8): Unmount and run xfs_repair
[ 1365.255605][ T4346] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[ 1365.297394][ T4346] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[ 1365.313138][ T4346] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1365.318167][T27642] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1365.343164][ T4346] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1365.368108][ T4409] macvlan4: entered allmulticast mode
[ 1365.373616][ T4409] veth1_vlan: entered allmulticast mode
[ 1365.381444][ T4346] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[ 1365.439229][ T4346] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[ 1365.485454][ T4346] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1365.531217][ T4346] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1365.575669][ T4346] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1365.603434][ T4346] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x8 len 8 error 117
[ 1365.750747][ T4188] veth0_vlan: entered promiscuous mode
[ 1365.817598][ T4188] veth1_vlan: entered promiscuous mode
[ 1365.937319][T23612] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1365.967608][ T4386] XFS (loop8): Metadata corruption detected at xfs_inobt_verify+0xa1/0x230, xfs_finobt block 0x8 
[ 1366.000014][ T4386] XFS (loop8): Unmount and run xfs_repair
[ 1366.013740][ T4386] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[ 1366.014731][ T4188] veth0_macvtap: entered promiscuous mode
[ 1366.045394][ T4386] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[ 1366.054306][ T4386] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1366.125099][ T4188] veth1_macvtap: entered promiscuous mode
[ 1366.128265][ T4386] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1366.180368][ T4386] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[ 1366.225583][ T4386] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[ 1366.234509][ T4386] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1366.240907][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1366.325598][ T4386] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1366.347020][ T4386] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1366.354713][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1366.373426][ T4386] XFS (loop8): Corruption of in-memory data (0x8) detected at xfs_buf_submit+0xafd/0xdf0 (fs/xfs/xfs_buf.c:1460).  Shutting down filesystem.
[ 1366.452809][ T4386] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[ 1366.461980][T27642] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1366.476900][T27642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1366.636126][T27642] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1366.696929][T27642] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.051123][ T4449] loop6: detected capacity change from 0 to 128
[ 1367.118449][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1367.155414][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1367.248665][   T31] audit: type=1800 audit(1770288724.249:604): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12822" name="bus" dev="loop6" ino=1049082 res=0 errno=0
[ 1367.406079][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1367.413938][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1367.533601][ T4455] syz.6.12822: attempt to access beyond end of device
[ 1367.533601][ T4455] loop6: rw=8388608, sector=121, nr_sectors = 8 limit=128
[ 1367.798409][ T9481] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1367.809856][   T34] kworker/u8:2: attempt to access beyond end of device
[ 1367.809856][   T34] loop6: rw=1, sector=129, nr_sectors = 912 limit=128
[ 1367.970874][ T9481] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1367.990604][ T9481] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.037235][ T9481] usb 9-1: Product: syz
[ 1368.066442][ T9481] usb 9-1: Manufacturer: syz
[ 1368.071102][ T9481] usb 9-1: SerialNumber: syz
[ 1368.156604][ T9481] usb 9-1: config 0 descriptor??
[ 1368.180125][ T4477] loop6: detected capacity change from 0 to 512
[ 1368.302664][ T4477] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1368.520907][ T4477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1368.539094][ T9481] usb 9-1: USB disconnect, device number 37
[ 1368.634074][ T4477] EXT4-fs error (device loop6): ext4_readdir:262: inode #2: block 3: comm syz.6.12830: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0
[ 1368.711102][ T4477] EXT4-fs error (device loop6): ext4_readdir:262: inode #2: block 12: comm syz.6.12830: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0
[ 1368.816602][ T9459] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1368.831796][ T4477] EXT4-fs error (device loop6): ext4_readdir:262: inode #2: block 13: comm syz.6.12830: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0
[ 1369.018898][ T9459] usb 6-1: Using ep0 maxpacket: 16
[ 1369.030090][ T9459] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1369.047839][T20987] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended
[ 1369.062284][ T9459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1369.062344][ T9459] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1369.062386][ T9459] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1369.062437][ T9459] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1369.115953][ T9459] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1369.145659][ T9459] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1369.164093][ T9459] usb 6-1: Manufacturer: syz
[ 1369.177156][ T9459] usb 6-1: config 0 descriptor??
[ 1369.197339][T20987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1369.303381][ T4469] loop0: detected capacity change from 0 to 32768
[ 1369.430815][ T4469] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1369.558114][ T9459] rc_core: IR keymap rc-hauppauge not found
[ 1369.569249][ T9459] Registered IR keymap rc-empty
[ 1369.577778][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.605947][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.636888][ T9459] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1369.658560][ T9459] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input92
[ 1369.679100][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.681312][ T4469] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1369.739113][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.797282][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.810096][ T4469] XFS (loop0): Starting recovery (logdev: internal)
[ 1369.835510][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.857897][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.898714][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.933091][ T4469] XFS (loop0): Ending recovery (logdev: internal)
[ 1369.965461][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1369.988449][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1370.048875][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1370.116219][ T9459] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1370.160262][ T9459] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1370.173585][   T31] audit: type=1800 audit(1770288727.169:605): pid=4469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12827" name="file0" dev="loop0" ino=4420 res=0 errno=0
[ 1370.341336][ T4526] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3f1/0x870, xfs_bnobt block 0x8
[ 1370.341470][ T9459] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1370.377955][ T9459] usb 6-1: USB disconnect, device number 63
[ 1370.391489][ T4526] XFS (loop0): Unmount and run xfs_repair
[ 1370.423981][ T4525] loop6: detected capacity change from 0 to 2048
[ 1370.456289][ T4527] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xa1/0x230, xfs_finobt block 0x8 
[ 1370.518301][ T4527] XFS (loop0): Unmount and run xfs_repair
[ 1370.524233][ T4527] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1370.598880][ T4525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1370.621519][ T4527] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[ 1370.655522][ T5994] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1370.718738][ T4527] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1370.738553][ T4525] ext4 filesystem being mounted at /955/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1370.775580][ T4527] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1370.810021][ T4527] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[ 1370.821275][ T5994] usb 4-1: Using ep0 maxpacket: 16
[ 1370.852635][ T5994] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1370.867992][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.895750][ T4527] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[ 1370.925340][ T5994] usb 4-1: Product: syz
[ 1370.929726][ T4527] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1370.943113][ T5994] usb 4-1: Manufacturer: syz
[ 1370.953505][ T5994] usb 4-1: SerialNumber: syz
[ 1370.960551][ T4527] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1371.030399][ T4544] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.12841: bg 0: block 345: padding at end of block bitmap is not set
[ 1371.046866][ T4527] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1371.074723][ T4527] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x8 len 8 error 117
[ 1371.086572][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1371.155349][ T4544] EXT4-fs (loop6): Remounting filesystem read-only
[ 1371.368091][ T5994] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1371.413779][ T5822] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1371.437910][ T5994] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1371.460779][ T4512] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xa1/0x230, xfs_finobt block 0x8 
[ 1371.481529][ T5994] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1371.490705][ T4512] XFS (loop0): Unmount and run xfs_repair
[ 1371.499187][ T5994] usb 4-1: media controller created
[ 1371.518775][ T4512] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1371.551136][ T4556] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1371.565347][ T4512] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[ 1371.582311][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1371.612956][ T4512] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[ 1371.613028][T20987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1371.645401][ T4512] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1371.678151][ T4512] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[ 1371.698441][ T5994] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1371.731858][ T4512] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[ 1371.750777][ T4512] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1371.813615][ T4512] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1371.876900][ T4512] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1371.930215][ T4512] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_buf_submit+0xafd/0xdf0 (fs/xfs/xfs_buf.c:1460).  Shutting down filesystem.
[ 1371.978384][ T5994] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1372.019944][ T4512] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[ 1372.071212][ T5994] usb 4-1: USB disconnect, device number 99
[ 1373.460296][ T4604] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1373.705467][ T3976] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[ 1373.767581][ T4613] netlink: 'syz.8.12869': attribute type 5 has an invalid length.
[ 1373.893907][ T3976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1373.923421][ T3976] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1373.959816][ T3976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1374.034147][ T3976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 252, setting to 64
[ 1374.065576][ T3976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1374.120984][ T3976] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1374.158143][ T3976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1374.208005][ T3976] usb 1-1: Product: syz
[ 1374.212299][ T3976] usb 1-1: Manufacturer: syz
[ 1374.237423][ T3976] usb 1-1: SerialNumber: syz
[ 1374.283158][ T3976] usb 1-1: config 0 descriptor??
[ 1374.318334][ T4599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1374.598447][ T3976] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1374.630070][ T3976] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1374.667722][ T4641] loop5: detected capacity change from 0 to 64
[ 1374.807333][ T3976] radio-si470x 1-1:0.0: software version 0, hardware version 0
[ 1374.814955][ T3976] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1374.863346][ T3976] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1375.038342][ T3976] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1375.061069][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.067862][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.074513][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.081341][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.089466][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.096182][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.102839][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.109559][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.117527][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.124206][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.131098][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.138095][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.144670][ T3976] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1375.144787][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.154870][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.156155][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.162725][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.169371][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.177417][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.184011][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.190639][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.197282][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.203840][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.211991][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.218732][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.225830][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.241007][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.241345][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.247972][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.254523][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.255666][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.268705][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.276830][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.283399][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.290054][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.296692][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.303271][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.311408][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.318465][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.325062][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.331771][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.332123][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.340254][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.346860][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.353434][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.360064][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.361513][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.369681][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.376338][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.382889][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.389496][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.397681][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.404233][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.410797][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.411508][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.418194][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.424729][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.432849][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.439444][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.439782][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.446425][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.452990][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.461066][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.462189][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.468787][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.475359][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.482281][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.490514][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.497096][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.503632][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.510300][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.518511][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.525047][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.531831][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.538427][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.538775][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.545326][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.553458][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.562864][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.564605][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.571233][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.579411][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.586007][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.592540][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.599131][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.607177][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.613726][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.620322][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.627003][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.633546][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.641820][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.642159][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.648844][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.655448][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.661986][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.670116][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.671253][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.677855][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.684391][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.691011][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.699060][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.705658][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.712211][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.718877][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.726927][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.733468][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.740065][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.746647][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.746984][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.753529][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.761653][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.768274][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.769354][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.775936][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.782481][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.790653][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.797376][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.803922][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.810557][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.818627][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.825184][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.831802][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.838433][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.845071][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.847117][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.853697][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.860292][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.866983][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.873528][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.874650][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.882786][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.889383][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.895965][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.902541][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.910617][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.917216][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.923759][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.930341][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.938459][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.944991][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.951593][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.951939][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.958753][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.966936][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.975126][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.976304][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.982850][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.989669][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1375.997755][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.004298][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.004536][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.130599][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.137990][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.144744][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.151606][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.159700][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.166480][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.173174][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.180372][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.188504][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.195136][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.203861][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.210933][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.219094][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.225743][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.232368][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.238991][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.247110][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.253809][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.260496][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.267179][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.273811][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.282219][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.294900][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.301655][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.309738][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.316385][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.323020][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.329673][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.337772][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.344466][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.351096][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.357840][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.364823][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.372824][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.379468][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.386704][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.393364][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.401620][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.408255][    C0] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 1376.415261][ T3976] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22
[ 1376.536987][ T3976] usb 1-1: USB disconnect, device number 70
[ 1376.640260][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1377.054469][ T4686] loop6: detected capacity change from 0 to 256
[ 1377.084506][   T34] wlan1: Trigger new scan to find an IBSS to join
[ 1377.122476][ T4688] netlink: 'syz.3.12900': attribute type 5 has an invalid length.
