last executing test programs: 53.869246967s ago: executing program 1 (id=568): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x41565559, 0x2, 0x2, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x200}, {0xc061, 0x405}, {0xfffffff8, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x400}], 0xeb, 0x9b, 0x0, 0x0, 0x5}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 53.477926158s ago: executing program 1 (id=573): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x -', 0x4) 53.140783475s ago: executing program 1 (id=578): r0 = syz_io_uring_setup(0x53a, &(0x7f00000003c0)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r4, 0x1c, &(0x7f0000000340)={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1ff}}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 52.904587687s ago: executing program 1 (id=583): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000440)=0x1) 51.849794028s ago: executing program 1 (id=593): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r1, 0x0, 0x0, 0x0) 50.782131115s ago: executing program 1 (id=609): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefaa, 0x40000, 0x7ffe, 0xc0024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) r1 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 35.617222542s ago: executing program 32 (id=609): r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefaa, 0x40000, 0x7ffe, 0xc0024e}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) r1 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 33.178700379s ago: executing program 0 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)) 32.958319129s ago: executing program 0 (id=789): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, &(0x7f0000000140)={0x0, 0x2, 0x2, {0x2, 0x9}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x44, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459d") 30.841610388s ago: executing program 0 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./debug\x00', &(0x7f0000000700)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./debug/fail_make_request/times\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-1', 0x2) 30.694430387s ago: executing program 0 (id=804): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200001, &(0x7f0000000300)={[{@nombcache}, {@data_writeback}, {@inlinecrypt}, {@grpjquota}, {@noload}, {@delalloc}, {@nobarrier}, {@nobarrier}, {@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf}}]}, 0xff, 0x4f7, &(0x7f0000000bc0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjG\x11\x0e\xfe\x16\xb2uIi\xd1Q\x00\x00\x00\x00\xab\x98\x00', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x68) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) 29.860591554s ago: executing program 0 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@netfilter={0xa, 