last executing test programs:

1m45.657521252s ago: executing program 0 (id=177):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000000000200ffff540004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd140001800c0001006e6f747261636b00040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0)

1m45.593325299s ago: executing program 0 (id=178):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m43.741837728s ago: executing program 2 (id=186):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(r0, 0x2, 0x45, &(0x7f0000000340)="05428b674b6003000000ff60380c368308a980610a3f2ade0e94832bb126eafd588a5f4b2a44515caa5b00a05beb213367615f220121ed19cc60bfc7aa48da46a50ef19775")

1m43.683035905s ago: executing program 0 (id=188):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6)
syz_open_dev$loop(0x0, 0x4, 0x901)
timer_create(0x5, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0)
setns(0xc9, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x44014)
recvmmsg(r4, &(0x7f0000003900), 0x0, 0x102, 0x0)
unshare(0x20000600)
r5 = userfaultfd(0x80001)
setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48)
signalfd4(r6, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000))
epoll_create(0x8)
unshare(0x20000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m42.699764035s ago: executing program 0 (id=190):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f00000005c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000ac0)='./bus\x00', &(0x7f0000000b00), 0x8, &(0x7f0000000b40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m41.848311453s ago: executing program 0 (id=195):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0xa46, &(0x7f00000014c0)="$eJzs3U2MW0cdAPCx9yNNkxKnJHRJS5tQaMtHd5vNEj4iaKrmQtRUHJAqVVyiNC0RaUCkErSq1CQnbrSqwpUPcSqHChASvaCoJy6VaCQuPRUOHIiCVIkDFJJF653x2v/YPHuzWa/Xv580O543Y8887/Pz83tvZhIwturNvwsLM7WULr71+pG/P/C3rUtLHm2VaDT/TralplJKtZyeDK/3/sRyfO2Dl090i2tpvvm3pNOTV1vP3ZZSOpf2pkupkfZcvPzaO/NPHDt/9MK+d984dOXWrD0AAIyXb1w6tLD7L3+6e+eHb957OG1pLS/H542c3p6P+w/nA/9y/F9PnelaW2g3HcpN5lAP5Sa6lGuvZyqUm+xR/3R43ake5bZU1D/RtqzbesMoK9txI9Xqsx3pen12dvk3eWr+rp+uzZ45dfrZs0NqKLDm/nlfSmmvIKx9eGUDtEH4/2Fxx7D3QADL4vXCG5yLZxZuTuvVJvur/+pj9e7PhzWw3tu/+ker/l+et8dh7WzWramsV/kcbc/peB0h3r806Oe/vF68HjHVZzt7XUcYlesLvdo5sc7tWK1e7Y/bxWb11RyX9+FrIb/98xP/p6PyPwa6+5fz/4IwtmFx2DsgYMOK980tZiU/3tcX87dU5N9Wkb+1M/+VmH97xfO3VeTDOPvtCz9Or9ZWfufH3/SDng8r59nuyPFHBmxPPB85aP3xvt9B3Wz98X5i2Mh+f/ypk1965unLy/f/11rb//W8ve/N6Ub+bF3KBcr5wnhevXXvf6OznnqPcneG9tzRpXzz8a7OcrVdK6+T2vYzS2VP3d6WN9P5vB292ntPZ7lGKLc1h9tCe8PxSet4pDyvHH+U/Wp5vybD+k6F9ZgO7Sj7lZ05ju2A1SjbY6/7/8v2OZOmas+eOn3ykZwu2+kfJ6a2LC3fv87tBm5ev/1/ZlJn/5/treVT9fb9wo6V5bX2/UIjLJ/vsfxATpfvuW9PbG0unz3x3dPPrPXKw5g7++JL3zl++vTJ73vggQcetB4Me88E3GpzLzz/vbmzL7708Knnjz938rmTZw4cPHhgfv7glw8szDWP6+faj+6BzWTlS3/YLQEAAAAAAAAAAAD69YOjRy7/+e0vvrfc/3+l/1/p/1/u/C39/38U+v/HfvKlH3zpB7izS36zTBhgdTqUm8rho6G9u0I9u8PzPpbj1jx+uf9/qS6O61rac1dYHsfvLeXCcAI3jJcyHcYg6Zwv8Hz6ZE5fyPEvEgxRbWv3xTmuGt+6bOtlfArjUoym8n8rW0MZx6T0/+41rlPZ/+9chzay9tajO+Gw1xHo7h/rN/73r1qVboBxjwVBSGlx0SwewMYw7Pk/y3nPEp/5w9dvWwql2NXHOveXcfxSuBkbff7JzVv/N4dcf+qs/3Bal/k/W/Pf9b3/CzPmNVZX779/euW9tmrTnn7rj+tfxoHeNVj9H+b6y9o8mPqrf/Hnof54QahP/wn1395n/Tesfxm3esDN4r+5/vK2PXR/v/Uvt7hW76wwnjcu1//ieePiWlj/MrbnwOu/yokar+f6YZyNyjyzgxqV+X97ifdhfCGny46w3OcQ5zsZtP3l/oryPbA7vH6t4vttVfP/bqBTTuM+/+9Xclz1eSjz/5btsdElXc/pS/n14nu7Wfc1MKreN/+vIDRDa+62DdCW9QqLi4u39oRWhaFWztDf/2H/FBh2/cN+/6vE+X/jMXyc/zfmx/l/Y36c/zfmx/n1Yn6c/ze+n3H+35h/V3jdOD/wTEX+xyvy91Tk312Rf09F/icq8vdV5N9bkX9fRf6dFfn3V+R/qiL/0xX5D7Tn11YKlPyHKp7/mYr8za70RxnX9YdxFvvn+fzD+CjXf3p9/ndV5AOj6ydv7n/86d98q7Hc/3+6dT6kXNc7nNNT+efVD3M6XvdObemlvLdz+q8hf6Of74BxEsfPiN/vD1bkA6Or3Ofl8w1jqNZ9xJ54va3XuFW9jvMZLZ/N8edy/PkcP5zj2RzP5Xh/jufXqX3cGo//+neHXq2t/N7fEfL7vZ889geK40Qd6LM98fzAoPezx3H8BnWz9a+yOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQ1Jt/FxZmaildfOv1I08dOzW3tOTRVolG8+9kW2qq9byUHsnxRI5/lh9c++DlE+3x9RzX0nyqpVpreXryaqumbSmlc2lvupQaac/Fy6+9M//EsfNHL+x7941DV27dOwAAAACb3/8CAAD//6RUDq0=")
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0186e86, &(0x7f0000000800)={@id={0x2, 0x0, @auto="304e0b9bb2081f000400"}})

1m41.539479244s ago: executing program 2 (id=197):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6)
syz_open_dev$loop(0x0, 0x4, 0x901)
timer_create(0x5, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
setrlimit(0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48)
signalfd4(r5, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)

1m40.460194224s ago: executing program 2 (id=201):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl(r1, 0x4048aec9, &(0x7f0000000300)="0300000000000000010000000200000001")

1m39.244745159s ago: executing program 2 (id=204):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f00000005c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000ac0)='./bus\x00', &(0x7f0000000b00), 0x8, &(0x7f0000000b40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m38.789247506s ago: executing program 0 (id=207):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x50)
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, 0x0, &(0x7f00000006c0)=""/173}, 0x20)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
recvmmsg(r0, &(0x7f0000005200), 0x0, 0x40012100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="050000672d28f2799a02568a0000851000000200000095003300000000009500a50500010000000000000056e3270f4173b97ba6b1f24f013a8251e71501d6f05019d959a3ce55a6c7860acc83aff1f26237995d382084adfeb230651232a4b0d84d30601ec06ffa61e0ec479869399d25afda02e56be614bb2fec67c0a61118f6059b75f1fde0870219facffd2a169b6cbc8300"/162], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x1, 0x0)
fsetxattr$security_capability(r6, &(0x7f0000000280), 0x0, 0x0, 0x0)
r7 = dup2(r6, r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r8=>0x0})
r9 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0x0, 0x10})
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x0, 0x0, 0x590043, r8})

1m38.75214417s ago: executing program 2 (id=209):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6)
syz_open_dev$loop(0x0, 0x4, 0x901)
timer_create(0x5, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
setrlimit(0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48)
signalfd4(r5, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)

1m36.447690516s ago: executing program 32 (id=207):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x50)
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, 0x0, &(0x7f00000006c0)=""/173}, 0x20)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
recvmmsg(r0, &(0x7f0000005200), 0x0, 0x40012100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="050000672d28f2799a02568a0000851000000200000095003300000000009500a50500010000000000000056e3270f4173b97ba6b1f24f013a8251e71501d6f05019d959a3ce55a6c7860acc83aff1f26237995d382084adfeb230651232a4b0d84d30601ec06ffa61e0ec479869399d25afda02e56be614bb2fec67c0a61118f6059b75f1fde0870219facffd2a169b6cbc8300"/162], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x1, 0x0)
fsetxattr$security_capability(r6, &(0x7f0000000280), 0x0, 0x0, 0x0)
r7 = dup2(r6, r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r8=>0x0})
r9 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0x0, 0x10})
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x0, 0x0, 0x590043, r8})

1m35.352524328s ago: executing program 2 (id=215):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x46be, 0xd, 0x1, 0x9, @dev={0xac, 0x14, 0x14, 0x9a}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "001863514a999043"}}}}}, 0x0)

1m34.572495298s ago: executing program 33 (id=215):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x46be, 0xd, 0x1, 0x9, @dev={0xac, 0x14, 0x14, 0x9a}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "001863514a999043"}}}}}, 0x0)

48.835729035s ago: executing program 1 (id=352):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x88, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x32, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfff8, 0x64, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0x14, 0xf}}}}}]}}]}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

46.323743893s ago: executing program 1 (id=356):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3)

43.749533746s ago: executing program 1 (id=366):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x5, 0x8, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x200000d4)

43.408797071s ago: executing program 1 (id=369):
syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x801, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES64], 0x1, 0x1e0, &(0x7f0000000cc0)="$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")
mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x141104, 0x80)
getdents64(r0, 0x0, 0x0)

42.761559138s ago: executing program 1 (id=373):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0xff, 0x2c3, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10b042, 0x12)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

41.829535073s ago: executing program 1 (id=378):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000200)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
rmdir(&(0x7f0000000100)='./control\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)

40.700985789s ago: executing program 34 (id=378):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000200)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
rmdir(&(0x7f0000000100)='./control\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0)

7.654263586s ago: executing program 6 (id=464):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0xa04080, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC, @ANYBLOB="92dd9095f38745d15c06a1b24b60a90f61e0e292035c59fd7d58731a95793c4ed38b8146998fbf85ec961d3148e08bd54cd4bd105c1843fd863080704fbab4b36b6518e5e4683044a9dd7bfe1308339adf4f246d81081f664c", @ANYBLOB="e4313c6ffe3711cd8932be9273592b06e18ed777827dc810aa84a171e3c650e4786e1dcd3bb77fc11e2bd92a41cbd4f6c639a2414e8bd4c895cfeac249aeff7739fb349623e238e3e64971d097928c33aeb6b75e23e38c73beacf85c11a96193e08c938b17300d8f263c99cff7aef1407398387c2e5dc510887031062fd42b"], 0x2, 0x5524, &(0x7f0000000580)="$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")
lseek(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000006100)='./file1\x00', 0x42, 0x0)
ioctl$UFFDIO_POISON(r0, 0xf519, 0x0)

7.51683366s ago: executing program 5 (id=465):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8=0x0, @ANYRES64], 0x1, 0x2bc, &(0x7f0000000440)="$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")
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

7.079877634s ago: executing program 5 (id=467):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xa, 0x46}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x0, 0xc, 0x47, {0x47, 0x1, "8427faf42d03c614cc25318216d169da956a905b53e93705eeb10e78c695d9bd7236e7d1d6d8b54854071c3522c3bb29b9ce343b5de1b5f1a166a3e29284332bf90de5c528"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000540)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

5.794521626s ago: executing program 6 (id=470):
r0 = syz_usb_connect$uac3(0x2, 0x89, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x5, 0x30, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x0, 0x30, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xa, 0x5, 0x2, {0xa, 0x25, 0x25, 0x1, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x1000, 0xfd}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xff, 0x8, 0x2, {0xa, 0x25, 0x25, 0x1ff, 0x15, 0x6}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, 0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000002840)={0x14, 0x0, 0x0}, 0x0)

5.723241773s ago: executing program 4 (id=471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x53d}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008084}, 0x0)

5.412934315s ago: executing program 4 (id=473):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==")
syz_mount_image$vfat(&(0x7f0000004540), &(0x7f0000004580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000004680))
mkdir(&(0x7f00000046c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x104)
rmdir(&(0x7f0000004800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5.127048685s ago: executing program 3 (id=474):
syz_mount_image$iso9660(&(0x7f00000006c0), &(0x7f0000000700)='./file2\x00', 0x800040, &(0x7f0000000740)=ANY=[], 0x1, 0x5db, &(0x7f0000000980)="$eJzs3V1v29Ydx/EfHXt2VSwLtiEIsjQ9c7rBATyHkhsHQq846kjmIokCSRf2VRc0dhFEaYEUAxrftL5Y9oy9ht0Oew3DXsXewK6LXQ8Y5oFPsWJTdmLLVtB+P0bCI/LwnP+hGJ5QFs8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ47dct+6oG/Q3Ns14fisKe8dsL8u7/dLimHolJ/2jhQVdy1dd++HB5qvpX4u6kb+6oYV0saDdt69e+eAHszPl/scEdCE+f7b7+MFwuP309XabKVp5XmFdmI69r7+FQc/rWBPEoWmurbl31tuxaQddG2/Fie0ZP7JeEkZmyb9t6s3mqrErW+FGv9PyurZcee9nDdddM7+u5celf+cXK7G/HnS7Qb+T5Uk3p3nupSfi/SAxifV6xuw8Gm6vjgturzi+aab6ka2HTp40U+Ok5jbcRqNebzTqa3ebd++57uyRFe4hGs3x3X+57uz0T1pM16Qu3cCZzRT9v7oK1NeGNmUqf3y1FClUb8z2Qtn//+SOPbbe0f6/7OWvHWy+rqz/v6lf/nRBujmu/x8Ty2v/zKfFF+n/7e/vv8I+l3+UR/pMu3qsBxpqqG09nVREE/wpnUfZHVn1FShWqEA9edkaU6wxampNa3L1kdbVViyjtgJ1ZRVrS7ES2eyM8hXJytMfFCqS0ZJ83ZZRXU01tSojqxVtKdSG+uqoJS8rZUePsuO+elz7y0z1V8nUOCbTGfv/LAf9/7fdBK/ewNnsl/0/AAAAAAD4xnKyT9/T+/85vZOl/rOfm3ZkAAAAAABgUrLf/N9IF3Np6is57aBr3WmHBQAAAAAAJsjRzeJTgJrezVPlk1B8CAAAAAAAwDdE9vv/m+kiG3vtXTmvdP8/d2EBAgAAAACAM/vtuDH2/5GtdRzFg3nn7/9WFM05e4PN95wnXrrBe3Ip3+/S4RKT9nXnclFItlibLV759oZTjH55MAhmVqu+3hmJw6ka69d5OYCDDyAqAvizqgPQH/XjvFll3ofllryWt4rV3Q/q8rzLM4ndTH716aMvlDX/d/3ebJHh48+GD7NY9tJXe0+KAo+Mozj+YMwvl3neqR7deC57EKOot+Zo59Fw2x19A4pZBGaq6qyVdepKvjJv5XMt5i8Xi5H2ay+3fyGts74yrvWdLIp5SVnLndO1XM91K89za+lWvqiIolEZRfq2F8eiMdh8bz8//jM67licJYrVsceiiGJ19Cw4RRQAMC072ag/lb3Q74shgA53/Ke4yu2cNJOPM4H/Xui5lvI8S9ezC+vs9YorunvSFd09W7+uvx6ZA2lcH5vW+6cX9dazev+Sxq2x9cbdhqMFLXzxz4N1Dz7Z/mT700Zjdc1933XvNjSXNaNY0PcAACosZt//15E5dvadco6dcTkO+u73s7vqdOPDPOehu+rvv/hKwYo+1mca6qGWs6cNsm8cjJR65UWptXKft/Mo82Cr71prIzO8LJ9wV1cbmejl1fOuVh+870z+/QAA4CIsVvbDo3Psndz/L59w310b+Urh8gl3x6N9OQAAOB82+tqpJb9xoigYfFRvNutesm5NFPr3TRS0OtYE/cRG/rrX71gziMIk9MNumvgwaNnYxBuDQRglph1GZhDGwWY287sppn6Pbc/rJ4EfD7rWi63xw37i+YlpBbFvBhs/7wbxuo2yneOB9YN24HtJEPZNHH4lacWY2NoyYzkvQdAObGSCvhlEQc+LtsyHYXejZ03Lxn4UDJIwL7CsK+i3w6iXFbsy7YMNAMAb4vNnu48fDIfbTw8n5tJb8+pNr5uYdhsBAMDL6KUBAAAAAAAAAAAAAAAAAAAAAHjzHfPcntee0PN/RWJep9p9RrtXKzaVDZhkhAehTrrANzzxlt6IMMrEl5KKNftfavS0KQedPrfaL42u+d55nmOHE3vS6f6BTCSx89/DtU/negTg4vw/AAD//0FMRg8=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x101000, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/4096, 0x1000)

5.053599192s ago: executing program 5 (id=475):
syz_mount_image$reiserfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8488, &(0x7f00000002c0), 0xfd, 0x10fd, &(0x7f0000000440)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r0, 0x6000809)
mkdirat(0xffffffffffffff9c, &(0x7f0000001600)='./proc\x00', 0x28)

4.746266013s ago: executing program 3 (id=476):
r0 = epoll_create1(0x80000)
close_range(r0, 0xffffffffffffffff, 0x2)
socket(0xa, 0x2, 0x0)
epoll_wait(r0, &(0x7f0000001040)=[{}], 0x1, 0x7)

4.381972001s ago: executing program 3 (id=477):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0xa, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x0, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x69a4, 0x80000001, 0x4, 0x5, 0x100000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x404, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x0, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0xffff, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xff7ffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4ecf, 0x7f, 0x9, 0x5, 0xd, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0xcf, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x7c, 0xffffffff, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x9, 0xbb30, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x2, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x108, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3445, 0xfff]}, 0x45c)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

3.99748889s ago: executing program 3 (id=478):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000024c0), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000002500)=ANY=[@ANYBLOB="0b00000073797a300000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135)
nanosleep(&(0x7f0000002640)={0x0, 0x5f5e100}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000002680)=ANY=[@ANYBLOB="0c00000000fd"], 0x7)

3.681517942s ago: executing program 4 (id=479):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x501, 0x20001, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x8010)

3.593887442s ago: executing program 3 (id=480):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000400), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000000480)=[{0x7, 0x14001, 0x1, &(0x7f0000000500)='+'}], 0x1})