[ 1379.054422][ T4760] loop8: detected capacity change from 0 to 128
[ 1379.166729][ T4760] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1379.257185][ T4760] ext4 filesystem being mounted at /865/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1379.279497][ T4767] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1379.355185][T23612] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1379.940369][ T4773] loop0: detected capacity change from 0 to 32768
[ 1379.999465][ T4773] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1380.000471][ T5994] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1380.007719][ T4773] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1380.178060][ T4773] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[ 1380.187577][ T5895] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1380.194366][ T5895] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1380.299736][ T5994] usb 9-1: Using ep0 maxpacket: 16
[ 1380.314580][ T5994] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1380.346831][ T5994] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.378999][ T5895] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 184ms
[ 1380.388606][ T5994] usb 9-1: Product: syz
[ 1380.402061][ T5994] usb 9-1: Manufacturer: syz
[ 1380.411491][ T5994] usb 9-1: SerialNumber: syz
[ 1380.422555][ T5895] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1380.445174][ T4773] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1380.461164][ T4797] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1380.718943][ T4794] serio: Serial port pty31
[ 1380.751494][ T5994] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1380.790072][ T5994] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1380.812192][ T5994] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1380.822778][ T5994] usb 9-1: media controller created
[ 1380.885988][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1380.983359][ T5994] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1381.160567][ T5994] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1381.257311][ T5994] usb 9-1: USB disconnect, device number 38
[ 1382.042634][   T12] wlan1: Trigger new scan to find an IBSS to join
[ 1382.290409][ T4811] loop5: detected capacity change from 0 to 32768
[ 1382.323156][ T4811] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12943 (4811)
[ 1382.399965][ T4811] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1382.445459][ T4811] BTRFS info (device loop5): using blake2b (blake2b-256-lib) checksum algorithm
[ 1382.591137][ T4811] BTRFS info (device loop5): enabling ssd optimizations
[ 1382.619693][ T4811] BTRFS info (device loop5): turning on async discard
[ 1382.697917][ T4811] BTRFS info (device loop5): enabling free space tree
[ 1383.105187][ T1160] wlan1: Creating new IBSS network, BSSID 1e:46:1b:8a:42:67
[ 1383.144890][ T4188] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[ 1384.855142][ T4857] loop8: detected capacity change from 0 to 32768
[ 1385.101291][ T4857] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1385.303761][ T4857] XFS (loop8): Ending clean mount
[ 1385.386297][ T4857] XFS (loop8): Quotacheck needed: Please wait.
[ 1385.643893][ T4857] XFS (loop8): Quotacheck: Done.
[ 1386.128287][T23612] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1386.381919][ T4933] netlink: 'syz.0.12977': attribute type 1 has an invalid length.
[ 1386.437577][ T4933] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12977'.
[ 1386.812199][ T4939] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1386.839442][ T9459] IPVS: starting estimator thread 0...
[ 1386.946957][ T4947] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1387.058396][ T5994] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1387.245584][ T5994] usb 4-1: Using ep0 maxpacket: 32
[ 1387.259674][ T5994] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 1387.295772][ T5994] usb 4-1: config 0 has no interface number 0
[ 1387.330284][ T5994] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1387.368152][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.425864][ T5994] usb 4-1: Product: syz
[ 1387.430074][ T5994] usb 4-1: Manufacturer: syz
[ 1387.434857][ T5994] usb 4-1: SerialNumber: syz
[ 1387.531018][ T5994] usb 4-1: config 0 descriptor??
[ 1387.577563][ T5994] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1387.816012][ T5994] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1387.901434][ T5994] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1388.280372][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1388.285968][ T9459] usb 4-1: USB disconnect, device number 100
[ 1388.358941][ T9459] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1388.439493][ T9459] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1388.497318][ T9459] quatech2 4-1:0.51: device disconnected
[ 1388.679192][ T4953] loop0: detected capacity change from 0 to 32768
[ 1388.767412][ T4953] JBD2: Ignoring recovery information on journal
[ 1388.980252][ T4953] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1389.168690][ T4953] (syz.0.12982,4953,1):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=255, inode=0, rec_len=0, name_len=0
[ 1389.572993][ T5822] ocfs2: Unmounting device (7,0) on (node local)
[ 1389.651129][ T4997] Set syz1 is full, maxelem 14 reached
[ 1389.678259][ T4966] loop6: detected capacity change from 0 to 32768
[ 1389.780221][ T4966] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1389.944287][ T4966] XFS (loop6): Ending clean mount
[ 1389.994400][ T4966] XFS (loop6): Quotacheck needed: Please wait.
[ 1390.077198][ T5012] 9p: Bad value for 'wfdno'
[ 1390.214230][ T4966] XFS (loop6): Quotacheck: Done.
[ 1390.644480][T20987] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1390.937516][ T5031] loop0: detected capacity change from 0 to 2048
[ 1390.986424][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13009'.
[ 1390.989220][ T5031] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1391.036455][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13009'.
[ 1391.079067][ T5031] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 1391.092456][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13009'.
[ 1391.139556][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13009'.
[ 1391.157740][ T5031] UDF-fs: Scanning with blocksize 512 failed
[ 1391.241068][ T5031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1391.467759][   T31] audit: type=1800 audit(1770288748.469:606): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12995" name="file1" dev="loop0" ino=838 res=0 errno=0
[ 1391.970088][ T5063] loop6: detected capacity change from 0 to 4096
[ 1392.201784][ T5074] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1392.247877][T27237] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1392.330386][   T31] audit: type=1800 audit(1770288749.329:607): pid=5063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13005" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1392.445388][T27237] usb 1-1: Using ep0 maxpacket: 8
[ 1392.497951][T27237] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1392.523396][T27237] usb 1-1: config 179 has no interface number 0
[ 1392.555781][T27237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1392.570433][T27237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1392.598835][T27237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1392.648464][T27237] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1392.685434][T27237] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1392.727523][T27237] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1392.743722][T27237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.784886][ T5069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1393.314919][T27237] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input93
[ 1393.743328][T27237] usb 1-1: USB disconnect, device number 71
[ 1393.743407][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1393.757738][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1395.645424][T27237] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1395.856280][T27237] usb 6-1: Using ep0 maxpacket: 16
[ 1395.856838][ T5127] loop0: detected capacity change from 0 to 32768
[ 1395.867770][ T5161] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13047'.
[ 1395.900313][T27237] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1395.925759][T27237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1395.940932][ T5127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13039 (5127)
[ 1395.977320][T27237] usb 6-1: Product: syz
[ 1395.994376][T27237] usb 6-1: Manufacturer: syz
[ 1396.021286][T27237] usb 6-1: SerialNumber: syz
[ 1396.066614][ T5127] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1396.070988][T27237] usb 6-1: config 0 descriptor??
[ 1396.130071][T27237] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1396.155629][ T5127] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[ 1396.431664][ T5127] BTRFS info (device loop0): enabling ssd optimizations
[ 1396.494264][ T5127] BTRFS info (device loop0): turning on async discard
[ 1396.539961][ T5127] BTRFS info (device loop0): enabling free space tree
[ 1396.739242][   T31] audit: type=1800 audit(1770288753.739:608): pid=5127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13039" name="file1" dev="loop0" ino=260 res=0 errno=0
[ 1396.812345][ T5147] loop8: detected capacity change from 0 to 32768
[ 1396.905972][ T5822] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1397.010072][T27237] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71
[ 1397.052286][ T5147] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1397.101125][T27237] usb 6-1: USB disconnect, device number 64
[ 1397.309714][ T5147] XFS (loop8): Ending clean mount
[ 1397.324836][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1397.385971][ T5147] XFS (loop8): Quotacheck needed: Please wait.
[ 1397.618187][ T5147] XFS (loop8): Quotacheck: Done.
[ 1398.133256][T23612] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1398.490620][ T5234] loop5: detected capacity change from 0 to 512
[ 1398.598022][ T5234] EXT4-fs: Ignoring removed orlov option
[ 1398.617462][ T5234] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1398.735423][ T5234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[ 1398.881462][ T5234] EXT4-fs error (device loop5): ext4_iget_extra_inode:5072: inode #15: comm syz.5.13061: corrupted in-inode xattr: e_value size too large
[ 1399.001711][ T5234] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.13061: couldn't read orphan inode 15 (err -117)
[ 1399.022831][ T5234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1399.327525][ T5234] EXT4-fs error (device loop5): ext4_check_dx_root:2200: inode #2: comm syz.5.13061: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[ 1399.677584][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1400.046085][ T3976] usb 4-1: new full-speed USB device number 101 using dummy_hcd
[ 1400.084264][ T5266] loop8: detected capacity change from 0 to 4096
[ 1400.158247][ T5266] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1400.235916][ T3976] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 1400.258647][ T5266] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1400.279021][ T3976] usb 4-1: config 0 has no interface number 0
[ 1400.285167][ T3976] usb 4-1: config 0 interface 41 has no altsetting 0
[ 1400.321055][ T3976] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1400.331905][ T5266] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1400.333618][ T3976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.355154][ T3976] usb 4-1: Product: syz
[ 1400.370869][ T3976] usb 4-1: Manufacturer: syz
[ 1400.388267][ T3976] usb 4-1: SerialNumber: syz
[ 1400.409632][ T3976] usb 4-1: config 0 descriptor??
[ 1400.558917][ T5276] netlink: 64 bytes leftover after parsing attributes in process `syz.5.13075'.
[ 1400.744392][T23612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1401.504612][ T3976] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[ 1401.556497][ T3976] usb 4-1: USB disconnect, device number 101
[ 1402.105204][ T5283] loop6: detected capacity change from 0 to 32768
[ 1402.159503][ T5283] (syz.6.13080,5283,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1402.201017][ T5283] (syz.6.13080,5283,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1402.296844][ T5283] JBD2: Ignoring recovery information on journal
[ 1402.436553][ T5283] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1402.570318][ T5327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13111'.
[ 1402.770867][ T5283] (syz.6.13080,5283,1):ocfs2_remove_inode_range:1800 ERROR: status = -22
[ 1402.811897][ T5283] (syz.6.13080,5283,1):__ocfs2_change_file_space:2051 ERROR: status = -22
[ 1403.089325][T20987] ocfs2: Unmounting device (7,6) on (node local)
[ 1403.401218][ T5344] loop5: detected capacity change from 0 to 128
[ 1403.494581][ T5344] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1403.605724][ T5344] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1404.017655][ T4188] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1404.538116][ T5367] loop0: detected capacity change from 0 to 4096
[ 1404.563340][ T5367] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1404.635279][ T5367] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1404.688718][ T5367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1404.980443][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1405.164783][ T5389] loop8: detected capacity change from 0 to 256
[ 1405.295004][ T5389] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1405.336211][ T9459] hid-generic 0000:0000:0000.00E2: unknown main item tag 0x0
[ 1405.366617][ T9459] hid-generic 0000:0000:0000.00E2: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1405.419462][ T5393] loop0: detected capacity change from 0 to 2048
[ 1405.492145][ T5393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1405.584349][ T5399] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.13131'.
[ 1405.589824][ T5398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13130'.