0x1, 0x80, 0x1}}, 0x20) 29.502281188s ago: executing program 0 (id=813): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x18c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_connmark={0x78, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x29, 0x6, "2e0effe2dc3401cf98dcd68e068aab772b7373e3a4d2459f025e3f2ae4508aede8d700750a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, {0xfc, 0x1, [@m_ct={0x94, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x69, 0x6, "e33c4a40fd135f84fc41bb644eed6fd2d292397d478ab9a5db9c74539e74c426d3715b685aa6fe66ca64a87a8988b73dfda79033df30abb6c7e08bae3e2418b190fcc8a9cb0d89397f7013e3cc1bdbfeeca0e9f6745fea70e091626e1d21ecd4beca475878"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x64, 0xd, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}]}, {0x1d, 0x6, "7c76642f33e837350a873d8a4d5343605e5675852d77d77b4c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 28.999063004s ago: executing program 33 (id=813): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x18c, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x7c, 0x1, [@m_connmark={0x78, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x29, 0x6, "2e0effe2dc3401cf98dcd68e068aab772b7373e3a4d2459f025e3f2ae4508aede8d700750a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}]}, {0xfc, 0x1, [@m_ct={0x94, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x69, 0x6, "e33c4a40fd135f84fc41bb644eed6fd2d292397d478ab9a5db9c74539e74c426d3715b685aa6fe66ca64a87a8988b73dfda79033df30abb6c7e08bae3e2418b190fcc8a9cb0d89397f7013e3cc1bdbfeeca0e9f6745fea70e091626e1d21ecd4beca475878"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x64, 0xd, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}]}, {0x1d, 0x6, "7c76642f33e837350a873d8a4d5343605e5675852d77d77b4c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.172408284s ago: executing program 3 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000180), 0x1000) 5.817819743s ago: executing program 3 (id=1002): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001480)='./file0\x00', 0x1008001, &(0x7f0000000680), 0x1, 0x143e, &(0x7f0000004980)="$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") ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 5.277109504s ago: executing program 3 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ed000061fb3e2ddf33c9c8b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.95141053s ago: executing program 3 (id=1018): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f00000001c0)=ANY=[], 0x1, 0x489, &(0x7f0000000bc0)="$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") mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 4.581730271s ago: executing program 3 (id=1021): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) flock(r0, 