3.358629806s ago: executing program 5 (id=481):
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/devices/virtual/net/bridge0/bridge/no_linklocal_learn\x00', 0x2, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/61, 0x3d}], 0x1)

2.92199443s ago: executing program 5 (id=482):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000540)=0x4f1d, 0x4)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/5, 0x5}], 0x1}, 0x4}], 0x1, 0x2000, 0x0)

2.689095775s ago: executing program 6 (id=483):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6)
syz_open_dev$loop(0x0, 0x4, 0x901)
timer_create(0x5, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0)
setns(0xc9, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r4, &(0x7f0000003900), 0x0, 0x102, 0x0)
unshare(0x20000600)
r5 = userfaultfd(0x80001)
setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48)
signalfd4(r6, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000))
epoll_create(0x8)
unshare(0x20000000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)

1.552837841s ago: executing program 6 (id=484):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000d00)='\x00', 0x89901)
fchdir(r0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000002d80), &(0x7f0000002dc0)='./file0\x00', 0x0, &(0x7f0000002e00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@rodir}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x837}}, {@utf8no}, {@uni_xlateno}, {@fat=@sys_immutable}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_mixed}, {@numtail}, {@fat=@gid}, {@fat=@dos1xfloppy}]}, 0x1, 0x2b4, &(0x7f0000002ec0)="$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")

1.394744017s ago: executing program 5 (id=485):
syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x5050, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xb3, 0x0, 0xf1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0xff, &(0x7f0000003a80)=ANY=[@ANYBLOB="040fff00050a"]})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
getpid()
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

1.199256947s ago: executing program 6 (id=486):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001a80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0x1, 0x151f, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0xc0185879, 0x0)

1.109598936s ago: executing program 4 (id=487):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000e40)={0x2, 0x0, [{0x2, 0x200000, 0x2, 0xee5, 0x1, 0xfffffffa, 0x8}, {0x7, 0xfffffffe, 0x3, 0x5, 0x0, 0x80}]})

938.828124ms ago: executing program 3 (id=488):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000400)='./bus\x00', 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f0000001500)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzhw4YByRYlct4pIASUBpVVEXFlCHHgRICSOgDhy4gX0wJUbL4BICRLQUweN/TzOeNnNOkm9s/bz+UjuzG+eGe8z/e54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEN/77g/OVBFx6edpwbGIz0Q/ohex0tRrEbGydiyvP4iI52K7OZ6NiOFSRJUbn454LSI+eiri7r1b682is/vsx3f+9Pff/fCJ7//tD8NT//nzjf7r09a7efPX//7L7UffXwAAAChRXdd1lT7mH0+f73tddwoAmIv8+l8nebl64erNBeuPWq1Wqw9h3VZPdrtdRMRme5vmPYPT8QBwyGzGx113gQ7Jv2iDiHii604AC63qugMciLv3bq1XKd+q/XqwttOerwXZk/9mtXt/x7TpLOPXmMzr+bUV/XhmSn9W5tSHRZLz743nf2mnfZTWO+j852Va/qOdW5+Kk/Pvj+c/5ujk35uYf6ly/oOHyr8vfwAAAAAAWGD53/+PdXz+d+nxd2VfHnT+d21OfQAAAAAAAACAT9vjjv+3qzL+HwAAACyq5rN64zdP3V827bvYmuUXq4gnx9YHCpNullntuh8AAAAAAAAAAAAAUJLBzjW8F6uIYUQ8ubpa13Xz0zZeP6zH3f6wK33/oWRd/5EHAIAdHz01di9/FbEcERfTd/0NV1dX63p5ZbVerVeW8vvZ0dJyvdL6XJunzbKl0ez3wysxqptfttzarm3W5+VZ7eO/r3msUd2f3bE56TBwAIiInVeju16Rjpi6fjq6fpfD4eD4P3oc/+xH189TAAAA4ODVdV1X6eu8j6dz/r2uOwUAzEV+/R8/L6BWq9Vqtfro1W31ZLfbRURstrdp3jMYjh8ADpnN+Hji8l8a4LcI0/KnCIOIeG6f6y4dcF+AxVR13QEOxN17t9arlG/Vfj1I47vna0H25L9ZbW+Xt580nWX8GpN5Pb+2oh/PTOnPs3PqwyLJ+ffG87+00z5K6x10/vMyLf9mP4910J+u5fz74/mPOTr59ybmX6qc/+Ch8u/LHwAAAAAAFlj+9/9jC3X+d/SouzPTg87/rh3YowIAAAAAAADAwbp779Z6vu81n///3IT13P95NOX8K/kXKeef7v/fvfDmpbH1+q35O2/dz/9f926t//7GPz+bp/vNf/e7hKr0zKrSM6JKj1QN0vQRd2yKrWF/1DzSsOr1B+man3r4TlyJq7ERp/es20vHw/32M3vam54Ot9vr/k772T3tg932vP25Pe3DdKVTvZLbT8Z6/CSuxtvb7U3b0oz9X57RXs9oz/n3Hf9FyvkPWj9N/qupvRqbNu582Pu/4749nfQ4b175/K9OH/zuzLQV/d19a2v274UO+rP9/+SJUfzs+sa1kzcv37hx7UykyZ6lZyNNPmU5/2H6yfm/9OJOe/673z5e73w4euj8F8VWDNr57842+b/Ymm/29+UO+jdvOf9R+sn5v53aJx//hzn/6cf/Kx30BwAAAAAAAAAAAAAAAB6kruvtW0TfjIjz6f6fru7NBADmK7/+10lePq+6/6jb/3HvfnTVf7V6znW1YP2Za/1JvVj9US9k/d8F68/C1W31ZG+0i4j4a3ub5j3DLyb9MgBgkX0SEf/ouhN0Rv4Fy9/310xPdN0ZYK6uv//Bjy5fvbpx7XrXPQEAAAAAAAAAHlUe/3OtNf7zibqub4+tt2f817di7XHH/xzkmd0BRqcMVN1/+H16kK3eqN9rDTf+fEwb/3u4O/eg8b8HMx5vOKN9NKN9aUb78oz2iTd6tOT8n2+Nd34iIo6PDb9ewviv42PelyDn/0Lr+dzk/6Wx9dr51789zPn39uR/6sZ7Pz11/f0PXr3y3uV3N97d+PG5M2dOnzt//sKFC6feuXJ14/TOfzvs8cHK+eexr10HWpacf85c/mXJ+X8h1fIvS87/i6mWf1ly/vn9nvzLkvPPn33kX5ac/8upln9Zcv5fTrX8y5LzfyXV8i9Lzv8rqZZ/WXL+r6Za/mXJ+Z9MtfzLkvM/lep95r9y0P1iPnL++QyX478sOf98ZYP8y5LzP5tq+Zcl538u1fIvS87/tVTLvyw5/6+mWv5lyfmfT7X8y5Lz/1qq5V+WnP+FVMu/LDn/r6da/mXJ+X8j1fIvS87/9VTLvyw5/2+mWv5lyfl/K9XyL0vO/9upln9Zcv5vpFr+Zbn//f9mzJgxk2e6/ssEAAAAAAAAAAAAAIybx+XEXe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYW9e4uR667vAH5m73EgMRBSJzVh45gQnE12fYkvtC4mXBtuJSEUesF2vWuz4BteuwQa1Y4CJRJGRRVtw0NbQKjNS4XV8kArQHlArapWgvaBviAqVB6iKqCAhEQrYKs55///78zs7Myud7yZOefzkZJfdubMnDNn/jO7XzvfHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGt3+urlP1LIsq9VqxQWbs+wF9Xnd5Ob8klc/v8cHAAAArN/P838/d2O64NAqbtSwzT/f9s0vLy4uLmbvGf7T0c8sLqYrJrNsdDzL8uuiK997b61xm+DxbKI21PD1UJfdD3e5fqTL9aNdrh/rcv14l+snuly/7AQsc11WS3e2Pf/PzcUpzW7KRvPrtre51eO18aH6uUu3zWr5bRZHj2fz2clsLptp2r7YtpZv/9Xb6/t6cxb3NdSwr631FfKjR4/FY6iFc7y9aV9L9xn94LXZ5I9/9Oixvz7/7C3tZtfT0HR/xXHeta1+nB8LlxTHWsvG0zmJxznUcJxb2zwnw03HWctvV//v1uN8bpXHObx0mBuq9TmfyIby//5Wfp5Galmb87Q1XPbTO7Isu7R02K3bLNtXNpRtarpkaOn5mShWZP0+6kvpxdnImtbp7atYp/U5u715nba+JuLzf3u43cgKx9D4NP3gsbGG5/1ni1ezTqP6o17ptdK6Bnv9WumXNRjXxbfyB/1E2zW4PTz+R+9ceQ22XTtt1mB63A1rcFu3NTg0Npwfc3oSavltltbgzqbth/M91fL5zJ2d1+D0+VNnpxc+8tF75k8dPTF3Yu707p07Z3bv3bt///7p4/Mn52aKf1/l2e5/m7Kh9BrYFs5dfA28smXbxqW6+PmxZe+/V/s6nOjwOtzcsm2vX4cjrQ+utjEvyOVrunhtvKt+0icuD2UrvMby52fH+l+H6XE3vA5HGl6Hbb+ntHkdjqzidVjf5uyO1f3MMtLwT7tjWPl7wfrW4OaGNdj680jrGuz1zyP9sgYnwrr4zo6VvxdsDcf7xNRafx4ZXrYG08MN7z31S9LP+xP789FuXd5av+L6sezCwty5ex85ev78uZ1ZGBviJQ1rpXW9bmp4TNmy9Tq05vV6aP62J25tc/nmcK4m7qn/a2LF56q+zZ57Oz9X+Xe39uez6dJdWRg9ttHns9138/r5HMuyz37jsQe/9uhnX7fi+aznzY9Nr/9n8ZRLG95/R1d4/425/xfF/tJdPT48OlK8fofT2Rltej9ufqpG8veuWr7v56ZX9348Gv7Z6Pfjmzq8H29p2bbX78ejrQ8uvh/Xuv1px/q0Pp8TYZ2cnOn8flzfZsuuta7JkY7vx3eEWQvn/1UhKaRc1LB2Vlq3aV8jI6PhcY3EPTSv091N24+GbFbf11O7rm6d3nVHcV/D6dEt2ah1Otmyba/Xafqzr5XWaa3bn75dndbncyKsi5t2d16n9W2e3rP+987r4n82vHeOdVuDo8Nj9WMeTYswf7/PFq+La/De7Fh2JjuZzebXjuXrqZbva+q+1a3BsfDPRr9XbumwBu9q2bbXazB9H1tp7dVGlj/4Hmh9PifCunjyvs5rsL7N6/f19mfXu8IlaZuGn11b/3xtpT/zurXlNF2rtTISjvMb+zr/2Wx9m5P715ozO5+nu8Ml17c5T62v35VeU7PZxpynLeE4n92/8nmqH099m88cWOV6OpRl2cUP3Z//eW/4+5W/u/DtLzf9vUu7v9O5+KH7f/jC4/+0luMHYPD9ohibiu91DX8ztZq//wcAAAAGQsz9Q2Em8j8AAACURsz98f8KT+R/AAAAKI2Y+0fCTCqS/7e8/tn5X1zMUjN/MYjXp9PwQLFd7LjOhK8nF5fUL7//i3M/+ceLq9v3UJZlP3vgD9puv+WBeFyFyXCcV97QfPkyX75nVfs+8vDFtN/G/vrnwv3Hx7PaZdCugjuTZdlXb/xUvp/J917O59MPHMnng5eeeLy+zXMHiq/j7Z95SbH9X4Ty76HjR5tu/0w4D98Pc+Yt7c9HvN2XLr9q6753L+0v3q627Yb8YT/5vuJ+4+/J+fTjxfbxPK90/F/75FNfqm//yCvaH//FoXQceaU83v6pcL9fDPN/X1Zs3/gc1L+Ox//xcPxxf/F2937h622P/8oniu3PvrHY7kiYcf93ha+3v/HZ+cbz9UjtaNPjyt5UbBf3P/PtP86vj/cX77/1+CcOX246H63r4+n/KO5numX7eHncT/QPLfuv30/j+oz7f+qPjjQ9T932f+XBZ15Wv9/W/d/dst3ZD+3I9790f82/sekvP/6ptvuLx3Pob882PZ5D7wyv47D/J98X1mO4/v+uFPfX+tsVjryz+f0nbv+5zRebHk/05h8X+7/ymhP5HJ+4btP1L3jhDZdeXj93Wfat8eL+uu3/xF+daTr+z99cnI94fezot+5/JXH/5z48dfrMwoX52XRWH70x/905by2OJx7vjeG9tfXrw2fOv3/u3OTM5EyWTZb3V+hdtS+E+cNiXOq89eKyd9AdD4fn89Y//+qmO//9k/Hy/3xXcfnltxTft14Ztvt0uHxzeP7Wtv/lnrz95vz1XXs6HOHi8t8XvB5bt//P/lVtGB5/688Fcb2ffen78/NQvy7/vhFf1+s8/u/OFvfzlXBeF8NvZt5289L+GrePvxvh8kPF633d5y+8zcXn9W/C8/227xf3H48rPt7vhp9jvr6l+f0uro+vXBxqvf/8t3hcCu8n2aXi+rhVPN+Xn7u57eHF30OSXbol//pP0v3csqaHuZKFjyxMn5w/feGR6fNzC+enFz7y0cOnzlw4ff5w/rs8D3+g2+2X3p825e9Ps3N792T5u9WZ8ZkNeMO6hsefreb4zz58bHbfzJ2zc8ePXjh+/uGzc+dOHFtYODY3u3Dn0ePH5z7c7fbzswd37jqwe9+uqRPzswf3Hziw+8DU/Okz9cMoDqqLvTMfnDp97nB+k4WDew7svO++PTNTp87Mzh3cNzMzdaHb7fPvTVP1W//+1Lm5k0fPz5+am1qY/+jcwZ0H9u7d1fDbAH/S9vanzh5fmJw+d+H09IWFuXPTxWOZPJ9fXP/e123/lNPCfxU/z7aqFb+IL3vH3XvT72et++JjK95VsUnLLxB9Nvwumn950dn9q/k65v7RMJOK5H8AAACogpj7x8JM5H8AAAAojZj7x8NM5H8AAAAojZj7J8JMKpL/S9f/33