[ 1405.647159][ T5394] fido_id[5394]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1406.796299][ T5420] loop5: detected capacity change from 0 to 32768
[ 1406.836287][ T5420] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1406.844511][ T5420] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1406.897312][ T5420] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1406.912566][ T3976] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1406.921384][ T3976] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1407.008566][ T3976] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 87ms
[ 1407.016733][ T3976] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1407.021981][ T5420] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1407.205071][ T5420] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1407.271826][ T5438] loop8: detected capacity change from 0 to 512
[ 1407.379735][ T5438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1407.440275][ T5438] ext4 filesystem being mounted at /905/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1407.589203][ T4188] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[ 1407.606607][ T4188] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 1407.617425][ T4188] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:4188 [syz-executor] gfs2_quota_sync+0x322/0x570
[ 1407.630327][ T4188] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[ 1407.639962][ T4188] CPU: 1 UID: 0 PID: 4188 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1407.640023][ T4188] Tainted: [L]=SOFTLOCKUP
[ 1407.640038][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1407.640062][ T4188] Call Trace:
[ 1407.640074][ T4188]  <TASK>
[ 1407.640089][ T4188]  dump_stack_lvl+0x100/0x190
[ 1407.640141][ T4188]  gfs2_withdraw.cold+0xa/0xed
[ 1407.640206][ T4188]  inode_go_instantiate+0xee4/0x1310
[ 1407.640249][ T4188]  ? __pfx_bit_wait+0x10/0x10
[ 1407.640302][ T4188]  ? __pfx_inode_go_instantiate+0x10/0x10
[ 1407.640347][ T4188]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[ 1407.640408][ T4188]  gfs2_instantiate+0x16c/0x250
[ 1407.640474][ T4188]  gfs2_glock_wait+0x214/0x330
[ 1407.640533][ T4188]  ? __pfx_gfs2_glock_wait+0x10/0x10
[ 1407.640596][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1407.640651][ T4188]  gfs2_glock_nq+0xa03/0x14f0
[ 1407.640698][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1407.640753][ T4188]  do_sync+0x706/0xd60
[ 1407.640808][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1407.640852][ T4188]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1407.640913][ T4188]  ? __pfx_do_sync+0x10/0x10
[ 1407.640967][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1407.641018][ T4188]  ? qd_grab_sync+0x415/0x560
[ 1407.641084][ T4188]  ? gfs2_quota_sync+0x322/0x570
[ 1407.641141][ T4188]  ? gfs2_quota_sync+0x278/0x570
[ 1407.641199][ T4188]  ? gfs2_quota_sync+0x278/0x570
[ 1407.641256][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1407.641316][ T4188]  gfs2_quota_sync+0x322/0x570
[ 1407.641391][ T4188]  gfs2_sync_fs+0x44/0xb0
[ 1407.641436][ T4188]  ? __pfx_gfs2_sync_fs+0x10/0x10
[ 1407.641490][ T4188]  sync_filesystem+0x111/0x290
[ 1407.641536][ T4188]  generic_shutdown_super+0x7e/0x360
[ 1407.641595][ T4188]  kill_block_super+0x3b/0xa0
[ 1407.641647][ T4188]  gfs2_kill_sb+0x4a9/0x590
[ 1407.641700][ T4188]  deactivate_locked_super+0xc1/0x1b0
[ 1407.641760][ T4188]  deactivate_super+0xe7/0x110
[ 1407.641817][ T4188]  cleanup_mnt+0x21f/0x450
[ 1407.641883][ T4188]  task_work_run+0x150/0x240
[ 1407.641930][ T4188]  ? __pfx_task_work_run+0x10/0x10
[ 1407.641974][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1407.642021][ T4188]  ? __x64_sys_umount+0x124/0x1a0
[ 1407.642070][ T4188]  exit_to_user_mode_loop+0x100/0x4b0
[ 1407.642108][ T4188]  ? rcu_is_watching+0x12/0xc0
[ 1407.642160][ T4188]  do_syscall_64+0x4fe/0xf80
[ 1407.642213][ T4188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1407.642253][ T4188] RIP: 0033:0x7ff4d419c117
[ 1407.642284][ T4188] Code: a2 c7 05 7c a4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1407.642324][ T4188] RSP: 002b:00007ffcd8f30918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1407.642362][ T4188] RAX: 0000000000000000 RBX: 00007ff4d420471f RCX: 00007ff4d419c117
[ 1407.642389][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd8f309d0
[ 1407.642414][ T4188] RBP: 00007ffcd8f309d0 R08: 00007ffcd8f319d0 R09: 00000000ffffffff
[ 1407.642450][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd8f31a60
[ 1407.642475][ T4188] R13: 00007ff4d420471f R14: 0000000000157a41 R15: 00007ffcd8f31aa0
[ 1407.642530][ T4188]  </TASK>
[ 1407.642717][ T4188] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 1407.675589][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1408.821948][T23612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1409.162515][ T5470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13158'.
[ 1409.440371][ T5474] loop0: detected capacity change from 0 to 256
[ 1409.811774][ T5480] loop0: detected capacity change from 0 to 512
[ 1409.895653][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13163'.
[ 1409.904668][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13163'.
[ 1410.710089][ T5507] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1411.021937][ T5517] loop6: detected capacity change from 0 to 4096
[ 1411.093213][ T5517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1411.257371][ T5519] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set
[ 1411.361584][ T5517] fs-verity (loop6, inode 15): ext4_end_enable_verity() failed with err -117
[ 1411.448888][ T5530] 9p: Bad value for 'rfdno'
[ 1411.522606][T20987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1412.885492][ T4188] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 564
[ 1412.949967][ T4188] CPU: 0 UID: 0 PID: 4188 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1412.950030][ T4188] Tainted: [L]=SOFTLOCKUP
[ 1412.950044][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1412.950068][ T4188] Call Trace:
[ 1412.950081][ T4188]  <TASK>
[ 1412.950097][ T4188]  dump_stack_lvl+0x100/0x190
[ 1412.950151][ T4188]  gfs2_assert_warn_i.cold+0x3a/0x118
[ 1412.950226][ T4188]  ? __pfx_gfs2_assert_warn_i+0x10/0x10
[ 1412.950289][ T4188]  ? mark_held_locks+0x40/0x70
[ 1412.950353][ T4188]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1412.950440][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1412.950496][ T4188]  gfs2_make_fs_ro+0x25e/0x370
[ 1412.950551][ T4188]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[ 1412.950602][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1412.950654][ T4188]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1412.950721][ T4188]  ? gfs2_put_super+0x149/0x670
[ 1412.950773][ T4188]  ? gfs2_put_super+0x149/0x670
[ 1412.950823][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1412.950884][ T4188]  gfs2_put_super+0x197/0x670
[ 1412.950947][ T4188]  ? __pfx_gfs2_put_super+0x10/0x10
[ 1412.951003][ T4188]  generic_shutdown_super+0x15f/0x360
[ 1412.951064][ T4188]  kill_block_super+0x3b/0xa0
[ 1412.951118][ T4188]  gfs2_kill_sb+0x4a9/0x590
[ 1412.951172][ T4188]  deactivate_locked_super+0xc1/0x1b0
[ 1412.951232][ T4188]  deactivate_super+0xe7/0x110
[ 1412.951292][ T4188]  cleanup_mnt+0x21f/0x450
[ 1412.951359][ T4188]  task_work_run+0x150/0x240
[ 1412.951405][ T4188]  ? __pfx_task_work_run+0x10/0x10
[ 1412.951449][ T4188]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1412.951496][ T4188]  ? __x64_sys_umount+0x124/0x1a0
[ 1412.951546][ T4188]  exit_to_user_mode_loop+0x100/0x4b0
[ 1412.951586][ T4188]  ? rcu_is_watching+0x12/0xc0
[ 1412.951641][ T4188]  do_syscall_64+0x4fe/0xf80
[ 1412.951700][ T4188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1412.951740][ T4188] RIP: 0033:0x7ff4d419c117
[ 1412.951772][ T4188] Code: a2 c7 05 7c a4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1412.951811][ T4188] RSP: 002b:00007ffcd8f30918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1412.951848][ T4188] RAX: 0000000000000000 RBX: 00007ff4d420471f RCX: 00007ff4d419c117
[ 1412.951874][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd8f309d0
[ 1412.951899][ T4188] RBP: 00007ffcd8f309d0 R08: 00007ffcd8f319d0 R09: 00000000ffffffff
[ 1412.951926][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd8f31a60
[ 1412.951951][ T4188] R13: 00007ff4d420471f R14: 0000000000157a41 R15: 00007ffcd8f31aa0
[ 1412.952006][ T4188]  </TASK>
[ 1413.728821][ T5553] loop0: detected capacity change from 0 to 131072
[ 1413.794685][ T5553] F2FS-fs (loop0): invalid crc value
[ 1413.956675][ T5553] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1413.966907][ T5994] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1413.978003][ T5553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1414.160875][ T5994] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1414.256472][ T5994] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1414.295476][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1414.339733][ T5994] usb 4-1: SerialNumber: syz
[ 1414.948519][ T5588] loop8: detected capacity change from 0 to 512
[ 1414.972324][ T5588] EXT4-fs: Ignoring removed nobh option
[ 1415.011345][ T5588] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1415.101407][ T5994] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[ 1415.173094][ T5588] EXT4-fs (loop8): 1 truncate cleaned up
[ 1415.198987][ T5595] loop5: detected capacity change from 0 to 512
[ 1415.240960][ T5588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1415.275259][ T5595] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1415.292772][ T5595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1415.357257][ T5596] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1415.391946][ T5595] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.13208: bad orphan inode 131083
[ 1415.519717][ T5595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1415.591014][ T5994] usb 4-1: USB disconnect, device number 102
[ 1415.622351][ T5994] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[ 1415.694664][T23612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1415.802420][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1416.304590][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13214'.
[ 1417.668755][ T5652] loop5: detected capacity change from 0 to 64
[ 1418.110000][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.117981][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.125967][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.133901][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.141841][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.149793][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.157748][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.165665][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.173584][ T5659] ICMPv6: RA: ndisc_router_discovery failed to add default route
[ 1418.360374][ T5662] loop5: detected capacity change from 0 to 4096
[ 1418.457731][ T5670] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1419.586927][ T5692] loop0: detected capacity change from 0 to 32768
[ 1419.614524][ T5692] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1419.622811][ T5692] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1419.721146][ T5692] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[ 1419.733414][ T5700] loop5: detected capacity change from 0 to 1024
[ 1419.734164][ T5895] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1419.769836][ T5895] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1419.779900][ T5700] EXT4-fs: inline encryption not supported
[ 1419.852950][ T5700] EXT4-fs: Ignoring removed oldalloc option
[ 1419.968755][ T5700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a856c018, mo2=0082]
[ 1420.064809][ T5700] System zones: 1-12
[ 1420.107264][ T5895] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 337ms
[ 1420.118320][ T5700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1420.127288][ T5895] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1420.150002][ T5692] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1420.271486][ T5700] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4214: comm syz.5.13237: Allocating blocks 209-513 which overlap fs metadata
[ 1420.482175][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1421.814832][ T9459] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1421.991563][ T9459] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1422.017575][ T9459] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1422.042569][ T9459] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1422.064813][ T9459] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1422.073483][ T9459] usb 9-1: Product: syz
[ 1422.084148][ T9459] usb 9-1: SerialNumber: syz
[ 1422.166469][T27237] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1422.361567][T27237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1422.393316][T27237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1422.395583][ T5761] loop5: detected capacity change from 0 to 1024
[ 1422.438822][T27237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1422.443953][ T5761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1422.477722][T27237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1422.490857][T27237] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1422.500879][T27237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.511400][T27237] usb 4-1: Product: syz
[ 1422.517310][T27237] usb 4-1: Manufacturer: syz
[ 1422.522027][T27237] usb 4-1: SerialNumber: syz
[ 1422.530592][T27237] usb 4-1: config 0 descriptor??
[ 1422.703332][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1422.844482][T27237] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1423.028563][ T5774] loop5: detected capacity change from 0 to 512
[ 1423.050017][ T5772] loop0: detected capacity change from 0 to 2048
[ 1423.104351][ T5774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1423.146011][ T5774] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1423.157984][ T5772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1423.158119][ T5772] ext4 filesystem being mounted at /2172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1423.202015][ T9459] cdc_ncm 9-1:1.0: bind() failure
[ 1423.246802][ T5749] usb 4-1: Couldn't submit interrupt_out_urb -90
[ 1423.261502][ T3976] usb 4-1: USB disconnect, device number 103
[ 1423.284312][ T9459] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1423.331253][ T9459] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1423.354797][   T31] audit: type=1800 audit(1770288780.349:609): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13264" name="file2" dev="loop5" ino=16 res=0 errno=0
[ 1423.378729][ T9459] usbtest 9-1:1.1: probe with driver usbtest failed with error -71
[ 1423.404308][ T9459] usb 9-1: USB disconnect, device number 39
[ 1423.448825][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1423.474289][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1425.726994][ T5836] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.13286'.