0x2) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) 4.234872121s ago: executing program 4 (id=1024): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xbb, 0x0, &(0x7f0000000780)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6157179af8a645c2b9c0614907dac12c6d3cd73c6f7e79b50b7773a97aad715106eca76bf796a430e6c6a874a1602148380c5a6fcf022b0a04fc9efc0d85cdf5d0b97e6d6336b1742017dfd81f3ebc1b048e42b13e8f8487876acd9d7b9f566f3dff445f7fa5e166f86db80a5022d4a325ecc04ea2f34d397b00996c9b7", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4.07349994s ago: executing program 5 (id=1025): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f0000001080)=""/4096, 0x0, 0x1000}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 3.93454823s ago: executing program 4 (id=1026): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1}, 0x100) 3.830145542s ago: executing program 5 (id=1027): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 3.679454801s ago: executing program 5 (id=1028): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) write$tun(r0, 0x0, 0xfe7c) 3.459110686s ago: executing program 4 (id=1030): r0 = socket$packet(0x11, 0x2, 0x300) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='=\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,', @ANYRESHEX=r0]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c *:'], 0x11) 3.373086168s ago: executing program 2 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/memory/memory0/state\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)="6f6e8f", 0x3) 3.228478088s ago: executing program 5 (id=1033): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) close(r0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b062a, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40045506, 0x23) 3.133491755s ago: executing program 4 (id=1034): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801") 3.072298277s ago: executing program 4 (id=1035): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchown(0xffffffffffffffff, 0xee01, 0xffffffffffffffff) 2.292826845s ago: executing program 3 (id=1039): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xffff, 0xd}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x4182) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001020000082505a1a4400001020109023b00010102b0400905240005000d240f8104"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.182847164s ago: executing program 2 (id=1040): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6033ed6a000b2c00fe8000000000000000000000000000bbfecc"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) 1.906794265s ago: executing program 4 (id=1042): unshare(0x26020480) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x5a, 0xf8, 0x40, 0x20, 0x1949, 0xcd89, 