JxVfvX/9+w/n/T7fX/9f/7ov//UL/1/4v3C/3/3lhv/17/P9D/1/9/Hvrzg3781en/t6f/Tzv91v+Puf+6LKtk/gcAAIAqiLl/U5iJ/A8AAAClEXP/9WEm8j8AAACURsz9LwgzqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6/9NZtfr/l3p5/Pr/+v8s12/9/5j7XxhmUpH8DwAAAFUQc/8NYSbyPwAAAJRGzP03hpnI/wAAAFAaMfdvDjOpSP7X/9f/1//X/9f/b79//f/BpP/fmf5/F/r/Pv9f/1//n57qt/5/zP0vCjOpSP4HAACAKoi5/8VhJvI/AAAA9J+Rq7tZzP0vCTNZlv+vcgcAAADA8y7m/puyliJ4Rf7+X/9f/7//+//j6Tr9f/3/rC/7/8OZ/n//0P/vTP+/C/1//X/9f/1/eqrf+v957s8mspeGmVQk/wMAAEAVxNx/c5iJ/A8AAAClEXP/L4WZyP8AAABQGjH3bwkzqUj+1//X/+///r/P/9f/7/f+v8//7yf6/53p/3eh/6//r/+v/09P9Vv/P+b+W8JMKpL/AQAAoApi7r81zET+BwAAgNKIuf+Xw0zkfwAAACiNmPu3hplUJP/r//d5/z82R/X/9f/1//X/9f9XRf+/M/3/LvT/9f/1//X/6al+6//H3P+yMJOK5H8AAACogpj7bwszkf8BAACgNGLuf3mYifwPAAAApRFz/2SYSUXyv/5/n/f/ix78mM//1//X/9f/1/9fHf3/zvT/u9D/1//vSf9/8WJ1+//jmf4/jfqt/x9z/+1hJhXJ/wAAAFAFMfdvCzOR/wEAAKA0Yu6/I8xE/gcAAIDSiLl/e5hJRfK//v9A9P8z/X/9f/1//X/9/9XR/+9M/78L/X/9f5//7/P/6al+6//H3P+KMJOK5H8AAACogpj77wwzkf8BAACgNGLuf2WYifwPAAAApRFz/11hJhXJ//r/+v/6//r/+v/t96//P5j0/zvT/+9C/1//X/9f/5+e6rf+f8z9rwozqUj+BwAAgCqIuX9HmIn8DwAAAKURc//dYSbyPwAAAJRGzP1TYSYVyf/6//r/+v/6//r/S8+h/v/g0//vTP+/C/1//X/9f/1/eqrf+v8x998TZlKR/A8AAABVEHP/vWEm8j8AAACURsz902Em8j8AAACURsz9M2EmFcn/+v/6//r/+v9r6v+/fOl+y9T/b7d//f/BpP/fmf5/F/r/+v/Pe/9/VP+fUum3/n/M/TvDTCqS/wEAAKAKYu7fFWYi/wMAAEBpxNy/O8xE/gcAAIDSiLl/T5hJRfK//r/+v/6//r/P/2+/f/3/waT/31nv+//xIW5E/3982fb6//r//XT8Pv9f/5/l+q3/H3P/fWEmFcn/AAAAUAUx9+8NM5H/AQAAoDRi7t8XZiL/AwAAQGnE3L8/zKQi+V//X/9f/1//X/+//f71/weT/n9nPv+/C/1//X/9f/1/1umhP2z86ur6/2Pt7rgn/f+Y+w+EmVQk/wMAAEAVxNz/6jAT+R8AAABKI+b+X8nnvy5dIf8DAABAaRS5fyL71TCTiuR//f+m7nn94er/6//r/+v/5/T/B5P+f2f6/13o/+v/6//r/9NTK/b/Q/Ru3/9vqyf9/5j7D4aZVCT/AwAAQBXE3P9rYSbyPwAAAJRGzP2vCTOR/wEAAKA0Yu4/FGZSkfyv/+/z//X/9f/1/9vvf6P7//GTbvX/10f/vzP9/y70//X/9f/1/+mpq/v8/7Z60v+Puf+1YSYVyf8AAABQBTH33x9mIv8DAABAacTc/7owE/kfAAAASiPm/teHmVQk/+v/6//r/+v/6/+337/P/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/jeEmVQk/wMAAEAVxNz/xjAT+R8AAABKI+b+N4WZyP8AAABQGjH3vznMpCL5X/9f/1//X/9f/7/9/rv1/+Pn9ev/9xf9/870/7vQ/9f/1//X/6en+q3/H3P/r4eZVCT/AwAAwECaWNvmMfc/0Hpj+R8AAABKI+b+t4SZyP8AAABQGjH3vzXMpCL5X/9f/1//X/9f/7/9/n3+/2DS/+9swPr/P78hXK7/X9D/7+/jX2v/f6Tl62vS///eSv3/xfHW2+v/cy30W/8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox9/9GmElF8r/+f/04ltrL+v9l7f8P6f/3X///77+TZfr/+v89p//f2YD1/33+fwv9//4+fp//r//Pcv3W/4+5/51hJhXJ/wAAAFAFMfc/GGYi/wMAAEBpxNz/UJiJ/A8AAAClEXP/u8JMKpL/9f99/n81+v8+/z/rv/6/z/9vOKv6/72j/9+Z/n8X+v/6//3W//9v/X8GW7/1/2PufzjMpCL5HwAAAKog5v53h5nI/wAAAFAaMff/ZpiJ/A8AAAClEXP/e8JMKpL/9f8Hpf8/OaD9/8f0/69h//+2G4rt9P/1/1mi/9+Z/n8X+v/6//3W//f5/wy4fuv/x9z/3jCT1ef/iVVvCQAAADwvYu7/rTCTivz9PwAAAFRBzP2/HWYi/wMAAEBpxNz/O2EmFcn/+v+D0v/3+f+Z/r/P/295PPr/+v/tbFz/P77z6P/r/+v/R/r/+v/6/7Tqt/5/zP2/G2ZSkfwPAAAAVRBz//vCTOR/AAAAGAjt/p/sVjH3Hw4zkf8BAACgNGLuPxJmUpH8r/+/iv7/ePf70/9vPn79//brY039/z/b9m/f+ebbj+zU/9f/1/9fkw39/P/6i9/n/+v/6/8n+v/6//r/tOq3/n/M/UfDTCqS/wEAAKAKYu7/vTAT+R8AAABKI+b+Y2Em8j8AAACURsz9s2EmFcn/+v8+/1//v0/7/wP8+f/xfOj/N+tZ/z++6er/t1X079Mqurb9/3cv9cT1/9fa/x9re6n+v/7/IB+//r/+P8v1W/8/5v65MJOK5H8AAACogpD7h44Xc+kK+R8AAABKI+b+E2Em8j8AAACURsz97w8zqUj+1//X/9f/1//3+f/t99+p/18b8fn//Sr173+av1D0/1v0T/+/Pf1//f9BPn79f/1/luu3/n/M/fNhJhXJ/wAAAFAFMfd/IMxE/gcAAIDSiLn/g2Em8j8AAACURsz9J8NMKpL/9f8Hr/8ft9X/1//X/6/o5//r/3f0/+zdSZBldVbH8ZtYUFmBYbgwwoUbI1i6dMlC17p04cKNGyMMI8QBFWcK5xFFxVkRnAccQBBRQe0ZeqKbnqG76XmiB3oomm6iOsg85+R0870cXua79///fBacNqnkPYgy4UfWl3va/l7/H/T/fff/V/T/+n/9P6sxtf4/d//3xy2d7H8AAADoQe7+m+IW+x8AAACakbv/B+IW+x8AAACakbv/B+OWTva//v80/f9Opez5/3vf/yT6/2/R/x/2+vr/aff/1w36/9PQ/y+m/19C/+/5//p//T8rNbX+P3f/D8Utnex/AAAA6EHu/h+OW+x/AAAAaEbu/pvjFvsfAAAAmpG7/0filk72/77+f2Pos//PjHcWz//X/3v+v/5/W6v9v+f/n8759v+3vfSVT/+v/9f/B/3/kfr/i4d9vv6fFk2t/8/d/6NxSyf7HwAAAHqQu//H4hb7HwAAAJqRu/+WuMX+BwAAgGbk7v/xuKWT/b+65/9f2vr4TPv/ov/X/299QP+v/9f/z5bn/y/WU/9/85PX3/Tcg9/w0HFeX/+v//f8f/0/qzW1/j93/0/ELZ3sfwAAAOhB7v6fjFvsfwAAAGhG7v6filvsfwAAAGhG7v6fjls62f+r6/9n/fz/ov/X/299QP+v/9f/z5b+f7Ge+v+TvL7+X/+v/9f/s1pT6/9z9/9M3NLJ/gcAAIAe5O7/2bjF/gcAAIBm5O6/NW6x/wEAAKAZufsvxy2d7H/9/9n3/y/q//X/cfX/+n/9/9nT/y+m/19C/6//1//r/1mpqfX/uftvi1s62f8AAADQg9z9Pxe32P8AAADQjNz9Px+32P8AAADQjNz9vxC3dLL/9f+e/6//1//r/8dfX/8/T/r/xfT/S+j/T9vPX6v/1//r/9ntmP3/Cwu+bK+k/8/d/4txSyf7HwAAAHqQu/+X4hb7HwAAAJqRu/+X4xb7HwAAAJqRu/9X4pZO9r/+X/+v/z9S/7/1evr/ff3/wZ96W/T/4/T/50P/v9hk+v+NC6Mf1v/Pvv+f2PP/8yu2/l//z7pM7fn/uft/NW7pZP8DAABAD3L3/1rcsmD/H/tf5gMAAABrlbv/1+MW3/8HAACA2cvqLHf/b8Qtnex//b/+X//v+f+e/z/++ov6/4d2vT/9/7To/xebTP9/CP2//n/O71//r//noKn1/7n7fzNu6WT/AwAAQA9y998et9j/AAAA0Izc/b8Vt9j/AAAA0Izc/b8dt3Sy/8f7/53fr/8/Gv3/3vev/x//+bGq/j//iPr/hf3/t3r+f5/0/4udf/9/Uf+/949/wv5/+yuO/n/a77/x/v/Sss/X/zNmav1/7v474pZO9j8AAAD0IHf/78Qt9j8AAAA0I3f/78Yt9j8AAADM2jd/3U4Llrv/9+KWTva/5//r//X/8+v/Pf9/2zqf/z+ce/9/Qf9/RPr/xTz/f4nJ9v/b9P/Tfv+N9/+e/8+JTK3/z91/Z9zSyf4HAACAHtz5/LC1+39/GOx/AAAAmKPdv3Zg/y8oDbn7/yBusf8BAACgGbn7/zBu6WT/6//1//p//b/+f/z1p9X/e/7/Uc26/7+w8z/1//r/MTPt/y801v/fddjnT6H/v1X/z8Ts6f8f2fn4uvr/3P1/FLd0sv8BAACgB7n7/zhusf8BAACgGbn7/yRusf8BAACgGbn7/zRu6WT/n3n/f+nw19b/6//1//p//b/+f9Vm3f97/r/+v83+3/P/Pf9f/9+xnf5/79fDdfX/ufv/LG7pZP8DAABAD3L3/3ncYv8DAABAM3L33xW32P8AAADQjNz9fxG3dLL/Pf9f/6//1//r/8dfX/8/T/r/xfT/S+j/9f/6f/0/K7Xn+f+7rKv/z91/d9zSyf4HAACAHuTuvydusf8BAACgGbn7/zJusf8BAACgGbn7/ypu6WT/6//Ptv/Pj+v/9f+D/l//r/8/F932/xtjfyc66JD+//Hvvfztez+i/9f/6//1//p/VmAS/f/VnX+6zN3/13FLJ/sfAAAAepC7/2/iFvsfAAAAmpG7/2/jFvsfAAAAmpG7/+/ilmPu/69d6bs6P/p/z//X/+v/9f/jr6//n6du+/8j8vz/JfT/+n/9v/6flTqT/v/Kzhf34z7/P3f/38ctvv8PAAAAzcjd/w9xi/0PAAAAzcjd/49xy9L9f8PXnOHbAgAAAFYod/8/xS2dfP9f/6//1//r//X/469/0v5/cxin/z8f+v/F9P9L6P/1//p//T8rdSb9/y7H7f9z998bt3Sy/wEAAKAHufv/OW6x/wEAAKAZufv/JW6x/wEAAKAZufv/NW7pZP/r//X/+n/9v/5//PU9/3+e9P+L6f+HYbhvwRsY6/+vXtT/6//1//p/Tmhq/X/u/n+LWzrZ/wAAANCD3P33xS32PwAAADQjd//9cYv9DwAAAM3I3f/vcUsn+1//r//X/+v/9f/jr6//nyf9/2L6/yU8//+0/fxV/b/+X//PblPr/3P3PxC3dLL/AQAAoAe5+x+MW+x/AAAAaEbu/v+IW+x/AAAAaEbu/ofilk72v/5f/6//1/+fSf9/Wf+/n/7/fJxd/z/o//X/+v8lPP9f/6//Z7/z6v9fiK/3y/r/3P3/Gbd0sv8BAACgB7n7H45b7H8AAABoRu7+/4pb7H8AAABoRu7+/45bOtn/+n/9v/5f/+/5/+Ovr/+fJ8//X0z/v4T+X/+v/9f/s1Ln1f8f1vvv/79z9/9P3NLJ/gcAAIAe5O5/JG6x/wEAAKAZufsfjVvsfwAAAGhG7v7/jVs62f/6f/3/3v5/GPT/+n/9/7Zz6P83B/3/yun/F9P/L6H/b7P/v2ZoqP+/dOjn6/+Zoqn1/7n7/y9u6WT/AwAAQA9y9/9/3GL/AwAAQDNy978sbrH/AQAAoBm5+18et7S0/188PH2bf/9/cd8n6v+HYXjqFs//39X/7/z/tf5f/z+x/r/+qur/V0f/v5j+fwn9f5v9v+f/6/9Zm6n1/7n7XxG3tLT/AQAAoHO5+18Zt9j/AAAA0Izc/a+KW+x/AAAAaEbu/lfHLZ3s/z39/5Wd8Cx///T7//2fqP8fTvX8/xb7f8//1//r/3ty2v7+7s34e5r+X/+v/x/t5zcO+eeeIfr5l/789P/6f/0/aWr9f+7+18Qtnex/AAAA6EHu/sfiFvsfAAAAmpG7//G4xf4HAACAZuTuf23c0sn+n//z//d/ov5/0P930f9v6v/1//r/UVN5/v+NN37bE/p//X+L/f8inv+v/9f/s9/U+v/c/a+LWzrZ/wAAANCD3P2vj1vsfwAAAGhG7v43xC32PwAAADQjd/8b45ZO9v/B/v/aYbtQ3TbW/0ejpv/fRf+/9/3r/8d/fnj+v/5f/3/2ptL/e/7/yd6//n+F/f8Jfuqsu58/rXW//2P1/9948PP1/7Roav1/7v4n4pZO9j8AAAD0IHf/m+IW+x8AAACakbv/zXGL/Q8AAADNyN3/ZNzSyf73/H/9v/5f/6//H399/f886f8X0/8v0VL/fwIr6efzq6r+f77P//8q/T+rM7X+P3f/W+KWreF3w1ef8E8TAAAAmJDc/W+NWzr5/j8AAAD0IHf/2+IW+x8AAACakbv/7XFLJ/tf/6//1//r//X/46+v/58n/f9i+v8l+un/N8c+uO5+/rTW/f6b6f89/58Vmlr/n7v/HXFLJ/sfAAAAZuza5T/k+a3f5u5/Z9xi/wMAAEAzcve/K2452v6/cDbvCgAAAFil3P1PxS2dfP9f/6//b7///279/77X1//r/1um/1/8iyD1/0v00/+PWnc/P/f3X/3/1Yv6f/0/YWr9f+7+p+OWTvY/AAAA9CB3/7vjFvsfAAAAmpG7/z1xi/0PAAAAzcjd/964pZP9r//vq//fGHrs/z3/v5X+f3Pfn4/+X/8/Zj79/z2j/w1hz//X/+v/5/v+Pf9f/89BU+v/c/c/s3Ghy/0PAAAAc/Wd3/R9Tx/1xz6z9dvN4X1xi/0PAAAAzcjd//64xf4HAACAZuTu/0Dc0sn+1//31f/3+fx//X8r/b/n/+v/j2I+/f84/b/+X/8/3/ev/9f/c9DU+v/c/R+MW3YNv9H/QA8AAACwPtcd74fn7v9Q3NLJ9/8BAACgB7n7Pxy3HNj/V4/4q9oBAACAqcnd/5G4pZPv/+v/J97/D2fU/8eP0/9v0//r/8deX/8/T/r/xU7Z/1/d0P/r/xfQ/+v/9f/sN7X+P3f/ww8MXe5/AAAAaNSef6Pw0a3fbg4fi1vsfwAAAGhG7v6Pxy32PwAAADQjd/8n4pZO9r/+f+L9/4me/3+p/pfn/3fe/9++Ofr6+n/9f8v0/4t5/v8S+n/9v/5f/89KHaP/3xqkZ93/5+5/Nm7pZP8DAABAD3L3fzJusf8BAACgGbn7PxW32P8AAADQjNz9n45bOtn/+v819P93XByGM+3/j/D8f/1/H/3/Ia/fTv//9ddffuy7vuf+e/X/7DjP/j9/Luj/9f/6/236f/2//p/9pvb8/9z9n4lbOtn/AAAA0IPc/c/FLfY/AAAANCN3/2fjlpf2/6PrelcAAADAKuXu/1zc0sn3//X/LT7/f579f/61XkP/f3l+/X82xb33/57/r/8/yPP/F9P/L6H/1//r//X/rNTU+v/c/Z+PWzrZ/wAAANCD3P1fiFty/28c+1/dAwAAABOTu/9K3OL7/wAAANCM3P3Pxy2d7H/9v/5/Kv1/8vz/nc/z/P9t+n/9/3Ho/xfT/y+h/9f/6//1/6zU1Pr/3P1fjFs62f8AAADQg9z9L8Qt9j8AAAA0I3f/l+IW+x8AAACakbv/y3FLJ/tf/z8M1zy783H9v/5/6wP6f/2//n+2ptj/f8cxGvTz6f8vLf+B+n/9v/5f/6//ZwWm1v/n7v9KAAAA//+vq2ae")
r0 = open(&(0x7f0000000300)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000000340)=""/36, 0x24)
getdents(r0, &(0x7f0000000580)=""/184, 0xb8)