[ 1426.027670][ T5846] GUP no longer grows the stack in syz.5.13290 (5846): 200000004000-200000008000 (200000002000)
[ 1426.082255][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.5.13290 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1426.082315][ T5846] Tainted: [L]=SOFTLOCKUP
[ 1426.082329][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1426.082353][ T5846] Call Trace:
[ 1426.082366][ T5846]  <TASK>
[ 1426.082381][ T5846]  dump_stack_lvl+0x100/0x190
[ 1426.082435][ T5846]  gup_vma_lookup.cold+0x83/0x96
[ 1426.082492][ T5846]  __get_user_pages+0x241/0x34d0
[ 1426.082547][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.082600][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.082644][ T5846]  ? find_held_lock+0x2b/0x80
[ 1426.082695][ T5846]  ? mtree_load+0x311/0xa40
[ 1426.082751][ T5846]  ? __pfx___get_user_pages+0x10/0x10
[ 1426.082804][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.082861][ T5846]  get_user_pages_remote+0x3d2/0xb10
[ 1426.082910][ T5846]  ? mas_new_root+0x620/0x6e0
[ 1426.082965][ T5846]  ? __pfx_get_user_pages_remote+0x10/0x10
[ 1426.083016][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.083069][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.083124][ T5846]  __access_remote_vm+0x3ba/0xa70
[ 1426.083174][ T5846]  ? do_raw_spin_lock+0x128/0x260
[ 1426.083218][ T5846]  ? __pfx___access_remote_vm+0x10/0x10
[ 1426.083263][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.083310][ T5846]  ? alloc_pages_noprof+0x233/0x390
[ 1426.083359][ T5846]  proc_pid_cmdline_read+0x4f2/0x8c0
[ 1426.083411][ T5846]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[ 1426.083460][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.083506][ T5846]  ? rw_verify_area+0xce/0x6d0
[ 1426.083572][ T5846]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[ 1426.083620][ T5846]  vfs_readv+0x5d8/0x8d0
[ 1426.083689][ T5846]  ? __pfx_vfs_readv+0x10/0x10
[ 1426.083763][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.083832][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.083879][ T5846]  ? __fget_files+0x21f/0x3d0
[ 1426.083930][ T5846]  ? do_preadv+0x1ac/0x270
[ 1426.083982][ T5846]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1426.084029][ T5846]  do_preadv+0x1ac/0x270
[ 1426.084089][ T5846]  ? __pfx_do_preadv+0x10/0x10
[ 1426.084161][ T5846]  do_syscall_64+0xc9/0xf80
[ 1426.084216][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1426.084257][ T5846] RIP: 0033:0x7ff4d419aeb9
[ 1426.084287][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1426.084328][ T5846] RSP: 002b:00007ff4d5088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1426.084366][ T5846] RAX: ffffffffffffffda RBX: 00007ff4d4415fa0 RCX: 00007ff4d419aeb9
[ 1426.084393][ T5846] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003
[ 1426.084419][ T5846] RBP: 00007ff4d4208c1f R08: 0000000000000200 R09: 0000000000000000
[ 1426.084445][ T5846] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[ 1426.084470][ T5846] R13: 00007ff4d4416038 R14: 00007ff4d4415fa0 R15: 00007ffcd8f316a8
[ 1426.084524][ T5846]  </TASK>
[ 1426.583410][ T5812] loop8: detected capacity change from 0 to 32768
[ 1426.687068][ T5812] (syz.8.13277,5812,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1426.701702][ T5812] (syz.8.13277,5812,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1426.743035][ T5812] JBD2: Ignoring recovery information on journal
[ 1426.869661][ T5812] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1427.224374][ T5882] 9p: Bad value for 'wfdno'
[ 1427.476661][ T9459] net_ratelimit: 45 callbacks suppressed
[ 1427.476688][ T9459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1427.638023][T23612] ocfs2: Unmounting device (7,8) on (node local)
[ 1428.524694][ T9459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.687842][ T9481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.698531][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.767424][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.775939][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1428.862597][ T3976] kernel read not supported for file /2043/coredump_filter (pid: 3976 comm: kworker/0:0)
[ 1429.317645][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1429.326025][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1429.343191][ T1160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1429.556226][ T9459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1429.635420][ T3976] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1429.808068][ T3976] usb 1-1: Using ep0 maxpacket: 8
[ 1429.830278][ T3976] usb 1-1: config 0 has no interfaces?
[ 1429.861970][ T3976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1429.908032][ T3976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1429.945446][ T3976] usb 1-1: Product: syz
[ 1429.961165][ T3976] usb 1-1: Manufacturer: syz
[ 1429.977096][ T3976] usb 1-1: SerialNumber: syz
[ 1429.992650][ T3976] usb 1-1: config 0 descriptor??
[ 1430.074156][ T5982] loop6: detected capacity change from 0 to 1024
[ 1430.176572][ T5982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1430.300261][ T5990] netlink: 212324 bytes leftover after parsing attributes in process `syz.8.13333'.
[ 1430.325041][ T9459] usb 1-1: USB disconnect, device number 72
[ 1430.549045][T20987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1430.565742][ T9481] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1430.583499][ T5997] loop8: detected capacity change from 0 to 47
[ 1430.595792][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1430.735105][ T9481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1430.768265][ T9481] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1430.822301][ T9481] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1430.862462][ T9481] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1430.890325][ T9481] usb 4-1: Manufacturer: syz
[ 1430.903550][ T9481] usb 4-1: config 0 descriptor??
[ 1431.459523][ T6013] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1431.461577][ T6015] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.13343'.
[ 1431.786315][ T6024] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1432.048891][ T9481] uclogic 0003:256C:006D.00E3: failed retrieving string descriptor #100: -71
[ 1432.065550][ T9481] uclogic 0003:256C:006D.00E3: failed retrieving pen parameters: -71
[ 1432.088700][ T9481] uclogic 0003:256C:006D.00E3: failed probing pen v1 parameters: -71
[ 1432.097881][ T6029] loop6: detected capacity change from 0 to 1024
[ 1432.121110][ T9481] uclogic 0003:256C:006D.00E3: failed probing parameters: -71
[ 1432.146675][ T9481] uclogic 0003:256C:006D.00E3: probe with driver uclogic failed with error -71
[ 1432.219402][ T9481] usb 4-1: USB disconnect, device number 104
[ 1432.494613][ T6036] loop8: detected capacity change from 0 to 128
[ 1432.520688][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1432.683051][ T3976] Process accounting resumed
[ 1432.697614][ T3976] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512)
[ 1432.725867][ T3976] FAT-fs (loop8): Filesystem has been set read-only
[ 1432.838295][ T6044] syz_tun: entered allmulticast mode
[ 1432.930584][ T6044] dvmrp8: entered allmulticast mode
[ 1432.969784][ T6042] loop5: detected capacity change from 0 to 4096
[ 1432.982985][ T6043] syz_tun: left allmulticast mode
[ 1433.031005][ T6051] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13360'.
[ 1433.058085][ T6042] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 1433.285121][ T6056] netlink: 'syz.6.13362': attribute type 12 has an invalid length.
[ 1433.321445][ T6056] netlink: 'syz.6.13362': attribute type 29 has an invalid length.
[ 1433.358712][ T6056] netlink: 148 bytes leftover after parsing attributes in process `syz.6.13362'.
[ 1433.443605][ T6056] netlink: 'syz.6.13362': attribute type 2 has an invalid length.
[ 1433.484799][ T6056] netlink: 23 bytes leftover after parsing attributes in process `syz.6.13362'.
[ 1433.935051][ T6071] loop5: detected capacity change from 0 to 1024
[ 1434.151031][   T34] hfsplus: b-tree write err: -5, ino 4
[ 1435.311438][ T6093] loop8: detected capacity change from 0 to 1024
[ 1435.432568][ T6093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1435.555911][ T6093] ext4 filesystem being mounted at /942/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1435.697716][   T31] audit: type=1800 audit(1770288792.699:610): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13379" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1435.731760][ T6093] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.13379: lblock 0 mapped to illegal pblock 0 (length 4)
[ 1435.816735][ T6093] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[ 1435.868291][ T6093] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1435.868291][ T6093] 
[ 1436.148386][ T9488] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:9: lblock 4 mapped to illegal pblock 4 (length 1)
[ 1436.399930][ T6086] loop5: detected capacity change from 0 to 40427
[ 1436.720127][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13391'.
[ 1436.729652][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13391'.
[ 1437.017335][ T9488] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117
[ 1437.277409][ T6106] loop0: detected capacity change from 0 to 131072
[ 1437.321825][ T6106] F2FS-fs (loop0): invalid crc value
[ 1437.332248][ T6086] F2FS-fs (loop5): invalid crc value
[ 1437.397775][ T9488] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1437.397775][ T9488] 
[ 1437.414305][T23612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1437.438021][ T6106] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1437.491908][ T6106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1437.838849][ T6086] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1437.876016][ T3976] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1437.884563][ T6086] F2FS-fs (loop5): Start checkpoint disabled!
[ 1437.953435][ T6086] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[ 1438.005407][ T6086] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1438.057673][ T3976] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[ 1438.080882][ T3976] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1438.132211][ T3976] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1438.178968][ T3976] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1438.200711][ T3976] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1438.246367][ T3976] usb 4-1: Product: syz
[ 1438.250673][ T3976] usb 4-1: Manufacturer: syz
[ 1438.280667][ T3976] usb 4-1: SerialNumber: syz
[ 1438.300116][ T3976] usb 4-1: config 0 descriptor??
[ 1438.339077][ T3976] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1438.345027][ T3976] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1438.818734][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13403'.
[ 1439.103851][T21171] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1439.369031][ T3976] usb 4-1: selecting invalid altsetting 0
[ 1440.164023][ T3976] usb 4-1: reset high-speed USB device number 105 using dummy_hcd
[ 1440.791479][ T3976] usb 4-1: failed to restore interface 0 altsetting 251 (error=-71)
[ 1440.876663][ T3976] usb 4-1: USB disconnect, device number 105
[ 1441.067576][T21066] udevd[21066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1441.226257][ T9459] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1441.415651][ T9459] usb 1-1: Using ep0 maxpacket: 32
[ 1441.429544][ T9459] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[ 1441.462743][ T9459] usb 1-1: config 0 has no interface number 0
[ 1441.526206][ T9459] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1441.567450][ T9459] usb 1-1: config 0 interface 85 has no altsetting 0
[ 1441.601616][ T9459] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1441.633121][ T9459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1441.653320][ T9459] usb 1-1: Product: syz
[ 1441.663444][ T9459] usb 1-1: Manufacturer: syz
[ 1441.706800][ T9459] usb 1-1: SerialNumber: syz
[ 1441.759247][ T9459] usb 1-1: config 0 descriptor??
[ 1442.103353][ T6185] loop5: detected capacity change from 0 to 1024
[ 1442.158496][ T6185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[ 1442.413923][ T9459] appletouch 1-1:0.85: Geyser mode initialized.
[ 1442.416373][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[ 1442.421835][ T6169] loop6: detected capacity change from 0 to 32768
[ 1442.449013][ T9459] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input94
[ 1442.549912][ T6169] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1442.623584][ T9459] usb 1-1: USB disconnect, device number 73
[ 1442.728249][ T6169] XFS (loop6): Ending clean mount
[ 1442.740592][ T6169] XFS (loop6): Quotacheck needed: Please wait.
[ 1442.860530][ T9459] appletouch 1-1:0.85: input: appletouch disconnected
[ 1442.948168][ T6169] XFS (loop6): Quotacheck: Done.
[ 1443.248639][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13424'.
[ 1443.444610][T20987] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1444.590283][ T6231] loop8: detected capacity change from 0 to 256
[ 1444.600880][ T6231] exfat: Deprecated parameter 'utf8'
[ 1444.606735][ T6231] exfat: Deprecated parameter 'namecase'
[ 1444.612642][ T6231] exfat: Deprecated parameter 'namecase'
[ 1444.634240][ T6231] exfat: Deprecated parameter 'utf8'
[ 1444.671689][ T6231] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d)
[ 1444.730651][ T6231] exFAT-fs (loop8): failed to test first cluster bit of root dir(5)
[ 1444.858084][   T31] audit: type=1800 audit(1770288801.859:611): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13435" name="file1" dev="loop8" ino=1049098 res=0 errno=0
[ 1445.168757][ T6244] loop5: detected capacity change from 0 to 512
[ 1445.237337][ T6244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1445.287240][ T6244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c01c, mo2=0002]
[ 1445.307033][ T6244] System zones: 1-12
[ 1445.326241][ T6244] EXT4-fs (loop5): 1 truncate cleaned up
[ 1445.417703][ T6244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1445.782068][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1446.222397][ T6267] loop5: detected capacity change from 0 to 4096
[ 1446.603705][ T6273] loop0: detected capacity change from 0 to 4096
[ 1446.772492][ T6273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1446.962705][ T6273] EXT4-fs (loop0): shut down requested (2)
[ 1447.141004][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13454'.