0xf1db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc2, 0xc, 0x40, 0x2, "", [{{0x9, 0x4, 0x31, 0x8, 0x0, 0xff, 0x5d, 0x81, 0x8}}]}}]}}, 0x0) syz_clone(0x80000, 0x0, 0x37, 0x0, 0x0, 0x0) 1.786279861s ago: executing program 2 (id=1043): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x50) 1.67433185s ago: executing program 5 (id=1044): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0xc88bd000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000e9000/0x2000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x2000, 0x1}) 1.46981896s ago: executing program 2 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, 0x0) 1.397444142s ago: executing program 6 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 1.209673693s ago: executing program 6 (id=1048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000140)) 1.085398764s ago: executing program 2 (id=1049): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00818c7680a847b023c4c9c125fa24ebb627ab8c01336580616a553a0857558908840de83bf188adcd0494eb4991a048f32a37ad32009a7e810125764c0853d5ebe326e86be9ea0636e1ad221b2bd0a8e5bd387956f7f138d6f17e927765d9313ff7d64816afa9b512901bbb3647979092c8e35017b2c8a8a480c7e8b6cdb94163d4f6036bcc1f62f149931c32a765bef790ff22b188fd53a85de9bee78cf1e4fa240eda6f88c09f72eda1c434c6ed93d2b8be42cb57dec538f641720f43359465bd5dfab17409492676aead12661bdf056b3434ba"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$eJzs3U1vHVcZB/Dnvvj6pbSNKlSFiIWbQmkpzXsC5a0pCxawAAllTSLXrQIpoCQgWlnElReIFV8BNt2w6FfgA/QzID4AkWxWXVAGjX1OMh5f5zokvnPt8/tJzswz547vmfw9nns9M/cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/+uHPzvci4vrv0oITEV+IQUQ/YrGul6OeuZofP4yIk7HdHC9GxGA+ol5/+5/nIy5FxKfPRWxura3Uiy8csB+Xz929/fmPf/CPP/554+Qv3vn5x+32n37x4id/uhdx4idvfvL5vaez7QAAAFCKqqqqXnqbfyq9v+933SkAYCry8b9K8nK1Wq1Wq9XHr26qxrvXLCJivblO/ZrB6XgAOGLW47Ouu0CH5F+0YUQ803UngJnW67oDHIrNrbWVXsq31zweLO+052tBduW/3ntwf8d+00na15hM6+drIwbxwj79WZxSH2ZJzr/fzv/6TvsoPe6w85+W/fIf7dz6VJyc/6Cdf8vxyb8/Nv9S5fyHj5X/QP4AAAAAADDD8t//T3R8/nf+yTflQB51/nd5Sn0AAAAAAAAAgKftScf/e8D4fwAAADCz6vfqtb8893DZfp/FVi+/1ot4tvV4oDDpZpmlrvsBAAAAAAAAAAAAACUZ7lzDe60XMRcRzy4tVVVVfzW168f1pOsfdaVvP5Ss61/yAACw49PnWvfy9yIWIuJa+qy/uaWlpapaWFyqlqrF+fx6djS/UC023tfmab1sfnSAF8TDUVV/s4XGek2T3i9Pam9/v/q5RtXgAB2bjg4DB4CI2DkabToiHTNV9Xx0/SqHo8H+f/zY/zmIrn9OAQAAgMNXVVXVSx/nfSqd8+933SkAYCry8b99XkCtVqvVavXxq5uq8e41i4hYb65Tv2YwHD8AHDHr8VnXXaBD8i/aMCJOdt0JYKb1uu4Ah2Jza22ll/LtNY8HaXz3fC3IrvzXe9vr5fXHTSdpX2MyrZ+vjRjEC/v058Up9WGW5Pz77fyv77SP0uMOO/9p2S//ejtPdNCfruX8B+38W45P/v2x+Zcq5z98rPwH8gcAAAAAgBmW//5/wvnfvMkAAAAAAAAAcORsbq2t5Pte8/n/L495nPs/j6ecf0/+Rcr599v5ty7IGTTm77/9MP9/b62tfHz3X1/K05nPf24wqp97rtff3qTliKjm3o2bcStW49yexw93tZ/f0z63q/3ChPaLe9pHdftibj8TK/HruBXvPGifn3Bh1MKE9mpCe85/YP8vUs5/2Piq819K7b3WtHb/o/6e/b45Hfc8V//2n1f27l3TtxGDB9vWVG/f6Q76s/1/8swofntn9faZ39+4e/f2+UiTXUsvRJo8ZTn/