785.450909ms ago: executing program 6 (id=489):
mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xcd79, 0x141000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0xd, 0x0, 0x6, 0x5, 0x4})

663.179152ms ago: executing program 4 (id=490):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000600)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@errors_continue}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$eJzs3AuYjtX6MPB1r7Uehia9TXIY1r3uhzcNlkmSHFLJIUmSJMkpSdIkSUJiyClpSEKOkyaHISSnxqRxPh9yTppsaZIkJKdkfdeott3X/rf3/9v7+/tfe+7fda1r1v08z1rv/cz9XO+7nue9Zr7tPqJu83q1mhKR+JfALz+ShRAxQoghQoirhBCBEKJyXOW43P0FFCT/ay/C/r0eTL/cGbDLieuft3H98zauf97G9c/buP55G9c/b+P6521cf8bysq0zi1/NLe82fv6fl/Hn/3+QnAoTv1xf4doe/40hXP+8jeuft3H985Dgj5u4/nkb1z9v4/r/57vjT/Zx/f9Dxfxzh3H9GcvL/vos+Lz3/n/B8+h/d8v/h+84fnsEfflz+9/QLvPlxxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsjzjjL9FCiN/6lzsvxhhjjDHGGGOM/fv4/Jc7A8YYY4wxxhhjjP3/B0IKJbQIRD6RX8SIAqKguELEiitFIXGViIirRZy4RhQW14oioqgoJoqLeFFClBRGoLCCRChKidIiKq4TZcT1IkGUFeVEeeFEBZEobhAVxY2ikrhJVBY3iyriFlFVVBPVRQ1xq6gpbhO3iztELXGnqC3qiLqinrhL1Bd3iwbiHtFQ3CsaiftEY3G/aCIeEE3Fg6KZeEg0Fw+LFuIR0VK0Eq1FG9H2/2n8i6K3eEn0EX1Fsugn+ouXxQAxUAwSg8UQ8YoYKl4Vw8RrIkUMFyPE62KkeEOMEm+K0WKMGCveEuPEeDFBTBSTxGSRKt4WU8Q7Ik28K6aKaWK6mCHSxUwxS7wnZos5Yq54X8wTH4j5YoFYKBaJxeJDkSGWiEzxkVgqPhZZYplYLlaIlWKVWC3WiLVinVgvNoiNYpPYLLaIreITsU1sFzvETrFL7BZ7xKdir/hM7BOfi2zxxX9z/On/a3wPECBAggQNGvJBPoiBGCgIBSEWYqEQFIIIRCAO4qAwFIYiUASKQTGIh3goCSUBAYGAoBSUgihEoQyUgQRIgHJQDhw4SIREqAg3QiWoBJWhMlSBKlAVqkE1qAE1oCbUhNvhdqgFtaA21Ia6UBfugrvgbmgADaAhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hNbQGtpCW2gH7aA9tIcO0AE6QkfoBJ0gCZKgM3SGLtAFukJX6AbdoDt0hx7QE3rCi/AivAQvQV+oLftBf+gPA2AADILBMBhegaHwKrwKr0EKDIcR8Dq8Dm/AKDgFo2EMjIWxUFOOhwkwEUhOhlRIhSkwBdIgDabCNJgGMyAdZsIsmAWzYQ7MgfdhHnwAH8ACWACLYDEshgxYApmQCUvhNGTBMlgOK2AlrIKVsAbWwhpYDxtgPWyCTbAFtsAn8Alsh+2wE3bCbtgNn8Kn8Bl8BimQDdmwH/bDATgAB+Eg5EAOHIJDcBgOwxE4AkfhKByD43ACjsNJOAmn4DScgTNwDs7BeXg+/utmu8uuSxEyl5Za5pP5ZIyMkQVlQRkrY2UhWUhGZETGyThZWBaWRWQRWUwWk/EyXpaUJSVKlCRDWUqWklEZlWVkGZkgE2Q5WU466WSiTJQVZUVZSVaSleXNsoq8RVaV1eTjroasIRsHv7z/1JK1ZG1ZR9aV9WQ9WV/Wlw1kA9lQNpSNZCPZWN4vm8h+MAgelLmVaS6HQws5AlrKVrK1bCPfgEdlOzkK2svHZQf5hBwDo6GTbOeS5NOys5wAXeSzciI8J7vJydBdviB7yJ6yl3xR9pbtXR/ZV06FfrK/nAED5EA5SA6Ws6GOzK1YXfmaTJHD5Qj5ulwEb8hR8k05Wo6RY+VbcpwcLyfIiXKSnCxT5dtyinxHpsl35VQ5TU6XM2S6nClnyffkbDlHzpXvy3nyAzlfLpAL5SK5WH4oM+QSmSk/kkvlxzJLLpPL5Qq5Uq6Sq+UauVauk+vlBrlRbpKb5Ra5VX4it8ntcofcKXfJ3XKP/FTulZ/JffJzmS2/kPvlX+QB+aU8KL+SOfJreUh+Iw/Lb+UR+Z08Kr+Xx+RxeUL+IE/KH+UpeVqekWflOfmTPC9/lhekl0KBkkoprQKVT+VXMaqAKqiuULHqSlVIXaUi6moVp65RhdW1qogqqoqp4ipelVAllVGorCIVqlKqtIqq61QZdb1KUGVVOVVeOVVBJaobVEV1o6qkblKV1c2qirpFVVXVVHVVQ92qaqrb1O3qDlVL3alqqzqqrqqn7lL11d2qgbpHNVT3qkbqPtVY3a+aqAdUU/WgaqYeUs3Vw6qFekS1VK1Ua9VGtVWPqnbqMdU+92pST6iO6knVST2lktTTqrN6RnVRz6qu6jnVTT2vuqsXVA/VU/VSP6sLyqs+qq9KVv1Uf/WyGqAGqkFqsBqiXlFD1atqmHpNpajhaoR6XY1Ub6hR6k01Wo1RY9VbapwaryaoiWqSmqxS1dtqinpHpal31VQ1TU1XM1S6mqkG/TrT3H9i/Dt/Z/ywi6++RW1Vn6htarvaoXaqXWq32qP2qL1qr9qn9qlsla32q/3qgDqgDqqDKkflqEPqkDqsDqsj6og6qo6qY+q4Oqt+UCfVj+qUOq1Oq7PqnDqnzv/6OxAatNRKax3ofDq/jtEFdEF9hY7VV+pC+iod0VfrOH2NLqyv1UV0UV1MF9fxuoQuqY1GbTXpUJfSpXVUX6fL6Ot1gi6ry+ny2ukKOlHf8C+P/0f5tdVtdTvdTrfX7XUH3UF31B11J91JJ+kk3Vl31l10F91Vd9XddDfdXXfXPXQP3Uv30r11b91H99HJOln31y/rAXqgHqQH6yH6FT1UD9XD9DCdolP0CD1Cj9Qj9Sg9So/Wo/VYPVaP0+P0BD1BT9KTdKpO1VP0FJ2m0/RUPVVP19N1uk7Xs/QsPVvP1nP1XD1Pz9Pz9Xy9UC/Ui/VinaEzdKbO1Ev1Up2ll+lleoVeoVfpVXqNXqPX6XV6g96gN+lNOktv1Vv1Nr1N79A79C69S+/Re/RevVfv0/t0ts7W+/V+fUAf0Af1QZ2jc/QhfUgf1of1EX1EH9VH9TF9TJ/QJ/RJfVKf0qf0GX1Gn9Pn9Hl9Xl/QF3KXfYEMZKADHeQL8gUxQUxQMCgYxAaxQaGgUBAJIkFcEBcUDq4NigRFg2JB8SA+KBGUDEyAgQ0oCINSQekgGlwXlAmuDxKCskG5oHzgggpBYnBDUDG4MagU3BRUDm4OqgS3BFWDakH1oEZwa1AzuC24PbgjqBXcGdQO6vz2PVRwd9AguCdoGNwbNAruCxoH9wdNggeCpsGDQbPgoaB58HDQIngkaBm0CloHbYK2/+z8Qd2gXnBXUP9P5/f+VNHHXB/T1ySbfqa/edkMMAPNIDPYDDGvmKHmVTPMvGZSzHAzwrxuRpo3zCjzphltxpix5i0zzow3E8xEM8lMNqnmbTPFvGPSzLtmqplmppsZJt3MNLPMe2a2mWPmmvfNPPOBmW8WmIVmkVlsPjQZZonJNB+ZpeZjk2WWmeVmhVlpVpnVZo1Za9aZ9WaD2Wg2mc1mi9lqPjHbzHazw+w0u8xus8d8avaaz8w+87nJNl+Y/eYv5oD50hw0X5kc87U5ZL4xh8235oj5zhw135tj5rg5YX4wJ82P5pQ5bc6Ys+ac+cmcNz+bC8bnLu5zP95Ro8Z8mA9jMAYLYkGMxVgshIUwghGMwzgsjIWxCBbBYlgM4zEeS2JJzEVIWApLYRSjWAbLYAImYDkshw4dJmIiVsSKWAkrYWWsjFWwClbFqlgdq+OteCvehrfhHXgH3ol3Yh2sg/WwHtbH+tgAG2BDbIiNsBE2xsbYBJtgU2yKzbAZNsfm2AJbYEtsia2xNbbFttgO22F7bI8dsAN2xI7YCTthEiZhZ+yMXbALdsWu2A27YXfsjj2wB/bCXtgbe2Ofs30wGZOxP/bHATgAB+EgHIJDcCgOxWE4DFMwBUfgCByJI3EUjsLROAbH4ls4DsfjBJyIk3AypmIqTsEpmIZpOBWn4nScjumYjrNwFs7G2TgX5+I8nIfzcT4uxIW4GBdjBmZgJmbiUlyKWZiFy3E5rsSVuBpX41pci+txPW7EjbgZN+NW3Irb1DbcgTtwF+7CPbgH9+Je3If7MBuzcT/uxwN4AA/iQczBHDyEh/AwHsYjeASP4lE8hsfwBJ7Ak3gST+EpPINn8Bz+hOfxZ7yAHmOsFAXtFTbWXmkL2atsjC1g/zYuZovbeFvClrTGFrFFfxejtTbBlrXlbHnrbAWbaG/4Q1zVVrPVbQ17q61pb7O3/yGub++2Dew9tqG919azd/0ubmTvs43tw7aJfcQ2ta1sM9vGNrcP2xb2EdvStrKtbRvb0T5pO9mnbJJ92na2z/whzrBL7Fq7zq63G+xe+5k9Y8/aw/Zbe87+ZPvYvnaIfcUOta/aYfY1m9Jw+O9jO9yOtW/ZcXa8nWAn2kl28h/i6XaGTbcz7Sz7np1t5/whXmw/tPNspp1vF9iFdtHFODenTPuRXWo/tll2mV1uV9iVdpVdbdf8NdcVdpPdbLfYPfZTu81utzvsTrvL7r4Y557HPvu5zbZf2EP2G3vAfmkP2iM2x359Mc49vyP2O3vUfm+P2eP2hP3BnrQ/2lP29MXzzz33H+zP9oL1VhCQJEWaAspH+SmGClBBuoJi6UoqRFdRhK6mOLqGCtO1VISKUjEqTvFUgkqSISRLRCGVotIUpeuoDF1PCVSWylF5clSBEukGqkg3UiW6iSrTzVSFbqGqVI2qUw26lWrSbXS7FlSL7qTaVIfqUj26i+rT3dSA7qGGdC81ovuoMd1PTegBakoPUjN6iJrTw9SCHqGW1IpaUxtqS49SO3qM2tPj1IGeoI70JHWipyiJnqbO9Ax1oWepKz1H3eh56k4vUA/qSb3oRepNL1Ef6kvJ1I/608s0gAbSIBpMQ+gVGkqv0jB6jVJoOI2g12kkvUGj6E0aTWNoLL1F42g8TaCJNIkmUyq9TVPoHUqjd2kqTaPpNIPSaSbNovdoNs2hufQ+zaMPaD4toIW0iBbTh5RBSyiTPqKl9DFl0TJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSJ7SNttMO2km7aDftoU9pL31G++hzyqYvaD/9hQ7Ql3SQvqIc+poO0Td0mL6lI/QdHaXv6RgdpxP0A52kH+kUnaYzdJbO0U90nn6mC+RJhBDKUIU6DMJ8Yf4wJiwQFgyvCGPDK8NC4VVhJLw6jAuvCQuH14ZFwqJhsbB4GB+WCEuGJsTQhhSGYamwdBgNrwvLhNeHCWHZsFxYPnRhhTAxvCGsGN4YVgpvCiuHN4dVwlvCqmG18OF7a4S3hjXD28LbwzvCWuGdYe2wTlg3rBfeFdYP7w4bhPeEDcN7w0rhfWHj8P6wSfhA2DR8MGwWPhQ2Dx8OW4SPhC3DVmHrsE3YNnw0bBc+FrYPHw87hE+EHcMnw07hU2FS+HTYOXzmH+5PDvuF/cOXw5dD7+9RC6OLooujH0YzokuimdGPokujH0ezosuiy6Mroiujq6Kro2uia6ProuujG6Ibo5uim6Nbot7Xyy8cOOmU0y5w+Vx+F+MKuILuChfrrnSF3FUu4q52ce4aV9hd64q4oq6YK+7iXQlX0hmHzjpyoSvlSruou86Vcde7BFfWlXPlnXMVXKJr49q6tq6de8y1d4+7Du4J94R70j3pnnJPuaddZ/eM6+KedV3dc66be949715wPVxP18u96Hq7l1wf19clu2TX3/V3A9wAN8gNyvfrGswNc8NciktxI9wIN9KNdKPcKDfajXZj3Vg3zo1zE9wEN8lNcqku1U1xU1yaS3NT3VQ33U136S7dzXKz3Gw32811c928hHluvpvvFrqFbrFb7DJchst0mW6pW+qyXJZb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+a2uR1uh9vldrk9bo/b6/a6fW6fy3bZbr/b7w64A+6g+8rluK/dIfeNO+y+dUfcd+6o+94dc8fdCfeDO+l+dKfcaXfGnXXn3E/uvPvZXXDepUbejkyJvBNJi7wbmRqZFpkemRFJj8yMzIq8F5kdmROZG3k/Mi/yQWR+ZEFkYSRGCPFhJCOyJJIZ+SiyNPJxJCuyLLI8siKyMrIq4n2JbaEv5Uv7qL/Ol/HX+wRf1pfz5b3zFXyiv8FX9Df6Sv4mX9nf7Kv4W3xVX81X94/4lr6Vb+3b+Lb+Ud/OP+bb+8d9B/+E7+if9J38Uz7JP+07+2d8F/+s7+qf89388767f8H38D19L/+i7+1f8n18X5/s+/n+/mU/wA/0g/xgP8S/4of6V/0w/5pP8cP9CP+6H+nf8KP8m360H+PH+rf8OD/eT/AT/SQ/2af6t/2UAu/4NP+un+qn+el+hk/3M/0s/56f7ef4uf59P89/4Of7BX6hX+QX+w99hl/iM/1Hfqn/2Gf5ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+k/8Nr/d7/A7/S6/2+/xn/q9/jO/z3/us/0XHn65+pIP+q98jv/aH/Lf+MP+W3/Ef+eP+u/9MX/cn/A/+JP+R3/Kn/Zn/Fl/zv/kz/uf/QX+mzXGGGOMsX9K2sE/39/v72yTv7Zc/YUQV24vnvO3+7UQYmORX/oDZXzHiBDi6b7dH/yt1a6dnJz867FZSgSlFwghIpfGX7wN+TVeJjqIJ0WSeFxU/Lv5DZQ9z9GfzA/HvI/eLETBvxmTu47/Lb40/43/xfyPPjE2o0p4Ju7385//db2Zm390gRAJpS+NKSAuxZfmr/RfzF+03Z/ln6VEgS9ThWj/N2NixaX40vyJ4jHxjEj63ZGMMcYYY4wxxtgvBsrqXf/B/efF+/N4fTG8uDm/+Gv8D+/PGWOMMcYYY4wxdvk917PXU48mJT3elTvc4Q53/tq53O9MjDHGGGOMsX+3S4v+y50JY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWd/1P/Duxy32OjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2OX2fwIAAP//qCEzJQ==")
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000000640)=""/194, 0xc2)

0s ago: executing program 4 (id=491):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f00000007c0)=0x3d, 0x2)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)

kernel console output (not intermixed with test programs):