[ 1447.153035][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1447.163540][ T6283] loop8: detected capacity change from 0 to 1024
[ 1447.324137][ T6283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1447.572105][ T6294] EXT4-fs error (device loop8): __ext4_remount:6789: comm syz.8.13455: Abort forced by user
[ 1447.664532][ T6294] EXT4-fs (loop8): Remounting filesystem read-only
[ 1447.701746][ T6294] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[ 1448.327445][T23612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1448.823695][ T6311] loop5: detected capacity change from 0 to 2048
[ 1448.874262][ T6317] 9pnet: p9_errstr2errno: server reported unknown error ��
[ 1448.921203][ T6311] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1449.014744][ T6321] can0: slcan on ptm0.
[ 1449.022124][T22907] udevd[22907]: incorrect nilfs2 checksum on /dev/loop5
[ 1449.051836][ T6322] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1449.327081][ T6320] can0 (unregistered): slcan off ptm0.
[ 1449.393102][ T6311] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[ 1449.514244][ T6311] Remounting filesystem read-only
[ 1449.625429][ T9481] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1449.626713][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13472'.
[ 1449.673853][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13472'.
[ 1449.859452][ T9481] usb 1-1: Using ep0 maxpacket: 8
[ 1449.884416][ T9481] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 1449.915782][ T9481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1449.949562][ T9481] usb 1-1: Product: syz
[ 1449.953820][ T9481] usb 1-1: Manufacturer: syz
[ 1450.004173][ T9481] usb 1-1: SerialNumber: syz
[ 1450.021636][ T9481] usb 1-1: config 0 descriptor??
[ 1450.063236][ T9481] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 1450.289891][ T6359] vivid-000: disconnect
[ 1450.326196][ T6357] vivid-000: reconnect
[ 1450.916318][ T6373] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.13484'.
[ 1451.104518][ T9481] usb 1-1: USB disconnect, device number 74
[ 1451.955154][ T6397] loop5: detected capacity change from 0 to 136
[ 1452.506272][ T6412] loop0: detected capacity change from 0 to 64
[ 1453.092015][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13502'.
[ 1453.710166][ T6436] nbd: device at index 8 is going down
[ 1454.409562][ T6428] loop5: detected capacity change from 0 to 131072
[ 1454.419349][ T6428] F2FS-fs (loop5): Test dummy encryption mode enabled
[ 1454.427578][ T6428] F2FS-fs (loop5): invalid crc value
[ 1454.600324][ T6428] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1454.621792][ T6428] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1454.694986][T22907] udevd[22907]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory
[ 1456.357023][ T3976] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1456.542332][ T3976] usb 9-1: Using ep0 maxpacket: 32
[ 1456.554820][ T3976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1456.594548][ T3976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1456.641760][ T3976] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[ 1456.651379][ T3976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1456.671393][ T3976] usb 9-1: Product: syz
[ 1456.681503][ T3976] usb 9-1: Manufacturer: syz
[ 1456.691617][ T3976] usb 9-1: SerialNumber: syz
[ 1456.708810][ T3976] usb 9-1: config 0 descriptor??
[ 1456.738925][ T3976] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input95
[ 1457.033044][ T3976] usb 9-1: USB disconnect, device number 40
[ 1457.068962][ T6493] loop5: detected capacity change from 0 to 512
[ 1457.163782][ T6493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1457.187380][ T6493] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1457.273261][   T31] audit: type=1804 audit(1770289070.266:612): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.13515" name="/newroot/112/file1/file1" dev="loop5" ino=15 res=1 errno=0
[ 1457.511759][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1457.933645][ T6509] loop8: detected capacity change from 0 to 1764
[ 1458.665538][ T5994] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1458.828765][ T5994] usb 9-1: Using ep0 maxpacket: 8
[ 1458.839026][ T5994] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1458.864459][ T5994] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1458.877699][ T9481] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[ 1458.899902][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1458.921695][ T5994] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1458.945433][ T5994] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1458.986403][ T5994] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1459.005473][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1459.049307][ T9481] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4
[ 1459.064385][ T9481] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10
[ 1459.078566][ T9481] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64
[ 1459.094089][ T9481] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1459.124731][ T9481] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1459.170662][ T9481] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1459.208419][ T9481] usb 6-1: Product: syz
[ 1459.215380][ T9481] usb 6-1: Manufacturer: syz
[ 1459.230009][ T9481] usb 6-1: SerialNumber: syz
[ 1459.261883][ T5994] usb 9-1: GET_CAPABILITIES returned 0
[ 1459.279955][ T9481] usb 6-1: config 0 descriptor??
[ 1459.297600][ T6528] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1459.305150][ T5994] usbtmc 9-1:16.0: can't read capabilities
[ 1459.324399][ T9481] usb 6-1: selecting invalid altsetting 0
[ 1459.573645][   T10] usb 9-1: USB disconnect, device number 41
[ 1459.701082][ T6528] usb 6-1: BOGUS urb xfer, pipe 0 != type 1
[ 1459.806214][ T3976] usb 6-1: USB disconnect, device number 65
[ 1460.688440][ T6582] loop6: detected capacity change from 0 to 1024
[ 1460.781898][ T6582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1460.899747][ T6582] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[ 1460.967625][ T6582] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1461.001448][ T6582] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1461.001448][ T6582] 
[ 1461.025107][ T6582] EXT4-fs (loop6): Total free blocks count 0
[ 1461.037993][ T6582] EXT4-fs (loop6): Free/Dirty block details
[ 1461.078194][ T6582] EXT4-fs (loop6): free_blocks=20480
[ 1461.104020][ T6582] EXT4-fs (loop6): dirty_blocks=80
[ 1461.155837][ T6582] EXT4-fs (loop6): Block reservation details
[ 1461.178789][ T6582] EXT4-fs (loop6): i_reserved_data_blocks=5
[ 1461.317210][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1461.357288][   T13] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[ 1461.418134][ T6604] loop5: detected capacity change from 0 to 1024
[ 1461.484658][ T6604] EXT4-fs: Ignoring removed orlov option
[ 1461.556798][ T6604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1461.754791][ T3976] hid-generic 0000:0000:0000.00E4: unknown main item tag 0x0
[ 1461.842123][ T3976] hid-generic 0000:0000:0000.00E4: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1462.192601][ T6627] input: syz1 as /devices/virtual/input/input96
[ 1462.213836][ T6628] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.13588'.
[ 1462.659140][ T4188] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1463.086528][   T10] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1463.251947][   T10] usb 1-1: Using ep0 maxpacket: 16
[ 1463.286567][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1463.322894][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1463.369495][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1463.391019][   T10] usb 1-1: Product: syz
[ 1463.400045][   T10] usb 1-1: Manufacturer: syz
[ 1463.410239][   T10] usb 1-1: SerialNumber: syz
[ 1463.427452][   T10] usb 1-1: config 0 descriptor??
[ 1463.449775][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1463.462171][   T10] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1464.081385][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13607'.
[ 1464.095519][   T10] em28xx 1-1:0.0: chip ID is em2765
[ 1464.511440][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13611'.
[ 1464.563324][ T6680] netlink: 'syz.3.13611': attribute type 30 has an invalid length.
[ 1464.629922][   T10] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1464.706553][   T10] em28xx 1-1:0.0: board has no eeprom
[ 1464.796640][   T10] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1464.816147][   T10] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1464.821992][ T9459] em28xx 1-1:0.0: Binding DVB extension
[ 1464.860358][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13611'.
[ 1464.880570][ T6680] netlink: 'syz.3.13611': attribute type 30 has an invalid length.
[ 1464.891999][   T10] usb 1-1: USB disconnect, device number 75
[ 1464.933723][   T10] em28xx 1-1:0.0: Disconnecting em28xx
[ 1465.096201][ T6689] batadv_slave_1: entered promiscuous mode
[ 1465.116254][ T6689] batadv_slave_1: left promiscuous mode
[ 1465.150182][ T9459] em28xx 1-1:0.0: Registering input extension
[ 1465.164117][ T6691] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13616'.
[ 1465.205500][   T10] em28xx 1-1:0.0: Closing input extension
[ 1465.305201][   T10] em28xx 1-1:0.0: Freeing device
[ 1465.423063][ T6695] loop0: detected capacity change from 0 to 512
[ 1465.483117][ T6695] EXT4-fs (loop0): 1 truncate cleaned up
[ 1465.594001][ T6695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1465.829271][ T6704] loop6: detected capacity change from 0 to 1024
[ 1465.886089][ T6704] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[ 1465.910383][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1465.924582][ T6708] net_ratelimit: 2 callbacks suppressed
[ 1465.924606][ T6708] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1466.030023][ T6704] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.13621: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1466.155084][ T6704] Quota error (device loop6): qtree_write_dquot: dquota write failed
[ 1466.179478][ T6704] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.13621: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1466.269880][ T6704] Quota error (device loop6): v2_write_file_info: Can't write info structure
[ 1466.317586][ T6704] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.13621: Failed to acquire dquot type 0
[ 1466.356586][ T6704] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[ 1466.393687][ T6704] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.13621: mark_inode_dirty error
[ 1466.474248][ T6704] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[ 1466.546304][ T6704] EXT4-fs (loop6): 1 orphan inode deleted
[ 1466.581775][ T6704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1466.597223][T27642] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1466.677570][T27642] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 1466.730148][T27642] EXT4-fs error (device loop6): ext4_release_dquot:7020: comm kworker/u8:7: Failed to release dquot type 0
[ 1466.730472][ T6704] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm syz.6.13621: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1467.004662][ T6734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1467.023712][ T6704] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1
[ 1467.040471][ T6740] loop8: detected capacity change from 0 to 512
[ 1467.078133][ T6704] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 980643439
[ 1467.097128][ T6740] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 1467.133849][ T6740] UDF-fs: Scanning with blocksize 512 failed
[ 1467.134401][ T6704] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.13621: Failed to acquire dquot type 0
[ 1467.218170][ T6740] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 1467.251657][ T6740] UDF-fs: Scanning with blocksize 1024 failed
[ 1467.303589][ T6740] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found
[ 1467.340117][ T6740] UDF-fs: Scanning with blocksize 2048 failed
[ 1467.344038][T20987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1467.357477][   T50] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1467.394620][ T6740] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1467.396522][   T50] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 1467.440816][   T50] EXT4-fs error (device loop6): ext4_release_dquot:7020: comm kworker/u8:3: Failed to release dquot type 0
[ 1467.448873][ T6740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1467.471547][T20987] EXT4-fs error (device loop6): __ext4_get_inode_loc:4829: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1467.525609][ T6750] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1467.551410][T20987] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem
[ 1467.574292][T20987] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[ 1468.419702][ T6767] loop6: detected capacity change from 0 to 32768
[ 1469.589337][ T6794] loop5: detected capacity change from 0 to 128
[ 1469.662020][ T6794] vfat: Unknown parameter '0000000000000000000000018446744073709551615���"��	�����9����)&�7�ީ�V�1�Kg�����|sd�S:�����ӳ��W�@q�'�h��{Հ����4E>���#Nr���Rb�'
[ 1470.138190][ T9488] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1471.279508][ T6827] macvlan2: entered promiscuous mode
[ 1471.322184][ T6830] macvlan3: entered promiscuous mode
[ 1472.178918][ T6855] loop8: detected capacity change from 0 to 128
[ 1472.370557][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13685'.
[ 1472.418943][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13685'.
[ 1472.762337][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13691'.
[ 1472.989382][ T6847] loop5: detected capacity change from 0 to 32768
[ 1473.036150][ T6847] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13679 (6847)
[ 1473.047934][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13692'.