ufSV83/15Z32/Hu/ub/e/2j02PnPio0Y7pv/y435entfm3LfupDzH6WvnH8+Ao3f/49y/vvv/6930B8AAAAAAAAAAAAAAAB4lKqqtm8RvRoRV9L9P13dmwkATFc+/ldJXq5Wq9Vqtfr41U3VeG81i4j4e3Od+jXDH8Z9MwBglv03Iv7ZdSfojPwLlj/vr55+pevOAFN154MPf3nj1q3V23e67gkAAAAAAAAA8P/K438uN8Z/3r4OqDVu9K7xX9+O5SM7/md/NNge6zxt0Evx6PG/T8ejx/8eTni+uQntownt8xPaFya0j73RoyHn/1LKOOd/Km1YSeO/vtpBf7qW8z+dxnrO+X+t9bhm/tVfj3L+/V35n737/m/O3vngwzduvn/jvdX3Vn91/tyVSxcvX7p4+fLZd2/eWj2382+HPT5cOf889rXrQMuS88+Zy78sOf+vplr+Zcn5v5Jq+Zcl559f78m/LDn//N5H/mXJ+b+WavmXJef/9VTLvyw5/9dTLf+y5Py/kWr5lyXn/0aq5V+WnP+ZVMu/LDn/s6mWf1ly/vkMl/zLkvPPVzbIvyw5/wupln9Zcv4XUy3/suT8L6Va/mXJ+V9OtfzLkvO/kmr5lyXn/81Uy78sOf9vpVr+Zcn5v5lq+Zcl5//tVMu/LDn/76Ra/mXJ+X831fIvS87/e6mWf1ly/t9PtfzLkvN/K9XyL8vDz/83Y8aMmTzT9W8mAAAAAAAAAAAAAKBtGpcTd72NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFnXuLkbO8zwD+7cleGwJuOBMHbHMysLC7PoFDDCYJKSU9UBLSpiU1jr02Tnyqd5eTUNkU2hIFqUjtBb1omkRpFKmtQFWkphKNkBqpvWuuGnETtVIufAGVg5JKqQJbfTPv+3pmdj3fGjMw872/X4T/9s43M+98887sPhs9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACtNn585s+GiqIo/2v8sa4ozi//vqbYXf5zYcf7vUIAAADgXL3V+PPvL0xf2L2CK7Uc829X/cd3FxcXF4svvHny7b9YXEwXbCiKkdVF0bgs+vdf/Hyx9ZjgmWJ8aLjl38MVdz9ScfloxeVjFZevqrh8dcXl4xWXLzkBS6xp/j6mcWPXNv66rnlKi4uLscZl1y5zrWeGVg8Px9/lNAw1rrM4dqA4VBwuZoqpJdcZavyvKF7ZWN7XvUW8r+GW+1pfFMWpnz61L65hKJzja4u2O2tofe7euLvY8OZPn9r37bnXr1huVp6GJSstis2bynU+WxSnf11VDBWr0zmJ6xxuWef6ZdY50rbOocb1yr93rvPUCtcZH/d4WOcPu6xzffja49cURbFQnPGYTs8Uw8XajntN53u8uSPK2yifyg8Wo2e1TzauYJ+U1/nJNe37pHNPxvO/MZyT0TOsofXpeOPLq5ac93e6T8pH3Q97tbzt+8s7HR9v/dVq214tj3nqujPvgWWfu2X2QNrLLXtgU9UeGF410tgDw6fXvKltD0wvuc5wMdS4r5PXdd8Dk3NHjk/OPvHkLYeO7D04c3Dm6PTUjm1bt2/bun375IFDh2emmn+e3SkdIGuL4bQHN4X3mrgHb+g4tnVLLn7j3XsdjPfJ66B87J+5vlzQ+cPFGfZ4ecyzm8/9dZC+77e8DkZbXgfLvqcu8zoYXcHroDzm1OaVfc8cbflvuTX06r1wXcseeD+/H5b3+dCNZ34vXB/W9dxNZ/v9cGTJHogPayi89sqvpJ/3xm8P52XpvriyvOC8VcX87MyJWx/fOzd3YroI4z1xUctz1blf1rY8pmLJfhk+6/2y++9+ef2Vy3x9XThX4zd3f67KY7ZNdH+uGu/uy5/Ptq9uKcJ4l73X53O572bl+UxZosv5LI959pZz/1kw5ZKW97+xqve/kbHR5vvfSDobY23vf0ufmpHGyori1C0re/8bC/+91+9/F/fJ+195rh66tfseKI95bvJs98Bo1/e/a8IcCuu5MSSG8Zbc/3bj8oXmNm15Liv3zejoWNg3o/Ee2/fN1iXXKW+tvO/NU+9s32y+pv25avu5pYb7pjxXfznVfd+Ux7w6fe7vHWviX1veO1ZV7YGxkVXlesfSJmi+3y2uiXvg1mJfcaw4XOxP1ymf5fK+JrasbA+sCv+91+8dl/fJHijP1Ytbuu+B8pgfbH13f3baHL6Sjmn52anz9wtnyvxXjp6+vc7T9m5n/nKdn9jW/XdD5TGvbzvbnNH9PN0cvnLeMuep8/Vzpj29v3hvztPlYZ2Ht3f/3VR5zMU7VrifdhdF8dr0a43fd4Xf7/7j/H9+t+33vsv9Tvm16dfum3zgR2ezfgAA3rm3G38urGr+rNny/1iv5P//BwAAAAZCzP3DYSbyPwAAANRGzP0jYSbyPwAAANRGzP2jYSaZ5P9Hbt/50ltPF+nTABeDeHk8Dfff2TwudrwXwr83LJ5Wfv1j3xp76StPr+y+h4ui+OV9H1r2+EfujOtqOh7X+ZH2ry9x+dUruv+HHzx9XOvnJ5za2bz9+HhWug1iV/mVyS2N293wxHRjvnpf0ZgPLDz3TPP2m/+Ox5/c2jz+r8OHluw+MNR2/c1hPdeGuSF8psz9u0+fh3LG6720/qp/veizp+8vXm9o0wWNh/niHzVvN35G1AsXNY+Pj/tM6/+Xr37npfL4x69bfv1PDy+//pPhdn8S5i92NY9vPedfaVn/n4T1x/uL17v1m99