trol message transfer. (rlen = 0, was 0)
[  119.312672][ T1202] dvb-usb: bulk message failed: -22 (5/0)
[  119.338056][ T1202] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  119.359010][ T1202] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  119.398685][ T1202] usb 1-1: USB disconnect, device number 3
[  119.440668][ T6224] device-mapper: table: 248:5: crypt: Error decoding and setting key (-ENOKEY)
[  119.458003][ T6224] device-mapper: ioctl: error adding target to table
[  119.578205][ T1202] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  119.716454][ T6233] loop3: detected capacity change from 0 to 34816
[  119.756419][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.906265][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.919544][    T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.099492][    T8] usb 2-1: Using ep0 maxpacket: 8
[  120.115412][    T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 253: 141, using maximum allowed: 30
[  120.224420][ T6241] mmap: syz.3.117 (6241): VmData 49479680 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data.
[  120.229752][    T8] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 141
[  121.043992][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  121.050872][    T8] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  121.074858][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.118362][    T8] usb 2-1: config 0 descriptor??
[  121.459412][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  123.477554][    T8] usbhid 2-1:0.0: can't add hid device: -71
[  123.495458][    T8] usbhid: probe of 2-1:0.0 failed with error -71
[  123.556977][    T8] usb 2-1: USB disconnect, device number 5
[  123.877317][ T6258] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[  123.918316][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'.
[  126.079755][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  126.322490][ T6274] loop1: detected capacity change from 0 to 33280
[  126.352358][ T6274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  126.415819][ T6274] EXT4-fs (loop1): 1 truncate cleaned up
[  126.429071][ T6274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.597169][ T6283] device-mapper: table: 248:6: multipath: priority group count mismatch (-EINVAL)
[  126.607401][ T6283] device-mapper: ioctl: error adding target to table
[  126.683272][ T6286] loop0: detected capacity change from 0 to 33792
[  126.731729][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.745443][ T6286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.927090][ T6286] fs-verity: sha512 using implementation "sha512-avx2"
[  126.939038][ T6286] fs-verity (loop0, inode 15): Unsupported log_blocksize: 12
[  127.104681][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.622607][ T1202] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  127.851212][ T1202] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.876635][ T1202] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.902136][ T1202] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  127.915793][ T6292] loop1: detected capacity change from 0 to 32768
[  127.926055][ T1202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.971939][ T1202] usb 1-1: config 0 descriptor??
[  127.998751][ T6292] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  128.111796][ T6292] XFS (loop1): Ending clean mount
[  128.261145][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  128.304589][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  128.417969][ T1202] uclogic 0003:145F:0212.0003: interface is invalid, ignoring
[  128.460626][    T8] usb 4-1: Using ep0 maxpacket: 32
[  128.471576][    T8] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  128.491485][    T8] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  128.505763][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  128.514120][    T8] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  128.527442][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.571014][    T8] usb 4-1: config 0 descriptor??
[  128.658736][ T5870] usb 1-1: USB disconnect, device number 4
[  128.947102][ T6313] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  128.960325][ T6312] IPVS: stopping master sync thread 6313 ...
[  129.023986][    T8] hid_parser_main: 4 callbacks suppressed
[  129.024007][    T8] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0
[  129.063824][    T8] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0
[  129.079606][    T8] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0
[  129.087370][    T8] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0
[  129.117797][ T6315] loop1: detected capacity change from 0 to 2048
[  129.123211][    T8] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x0
[  129.153695][    T8] corsair-cpro 0003:1B1C:0C10.0004: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[  129.225516][ T6318] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.267553][    T8] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -90
[  129.336835][ T6192] Set syz0 is full, maxelem 65536 reached
[  129.349726][    T8] usb 4-1: USB disconnect, device number 5
[  129.464440][ T6317] fido_id[6317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  129.979458][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  130.171970][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.189446][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.219471][ T5867] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  130.239834][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.265220][ T5867] usb 3-1: config 0 descriptor??
[  130.324453][ T6336] loop0: detected capacity change from 0 to 32768
[  130.338022][ T6336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.150 (6336)
[  130.359787][ T5870] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  130.382832][ T6336] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.399003][ T6336] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  130.411663][ T6336] BTRFS info (device loop0): enabling auto defrag
[  130.418316][ T6336] BTRFS info (device loop0): use no compression
[  130.426154][ T6336] BTRFS info (device loop0): force clearing of disk cache
[  130.438274][ T6336] BTRFS info (device loop0): max_inline at 4096
[  130.445004][ T6336] BTRFS info (device loop0): disabling free space tree
[  130.493992][ T6336] BTRFS info (device loop0): enabling ssd optimizations
[  130.506897][ T6336] BTRFS info (device loop0): auto enabling async discard
[  130.516740][ T6336] BTRFS info (device loop0): rebuilding free space tree
[  130.565770][ T6336] BTRFS info (device loop0): disabling free space tree
[  130.577994][ T6336] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  130.590925][ T5870] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  130.602856][ T6336] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  130.619459][ T5870] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  130.637846][ T5870] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  130.647758][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.656912][ T5870] usb 2-1: Product: syz
[  130.662791][ T5870] usb 2-1: Manufacturer: syz
[  130.667536][ T5870] usb 2-1: SerialNumber: syz
[  130.691881][ T5870] usb 2-1: config 0 descriptor??
[  130.698157][ T6343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  130.709903][ T6343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  130.723112][ T5867] cp2112 0003:10C4:EA90.0005: item fetching failed at offset 5/7
[  130.747713][ T5867] cp2112 0003:10C4:EA90.0005: parse failed
[  130.756557][ T5867] cp2112: probe of 0003:10C4:EA90.0005 failed with error -22
[  130.832586][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.987568][ T5867] usb 3-1: USB disconnect, device number 3
[  131.072092][ T5870] dm9601: probe of 2-1:0.0 failed with error -71
[  131.088852][ T5870] usb 2-1: USB disconnect, device number 6
[  131.403780][ T5867] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  131.556429][ T6365] loop3: detected capacity change from 0 to 32768
[  131.633702][ T6373] block nbd2: NBD_DISCONNECT
[  131.869873][   T27] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  132.136650][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'.
[  132.192280][ T1149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  132.229850][ T6387] tipc: Started in network mode
[  132.235147][ T6387] tipc: Node identity , cluster identity 4711
[  132.247715][ T6387] tipc: Failed to obtain node identity
[  132.259802][ T6387] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  132.331161][ T5794] Bluetooth: hci3: command 0x0406 tx timeout
[  132.659631][    T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  132.856410][    T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  132.885350][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.915195][    T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  132.933604][    T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  132.958472][    T8] usb 3-1: Manufacturer: syz
[  132.987075][    T8] usb 3-1: config 0 descriptor??
[  133.099528][    T8] rc_core: IR keymap rc-hauppauge not found
[  133.105715][    T8] Registered IR keymap rc-empty
[  133.129701][ T5867] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  133.131636][    T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  133.173122][    T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5
[  133.212202][ T3491] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  133.244390][ T3491] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  133.258559][    T8] usb 3-1: USB disconnect, device number 4
[  133.329725][ T5867] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  133.349090][ T5867] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  133.367582][ T5867] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64
[  133.387634][ T5867] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  133.407605][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0
[  133.414454][ T5867] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00
[  133.431680][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.455687][ T5867] usb 4-1: config 0 descriptor??
[  133.477594][   T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  133.488141][ T6407] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  133.659654][   T27] usb 1-1: Using ep0 maxpacket: 32
[  133.668584][   T27] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  133.677241][   T27] usb 1-1: config 0 has no interface number 0
[  133.683575][   T27] usb 1-1: config 0 interface 184 has no altsetting 0
[  133.694537][   T27] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  133.709506][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.726108][   T27] usb 1-1: Product: syz
[  133.730755][   T27] usb 1-1: Manufacturer: syz
[  133.735573][   T27] usb 1-1: SerialNumber: syz
[  133.744494][   T27] usb 1-1: config 0 descriptor??
[  133.755842][   T27] smsc75xx v1.0.0
[  133.790092][    T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  133.951300][ T5867] pantherlord 0003:0E8F:0003.0006: global environment stack underflow
[  133.976954][ T5867] pantherlord 0003:0E8F:0003.0006: item 0 2 1 11 parsing failed
[  133.986835][ T5867] pantherlord 0003:0E8F:0003.0006: parse failed
[  134.019747][ T5867] pantherlord: probe of 0003:0E8F:0003.0006 failed with error -22
[  134.192779][ T5867] usb 4-1: USB disconnect, device number 6
[  134.205978][ T6412] loop1: detected capacity change from 0 to 65536
[  134.258441][ T6412] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  134.375620][ T6412] XFS (loop1): Ending clean mount
[  134.391586][ T6412] XFS (loop1): Quotacheck needed: Please wait.
[  134.429790][   T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  134.449496][   T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  134.474267][   T27] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  134.517840][ T6412] XFS (loop1): Quotacheck: Done.
[  134.525380][   T27] smsc75xx: probe of 1-1:0.184 failed with error -71
[  134.580995][   T27] usb 1-1: USB disconnect, device number 5
[  134.723848][ T5785] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  135.310829][ T5867] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  135.602185][ T5867] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  135.778543][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  136.022701][ T5867] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  136.033024][ T5867] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[  136.043706][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.087520][ T6439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  136.236330][ T6452] loop0: detected capacity change from 0 to 33280
[  136.287545][ T6452] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  136.333671][    C1] Bluetooth: hci4: Unexpected continuation: 1 bytes
[  136.343263][ T5794] Bluetooth: hci4: unexpected event 0x05 length: 66 > 4
[  136.349934][ T6452] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.190: corrupted in-inode xattr: e_value size too large
[  136.428305][ T6452] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.190: couldn't read orphan inode 15 (err -117)
[  136.477049][ T6452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.535531][    T8] usb 3-1: USB disconnect, device number 5
[  136.543041][ T5789] Bluetooth: hci4: Reading Intel version command failed (-71)
[  136.606755][ T6458] loop3: detected capacity change from 0 to 256
[  136.629711][ T6452] overlayfs: upper fs needs to support d_type.
[  136.924584][ T5787] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  136.957477][ T5787] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  136.988792][ T5787] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  137.015785][ T5787] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  137.042803][ T5787] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  137.076157][ T5787] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  137.102106][ T5787] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  137.128610][ T5787] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  137.148305][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  137.182571][ T5787] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  137.227628][ T5787] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  138.575868][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  138.596595][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  139.327429][ T6483] loop3: detected capacity change from 0 to 33280
[  139.346106][ T6484] loop1: detected capacity change from 0 to 2048
[  139.354466][ T6144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.404997][ T6484] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  139.453714][ T6484] UDF-fs: unknown compression code (0)
[  139.484935][ T6483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.554703][ T6489] loop2: detected capacity change from 0 to 33280
[  139.607679][ T6489] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  139.676551][ T6489] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.204: corrupted in-inode xattr: e_value size too large
[  139.709245][ T6489] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.204: couldn't read orphan inode 15 (err -117)
[  139.751265][ T6489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.773282][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.823716][ T6489] overlayfs: upper fs needs to support d_type.
[  141.439856][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  141.671956][ T5786] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  141.779315][ T5786] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  141.806824][ T3491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.942972][ T5786] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  141.975171][ T5786] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  142.008299][ T5786] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  142.037906][ T5786] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  142.075605][ T5786] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  142.110909][ T3491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.138682][ T5786] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  142.192473][ T5786] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  142.253837][ T5786] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  142.278072][ T3491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.406596][ T3491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.027253][ T6507] loop3: detected capacity change from 0 to 33280
[  143.064458][ T6507] EXT4-fs: Ignoring removed oldalloc option
[  143.114647][ T6507] EXT4-fs: Ignoring removed i_version option
[  143.196111][ T6507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  143.236868][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.307267][ T6507] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.214: invalid indirect mapped block 4294967295 (level 1)
[  143.373054][ T6507] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.214: invalid indirect mapped block 4294967295 (level 1)
[  143.451134][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.466291][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.476926][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.501482][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.509294][ T6507] EXT4-fs (loop3): 2 truncates cleaned up
[  143.525557][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  143.535083][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.555576][ T6507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.845112][ T6512] rxe_eth0 speed is unknown, defaulting to 1000
[  143.884534][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.344303][ T6529] loop3: detected capacity change from 0 to 256
[  144.435006][ T6529] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  146.084820][ T5789] Bluetooth: hci0: command tx timeout
[  147.680881][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.703259][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.711960][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.721619][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.738745][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  147.746443][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.979152][ T6512] chnl_net:caif_netlink_parms(): no params data found
[  148.170137][ T5789] Bluetooth: hci0: command tx timeout
[  148.223398][ T6550] rxe_eth0 speed is unknown, defaulting to 1000
[  148.435119][ T6555] loop3: detected capacity change from 0 to 32768
[  148.469629][ T6555] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.223 (6555)
[  148.618646][ T6555] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.648095][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.665381][ T6555] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  148.679688][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.687265][ T6512] bridge_slave_0: entered allmulticast mode
[  148.694137][ T6555] BTRFS info (device loop3): setting nodatacow, compression disabled
[  148.708781][ T6512] bridge_slave_0: entered promiscuous mode
[  148.726309][ T6555] BTRFS info (device loop3): force clearing of disk cache
[  148.747359][ T6555] BTRFS info (device loop3): turning off barriers
[  148.758119][ T6555] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  148.776305][ T6555] BTRFS info (device loop3): use lzo compression, level 0
[  148.789034][ T6555] BTRFS info (device loop3): disabling free space tree
[  148.796750][ T3491] hsr_slave_0: left promiscuous mode
[  148.809498][ T6555] BTRFS info (device loop3): enabling ssd optimizations
[  148.819214][ T6555] BTRFS info (device loop3): using spread ssd allocation scheme
[  148.844994][ T3491] hsr_slave_1: left promiscuous mode
[  148.852111][ T6555] BTRFS info (device loop3): not using ssd optimizations
[  148.867732][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.889806][ T6555] BTRFS info (device loop3): not using spread ssd allocation scheme
[  148.898369][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.917591][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.925946][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.947482][ T3491] bridge_slave_1: left allmulticast mode
[  148.953831][ T3491] bridge_slave_1: left promiscuous mode
[  148.962573][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.999796][ T3491] bridge_slave_0: left allmulticast mode
[  149.005556][ T3491] bridge_slave_0: left promiscuous mode
[  149.029961][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.085978][ T6555] BTRFS info (device loop3): rebuilding free space tree
[  149.153941][ T6555] BTRFS info (device loop3): disabling free space tree
[  149.162271][ T6555] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.173704][ T3491] veth1_macvtap: left promiscuous mode
[  149.194356][ T3491] veth0_macvtap: left promiscuous mode
[  149.205730][ T6555] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.216861][ T3491] veth1_vlan: left promiscuous mode
[  149.240106][ T3491] veth0_vlan: left promiscuous mode
[  149.253695][ T6555] BTRFS info (device loop3): checking UUID tree
[  149.555581][ T5788] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.743192][ T6125] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (6125)
[  149.854420][ T5789] Bluetooth: hci2: command tx timeout
[  150.249653][ T5789] Bluetooth: hci0: command tx timeout
[  151.679684][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  152.068229][ T5789] Bluetooth: hci2: command tx timeout
[  152.329702][ T5789] Bluetooth: hci0: command tx timeout
[  152.478745][ T3491] team0 (unregistering): Port device team_slave_1 removed
[  152.529310][ T3491] team0 (unregistering): Port device team_slave_0 removed
[  152.577336][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.626323][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.974623][ T3491] bond0 (unregistering): Released all slaves
[  153.044201][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.054391][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.061843][ T6512] bridge_slave_1: entered allmulticast mode
[  153.071453][ T6512] bridge_slave_1: entered promiscuous mode
[  153.232759][ T6512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.268629][ T6512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.462198][ T6512] team0: Port device team_slave_0 added
[  153.536993][ T6512] team0: Port device team_slave_1 added
[  153.709631][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.716673][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.810196][ T6512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.890529][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.897563][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.947729][ T6512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.977034][ T6609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.231'.
[  154.089515][ T5789] Bluetooth: hci2: command tx timeout
[  154.283079][ T6512] hsr_slave_0: entered promiscuous mode
[  154.311579][ T6512] hsr_slave_1: entered promiscuous mode
[  154.529047][ T6626] ip_tables: iptables: counters copy to user failed while replacing table
[  154.662546][ T3491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.677420][ T6629] device-mapper: multipath service-time: repeat_count > 1 is deprecated, using 1 instead
[  154.703225][ T6629] device-mapper: table: 248:7: multipath: service-time ps: invalid relative_throughput value (-EINVAL)
[  154.729022][ T6629] device-mapper: ioctl: error adding target to table
[  154.738830][ T6550] chnl_net:caif_netlink_parms(): no params data found
[  154.768384][ T6632] xt_socket: unknown flags 0xfa
[  156.364813][ T5789] Bluetooth: hci2: command tx timeout
[  156.404188][ T3491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.666449][ T3491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.844257][ T3491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.216813][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.247692][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.264885][ T6550] bridge_slave_0: entered allmulticast mode
[  157.288479][ T6550] bridge_slave_0: entered promiscuous mode
[  157.306916][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.320762][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.328172][ T6550] bridge_slave_1: entered allmulticast mode
[  157.351157][ T6550] bridge_slave_1: entered promiscuous mode
[  157.532931][ T6512] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  157.573445][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.604749][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.637014][ T6512] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  157.717723][ T6512] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  157.792603][ T6512] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  157.836514][ T6550] team0: Port device team_slave_0 added
[  157.988440][ T6550] team0: Port device team_slave_1 added
[  158.196294][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.223111][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.289794][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.306333][ T6656] loop1: detected capacity change from 0 to 32768
[  158.326405][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.334294][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.368627][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.403785][ T6656] 
[  158.403785][ T6656]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.403785][ T6656] 
[  158.539522][ T6656] 
[  158.539522][ T6656]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.539522][ T6656] 
[  158.573866][ T6656] 
[  158.573866][ T6656]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.573866][ T6656] 
[  158.692399][ T5785] 
[  158.692399][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.692399][ T5785] 
[  158.708840][ T6680] loop3: detected capacity change from 0 to 33280
[  158.716709][ T5785] 
[  158.716709][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.716709][ T5785] 
[  158.763348][ T6680] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  158.806833][ T6680] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.245: invalid indirect mapped block 256 (level 1)
[  158.919287][ T6680] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.245: invalid indirect mapped block 2683928664 (level 1)
[  158.948121][ T6680] EXT4-fs (loop3): 1 truncate cleaned up
[  158.964870][ T6680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.983654][ T6550] hsr_slave_0: entered promiscuous mode
[  159.006952][ T6550] hsr_slave_1: entered promiscuous mode
[  159.039093][ T6550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.047720][ T6550] Cannot create hsr debugfs directory
[  159.189098][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.443175][ T6512] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.756819][ T6512] 8021q: adding VLAN 0 to HW filter on device team0
[  159.796665][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.804057][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.850009][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  159.879110][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.886422][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.010694][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  160.056925][    T8] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  160.077755][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.097231][    T8] usb 2-1: Product: syz
[  160.104888][    T8] usb 2-1: Manufacturer: syz
[  160.113677][    T8] usb 2-1: SerialNumber: syz
[  160.226036][ T5867] usb 4-1: Using ep0 maxpacket: 32