[ 1473.154824][ T6847] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1473.213759][ T6847] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[ 1473.472423][ T6847] BTRFS info (device loop5): rebuilding free space tree
[ 1473.571408][ T6847] BTRFS info (device loop5): turning on async discard
[ 1473.613464][ T6847] BTRFS info (device loop5): enabling free space tree
[ 1473.655404][ T6847] BTRFS info (device loop5): force clearing of disk cache
[ 1473.731106][ T6901] syzkaller1: entered promiscuous mode
[ 1473.760362][ T6901] syzkaller1: entered allmulticast mode
[ 1473.867328][ T6917] loop6: detected capacity change from 0 to 2048
[ 1473.961650][ T6917] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1473.986177][ T6917] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[ 1473.994143][ T6917] UDF-fs: Scanning with blocksize 512 failed
[ 1474.033791][ T6917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1474.173486][   T13] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[ 1474.681596][ T6926] loop8: detected capacity change from 0 to 512
[ 1474.707537][ T6926] EXT4-fs: Ignoring removed nobh option
[ 1474.768327][ T6926] fscrypt (loop8, inode 2): Error -61 getting encryption context
[ 1474.806219][ T4188] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1474.835698][ T6926] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61
[ 1474.918804][ T6926] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #13: comm syz.8.13708: inode has both inline data and extents flags
[ 1474.998360][ T6926] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.13708: couldn't read orphan inode 13 (err -117)
[ 1475.087409][ T6926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1475.109122][ T6935] 9pnet: p9_errstr2errno: server reported unknown error 
[ 1475.202047][ T6926] EXT4-fs (loop8): shut down requested (1)
[ 1475.393997][T23612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1475.858184][ T6951] loop5: detected capacity change from 0 to 4096
[ 1475.932642][ T6922] loop0: detected capacity change from 0 to 40427
[ 1476.008449][ T6922] F2FS-fs (loop0): build fault injection rate: 174
[ 1476.015011][ T6922] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[ 1476.047691][ T6957] loop8: detected capacity change from 0 to 128
[ 1476.059864][ T6922] F2FS-fs (loop0): invalid crc value
[ 1476.455236][ T6922] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1476.509013][ T6922] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1476.647624][ T6972] bond0: entered promiscuous mode
[ 1476.670841][ T6973] gfs2: path_lookup on ./file0 returned error -2
[ 1476.678199][ T6972] bond_slave_0: entered promiscuous mode
[ 1476.700634][ T6972] bond_slave_1: entered promiscuous mode
[ 1476.730432][ T6972] batadv0: entered promiscuous mode
[ 1476.779268][ T6972] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1476.867410][ T6972] bond0: left promiscuous mode
[ 1476.872260][ T6972] bond_slave_0: left promiscuous mode
[ 1476.905154][ T5822] syz-executor: attempt to access beyond end of device
[ 1476.905154][ T5822] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1476.935558][ T6972] bond_slave_1: left promiscuous mode
[ 1476.941164][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1476.941221][ T5822] Tainted: [L]=SOFTLOCKUP
[ 1476.941236][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1476.941259][ T5822] Call Trace:
[ 1476.941272][ T5822]  <TASK>
[ 1476.941286][ T5822]  dump_stack_lvl+0x100/0x190
[ 1476.941341][ T5822]  f2fs_handle_critical_error+0x5d7/0x970
[ 1476.941405][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.941451][ T5822]  ? f2fs_build_fault_attr+0x53/0x1f0
[ 1476.941560][ T5822]  f2fs_write_end_io+0xc24/0xf00
[ 1476.941630][ T5822]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1476.941699][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.941757][ T5822]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1476.941818][ T5822]  bio_endio+0x755/0x8b0
[ 1476.941880][ T5822]  submit_bio_noacct+0x1b7/0x1e80
[ 1476.941939][ T5822]  __submit_merged_bio+0x331/0x6f0
[ 1476.942008][ T5822]  __submit_merged_write_cond+0x31a/0x3f0
[ 1476.942085][ T5822]  f2fs_write_cache_pages+0x21c8/0x2720
[ 1476.942163][ T5822]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1476.942206][ T5822]  ? __lock_acquire+0x4a5/0x2630
[ 1476.942278][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.942322][ T5822]  ? __lock_acquire+0x4a5/0x2630
[ 1476.942440][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.942546][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.942596][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.942651][ T5822]  f2fs_write_data_pages+0x5a7/0x1060
[ 1476.942708][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1476.942760][ T5822]  ? do_writepages+0x4b5/0x600
[ 1476.942810][ T5822]  ? do_writepages+0x4b5/0x600
[ 1476.942854][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.942905][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.942949][ T5822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1476.943000][ T5822]  do_writepages+0x278/0x600
[ 1476.943057][ T5822]  ? __pfx_do_writepages+0x10/0x10
[ 1476.943103][ T5822]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1476.943147][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.943191][ T5822]  ? _raw_spin_unlock+0x28/0x50
[ 1476.943239][ T5822]  filemap_writeback+0x22d/0x2e0
[ 1476.943295][ T5822]  ? __pfx_filemap_writeback+0x10/0x10
[ 1476.943413][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.943458][ T5822]  ? find_held_lock+0x2b/0x80
[ 1476.943511][ T5822]  ? f2fs_sync_dirty_inodes+0x3a7/0x940
[ 1476.943556][ T5822]  ? f2fs_sync_dirty_inodes+0x3a7/0x940
[ 1476.943599][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.943659][ T5822]  f2fs_sync_dirty_inodes+0x46a/0x940
[ 1476.943728][ T5822]  block_operations+0x2a6/0xfc0
[ 1476.943786][ T5822]  ? __pfx_block_operations+0x10/0x10
[ 1476.943831][ T5822]  ? irqentry_exit+0x180/0x670
[ 1476.943944][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.943992][ T5822]  ? ktime_get+0x200/0x300
[ 1476.944045][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.944089][ T5822]  ? lockdep_hardirqs_on+0x78/0x100
[ 1476.944136][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.944180][ T5822]  ? rcu_is_watching+0x12/0xc0
[ 1476.944235][ T5822]  f2fs_write_checkpoint+0x47d/0x5240
[ 1476.944292][ T5822]  ? kfree+0x1c7/0x690
[ 1476.944339][ T5822]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1476.944381][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.944432][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.944476][ T5822]  ? rcu_is_watching+0x12/0xc0
[ 1476.944528][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.944572][ T5822]  ? kthread_stop+0x280/0x5c0
[ 1476.944615][ T5822]  kill_f2fs_super+0x3d0/0x480
[ 1476.944663][ T5822]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1476.944732][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.944796][ T5822]  deactivate_locked_super+0xc1/0x1b0
[ 1476.944854][ T5822]  deactivate_super+0xe7/0x110
[ 1476.944912][ T5822]  cleanup_mnt+0x21f/0x450
[ 1476.944978][ T5822]  task_work_run+0x150/0x240
[ 1476.945022][ T5822]  ? __pfx_task_work_run+0x10/0x10
[ 1476.945065][ T5822]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1476.945110][ T5822]  ? __x64_sys_umount+0x124/0x1a0
[ 1476.945160][ T5822]  exit_to_user_mode_loop+0x100/0x4b0
[ 1476.945199][ T5822]  ? rcu_is_watching+0x12/0xc0
[ 1476.945250][ T5822]  do_syscall_64+0x4fe/0xf80
[ 1476.945305][ T5822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.945343][ T5822] RIP: 0033:0x7f8d3a79c117
[ 1476.945373][ T5822] Code: a2 c7 05 7c a4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1476.945410][ T5822] RSP: 002b:00007ffea5cdd068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1476.945446][ T5822] RAX: 0000000000000000 RBX: 00007f8d3a80471f RCX: 00007f8d3a79c117
[ 1476.945471][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea5cdd120
[ 1476.945495][ T5822] RBP: 00007ffea5cdd120 R08: 00007ffea5cde120 R09: 00000000ffffffff
[ 1476.945526][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea5cde1b0
[ 1476.945550][ T5822] R13: 00007f8d3a80471f R14: 0000000000168930 R15: 00007ffea5cde1f0
[ 1476.945608][ T5822]  </TASK>
[ 1476.951547][ T5822] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1477.461284][ T6972] batadv0: left promiscuous mode
[ 1478.273195][ T6977] loop5: detected capacity change from 0 to 32768
[ 1478.324392][ T6977] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[ 1478.361786][ T6977] JBD2: Ignoring recovery information on journal
[ 1478.511467][ T6977] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1479.020286][ T4188] ocfs2: Unmounting device (7,5) on (node local)
[ 1479.480370][ T6991] loop6: detected capacity change from 0 to 32768
[ 1479.577522][ T6991] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1479.810656][ T6991] XFS (loop6): Ending clean mount
[ 1480.075125][T20987] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1480.969440][ T7059] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1481.015271][ T7063] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1481.945000][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13765'.
[ 1482.734240][T22907] udevd[22907]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1483.052609][ T7112] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[ 1483.126801][ T7096] loop6: detected capacity change from 0 to 32768
[ 1483.168051][ T7096] (syz.6.13770,7096,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1483.195750][ T7118] sch_tbf: burst 22 is lower than device lo mtu (65550) !
[ 1483.221190][ T7096] (syz.6.13770,7096,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1483.350071][ T7096] JBD2: Ignoring recovery information on journal
[ 1483.425669][ T5994] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1483.458471][ T7096] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1483.590177][ T5994] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1483.633068][ T5994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1483.687685][ T5994] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1483.703059][ T5994] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1483.738893][ T5994] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1483.759122][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.780592][ T5994] usb 9-1: config 0 descriptor??
[ 1483.895771][T20987] ocfs2: Unmounting device (7,6) on (node local)
[ 1484.325023][ T5994] plantronics 0003:047F:FFFF.00E5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1484.674646][ T5994] usb 9-1: USB disconnect, device number 42
[ 1484.965227][ T7134] fido_id[7134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1486.253720][ T7163] 9p: Invalid gid '0x00000000ffffffff'
[ 1487.677222][   T10] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1487.767351][T27237] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1487.859587][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1487.870980][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1487.888710][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1487.902642][   T10] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1487.916895][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.924965][   T10] usb 9-1: Product: syz
[ 1487.929818][   T10] usb 9-1: Manufacturer: syz
[ 1487.934444][   T10] usb 9-1: SerialNumber: syz
[ 1487.944426][   T10] usb 9-1: config 0 descriptor??
[ 1487.946078][T27237] usb 1-1: Using ep0 maxpacket: 8
[ 1487.952029][ T7204] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1487.964193][ T7204] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1487.974087][T27237] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1487.987374][   T10] usb 9-1: ucan: probing device on interface #0
[ 1487.988901][T27237] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[ 1488.003021][T27237] usb 1-1: config 0 has no interface number 0
[ 1488.011098][T27237] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1488.025150][T27237] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1488.039024][T27237] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[ 1488.051390][T27237] usb 1-1: Product: syz
[ 1488.063212][T27237] usb 1-1: config 0 descriptor??
[ 1488.464262][   T31] audit: type=1326 audit(1770289101.456:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.490409][   T31] audit: type=1326 audit(1770289101.456:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.523244][   T31] audit: type=1326 audit(1770289101.456:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.548271][   T31] audit: type=1326 audit(1770289101.456:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.572696][   T31] audit: type=1326 audit(1770289101.456:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.613527][   T10] ucan 9-1:0.0 can0: registered device
[ 1488.619618][   T31] audit: type=1326 audit(1770289101.456:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.649534][   T31] audit: type=1326 audit(1770289101.456:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.699547][T27237] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input99
[ 1488.723530][   T31] audit: type=1326 audit(1770289101.456:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.810032][   T10] ucan 9-1:0.0 can0: firmware string: ��Y�.
[ 1488.817898][   T31] audit: type=1326 audit(1770289101.456:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1488.903630][ T9459] usb 1-1: USB disconnect, device number 76
[ 1488.903679][    C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[ 1488.965406][   T31] audit: type=1326 audit(1770289101.456:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.4.13824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f957bf9aeb9 code=0x7ffc0000
[ 1489.028984][   T10] usb 9-1: USB disconnect, device number 43
[ 1489.793731][ T7256] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1490.836935][ T7289] loop8: detected capacity change from 0 to 8
[ 1490.870791][ T7289] Dev loop8: unable to read RDB block 8
[ 1490.896424][ T7289]  loop8: unable to read partition table
[ 1490.918348][ T7289] loop8: partition table beyond EOD, truncated
[ 1490.943988][ T7289] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1491.435446][   T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1491.620913][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1491.661696][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1491.709283][   T10] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1491.727142][ T7314] loop6: detected capacity change from 0 to 256
[ 1491.748611][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1491.784996][   T10] usb 6-1: Product: syz
[ 1491.815030][   T10] usb 6-1: Manufacturer: syz
[ 1491.818669][ T7314] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[ 1491.833127][   T10] usb 6-1: SerialNumber: syz
[ 1491.843336][   T10] usb 6-1: config 0 descriptor??