[  160.251992][ T5867] usb 4-1: config index 0 descriptor too short (expected 19, got 18)
[  160.293045][ T5867] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  160.358435][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.381792][ T5867] usb 4-1: Product: syz
[  160.408375][ T5867] usb 4-1: Manufacturer: syz
[  160.425988][ T5789] Bluetooth: hci1: unknown advertising packet type: 0xff
[  160.426095][ T5789] Bluetooth: hci1: unknown advertising packet type: 0xfa
[  160.433919][ T5789] Bluetooth: hci1: unknown advertising packet type: 0x09
[  160.439619][ T5867] usb 4-1: SerialNumber: syz
[  160.442541][ T5789] Bluetooth: hci1: unknown advertising packet type: 0x05
[  160.453602][ T5789] Bluetooth: hci1: Malformed LE Event: 0x02
[  160.471205][ T5867] usb 4-1: config 0 descriptor??
[  160.517967][ T5867] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  160.562346][ T5867] dvb-usb: bulk message failed: -22 (2/0)
[  160.584151][    T8] rtl8150 2-1:1.0: couldn't reset the device
[  160.591083][    T8] rtl8150: probe of 2-1:1.0 failed with error -5
[  160.609819][    T8] usb 2-1: USB disconnect, device number 7
[  160.633464][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  160.705575][ T3491] hsr_slave_0: left promiscuous mode
[  160.711509][ T5867] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  160.711595][ T5867] usb 4-1: media controller created
[  160.739753][ T6701] dvb-usb: bulk message failed: -22 (3/0)
[  160.766025][ T3491] hsr_slave_1: left promiscuous mode
[  160.790985][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.814199][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.827997][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.849807][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.867878][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.893083][ T5867] usb 4-1: selecting invalid altsetting 7
[  160.895731][ T3491] bridge_slave_1: left allmulticast mode
[  160.909447][ T3491] bridge_slave_1: left promiscuous mode
[  160.915368][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.920547][ T5867] cxusb: set interface failed
[  160.928761][ T5867] dvb-usb: bulk message failed: -22 (1/0)
[  160.959075][ T3491] bridge_slave_0: left allmulticast mode
[  160.973182][ T3491] bridge_slave_0: left promiscuous mode
[  160.991173][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.054061][ T5867] DVB: Unable to find symbol lgdt330x_attach()
[  161.070728][ T5867] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  161.080084][ T3491] veth1_macvtap: left promiscuous mode
[  161.097104][ T3491] veth0_macvtap: left promiscuous mode
[  161.105162][ T3491] veth0_vlan: left promiscuous mode
[  161.224153][ T5867] rc_core: IR keymap rc-dvico-portable not found
[  161.232679][ T5867] Registered IR keymap rc-empty
[  161.243799][ T5867] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  161.259026][ T5867] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input6
[  161.278219][ T5867] dvb-usb: schedule remote query interval to 100 msecs.
[  161.319492][ T5867] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  161.344729][ T5867] usb 4-1: USB disconnect, device number 7
[  161.548449][ T5867] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  161.829686][ T1202] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  162.029495][ T1202] usb 2-1: Using ep0 maxpacket: 32
[  162.034381][ T5867] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  162.055644][ T1202] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  162.063929][ T1202] usb 2-1: config 0 has no interface number 0
[  162.088202][ T1202] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  162.112626][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.141301][ T1202] usb 2-1: Product: syz
[  162.145702][ T1202] usb 2-1: Manufacturer: syz
[  162.151666][ T1202] usb 2-1: SerialNumber: syz
[  162.160986][ T1202] usb 2-1: config 0 descriptor??
[  162.183673][ T1202] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  162.194124][ T1202] usb 2-1: selecting invalid altsetting 1
[  162.208474][ T1202] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  162.231256][ T1202] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  162.244046][ T1202] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  162.256129][ T1202] usb 2-1: media controller created
[  162.258804][ T5867] usb 4-1: Using ep0 maxpacket: 16
[  162.274024][ T5867] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  162.288392][ T5867] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  162.297858][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.314216][ T1202] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.320393][ T5867] usb 4-1: Product: syz
[  162.337948][ T5867] usb 4-1: Manufacturer: syz
[  162.342833][ T5867] usb 4-1: SerialNumber: syz
[  162.361834][ T5867] r8152-cfgselector 4-1: config 0 descriptor??
[  162.407452][ T6723] usb 2-1: dvb_usb_v2: could not submit urb no. 0 - get them all back
[  162.478873][ T1202] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  162.488427][ T1202] zl10353_read_register: readreg error (reg=127, ret==-71)
[  162.492977][ T3491] team0 (unregistering): Port device team_slave_1 removed
[  162.510324][ T1202] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  162.589597][ T5867] r8152-cfgselector 4-1: Needed 1 retries to read version
[  162.597527][ T5867] r8152-cfgselector 4-1: Unknown version 0x0000
[  162.618935][ T1202] usb 2-1: USB disconnect, device number 8
[  162.625293][ T5867] r8152-cfgselector 4-1: bad CDC descriptors
[  162.648704][ T3491] team0 (unregistering): Port device team_slave_0 removed
[  162.789144][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.799900][ T5867] r8152-cfgselector 4-1: Unknown version 0x0000
[  162.828501][ T5867] r8152-cfgselector 4-1: USB disconnect, device number 8
[  162.879267][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.401114][ T3491] bond0 (unregistering): Released all slaves
[  163.591841][ T6550] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  163.639768][ T6550] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.682495][ T6550] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.735050][ T6550] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.956765][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.072157][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.128526][ T6550] 8021q: adding VLAN 0 to HW filter on device team0
[  164.218336][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.225695][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.285031][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.292390][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.490139][ T5867] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  164.532696][   T27] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  164.730172][ T5867] usb 4-1: Using ep0 maxpacket: 32
[  164.738353][ T5867] usb 4-1: config index 0 descriptor too short (expected 19, got 18)
[  164.765360][   T27] usb 2-1: unable to get BOS descriptor or descriptor too short
[  164.787419][   T27] usb 2-1: not running at top speed; connect to a high speed hub
[  164.800340][ T5867] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  164.811211][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.821752][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.842136][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.857611][ T5867] usb 4-1: Product: syz
[  164.874442][ T5867] usb 4-1: Manufacturer: syz
[  164.879187][ T5867] usb 4-1: SerialNumber: syz
[  164.896697][   T27] usb 2-1: string descriptor 0 read error: -22
[  164.915974][   T27] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  164.932981][ T5867] usb 4-1: config 0 descriptor??
[  164.943523][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.956176][ T5867] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  164.975527][ T5867] dvb-usb: bulk message failed: -22 (2/0)
[  165.011947][   T27] usb 2-1: unit 3 not found!
[  165.036124][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  165.084690][ T5867] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  165.109191][ T5867] usb 4-1: media controller created
[  165.210720][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.221410][ T6749] cxusb: i2c wr: len=80 is too big!
[  165.221410][ T6749] 
[  165.254984][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.282998][ T6512] veth0_vlan: entered promiscuous mode
[  165.311484][ T5867] usb 4-1: selecting invalid altsetting 7
[  165.317472][ T5867] cxusb: set interface failed
[  165.338380][ T5867] dvb-usb: bulk message failed: -22 (1/0)
[  165.361604][ T6512] veth1_vlan: entered promiscuous mode
[  165.514974][ T5867] DVB: Unable to find symbol lgdt330x_attach()
[  165.540163][ T5867] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  165.567484][ T6512] veth0_macvtap: entered promiscuous mode
[  165.623518][ T6512] veth1_macvtap: entered promiscuous mode
[  165.755925][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.809625][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.831729][   T27] usb 2-1: USB disconnect, device number 9
[  165.854914][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.880778][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.899589][ T5867] rc_core: IR keymap rc-dvico-portable not found
[  165.910848][ T5867] Registered IR keymap rc-empty
[  165.938622][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.970775][ T5867] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  165.986992][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.029657][ T5867] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7
[  166.052340][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.077986][ T5867] dvb-usb: schedule remote query interval to 100 msecs.
[  166.094079][ T6512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.111594][ T5867] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  166.145041][ T6512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.170061][ T5867] usb 4-1: USB disconnect, device number 9
[  166.190840][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.234160][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  166.272242][ T6512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.291236][ T6512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.319800][ T6512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.349433][ T6512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.443677][ T5867] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  166.715980][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.736100][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.873160][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.892292][ T6550] veth0_vlan: entered promiscuous mode
[  166.904789][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.948636][ T6550] veth1_vlan: entered promiscuous mode
[  167.095992][ T6550] veth0_macvtap: entered promiscuous mode
[  167.155591][ T6550] veth1_macvtap: entered promiscuous mode
[  167.222558][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.274269][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.295603][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.316330][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.328862][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.354608][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.377380][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.422976][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.452780][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.479149][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.500411][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.514574][   T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  167.527594][ T6550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.560042][ T6550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.582207][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.643786][ T6550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.664029][ T6550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.683584][ T6550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.705777][ T6550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.710063][   T56] usb 5-1: Using ep0 maxpacket: 8
[  167.761263][   T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  167.783517][   T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  167.851817][   T56] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  167.879518][   T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.901150][   T56] usb 5-1: config 0 descriptor??
[  168.045266][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.083928][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.140594][ T6792] loop1: detected capacity change from 0 to 32768
[  168.147549][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.194761][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.235526][ T6792] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  168.326171][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.334785][ T6792] XFS (loop1): Ending clean mount
[  168.343861][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.351946][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.359050][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.366579][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.387015][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.399503][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.417267][   T56] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[  168.441066][   T56] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  168.527907][   T56] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71
[  168.575835][   T56] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71
[  168.627768][   T56] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71
[  168.666151][   T56] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71
[  168.739823][   T56] usb 5-1: USB disconnect, device number 2
[  168.780438][ T6820] fido_id[6820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  168.816006][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  169.237499][ T6826] bond0: (slave bond_slave_0): Releasing backup interface
[  170.241617][ T6863] kernel read not supported for file /per_cpu/cpu0/trace (pid: 6863 comm: syz.3.277)
[  170.266984][   T28] audit: type=1800 audit(1794587325.778:2): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.277" name="trace" dev="tracefs" ino=177 res=0 errno=0
[  171.554528][ T6887] loop1: detected capacity change from 0 to 1024
[  171.666360][ T6891] capability: warning: `syz.3.285' uses deprecated v2 capabilities in a way that may be insecure
[  172.294681][ T6907] device-mapper: ioctl: device has been removed from the dev hash table.
[  172.637385][ T6911] loop5: detected capacity change from 0 to 49152
[  172.674407][ T6911] EXT4-fs: Ignoring removed i_version option
[  172.764500][ T6911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  172.795922][ T6911] EXT4-fs (loop5): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  172.820792][ T6911] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  172.966600][ T6911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with journalled data mode. Quota mode: journalled.
[  173.040129][ T6931] device-mapper: table: 248:8: striped: Invalid stripe count (-EINVAL)
[  173.048487][ T6931] device-mapper: ioctl: error adding target to table
[  173.139043][ T6914] loop4: detected capacity change from 0 to 32768
[  173.150096][ T2137] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  173.226316][   T28] audit: type=1800 audit(1794587328.748:3): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.293" name="file1" dev="loop5" ino=17 res=0 errno=0
[  173.299828][ T6914] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  173.354809][ T6914] XFS (loop4): Ending clean mount
[  173.385878][ T2137] usb 4-1: Using ep0 maxpacket: 8
[  173.440871][ T2137] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  173.449293][ T2137] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.470253][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  173.503576][ T2137] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.522382][ T6550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.548534][ T2137] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  173.570001][ T2137] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  173.613682][ T2137] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  173.645930][ T6512] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  173.672167][ T2137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.692597][    T8] usb 2-1: Using ep0 maxpacket: 16
[  173.735712][    T8] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  173.788005][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.835090][    T8] usb 2-1: Product: syz
[  173.856110][    T8] usb 2-1: Manufacturer: syz
[  173.869455][    T8] usb 2-1: SerialNumber: syz
[  173.948363][ T2137] usb 4-1: GET_CAPABILITIES returned 0
[  173.968563][ T2137] usbtmc 4-1:16.0: can't read capabilities
[  174.129235][    T8] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  174.177684][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  174.216960][    T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  174.222638][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  174.236426][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  174.255126][    T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  174.267449][   T23] usb 4-1: USB disconnect, device number 10
[  174.284322][    T8] usb 2-1: media controller created
[  174.394431][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  174.579656][    T8] zl10353_read_register: readreg error (reg=127, ret==-71)
[  174.680119][    T8] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  174.702128][    T8] usb 2-1: USB disconnect, device number 10
[  175.050044][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  175.266702][   T23] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  175.290295][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.318971][   T23] usb 5-1: Product: syz
[  175.327109][   T23] usb 5-1: Manufacturer: syz
[  175.342475][   T23] usb 5-1: SerialNumber: syz
[  175.368744][   T23] ums_eneub6250 5-1:1.0: USB Mass Storage device detected
[  175.400679][ T6988] device-mapper: verity: sha256 using implementation "sha256-avx2"
[  175.451021][   T23] scsi host1: usb-storage 5-1:1.0
[  175.549038][ T6988] device-mapper: table: 248:9: verity: Hash device is too small (-E2BIG)
[  175.575828][ T6988] device-mapper: ioctl: error adding target to table
[  176.259381][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  176.299388][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  176.309385][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  177.279979][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  177.689575][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  177.799382][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  178.283772][ T6712] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  178.530597][ T6712] usb 2-1: unable to get BOS descriptor or descriptor too short
[  178.565788][ T6712] usb 2-1: not running at top speed; connect to a high speed hub
[  178.591080][ T6712] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[  178.620910][ T6712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  178.659663][ T6712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  178.697296][ T6712] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  178.755225][ T6712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.782036][    T8] wiimote 0005:057E:0306.0008: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  178.813259][ T6712] usb 2-1: config 0 descriptor??
[  178.847351][    T8] wiimote 0005:057E:0306.0008: New device registered
[  178.922507][ T6712] usb 2-1: can't set config #0, error -71
[  178.960019][ T6712] usb 2-1: USB disconnect, device number 11
[  179.030501][   T56] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  180.328519][ T7035] loop1: detected capacity change from 0 to 131072
[  180.342030][ T5790] wiimote 0005:057E:0306.0008: detected device: Nintendo Wii Remote (Gen 1)
[  180.371890][ T5790] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input9
[  180.385538][ T7035] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24)
[  180.394265][ T7035] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  180.402836][ T7035] F2FS-fs (loop1): Test dummy encryption mode enabled
[  180.431603][ T5790] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input10
[  180.443573][ T7035] F2FS-fs (loop1): invalid crc value
[  180.457423][ T5790] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0008/input/input8
[  180.503490][ T7035] F2FS-fs (loop1): Found nat_bits in checkpoint
[  180.541809][ T7025] wiimote 0005:057E:0306.0008: Device removed
[  180.554839][   T56] usb 6-1: unable to get BOS descriptor or descriptor too short
[  180.573804][ T7035] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  180.594759][   T56] usb 6-1: unable to read config index 0 descriptor/start: -71
[  180.602606][   T56] usb 6-1: can't read configurations, error -71
[  180.709284][ T7035] F2FS-fs (loop1): Start checkpoint disabled!
[  180.780434][ T7035] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  180.788401][ T7035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  181.228672][   T12] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  181.289988][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  181.482112][    T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  181.511780][    T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  181.549623][    T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  181.569154][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.602443][ T7059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  181.633038][    T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  181.966557][   T56] usb 4-1: USB disconnect, device number 11
[  182.478078][ T7089] loop1: detected capacity change from 0 to 33280
[  182.689587][   T23] ums_eneub6250: probe of 5-1:1.0 failed with error 3
[  182.703724][ T7089] EXT4-fs (loop1): Test dummy encryption mode enabled
[  182.725433][   T23] usb 5-1: USB disconnect, device number 3
[  182.744384][ T7089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.326: bg 0: block 7: invalid block bitmap
[  182.773427][ T7089] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6660: Corrupt filesystem
[  182.824792][ T7089] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #11: comm syz.1.326: corrupted xattr block 95: invalid header
[  182.850740][ T7089] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  182.863357][ T7089] EXT4-fs (loop1): 1 orphan inode deleted
[  182.870851][ T7089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.920909][ T7089] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  182.979065][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.109754][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  183.172984][ T7114] loop1: detected capacity change from 0 to 256
[  183.199737][ T5867] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  183.240967][ T7114] ip_tables: iptables: counters copy to user failed while replacing table
[  183.311805][   T23] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  183.332492][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'.
[  183.343155][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.399624][ T5867] usb 4-1: Using ep0 maxpacket: 16
[  183.426420][ T5867] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  183.439406][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.447957][ T5867] usb 4-1: Product: syz
[  183.454878][ T5867] usb 4-1: Manufacturer: syz
[  183.463039][ T5867] usb 4-1: SerialNumber: syz
[  183.477729][ T5867] usb 4-1: config 0 descriptor??
[  183.699987][    T8] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  183.899492][ T5867] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  183.910293][    T8] usb 2-1: config 0 has an invalid interface number: 60 but max is 0
[  183.932114][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  183.933255][    T8] usb 2-1: config 0 has no interface number 0
[  183.949121][ T5867] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  183.958398][ T5867] usb 4-1: media controller created
[  183.967659][    T8] usb 2-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 60415, setting to 1023
[  183.984859][    T8] usb 2-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 6424, setting to 64
[  184.013001][    T8] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11
[  184.028042][    T8] usb 2-1: New USB device strings: Mfr=15, Product=0, SerialNumber=0
[  184.038570][    T8] usb 2-1: Manufacturer: syz
[  184.052381][    T8] usb 2-1: config 0 descriptor??
[  184.063596][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  184.075169][ T7120] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  184.079733][    C1] usb 5-1: NFC: Urb failure (status -71)
[  184.102093][   T23] usb 5-1: NFC: Unable to get FW version
[  184.135033][   T23] pn533_usb: probe of 5-1:1.0 failed with error -71
[  184.159161][   T23] usb 5-1: USB disconnect, device number 4
[  184.168548][ T5867] zl10353_read_register: readreg error (reg=127, ret==0)
[  184.180902][ T5867] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  184.191644][ T5867] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  184.206059][ T5867] usb 4-1: USB disconnect, device number 12
[  184.285898][ T5867] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  184.328169][    T8] ftdi_sio 2-1:0.60: FTDI USB Serial Device converter detected
[  184.356975][    T8] usb 2-1: Detected SIO
[  184.376798][    T8] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  184.396531][    T8] usb 2-1: USB disconnect, device number 12
[  184.420894][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  184.436825][    T8] ftdi_sio 2-1:0.60: device disconnected
[  184.844461][ T7143] device-mapper: table: 248:11: adding target device ram8 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=524288
[  184.888629][ T7143] device-mapper: table: 248:11: adding target device ram8 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=65536
[  184.935506][ T7143] device-mapper: table: 248:11: ram8 too small for target: start=8191, len=4120, dev_size=8192
[  184.993913][ T7143] device-mapper: core: Cannot calculate initial queue limits
[  185.014743][ T7143] device-mapper: ioctl: unable to set up device queue for new table.
[  185.062939][ T7151] loop3: detected capacity change from 0 to 164
[  185.132010][ T7151] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=164
[  185.343933][ T7159] Zero length message leads to an empty skb
[  185.594808][ T7166] loop1: detected capacity change from 0 to 764
[  185.749523][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  186.434696][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  186.459420][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  186.520395][    T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  186.530324][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.538854][    T9] usb 4-1: Product: syz
[  186.581862][    T9] usb 4-1: Manufacturer: syz
[  186.586586][    T9] usb 4-1: SerialNumber: syz
[  186.627477][    T9] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  186.682133][    T9] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  186.682133][    T9]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  186.949593][ T7183] mmap: syz.4.344 (7183) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  187.369518][ T5789] Bluetooth: hci0: command tx timeout
[  187.386231][    T9] ums-sddr09: probe of 4-1:1.0 failed with error -5