[ 1491.864687][ T7298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1491.892356][ T7298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1492.182951][ T7298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1492.237867][ T7325] input: syz1 as /devices/virtual/input/input100
[ 1492.238087][ T7298] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1492.568360][ T7332] loop6: detected capacity change from 0 to 512
[ 1492.616324][ T7332] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1492.748865][ T7332] EXT4-fs (loop6): 1 orphan inode deleted
[ 1492.814047][ T7332] EXT4-fs (loop6): 1 truncate cleaned up
[ 1492.877270][ T7332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1493.173021][T20987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1493.181297][ T7345] loop8: detected capacity change from 0 to 4096
[ 1493.185628][   T10] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[ 1493.218043][   T10] usb 6-1: USB disconnect, device number 66
[ 1493.319589][ T1160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1493.977980][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1494.177901][ T7358] loop8: detected capacity change from 0 to 512
[ 1494.240823][ T7358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1494.253940][ T7358] ext4 filesystem being mounted at /1002/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1494.450833][   T31] kauditd_printk_skb: 3 callbacks suppressed
[ 1494.450862][   T31] audit: type=1326 audit(1770289107.446:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.13867" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe169b9aeb9 code=0x0
[ 1494.515499][T23612] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1494.866138][ T7369] netlink: 'syz.8.13868': attribute type 10 has an invalid length.
[ 1494.941557][ T7347] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13862'.
[ 1495.037719][ T7369] veth0_vlan: entered allmulticast mode
[ 1495.097910][ T7369] veth0_vlan: left promiscuous mode
[ 1495.113487][ T7369] veth0_vlan: entered promiscuous mode
[ 1495.133817][ T7369] team0: Device veth0_vlan failed to register rx_handler
[ 1495.932522][   T31] audit: type=1800 audit(1770289108.916:627): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13870" name="file1" dev="tmpfs" ino=12528 res=0 errno=0
[ 1496.658011][ T7399] overlayfs: failed to clone upperpath
[ 1497.085108][ T7407] can0: slcan on ptm0.
[ 1497.257035][ T7406] can0 (unregistered): slcan off ptm0.
[ 1497.876509][ T7428] loop5: detected capacity change from 0 to 1764
[ 1498.230385][ T7433] loop6: detected capacity change from 0 to 4096
[ 1498.278240][ T7433] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[ 1498.723766][ T7441] veth0_vlan: left allmulticast mode
[ 1499.271618][ T7468] nbd: nbd0 already in use
[ 1499.288250][ T7464] can0: slcan on ptm0.
[ 1499.501437][ T7462] can0 (unregistered): slcan off ptm0.
[ 1500.038476][ T7488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13911'.
[ 1500.707451][ T7489] loop6: detected capacity change from 0 to 65536
[ 1500.766822][   T31] audit: type=1800 audit(1770289113.656:628): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13914" name="file1" dev="tmpfs" ino=12982 res=0 errno=0
[ 1500.877139][ T7489] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1500.956810][ T7447] loop5: detected capacity change from 0 to 32768
[ 1500.966824][ T7489] XFS (loop6): Ending clean mount
[ 1501.044253][T20987] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1501.132566][ T7447] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1501.240922][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13916'.
[ 1501.268906][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1501.288245][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13916'.
[ 1501.310446][ T7513] geneve2: entered promiscuous mode
[ 1501.317528][ T7513] geneve2: entered allmulticast mode
[ 1501.417659][ T7447] XFS (loop5): Ending clean mount
[ 1501.506829][ T7447] XFS (loop5): Quotacheck needed: Please wait.
[ 1501.776164][ T7447] XFS (loop5): Quotacheck: Done.
[ 1502.106947][ T4188] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1502.547342][T27237] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1502.716201][T27237] usb 4-1: Using ep0 maxpacket: 8
[ 1502.743950][T27237] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1502.774466][T27237] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1502.821632][T27237] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1502.879480][T27237] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1502.924740][T27237] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1502.988463][T27237] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1503.040857][T27237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1503.383144][T27237] usb 4-1: GET_CAPABILITIES returned 0
[ 1503.443932][T27237] usbtmc 4-1:16.0: can't read capabilities
[ 1503.737401][T27237] usb 4-1: USB disconnect, device number 106
[ 1504.244106][ T7565] loop5: detected capacity change from 0 to 131072
[ 1504.257974][ T7565] F2FS-fs (loop5): Test dummy encryption mode enabled
[ 1504.278541][ T7565] F2FS-fs (loop5): invalid crc value
[ 1504.392144][ T7565] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1504.405749][ T7565] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1504.955447][ T3976] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1505.176561][ T3976] usb 1-1: Using ep0 maxpacket: 8
[ 1505.202957][ T3976] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1505.218381][ T3976] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1505.245000][ T3976] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1505.278882][ T3976] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1505.296574][ T3976] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1505.357189][ T3976] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1505.398951][ T3976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.576762][ T7599] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22)
[ 1505.850416][ T3976] usb 1-1: usb_control_msg returned -32
[ 1505.862747][ T3976] usbtmc 1-1:16.0: can't read capabilities
[ 1506.179700][ T7601] usbtmc 1-1:16.0: control status returned 0
[ 1506.383062][ T9459] usb 1-1: USB disconnect, device number 77
[ 1507.696189][ T9459] psmouse serio7: Failed to reset mouse on : -5
[ 1509.294275][ T7670] loop6: detected capacity change from 0 to 512
[ 1509.395282][ T7670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1509.415624][ T7670] ext4 filesystem being mounted at /1113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1509.661204][   T31] audit: type=1804 audit(1770289122.646:629): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.13974" name="/newroot/1113/file1/file1" dev="loop6" ino=15 res=1 errno=0
[ 1509.852976][T20987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1511.073275][ T7701] input: syz1 as /devices/virtual/input/input102
[ 1511.515483][ T9459] misc userio: Buffer overflowed, userio client isn't keeping up
[ 1511.694746][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13979'.
[ 1512.588679][ T9459] input: PS/2 Generic Mouse as /devices/serio7/input/input101
[ 1512.876168][ T9459] psmouse serio7: Failed to enable mouse on 
[ 1514.282091][ T7756] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[ 1514.357500][ T7756] vlan2: left allmulticast mode
[ 1514.425491][ T7756] macsec0: left allmulticast mode
[ 1514.464514][ T7756] veth1_macvtap: left allmulticast mode
[ 1514.471579][ T7738] loop8: detected capacity change from 0 to 131072
[ 1514.485364][ T7738] F2FS-fs (loop8): Test dummy encryption mode enabled
[ 1514.499523][ T7738] F2FS-fs (loop8): invalid crc value
[ 1514.513859][ T7756] macsec1: left allmulticast mode
[ 1514.646366][ T7738] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1514.665439][ T7738] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1515.548985][ T7785] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1516.651873][   T10] hid-generic 0000:0000:0000.00E6: unknown main item tag 0x0
[ 1516.696475][   T10] hid-generic 0000:0000:0000.00E6: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1517.692811][ T7802] loop5: detected capacity change from 0 to 32768
[ 1517.771470][ T7802] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[ 1517.891760][ T7802] JBD2: Ignoring recovery information on journal
[ 1518.072958][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14031'.
[ 1518.126969][ T7802] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1518.170536][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14034'.
[ 1518.408594][    C1] ------------[ cut here ]------------
[ 1518.414112][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[ 1518.424031][    C1] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#1: syz.3.14036/7826
[ 1518.434911][    C1] Modules linked in:
[ 1518.438885][    C1] CPU: 1 UID: 0 PID: 7826 Comm: syz.3.14036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1518.449921][    C1] Tainted: [L]=SOFTLOCKUP
[ 1518.454262][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1518.464406][    C1] RIP: 0010:__rate_control_send_low+0x621/0x760
[ 1518.470761][    C1] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 27 0d 1a f7 48 8d 3d 50 48 db 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 2b 6a 83 f7 e9 03
[ 1518.490503][    C1] RSP: 0018:ffffc90000a08898 EFLAGS: 00010246
[ 1518.496639][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1518.504658][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c815b0
[ 1518.512702][    C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 1518.520750][    C1] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803037c168
[ 1518.528800][    C1] R13: ffff888055e93128 R14: 0000000000000000 R15: dffffc0000000000
[ 1518.536873][    C1] FS:  0000000000000000(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000
[ 1518.545896][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1518.552552][    C1] CR2: 00007ff4d5046d58 CR3: 000000005dc31000 CR4: 0000000000350ef0
[ 1518.560605][    C1] Call Trace:
[ 1518.563902][    C1]  <IRQ>
[ 1518.566839][    C1]  rate_control_send_low+0x2a8/0x7e0
[ 1518.572180][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.577903][    C1]  rate_control_get_rate+0x1be/0x5c0
[ 1518.583282][    C1]  ieee80211_beacon_get_finish+0x45a/0x690
[ 1518.589188][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[ 1518.595611][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.601317][    C1]  ? mark_held_locks+0x40/0x70
[ 1518.606184][    C1]  __ieee80211_beacon_get_ap+0x76e/0x10d0
[ 1518.611974][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.617802][    C1]  __ieee80211_beacon_get+0x14fa/0x1ee0
[ 1518.623417][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.629154][    C1]  ieee80211_beacon_get_tim+0xa6/0x280
[ 1518.634700][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[ 1518.640873][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.646583][    C1]  mac80211_hwsim_beacon_tx+0x4d6/0xa00
[ 1518.652207][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.657935][    C1]  __iterate_interfaces+0x2e6/0x650
[ 1518.663184][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1518.669346][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1518.675480][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 1518.682597][    C1]  mac80211_hwsim_beacon+0x105/0x1b0
[ 1518.687959][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1518.693799][    C1]  __hrtimer_run_queues+0x516/0x990
[ 1518.699106][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1518.704862][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.710559][    C1]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[ 1518.716724][    C1]  hrtimer_run_softirq+0x17d/0x350
[ 1518.721882][    C1]  handle_softirqs+0x1ea/0x910
[ 1518.726726][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1518.732070][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.737812][    C1]  __irq_exit_rcu+0xef/0x150
[ 1518.742443][    C1]  irq_exit_rcu+0x9/0x30
[ 1518.746765][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1518.752479][    C1]  </IRQ>
[ 1518.755465][    C1]  <TASK>
[ 1518.758413][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1518.764448][    C1] RIP: 0010:page_table_check_clear+0x1c0/0x9e0
[ 1518.770726][    C1] Code: 0f 84 9e 07 00 00 e8 cf 0f 8a ff 31 ff 44 89 f6 e8 75 0a 8a ff 45 85 f6 0f 84 3a 03 00 00 e8 b7 0f 8a ff 49 c7 c4 60 45 ee 8d <48> c1 e3 06 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80
[ 1518.790425][    C1] RSP: 0018:ffffc900047ef508 EFLAGS: 00000293
[ 1518.796580][    C1] RAX: 0000000000000000 RBX: 000000000006998e RCX: ffffffff827ccabb
[ 1518.804620][    C1] RDX: ffff888025989e80 RSI: ffffffff827ccac9 RDI: ffff888025989e80
[ 1518.812641][    C1] RBP: 0000000080000001 R08: 0000000000000005 R09: 0000000000000000
[ 1518.820688][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8dee4560
[ 1518.828817][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 800000006998e007
[ 1518.836908][    C1]  ? page_table_check_clear+0x1ab/0x9e0
[ 1518.842514][    C1]  ? page_table_check_clear+0x1b9/0x9e0
[ 1518.848334][    C1]  ? page_table_check_clear+0x1b9/0x9e0
[ 1518.853980][    C1]  __page_table_check_pte_clear+0xf1/0x100
[ 1518.859888][    C1]  ? __pfx___page_table_check_pte_clear+0x10/0x10
[ 1518.866437][    C1]  ? folio_remove_rmap_ptes+0x3de/0xff0
[ 1518.872123][    C1]  ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550
[ 1518.878998][    C1]  unmap_page_range+0x28ac/0x43e0
[ 1518.884225][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.889956][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1518.895503][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.901216][    C1]  ? mas_next_slot+0x1003/0x18b0
[ 1518.906252][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.911930][    C1]  ? uprobe_munmap+0x9e/0x600
[ 1518.916704][    C1]  unmap_single_vma+0x153/0x240
[ 1518.921603][    C1]  unmap_vmas+0x218/0x470
[ 1518.926024][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1518.930918][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.936668][    C1]  ? mas_next_slot+0x1003/0x18b0
[ 1518.941689][    C1]  exit_mmap+0x181/0xae0
[ 1518.946013][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.951720][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1518.956579][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.962357][    C1]  ? __lock_acquire+0x4a5/0x2630
[ 1518.967456][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1518.973146][    C1]  ? arch_uprobe_clear_state+0x107/0x150
[ 1518.978879][    C1]  __mmput+0x12a/0x410
[ 1518.983037][    C1]  mmput+0x67/0x80
[ 1518.986942][    C1]  do_exit+0x78a/0x2a30
[ 1518.991138][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1518.995798][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.001566][    C1]  ? do_raw_spin_lock+0x128/0x260
[ 1519.006688][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.012362][    C1]  ? find_held_lock+0x2b/0x80
[ 1519.017153][    C1]  ? get_signal+0x7e0/0x21e0
[ 1519.021803][    C1]  do_group_exit+0xd5/0x2a0
[ 1519.026393][    C1]  get_signal+0x1ec7/0x21e0
[ 1519.031051][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1519.036014][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.041686][    C1]  ? do_futex+0x192/0x350
[ 1519.046172][    C1]  arch_do_signal_or_restart+0x91/0x7a0
[ 1519.051805][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.057526][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1519.063755][    C1]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1519.069155][    C1]  ? xfd_validate_state+0x129/0x190
[ 1519.074403][    C1]  exit_to_user_mode_loop+0x86/0x4b0
[ 1519.079793][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1519.085200][    C1]  do_syscall_64+0x4fe/0xf80
[ 1519.089903][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1519.095867][    C1] RIP: 0033:0x7fe169b9aeb9
[ 1519.100340][    C1] Code: Unable to access opcode bytes at 0x7fe169b9ae8f.