[  187.559448][ T2137] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  187.591630][   T23] usb 4-1: USB disconnect, device number 13
[  187.779616][ T2137] usb 2-1: Using ep0 maxpacket: 8
[  187.828555][ T2137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  187.902846][ T2137] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  187.942708][ T2137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.972109][ T2137] usb 2-1: config 0 descriptor??
[  188.247718][ T6727] udevd[6727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.280011][ T2137] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  188.580772][   T23] usb 2-1: USB disconnect, device number 13
[  188.665027][   T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  188.908543][   T27] usb 5-1: Using ep0 maxpacket: 16
[  189.080302][   T27] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.552322][   T27] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.829413][   T27] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  189.919076][   T27] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.952582][   T27] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  190.026729][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.077069][   T27] usb 5-1: config 0 descriptor??
[  190.329928][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  190.362347][   T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  190.609531][   T23] usb 2-1: Using ep0 maxpacket: 32
[  190.643147][   T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 50, using maximum allowed: 30
[  190.662671][ T7208] loop4: detected capacity change from 0 to 1024
[  190.689834][   T23] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 50
[  190.710966][ T7208] hfsplus: unable to change nls mapping
[  190.717167][ T7208] hfsplus: unable to parse mount options
[  190.740988][    T8] usb 4-1: Using ep0 maxpacket: 8
[  190.750934][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  190.766241][    T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  190.795508][   T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  190.806884][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  190.839171][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.862335][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  190.872237][   T27] hid (null): unknown global tag 0xd7
[  190.872262][   T27] hid (null): unknown global tag 0xd
[  190.874962][   T27] hid (null): invalid report_count 880179417
[  190.920668][   T23] usb 2-1: config 0 descriptor??
[  190.949411][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  190.967693][   T27] hid (null): unknown global tag 0xd
[  190.979424][   T27] hid (null): unknown global tag 0x28
[  190.989745][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.008272][   T27] hid (null): unknown global tag 0xe
[  191.028793][   T27] hid (null): report_id 1223503929 is invalid
[  191.077870][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  191.112166][   T27] usb 5-1: USB disconnect, device number 5
[  191.119377][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.402915][   T23] wacom 0003:056A:0094.000A: Using device in hidraw-only mode
[  191.440407][   T23] wacom 0003:056A:0094.000A: hidraw0: USB HID vff.f8 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0
[  191.589533][    T8] usb 4-1: GET_CAPABILITIES returned 0
[  191.595596][    T8] usbtmc 4-1:16.0: can't read capabilities
[  191.710880][    T8] usb 2-1: USB disconnect, device number 14
[  191.722627][ T7236] fido_id[7236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  191.846325][   T27] usb 4-1: USB disconnect, device number 14
[  192.563106][ T7250] loop4: detected capacity change from 0 to 2048
[  192.668276][ T7256] loop5: detected capacity change from 0 to 128
[  192.721632][ T7259] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.792847][   T28] audit: type=1800 audit(1794587348.298:4): pid=7256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.357" name="file1" dev="loop5" ino=1048654 res=0 errno=0
[  192.909418][   T28] audit: type=1326 audit(1794587348.318:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.3.358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f150bfa94d9 code=0x0
[  194.429468][ T7289] netlink: 260 bytes leftover after parsing attributes in process `syz.3.361'.
[  194.909979][   T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  195.101552][   T23] usb 5-1: config 0 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.136127][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  195.145882][   T23] usb 5-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00
[  195.155568][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.176325][   T23] usb 5-1: config 0 descriptor??
[  195.495214][ T7315] loop1: detected capacity change from 0 to 64
[  195.611520][ T7315] MINIX-fs: mounting file system with errors, running fsck is recommended
[  195.645643][   T23] wacom 0003:056A:033C.000B: Unknown device_type for 'HID 056a:033c'. Assuming pen.
[  195.668026][ T7317] ieee802154 phy0 wpan0: encryption failed: -22
[  195.706419][   T23] wacom 0003:056A:033C.000B: hidraw0: USB HID v0.00 Joystick [HID 056a:033c] on usb-dummy_hcd.4-1/input0
[  195.786605][   T23] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033C.000B/input/input11
[  195.969566][   T23] usb 5-1: USB disconnect, device number 6
[  196.051371][ T5785] VFS: Lookup of '.¨' in minix loop1 would have caused loop
[  196.081278][ T5785] VFS: Lookup of '.¨' in minix loop1 would have caused loop
[  196.154816][ T7318] fido_id[7318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  196.810915][ T7331] support for cryptoloop has been removed.  Use dm-crypt instead.
[  197.325311][ T1101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.801042][ T1101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.146109][ T1101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.504302][ T1101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.741670][ T7329] loop4: detected capacity change from 0 to 40427
[  198.812352][ T7329] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  198.865800][ T7344] rxe_eth0 speed is unknown, defaulting to 1000
[  198.884577][ T7329] F2FS-fs (loop4): invalid crc value
[  198.987079][ T7329] F2FS-fs (loop4): Found nat_bits in checkpoint
[  199.364585][ T7329] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  199.862033][ T6512] syz-executor: attempt to access beyond end of device
[  199.862033][ T6512] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  199.972928][ T6512] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  200.021546][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  200.034185][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  200.040692][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  200.067817][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  200.077154][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  200.085875][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  200.095916][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  200.104866][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  201.348113][ T7370] loop5: detected capacity change from 0 to 33280
[  201.400031][ T7358] rxe_eth0 speed is unknown, defaulting to 1000
[  201.406883][ T7370] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  201.639657][ T7370] EXT4-fs (loop5): 1 truncate cleaned up
[  201.693126][ T7370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.920860][ T7370] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  202.169682][ T5794] Bluetooth: hci1: command tx timeout
[  202.261519][ T6550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.669715][ T7386] loop4: detected capacity change from 0 to 1024
[  203.789709][ T2137] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  204.039821][ T2137] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  204.079934][ T2137] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  204.132153][ T2137] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  204.176038][ T7387] loop5: detected capacity change from 0 to 32768
[  204.192644][ T7403] loop3: detected capacity change from 0 to 33280
[  204.199286][ T2137] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  204.253370][ T5794] Bluetooth: hci1: command tx timeout
[  204.284345][ T2137] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  204.300963][ T7387] (syz.5.386,7387,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "error‹=continue" or missing value
[  204.347314][ T7403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.399300][ T2137] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  204.429205][ T7387] (syz.5.386,7387,1):ocfs2_fill_super:1178 ERROR: status = -22
[  204.480996][ T7403] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.513618][ T2137] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  204.615475][ T2137] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e
[  204.690964][ T2137] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3
[  204.742762][ T2137] usb 5-1: Product: syz
[  204.747204][ T2137] usb 5-1: Manufacturer: syz
[  204.805441][ T2137] usb 5-1: SerialNumber: syz
[  204.856213][ T7397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.886449][ T7358] chnl_net:caif_netlink_parms(): no params data found
[  204.913023][ T7397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.959541][ T7397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.967633][ T7397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  205.168615][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.211483][ T2137] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected
[  205.224664][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  205.623470][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82
[  205.631721][ T2137] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  205.642646][ T2137] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  205.688308][ T2137] usb 5-1: USB disconnect, device number 7
[  205.953213][ T2137] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  206.000489][ T2137] keyspan 5-1:1.0: device disconnected
[  206.311320][ T7419] tap0: tun_chr_ioctl cmd 1074025677
[  206.318412][ T7419] tap0: linktype set to 1
[  206.329551][ T5794] Bluetooth: hci1: command tx timeout
[  206.467652][ T1101] hsr_slave_0: left promiscuous mode
[  206.513974][ T1101] hsr_slave_1: left promiscuous mode
[  206.537825][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.577978][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.611346][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.655425][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.693144][ T1101] bridge_slave_1: left allmulticast mode
[  206.719259][ T1101] bridge_slave_1: left promiscuous mode
[  206.744840][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.800784][ T1101] bridge_slave_0: left allmulticast mode
[  206.828471][ T1101] bridge_slave_0: left promiscuous mode
[  206.857674][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.998622][ T1101] veth1_macvtap: left promiscuous mode
[  207.009925][ T1101] veth0_macvtap: left promiscuous mode
[  207.031462][ T1101] veth1_vlan: left promiscuous mode
[  207.037068][ T1101] veth0_vlan: left promiscuous mode
[  207.668499][ T7444] loop4: detected capacity change from 0 to 1024
[  208.121320][ T7446] netlink: 76 bytes leftover after parsing attributes in process `syz.4.399'.
[  208.409540][ T5794] Bluetooth: hci1: command tx timeout
[  208.837072][ T1101] team0 (unregistering): Port device team_slave_1 removed
[  208.914420][ T1101] team0 (unregistering): Port device team_slave_0 removed
[  208.993859][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.787555][ T1101] bond0 (unregistering): Released all slaves
[  209.889102][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.897353][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.912269][ T7358] bridge_slave_0: entered allmulticast mode
[  209.921727][ T7358] bridge_slave_0: entered promiscuous mode
[  210.016570][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.089302][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.099647][ T7358] bridge_slave_1: entered allmulticast mode
[  210.129549][ T7358] bridge_slave_1: entered promiscuous mode
[  210.368959][ T7358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.461144][ T7358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.691860][   T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  210.742216][ T7358] team0: Port device team_slave_0 added
[  210.810279][ T7358] team0: Port device team_slave_1 added
[  210.880960][ T7458] ieee802154 phy0 wpan0: encryption failed: -22
[  210.923766][   T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.949516][   T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  211.004674][   T27] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  211.059429][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.116557][   T27] usb 6-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  211.167897][   T27] usb 6-1: No valid video chain found.
[  211.356733][ T2137] usb 6-1: USB disconnect, device number 4
[  211.500291][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.562286][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.697350][ T7358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.797190][ T7358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.852930][ T7358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.049699][ T7358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.431799][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'.
[  212.490294][ T7358] hsr_slave_0: entered promiscuous mode
[  212.564673][ T7358] hsr_slave_1: entered promiscuous mode
[  212.630758][ T7358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.730701][ T7358] Cannot create hsr debugfs directory
[  212.750624][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.405'.
[  213.243632][ T7472] loop5: detected capacity change from 0 to 256
[  213.290672][ T7472] exfat: Deprecated parameter 'utf8'
[  213.296082][ T7472] exfat: Deprecated parameter 'utf8'
[  213.366839][ T7472] exfat: Deprecated parameter 'namecase'
[  213.475209][ T7472] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  213.644182][ T7462] loop3: detected capacity change from 0 to 32768
[  214.123246][ T7358] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  214.199676][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  214.213340][ T7358] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  214.261746][ T7358] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  214.295926][ T7358] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  214.412070][    T9] usb 6-1: Using ep0 maxpacket: 16
[  214.423884][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  214.449530][    T9] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  214.487139][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.528570][    T9] usb 6-1: config 0 descriptor??
[  214.535239][ T7478] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  214.615383][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.727617][ T7358] 8021q: adding VLAN 0 to HW filter on device team0
[  214.818581][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.825895][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.954698][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.961995][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.042252][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.065195][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.126316][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.164138][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.190371][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.213399][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.241060][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.248854][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.286917][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.315347][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unknown main item tag 0x0
[  215.362909][    T9] hid-sensor-hub 0003:0C70:F00D.000C: unbalanced collection at end of report description
[  215.378444][ T7497] loop3: detected capacity change from 0 to 33792
[  215.400672][ T7497] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  215.419503][    T9] hid-sensor-hub 0003:0C70:F00D.000C: parse failed
[  215.448210][    T9] hid-sensor-hub: probe of 0003:0C70:F00D.000C failed with error -22
[  215.473748][    T9] aquacomputer_d5next 0003:0C70:F00D.000C: unbalanced collection at end of report description
[  215.498065][    T9] aquacomputer_d5next: probe of 0003:0C70:F00D.000C failed with error -22
[  215.515062][ T7497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  215.528164][ T7497] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.603846][    T9] usb 6-1: USB disconnect, device number 5
[  215.633932][ T7497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.408: bg 0: block 112: padding at end of block bitmap is not set
[  215.716621][ T7497] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  215.780307][ T7497] EXT4-fs (loop3): This should not happen!! Data will be lost
[  215.780307][ T7497] 
[  215.820624][ T7497] EXT4-fs (loop3): Total free blocks count 0
[  215.849784][ T7497] EXT4-fs (loop3): Free/Dirty block details
[  215.869614][ T7497] EXT4-fs (loop3): free_blocks=0
[  215.879867][ T7497] EXT4-fs (loop3): dirty_blocks=0
[  215.899477][ T7497] EXT4-fs (loop3): Block reservation details
[  215.929996][ T7497] EXT4-fs (loop3): i_reserved_data_blocks=0
[  215.975932][ T7358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.089548][    T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  216.114996][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  216.279763][    T8] usb 5-1: Using ep0 maxpacket: 32
[  216.298766][    T8] usb 5-1: config index 0 descriptor too short (expected 27632, got 27)
[  216.333742][    T8] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  216.349500][ T5870] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  216.357740][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  216.390392][    T8] usb 5-1: config 1 has no interface number 0
[  216.406879][    T8] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  216.440163][    T8] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  216.454322][    T8] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  216.466341][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.504267][    T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  216.551964][ T5870] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[  216.560579][ T5870] usb 6-1: config 0 has no interface number 0
[  216.566794][ T5870] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  216.598382][ T5870] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  216.636982][ T5870] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  216.646696][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.662898][ T5870] usb 6-1: Product: syz
[  216.668236][ T5870] usb 6-1: Manufacturer: syz
[  216.681636][ T5870] usb 6-1: SerialNumber: syz
[  216.720135][ T5870] usb 6-1: config 0 descriptor??
[  216.722179][    T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  216.748531][ T5870] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected
[  216.803232][ T5870] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  216.822292][ T7358] veth0_vlan: entered promiscuous mode
[  216.882423][ T7358] veth1_vlan: entered promiscuous mode
[  217.091988][ T7358] veth0_macvtap: entered promiscuous mode
[  217.122827][ T7358] veth1_macvtap: entered promiscuous mode
[  217.191930][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.229927][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.241500][   T27] usb 5-1: USB disconnect, device number 8
[  217.261991][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.288772][   T27] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  217.298410][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.317787][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.344545][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.377418][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.409483][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.431086][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.449968][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.469504][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.486366][ T7522] loop3: detected capacity change from 0 to 32768
[  217.493743][ T7358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.524932][ T5870] usb 6-1: USB disconnect, device number 6
[  217.533735][ T7358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.552175][ T5870] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  217.581481][ T7358] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.600264][ T5870] kobil_sct 6-1:0.148: device disconnected
[  217.627657][ T7358] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.656061][ T7358] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.677813][ T7358] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.699990][ T7358] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.019887][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.027838][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.133947][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.145452][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.217160][ T7541] loop5: detected capacity change from 0 to 256
[  218.331064][   T27] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  218.563706][ T7548] loop5: detected capacity change from 0 to 128
[  218.580273][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  218.597076][   T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  218.623110][ T7548] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  218.645003][   T27] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  218.659518][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.667789][   T27] usb 5-1: Product: syz
[  218.692552][ T7548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.701940][   T27] usb 5-1: Manufacturer: syz
[  218.706610][   T27] usb 5-1: SerialNumber: syz
[  218.741874][   T27] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  218.785624][   T27] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  218.785624][   T27]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  218.829489][   T28] audit: type=1800 audit(1794587374.338:6): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.417" name="file1" dev="loop5" ino=104 res=0 errno=0
[  218.968270][ T7556] loop3: detected capacity change from 0 to 1024
[  219.180166][ T5790] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  219.219171][   T27] ums-sddr09: probe of 5-1:1.0 failed with error -32
[  219.268846][   T27] usb 5-1: USB disconnect, device number 9
[  219.371886][ T5790] usb 7-1: Using ep0 maxpacket: 32
[  219.387671][ T5790] usb 7-1: too many configurations: 17, using maximum allowed: 8
[  219.403893][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.415936][ T5790] usb 7-1: config 0 has no interface number 0
[  219.427161][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.437976][ T5790] usb 7-1: config 0 has no interface number 0
[  219.451911][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.469584][    T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  219.488692][ T5790] usb 7-1: config 0 has no interface number 0
[  219.517945][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.546219][ T5790] usb 7-1: config 0 has no interface number 0
[  219.565515][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.586113][ T5790] usb 7-1: config 0 has no interface number 0
[  219.601427][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.611917][ T5790] usb 7-1: config 0 has no interface number 0
[  219.621256][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.630097][ T5790] usb 7-1: config 0 has no interface number 0
[  219.640165][ T5790] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  219.652085][ T5790] usb 7-1: config 0 has no interface number 0
[  219.664643][ T5790] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  219.675554][ T5790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.689033][    T8] usb 6-1: Using ep0 maxpacket: 8
[  219.694802][ T5790] usb 7-1: Product: syz
[  219.705562][ T5790] usb 7-1: Manufacturer: syz
[  219.711238][ T5790] usb 7-1: SerialNumber: syz
[  219.716477][    T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  219.730773][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.740430][ T5790] usb 7-1: config 0 descriptor??
[  219.745977][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  219.775670][ T5790] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz)
[  219.784764][    T8] pvrusb2: Hardware description: Terratec Grabster AV400
[  219.792573][    T8] pvrusb2: **********
[  219.796723][    T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  219.808932][    T8] pvrusb2: Important functionality might not be entirely working.
[  219.817544][    T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  219.859476][    T8] pvrusb2: **********
[  219.939711][    T9] usb 4-1: Using ep0 maxpacket: 16
[  219.948799][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  219.999481][    T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  220.001243][ T2327] pvrusb2: Invalid write control endpoint
[  220.050246][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.058702][ T5790] etas_es58x 7-1:0.2: could not retrieve the product info string
[  220.096152][    T9] usb 4-1: config 0 descriptor??
[  220.122673][ T7563] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  220.244237][ T7560] pvrusb2: Invalid write control endpoint
[  220.294418][ T5790] usb 6-1: USB disconnect, device number 7
[  220.322727][ T2327] pvrusb2: Invalid write control endpoint
[  220.360781][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  220.403031][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  220.432457][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  220.459042][ T2327] pvrusb2: Device being rendered inoperable
[  220.488903][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  220.510901][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  220.519979][ T7554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.543506][ T7554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.583451][ T2327] pvrusb2: Attached sub-driver cx25840
[  220.599583][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  220.613945][    T9] hid_parser_main: 934 callbacks suppressed
[  220.613971][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.630679][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  220.649086][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.688632][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.719070][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.755014][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.765167][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.791998][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.812178][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.839959][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.858486][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unknown main item tag 0x0
[  220.890244][    T9] hid-sensor-hub 0003:0C70:F00D.000D: unbalanced collection at end of report description
[  220.911594][    T9] hid-sensor-hub 0003:0C70:F00D.000D: parse failed
[  220.918596][    T9] hid-sensor-hub: probe of 0003:0C70:F00D.000D failed with error -22
[  220.964479][    T9] aquacomputer_d5next 0003:0C70:F00D.000D: unbalanced collection at end of report description
[  220.990715][    T9] aquacomputer_d5next: probe of 0003:0C70:F00D.000D failed with error -22
[  221.039461][    T9] usb 4-1: USB disconnect, device number 15
[  221.046449][ T7583] loop5: detected capacity change from 0 to 33280
[  221.123455][ T7583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.157854][ T7583] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.214373][ T7583] EXT4-fs (loop5): shut down requested (2)
[  221.225747][ T7573] loop4: detected capacity change from 0 to 40427
[  221.326055][ T7573] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  221.354946][ T7573] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  221.384109][ T6550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.398947][ T7573] F2FS-fs (loop4): invalid crc value
[  221.705003][ T7600] loop3: detected capacity change from 0 to 256
[  221.871768][ T7573] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  221.917101][ T7573] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  221.963074][ T5867] usb 7-1: USB disconnect, device number 2
[  222.011686][ T5867] etas_es58x 7-1:0.2: Disconnecting syz syz
[  222.133024][   T28] audit: type=1800 audit(1794587377.658:7): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file1" dev="loop4" ino=10 res=0 errno=0
[  222.216432][ T7608] loop6: detected capacity change from 0 to 36864
[  222.238387][ T7608] EXT4-fs: Ignoring removed orlov option
[  222.265260][ T7608] EXT4-fs (loop6): Test dummy encryption mode enabled
[  222.289168][ T6512] syz-executor: attempt to access beyond end of device
[  222.289168][ T6512] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  222.324041][ T6512] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  222.345953][ T7608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.477283][ T7616] loop5: detected capacity change from 0 to 64
[  222.519645][ T5790] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  222.740093][ T5790] usb 4-1: Using ep0 maxpacket: 8
[  222.769116][ T5790] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  222.808234][ T5790] usb 4-1: config 179 has no interface number 0
[  222.845230][ T5790] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  222.868722][ T7608] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  222.889584][ T5790] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  222.918070][ T7608] FS-Cache: Cache "CacheFiles" added (type cachefiles)
[  222.951460][ T5790] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  222.960209][ T7623] loop5: detected capacity change from 0 to 16
[  222.986943][ T5790] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  223.009286][ T7608] CacheFiles: File cache on CacheFiles registered
[  223.016715][ T7608] CacheFiles: File cache on CacheFiles unregistering
[  223.047702][ T7623] erofs: (device loop5): mounted with root inode @ nid 36.
[  223.055372][ T5790] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  223.129674][ T5790] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  223.149462][ T7608] FS-Cache: Withdrawing cache "CacheFiles" (0 objs)
[  223.175999][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.209731][ T7611] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  223.247340][ T7358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.603622][ T7631] loop4: detected capacity change from 0 to 164
[  223.630389][ T7632] loop6: detected capacity change from 0 to 33280
[  223.773849][ T7632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.802742][ T5790] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14
[  223.900401][ T7632] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.082171][ T7632] EXT4-fs (loop6): shut down requested (2)
[  224.292741][ T5870] usb 4-1: USB disconnect, device number 16
[  224.292972][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  224.307152][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  224.347833][ T5870] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  224.405362][ T7358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.844972][ T7657] loop6: detected capacity change from 0 to 33280
[  224.939586][ T7657] EXT4-fs (loop6): 1 truncate cleaned up
[  224.954101][ T7657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000010000 r/w without journal. Quota mode: none.
[  225.188188][ T7646] loop4: detected capacity change from 0 to 40427
[  225.268876][ T7646] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  225.311360][ T7646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  225.367975][ T7358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000010000.
[  225.381052][ T7646] F2FS-fs (loop4): invalid crc value
[  225.460472][ T7646] F2FS-fs (loop4): Found nat_bits in checkpoint
[  225.529232][ T7672] loop3: detected capacity change from 0 to 33280
[  225.559416][ T5870] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  225.607148][ T7672] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.442: corrupted in-inode xattr: invalid ea_ino
[  225.694540][ T7646] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  225.702065][ T7672] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.442: couldn't read orphan inode 15 (err -117)
[  225.713967][ T7646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  225.759817][ T5870] usb 6-1: Using ep0 maxpacket: 16
[  225.774658][ T5870] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  225.792151][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.809712][ T5870] usb 6-1: config 0 has no interface number 0
[  225.833395][ T5870] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  225.853758][ T5870] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  225.869485][ T5867] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  225.908006][ T5870] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  225.937576][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.966338][ T5870] usb 6-1: Product: syz
[  225.971071][ T5870] usb 6-1: Manufacturer: syz
[  225.989535][ T5870] usb 6-1: SerialNumber: syz
[  226.018895][ T5870] usb 6-1: config 0 descriptor??
[  226.036165][ T7665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  226.051626][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.076113][ T7665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  226.123027][ T5867] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.139390][ T5867] usb 7-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  226.161310][ T5867] usb 7-1: config 1 interface 0 has no altsetting 0
[  226.174521][ T5867] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  226.193053][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.206321][ T5867] usb 7-1: Product: syz
[  226.223414][ T5867] usb 7-1: Manufacturer: syz
[  226.239391][ T5867] usb 7-1: SerialNumber: syz
[  226.274342][ T5867] usb-storage 7-1:1.0: USB Mass Storage device detected
[  226.300150][ T5867] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  226.334413][ T7665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  226.342705][ T7665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  226.558289][ T5870] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  226.575543][ T2137] usb 7-1: USB disconnect, device number 3
[  226.680124][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  226.755185][ T5870] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 137
[  226.873839][ T5867] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  226.883550][ T5867] usb 4-1: config 0 has no interface number 0
[  226.896688][ T5867] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  226.914206][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.924118][ T5867] usb 4-1: Product: syz
[  226.928399][ T5867] usb 4-1: Manufacturer: syz
[  226.938600][ T5867] usb 4-1: SerialNumber: syz
[  226.970311][ T5867] usb 4-1: config 0 descriptor??
[  227.012152][ T6712] usb 6-1: USB disconnect, device number 8
[  227.192730][ T5867] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  227.240443][ T5867] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  227.271636][ T5867] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  227.283751][ T5867] usb 4-1: media controller created
[  227.306674][ T7706] loop6: detected capacity change from 0 to 16
[  227.356386][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  227.395299][ T7706] erofs: (device loop6): mounted with root inode @ nid 36.
[  228.098500][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.451'.
[  228.533921][ T5867] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  228.675700][ T5867] usb 4-1: USB disconnect, device number 17
[  228.843083][ T7726] loop6: detected capacity change from 0 to 32768
[  228.865829][ T7723] loop5: detected capacity change from 0 to 32768
[  228.890983][ T7726] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  228.940275][ T7723] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.449 (7723)
[  229.005278][ T7723] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  229.045397][ T7723] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  229.103110][ T7723] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  229.146206][ T7723] BTRFS info (device loop5): use zstd compression, level 3
[  229.180653][ T7723] BTRFS info (device loop5): using free space tree
[  229.207466][ T6684] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12
[  229.485335][ T7723] BTRFS info (device loop5): enabling ssd optimizations
[  229.530382][ T7723] BTRFS info (device loop5): auto enabling async discard
[  229.775670][   T28] audit: type=1800 audit(1794587385.278:8): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.449" name="file1" dev="loop5" ino=260 res=0 errno=0
[  229.847182][ T7774] loop3: detected capacity change from 0 to 33280
[  229.923414][ T6550] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  229.956789][ T7774] EXT4-fs error (device loop3): ext4_init_orphan_info:585: comm syz.3.458: inode #0: comm syz.3.458: iget: illegal inode #
[  230.069389][ T7774] EXT4-fs (loop3): get orphan inode failed
[  230.075845][ T7774] EXT4-fs (loop3): mount failed
[  230.136783][ T7742] loop4: detected capacity change from 0 to 32768
[  230.213700][ T7783] loop6: detected capacity change from 0 to 128
[  230.269514][ T6684] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop5 scanned by udevd (6684)
[  230.287667][ T7783] FAT-fs (loop6): bogus number of reserved sectors
[  230.304212][ T7742] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.365884][ T7783] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  230.431459][ T7783] FAT-fs (loop6): Can't find a valid FAT filesystem
[  230.477319][ T7742] XFS (loop4): Ending clean mount
[  230.580512][ T7742] XFS (loop4): Quotacheck needed: Please wait.
[  230.856291][ T7742] XFS (loop4): Quotacheck: Done.
[  231.248192][ T6512] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  231.377061][ T7806] loop5: detected capacity change from 0 to 128
[  231.385620][ T7806] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  231.434167][ T7806] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  231.642436][   T49] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  231.856785][ T7795] loop3: detected capacity change from 0 to 32768
[  231.936314][ T7795] 
[  231.936314][ T7795]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  231.936314][ T7795] 
[  232.003115][ T7795] ERROR: (device loop3): diWrite: ixpxd invalid
[  232.003115][ T7795] 
[  232.032864][ T7795] ERROR: (device loop3): remounting filesystem as read-only
[  232.079548][ T7795] ERROR: (device loop3): txCommit: 
[  232.079548][ T7795] 
[  232.089554][ T6712] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  232.130245][ T7795] ERROR: (device loop3): dtReadFirst: btstack overrun
[  232.130245][ T7795] 
[  232.155062][ T7795] btstack dump:
[  232.158616][ T7795] bn = 0, index = 0
[  232.176754][ T7795] bn = 0, index = 0
[  232.201824][ T7795] bn = 0, index = 0
[  232.205745][ T7795] bn = 0, index = 0
[  232.219979][ T7803] loop6: detected capacity change from 0 to 40427
[  232.247649][ T7795] bn = 0, index = 0
[  232.252827][ T7803] F2FS-fs (loop6): invalid crc value
[  232.253401][ T7795] bn = 0, index = 0
[  232.264416][ T7795] bn = 0, index = 0
[  232.268940][ T7795] bn = 0, index = 0
[  232.281892][ T6712] usb 6-1: config 0 interface 0 has no altsetting 0
[  232.288689][ T6712] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  232.298329][ T6712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.319881][ T6712] usb 6-1: config 0 descriptor??
[  232.349373][ T7803] F2FS-fs (loop6): Found nat_bits in checkpoint
[  232.620759][ T7803] F2FS-fs (loop6): Start checkpoint disabled!
[  232.632614][ T7816] device-mapper: table: 248:12: crypt: Integrity profile not supported. (-EINVAL)
[  232.647899][ T7816] device-mapper: ioctl: error adding target to table
[  232.709426][ T7803] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  232.744932][ T6712] hid (null): unknown global tag 0xfd
[  232.761531][ T6712] hid (null): unknown global tag 0xc
[  232.780608][ T6712] hid (null): unknown global tag 0xc
[  232.786006][ T6712] hid (null): unknown global tag 0xd
[  232.813942][ T6712] hid (null): usage index exceeded
[  232.872671][ T6712] waltop 0003:172F:0034.000E: unexpected long global item
[  232.900266][ T6712] waltop: probe of 0003:172F:0034.000E failed with error -22
[  232.960496][ T6712] usb 6-1: USB disconnect, device number 9
[  233.101344][   T49] kworker/u4:3: attempt to access beyond end of device
[  233.101344][   T49] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  233.135243][   T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  233.156672][   T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  233.304783][ T7838] loop3: detected capacity change from 0 to 33280
[  233.380091][ T7838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.586777][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.837546][ T7853] loop3: detected capacity change from 0 to 164
[  234.035079][ T7848] loop5: detected capacity change from 0 to 8192
[  234.069771][ T6712] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  234.136698][ T7848] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  234.202622][ T7848] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  234.249865][ T7848] REISERFS (device loop5): using ordered data mode
[  234.281866][ T6712] usb 7-1: unable to get BOS descriptor or descriptor too short
[  234.289727][ T7848] reiserfs: using flush barriers
[  234.318188][ T7848] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  234.353687][ T6712] usb 7-1: not running at top speed; connect to a high speed hub
[  234.373095][ T6712] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  234.373375][ T7848] REISERFS (device loop5): checking transaction log (loop5)
[  234.397751][ T6712] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  234.452340][ T6712] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  234.465099][ T7844] loop4: detected capacity change from 0 to 40427
[  234.466710][ T7848] REISERFS (device loop5): Using r5 hash to sort names
[  234.482766][ T6712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.503804][ T6712] usb 7-1: Product: syz
[  234.528462][ T6712] usb 7-1: Manufacturer: syz
[  234.533749][ T7844] F2FS-fs (loop4): invalid crc value
[  234.545739][ T6712] usb 7-1: SerialNumber: syz
[  234.564525][ T7848] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  234.601424][ T7844] F2FS-fs (loop4): Found nat_bits in checkpoint
[  234.820626][ T7844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  234.896992][ T5867] wacom 0003:056A:003F.000F: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[  234.909052][ T7872] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2481, free_space(entry_count) 2
[  235.009509][ T7872] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 556. Fsck?
[  235.028765][ T6712] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  235.069037][ T6512] syz-executor: attempt to access beyond end of device
[  235.069037][ T6512] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.079494][ T7872] REISERFS (device loop5): Remounting filesystem read-only
[  235.130377][ T6512] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  235.148176][ T7872] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  235.178432][ T7874] fido_id[7874]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  235.254677][ T6712] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  235.373431][ T6712] usb 7-1: USB disconnect, device number 4
[  235.492667][ T6684] udevd[6684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.580557][ T2137] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  235.832507][ T2137] usb 4-1: Using ep0 maxpacket: 8
[  235.869196][ T2137] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  235.887450][ T2137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.953308][ T2137] pvrusb2: Hardware description: Terratec Grabster AV400
[  235.979506][ T2137] pvrusb2: **********
[  235.988032][ T2137] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  236.025855][ T2137] pvrusb2: Important functionality might not be entirely working.
[  236.052940][ T2137] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  236.094889][ T2137] pvrusb2: **********
[  236.142966][ T2327] pvrusb2: Invalid write control endpoint
[  237.108898][ T7879] pvrusb2: Invalid write control endpoint
[  237.138732][   T56] usb 4-1: USB disconnect, device number 18
[  237.145602][ T2327] pvrusb2: Invalid write control endpoint
[  237.174132][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  237.201422][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  237.209924][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  237.247807][ T7903] loop6: detected capacity change from 0 to 128
[  237.252658][ T2327] pvrusb2: Device being rendered inoperable
[  237.273363][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  237.319546][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  237.346674][ T2327] pvrusb2: Attached sub-driver cx25840
[  237.359410][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  237.373012][ T6684] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  237.397220][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  237.637265][ T7912] loop6: detected capacity change from 0 to 256
[  237.701127][ T5870] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  237.741536][ T7912] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  237.924416][ T5870] usb 6-1: Using ep0 maxpacket: 8
[  237.952997][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short
[  238.004404][ T5870] usb 6-1: New USB device found, idVendor=0e41, idProduct=5050, bcdDevice= 0.40
[  238.040088][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.048498][ T5870] usb 6-1: Product: syz
[  238.072949][ T5870] usb 6-1: Manufacturer: syz
[  238.077749][ T5870] usb 6-1: SerialNumber: syz
[  238.213140][ T7927] loop4: detected capacity change from 0 to 33792
[  238.260369][   T56] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  238.316884][ T7927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  238.336248][ T7927] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.361866][ T5870] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  238.370733][ T5870] usb 6-1: MIDIStreaming interface descriptor not found
[  238.421057][ T5870] usb 6-1: USB disconnect, device number 10
[  238.449406][   T56] usb 7-1: Using ep0 maxpacket: 32
[  238.473838][ T7209] udevd[7209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  238.506340][   T56] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  238.566397][   T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.627558][   T56] usb 7-1: config 0 descriptor??
[  238.658236][   T56] as10x_usb: device has been detected
[  238.695266][   T56] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  238.783648][ T6512] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  238.802892][   T56] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  238.870108][ T7923] ------------[ cut here ]------------
[  238.875662][ T7923] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  238.875781][ T7923] WARNING: CPU: 0 PID: 7923 at kernel/locking/mutex.c:582 __mutex_lock+0xb9d/0xce0
[  238.891470][ T7923] Modules linked in:
[  238.895451][ T7923] CPU: 0 PID: 7923 Comm: syz.6.489 Not tainted syzkaller #0
[  238.902903][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  238.913233][ T7923] RIP: 0010:__mutex_lock+0xb9d/0xce0
[  238.918673][ T7923] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d dc 7c ed 04 00 0f 85 7c f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 d3 f0 b0 f6 <0f> 0b e9 62 f5 ff ff 0f 0b e9 20 f9 ff ff 0f 0b e9 fa f5 ff ff 48
[  238.939116][ T7923] RSP: 0018:ffffc90004cf7ac0 EFLAGS: 00010246
[  238.946454][ T7923] RAX: 074c2746ac30c700 RBX: ffff888020f4ace0 RCX: 0000000000080000
[  238.954741][ T7923] RDX: ffffc9000d62b000 RSI: 0000000000002979 RDI: 000000000000297a
[  238.962927][ T7923] RBP: ffffc90004cf7c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a
[  238.971119][ T7923] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff9200099ef68
[  238.977306][ T7920] loop3: detected capacity change from 0 to 32768
[  238.979148][ T7923] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  238.979169][ T7923] FS:  00007fe9af78c6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  238.979190][ T7923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.010131][ T7923] CR2: 000000110c4425c0 CR3: 000000002523f000 CR4: 00000000003506f0
[  239.018337][ T7923] Call Trace:
[  239.021763][ T7923]  <TASK>
[  239.024858][ T7923]  ? trace_contention_end+0x39/0xe0
[  239.030555][ T7923]  ? __mutex_lock+0x30d/0xce0
[  239.035306][ T7923]  ? as102_dvb_dmx_start_feed+0x70/0x280
[  239.041124][ T7923]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  239.046836][ T7923]  ? mutex_lock_nested+0x20/0x20
[  239.051953][ T7923]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  239.058186][ T7923]  ? dmx_ts_feed_start_filtering+0x52/0x220
[  239.064260][ T7923]  ? mutex_unlock+0x10/0x10
[  239.069008][ T7923]  ? mutex_lock_nested+0x20/0x20
[  239.074174][ T7923]  ? _raw_spin_lock_irq+0xbb/0xf0
[  239.079280][ T7923]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.085085][ T7923]  as102_dvb_dmx_start_feed+0x70/0x280
[  239.091850][ T7923]  dmx_ts_feed_start_filtering+0x120/0x220
[  239.097747][ T7923]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[  239.103808][ T7923]  dvb_dmxdev_filter_start+0x422/0x10a0
[  239.109540][ T7923]  dvb_demux_do_ioctl+0x482/0x530
[  239.114731][ T7923]  dvb_usercopy+0x195/0x2b0
[  239.119382][ T7923]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  239.125046][ T7923]  ? dvb_generic_ioctl+0xb0/0xb0
[  239.130776][ T7923]  ? dvb_demux_poll+0x210/0x210
[  239.135800][ T7923]  dvb_demux_ioctl+0x29/0x30
[  239.140570][ T7923]  __se_sys_ioctl+0xfd/0x170
[  239.145475][ T7923]  do_syscall_64+0x55/0xb0
[  239.150027][ T7923]  ? clear_bhb_loop+0x40/0x90
[  239.154817][ T7923]  ? clear_bhb_loop+0x40/0x90
[  239.159614][ T7923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.165576][ T7923] RIP: 0033:0x7fe9ae9a94d9
[  239.170228][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.190028][ T7923] RSP: 002b:00007fe9af78c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.198637][ T7923] RAX: ffffffffffffffda RBX: 00007fe9aec25fa0 RCX: 00007fe9ae9a94d9
[  239.206806][ T7923] RDX: 0000200000000100 RSI: 0000000040146f2c RDI: 0000000000000004
[  239.215145][ T7923] RBP: 00007fe9aea3804e R08: 0000000000000000 R09: 0000000000000000
[  239.223267][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.231840][ T7923] R13: 00007fe9aec26038 R14: 00007fe9aec25fa0 R15: 00007ffcb035e3c8
[  239.239994][ T7923]  </TASK>
[  239.243108][ T7923] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  239.250433][ T7923] CPU: 0 PID: 7923 Comm: syz.6.489 Not tainted syzkaller #0
[  239.257771][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  239.267888][ T7923] Call Trace:
[  239.271253][ T7923]  <TASK>
[  239.274228][ T7923]  dump_stack_lvl+0x18c/0x250
[  239.278982][ T7923]  ? show_regs_print_info+0x20/0x20
[  239.284266][ T7923]  ? load_image+0x420/0x420
[  239.288838][ T7923]  panic+0x2ca/0x720
[  239.292890][ T7923]  ? bpf_jit_dump+0xd0/0xd0
[  239.297474][ T7923]  __warn+0x2e0/0x470
[  239.301522][ T7923]  ? __mutex_lock+0xb9d/0xce0
[  239.306258][ T7923]  ? __mutex_lock+0xb9d/0xce0
[  239.310987][ T7923]  report_bug+0x2be/0x4f0
[  239.315401][ T7923]  ? __mutex_lock+0xb9d/0xce0
[  239.320131][ T7923]  ? __mutex_lock+0xb9d/0xce0
[  239.324904][ T7923]  ? __mutex_lock+0xb9f/0xce0
[  239.329643][ T7923]  handle_bug+0xcf/0x120
[  239.334312][ T7923]  exc_invalid_op+0x1a/0x50
[  239.338875][ T7923]  asm_exc_invalid_op+0x1a/0x20
[  239.343820][ T7923] RIP: 0010:__mutex_lock+0xb9d/0xce0
[  239.349782][ T7923] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d dc 7c ed 04 00 0f 85 7c f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 d3 f0 b0 f6 <0f> 0b e9 62 f5 ff ff 0f 0b e9 20 f9 ff ff 0f 0b e9 fa f5 ff ff 48
[  239.369638][ T7923] RSP: 0018:ffffc90004cf7ac0 EFLAGS: 00010246
[  239.375766][ T7923] RAX: 074c2746ac30c700 RBX: ffff888020f4ace0 RCX: 0000000000080000
[  239.384030][ T7923] RDX: ffffc9000d62b000 RSI: 0000000000002979 RDI: 000000000000297a
[  239.392043][ T7923] RBP: ffffc90004cf7c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a
[  239.400081][ T7923] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff9200099ef68
[  239.408083][ T7923] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
[  239.416107][ T7923]  ? trace_contention_end+0x39/0xe0
[  239.421341][ T7923]  ? __mutex_lock+0x30d/0xce0
[  239.426051][ T7923]  ? as102_dvb_dmx_start_feed+0x70/0x280
[  239.431729][ T7923]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  239.437408][ T7923]  ? mutex_lock_nested+0x20/0x20
[  239.442386][ T7923]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  239.448411][ T7923]  ? dmx_ts_feed_start_filtering+0x52/0x220
[  239.454344][ T7923]  ? mutex_unlock+0x10/0x10
[  239.458877][ T7923]  ? mutex_lock_nested+0x20/0x20
[  239.463873][ T7923]  ? _raw_spin_lock_irq+0xbb/0xf0
[  239.469021][ T7923]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.474264][ T7923]  as102_dvb_dmx_start_feed+0x70/0x280
[  239.479860][ T7923]  dmx_ts_feed_start_filtering+0x120/0x220
[  239.485720][ T7923]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[  239.491652][ T7923]  dvb_dmxdev_filter_start+0x422/0x10a0
[  239.497428][ T7923]  dvb_demux_do_ioctl+0x482/0x530
[  239.502495][ T7923]  dvb_usercopy+0x195/0x2b0
[  239.507036][ T7923]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  239.512621][ T7923]  ? dvb_generic_ioctl+0xb0/0xb0
[  239.517601][ T7923]  ? dvb_demux_poll+0x210/0x210
[  239.522487][ T7923]  dvb_demux_ioctl+0x29/0x30
[  239.527204][ T7923]  __se_sys_ioctl+0xfd/0x170
[  239.531831][ T7923]  do_syscall_64+0x55/0xb0
[  239.536340][ T7923]  ? clear_bhb_loop+0x40/0x90
[  239.541403][ T7923]  ? clear_bhb_loop+0x40/0x90
[  239.546149][ T7923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.552086][ T7923] RIP: 0033:0x7fe9ae9a94d9
[  239.556613][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.576476][ T7923] RSP: 002b:00007fe9af78c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.585294][ T7923] RAX: ffffffffffffffda RBX: 00007fe9aec25fa0 RCX: 00007fe9ae9a94d9
[  239.593322][ T7923] RDX: 0000200000000100 RSI: 0000000040146f2c RDI: 0000000000000004
[  239.601346][ T7923] RBP: 00007fe9aea3804e R08: 0000000000000000 R09: 0000000000000000
[  239.609359][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.617469][ T7923] R13: 00007fe9aec26038 R14: 00007fe9aec25fa0 R15: 00007ffcb035e3c8
[  239.625483][ T7923]  </TASK>
[  239.629116][ T7923] Kernel Offset: disabled
[  239.633454][ T7923] Rebooting in 86400 seconds..