[ 1519.107418][    C1] RSP: 002b:00007fe16a9bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1519.115913][    C1] RAX: 0000000000000001 RBX: 00007fe169e15fa8 RCX: 00007fe169b9aeb9
[ 1519.123904][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe169e15fac
[ 1519.131942][    C1] RBP: 00007fe169e15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1519.139990][    C1] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000000
[ 1519.148034][    C1] R13: 00007fe169e16038 R14: 00007fff528b5a80 R15: 00007fff528b5b68
[ 1519.156286][    C1]  </TASK>
[ 1519.159324][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1519.166633][    C1] CPU: 1 UID: 0 PID: 7826 Comm: syz.3.14036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1519.177590][    C1] Tainted: [L]=SOFTLOCKUP
[ 1519.181929][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1519.192020][    C1] Call Trace:
[ 1519.195308][    C1]  <IRQ>
[ 1519.198161][    C1]  dump_stack_lvl+0x100/0x190
[ 1519.202865][    C1]  vpanic+0x20d/0x630
[ 1519.206953][    C1]  panic+0xd1/0xd1
[ 1519.210690][    C1]  ? __pfx_panic+0x10/0x10
[ 1519.215135][    C1]  ? check_panic_on_warn+0x1f/0x90
[ 1519.220271][    C1]  check_panic_on_warn.cold+0x19/0x34
[ 1519.225850][    C1]  ? __rate_control_send_low+0x610/0x760
[ 1519.231520][    C1]  __warn.cold+0x191/0x2f8
[ 1519.235976][    C1]  __report_bug+0x296/0x3d0
[ 1519.240501][    C1]  ? __rate_control_send_low+0x610/0x760
[ 1519.246178][    C1]  ? __pfx___report_bug+0x10/0x10
[ 1519.251221][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.256876][    C1]  ? kasan_save_stack+0x3f/0x50
[ 1519.261861][    C1]  ? ieee80211_beacon_get_tim+0xa6/0x280
[ 1519.267529][    C1]  ? mac80211_hwsim_beacon_tx+0x4d6/0xa00
[ 1519.273284][    C1]  ? __iterate_interfaces+0x2e6/0x650
[ 1519.278689][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 1519.285928][    C1]  ? mac80211_hwsim_beacon+0x105/0x1b0
[ 1519.291419][    C1]  ? __hrtimer_run_queues+0x516/0x990
[ 1519.296810][    C1]  ? hrtimer_run_softirq+0x17d/0x350
[ 1519.302116][    C1]  ? handle_softirqs+0x1ea/0x910
[ 1519.307087][    C1]  report_bug_entry+0xe1/0x290
[ 1519.311874][    C1]  ? __rate_control_send_low+0x621/0x760
[ 1519.317543][    C1]  handle_bug+0x1c9/0x2a0
[ 1519.321907][    C1]  exc_invalid_op+0x17/0x50
[ 1519.326446][    C1]  asm_exc_invalid_op+0x1a/0x20
[ 1519.331309][    C1] RIP: 0010:__rate_control_send_low+0x621/0x760
[ 1519.337674][    C1] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 27 0d 1a f7 48 8d 3d 50 48 db 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 2b 6a 83 f7 e9 03
[ 1519.357298][    C1] RSP: 0018:ffffc90000a08898 EFLAGS: 00010246
[ 1519.363387][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1519.371371][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90c815b0
[ 1519.379353][    C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 1519.387424][    C1] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803037c168
[ 1519.395415][    C1] R13: ffff888055e93128 R14: 0000000000000000 R15: dffffc0000000000
[ 1519.403433][    C1]  ? __rate_control_send_low+0x609/0x760
[ 1519.409127][    C1]  rate_control_send_low+0x2a8/0x7e0
[ 1519.414453][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.420122][    C1]  rate_control_get_rate+0x1be/0x5c0
[ 1519.425471][    C1]  ieee80211_beacon_get_finish+0x45a/0x690
[ 1519.431335][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[ 1519.437890][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.443557][    C1]  ? mark_held_locks+0x40/0x70
[ 1519.448368][    C1]  __ieee80211_beacon_get_ap+0x76e/0x10d0
[ 1519.454143][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.459808][    C1]  __ieee80211_beacon_get+0x14fa/0x1ee0
[ 1519.465410][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.471079][    C1]  ieee80211_beacon_get_tim+0xa6/0x280
[ 1519.476584][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[ 1519.482699][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.488369][    C1]  mac80211_hwsim_beacon_tx+0x4d6/0xa00
[ 1519.493964][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.499628][    C1]  __iterate_interfaces+0x2e6/0x650
[ 1519.504862][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1519.510974][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 1519.517082][    C1]  ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0
[ 1519.524154][    C1]  mac80211_hwsim_beacon+0x105/0x1b0
[ 1519.529464][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1519.535301][    C1]  __hrtimer_run_queues+0x516/0x990
[ 1519.540556][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1519.546309][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.551971][    C1]  ? ktime_get_update_offsets_now+0x2cd/0x4d0
[ 1519.558072][    C1]  hrtimer_run_softirq+0x17d/0x350
[ 1519.563222][    C1]  handle_softirqs+0x1ea/0x910
[ 1519.568031][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1519.573351][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.579013][    C1]  __irq_exit_rcu+0xef/0x150
[ 1519.583636][    C1]  irq_exit_rcu+0x9/0x30
[ 1519.587903][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1519.593571][    C1]  </IRQ>
[ 1519.596504][    C1]  <TASK>
[ 1519.599441][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1519.605456][    C1] RIP: 0010:page_table_check_clear+0x1c0/0x9e0
[ 1519.611668][    C1] Code: 0f 84 9e 07 00 00 e8 cf 0f 8a ff 31 ff 44 89 f6 e8 75 0a 8a ff 45 85 f6 0f 84 3a 03 00 00 e8 b7 0f 8a ff 49 c7 c4 60 45 ee 8d <48> c1 e3 06 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80
[ 1519.631302][    C1] RSP: 0018:ffffc900047ef508 EFLAGS: 00000293
[ 1519.637400][    C1] RAX: 0000000000000000 RBX: 000000000006998e RCX: ffffffff827ccabb
[ 1519.645395][    C1] RDX: ffff888025989e80 RSI: ffffffff827ccac9 RDI: ffff888025989e80
[ 1519.653388][    C1] RBP: 0000000080000001 R08: 0000000000000005 R09: 0000000000000000
[ 1519.661375][    C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8dee4560
[ 1519.669360][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 800000006998e007
[ 1519.677360][    C1]  ? page_table_check_clear+0x1ab/0x9e0
[ 1519.682948][    C1]  ? page_table_check_clear+0x1b9/0x9e0
[ 1519.688550][    C1]  ? page_table_check_clear+0x1b9/0x9e0
[ 1519.694138][    C1]  __page_table_check_pte_clear+0xf1/0x100
[ 1519.699987][    C1]  ? __pfx___page_table_check_pte_clear+0x10/0x10
[ 1519.706445][    C1]  ? folio_remove_rmap_ptes+0x3de/0xff0
[ 1519.712021][    C1]  ? __tlb_remove_folio_pages_size.isra.0+0x153/0x550
[ 1519.718825][    C1]  unmap_page_range+0x28ac/0x43e0
[ 1519.723912][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.729576][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[ 1519.734973][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.740629][    C1]  ? mas_next_slot+0x1003/0x18b0
[ 1519.745614][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.751283][    C1]  ? uprobe_munmap+0x9e/0x600
[ 1519.755994][    C1]  unmap_single_vma+0x153/0x240
[ 1519.760885][    C1]  unmap_vmas+0x218/0x470
[ 1519.765245][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[ 1519.770128][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.775785][    C1]  ? mas_next_slot+0x1003/0x18b0
[ 1519.780785][    C1]  exit_mmap+0x181/0xae0
[ 1519.785056][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.790715][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1519.795589][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.801264][    C1]  ? __lock_acquire+0x4a5/0x2630
[ 1519.806263][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.812094][    C1]  ? arch_uprobe_clear_state+0x107/0x150
[ 1519.817768][    C1]  __mmput+0x12a/0x410
[ 1519.821873][    C1]  mmput+0x67/0x80
[ 1519.825629][    C1]  do_exit+0x78a/0x2a30
[ 1519.829805][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1519.834432][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.840086][    C1]  ? do_raw_spin_lock+0x128/0x260
[ 1519.845132][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.850797][    C1]  ? find_held_lock+0x2b/0x80
[ 1519.855521][    C1]  ? get_signal+0x7e0/0x21e0
[ 1519.860159][    C1]  do_group_exit+0xd5/0x2a0
[ 1519.864686][    C1]  get_signal+0x1ec7/0x21e0
[ 1519.869245][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1519.874130][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.879794][    C1]  ? do_futex+0x192/0x350
[ 1519.884153][    C1]  arch_do_signal_or_restart+0x91/0x7a0
[ 1519.889819][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1519.895479][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1519.901687][    C1]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1519.906991][    C1]  ? xfd_validate_state+0x129/0x190
[ 1519.912219][    C1]  exit_to_user_mode_loop+0x86/0x4b0
[ 1519.917519][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1519.922317][    C1]  do_syscall_64+0x4fe/0xf80
[ 1519.926942][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1519.932942][    C1] RIP: 0033:0x7fe169b9aeb9
[ 1519.937456][    C1] Code: Unable to access opcode bytes at 0x7fe169b9ae8f.
[ 1519.944481][    C1] RSP: 002b:00007fe16a9bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1519.952938][    C1] RAX: 0000000000000001 RBX: 00007fe169e15fa8 RCX: 00007fe169b9aeb9
[ 1519.960930][    C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe169e15fac
[ 1519.968924][    C1] RBP: 00007fe169e15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1519.976911][    C1] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000000000
[ 1519.984899][    C1] R13: 00007fe169e16038 R14: 00007fff528b5a80 R15: 00007fff528b5b68
[ 1519.992916][    C1]  </TASK>
[ 1519.996237][    C1] Kernel Offset: disabled
[ 1520.000563][    C1] Rebooting in 86400 seconds..