fdv0vX9Y8/uWwL74eZuf67/7zD7+13PMV72f3Hc3rxfuf+t9tjevF24u337n+8aen285H5+2/+mbzdnY9+rOR1uPj1+P9RA/f0b6/h8Lz29YjL4riO39atJ3n4qPN6/1zx/rj7R2/Y/n139yxzuNDVzeuf/rxrGt7XF/72y3LPt64nt3/sK7t8bxwTzh/b07+oLzdkw+E/Rgu/78fNm+v87NMX76n/f0mHv/1dc3Xbby9yY71v9Cx/oWry3NXvf5732yu/+W7Vretf/cnw366tzmr1n/wby5su/43vt18Pk48NnH02Oz8of0tZ7X1dbx6fM3a887/wAUXhvfSzn/vOTb3yMyJDVMbpopiwwB+ZGCv1//NMP+nORbe/Xto+tHPmvvu+U81v2/d8PPmv18IX384PJ/x++PX/mqsbb92Pu8LdzXnua7/prCOlbrsq/999YoOPPn5V+b/6Y9f7/y5ID6e45eMNx7fixsvbVw29Grz8s73qyr/dUn76/rHo1ON+b1wXhfDJzNvurR5f523Hz+b5PlPN1+/8Se5eP2i4/NE1o20P45zXf+Pw88x37+8/f0v7o/vPd3xac7riqFyCQvh/aFYaF4ej4rn+/lTly57f/FzeIqFK85mmWc0+8Ts5OFDR+cfn5ybmZ2bnH3iyT1Hjs0fndvT+OzSPV+suv7p1/faxut7/8yObUXj1X6sOXrs/V7/8Qf37b9t6vr9Mwf2zh+Ye/D4zImD+2Zn983sn71+74EDM49VXf/Q/l3TW3ZuvW3LxMFD+3fdvnPn1p0Th44eK5fRXFSFHVNfmjh6Yk/jKrO7tu2c3r5929TEkWP7Z3bdNjU1MV91/cb3pony2o9OnJg5vHfu0JGZidlDT87smt65Y8eWyk9/PHL8wOyGyRPzRyfnZ2dOTDYfy4a5xpfL731V1ycPs8fC+12HofDT+edu3pE+H7f0rS+f8aaah7T/eFq8ET4LKn5/q/p3zP1jYSaZ5H8AAADIQcz94YP/T18g/wMAAEBtxNy/OsxE/gcAAIDaiLl/PMwkk/yv/6//r/+v/6//r//fS/r/+v/d6P/r/w/y+vX/9f+p1m/9/5j71xRFlvkfAAAAchBz/9owE/kfAAAAaiPm/vPCTOR/AAAAqI2Y+88PM8kk/+v/6//r/+v/6//r//eS/r/+fzf6//r/g7x+/X/9f6r1W/8/5v4PhJlkkv8BAAAgBzH3XxBmIv8DAABAbcTcf2GYifwPAAAAtRFz/7owk0zyv/6//r/+v/6//r/+fy/p/+v/d6P/r/8/yOvX/9f/p1q/9f9j7v+VMJNM8j8AAADkIOb+D4aZyP8AAABQGzH3XxRmIv8DAABAbcTcf3GYSSb5X/9f/1//X/9f/1//v5f0//X/u9H/1/8f5PXr/+v/U63f+v8x918SZpJJ/gcAAIAcxNx/aZiJ/A8AAAC1EXP/ZWEm8j8AAADURsz9l4eZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z/xVhJpnkfwAAAMhBzP1XhpnI/wAAAFAbMfd/KMxE/gcAAIDaiLl/fZhJJvlf/1//X/9f/1//X/+/l/T/9f+70f/X/x/k9ev/6/9Trd/6/zH3fzjMJJP8DwAAADmIuf+qMBP5HwAAAGoj5v6rw0zkfwAAAKiNmPs3hJlkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/xjCTTPI/AAAA5CDm/k1hJvI/AAAA1EbM/deEmcj/AAAAUBsx918bZpJJ/tf/1//X/9f/1//X/+8l/X/9/270//X/B3n9+v/6/1Trt/5/zP3XhZlkkv8BAAAgBzH3Xx9mIv8DAABAbcTcf0OYifwPAAAAtRFz/+Ywk0zyv/6//r/+v/6//r/+fy/p/+v/d6P/r/8/yOvX/9f/p1q/9f9j7r8xzCST/A8AAAA5iLn/pjAT+R8AAABqI+b+m8NM5H8AAACojZj7J8JMMsn/+v/6//r/+v/6//r/vaT/r//fjf6//v8gr1//X/+fav3W/4+5/5Ywk0zyPwAAAOQg5v5bw0zkfwAAAKiNmPsnw0zkfwAAAKiNmPunwkwyyf/6//r/+v/6//r/+v+9pP+v/9+N/r/+/yCvX/9f/59q/db/j7l/Oswkk/wPAAAAOYi5f0uYifwPAAAAtRFz/9YwE/kfAAAAaiPm/m1hJpnkf/1//X/9f/1//X/9/17S/9f/70b/X/9/kNev/6//T7V+6//H3L89zCST/A8AAAA5iLl/R5iJ/A8AAAC1EXP/bWEm8j8AAADURsz9t4eZZJL/9f/1//X/9f/1//X/e0n/X/+/G/1//f9BXr/+v/4/1fqt/x9z/84wk0zyPwAAAOQg5v6PhJnI/wAAAFAbMfffEWYi/wMAAEBtxNz/0TCTTPK//r/+v/6//r/+v/5/L+n/6/93o/+v/z/I69f/1/+nWr/1/2Pu3xVmkkn+BwAAgBzE3H9nmIn8DwAAALURc/9dYSbyPwAAANRGzP27w0wyyf/6//r/+v/6//r/+v+9pP+v/9+N/r/+/yCvX/9f/59q/db/j7n/7jCTTPI/AAAA5CDm/o+Fmcj/AAAAUBsx9388zET+BwAAgNqIuf8TYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9x/T5hJJvkfAAAAchBz/yfDTOR/AAAAqI2Y+381zET+BwAAgNqIuf/eMJNM8r/+v/6//r/+v/6//n8v6f/r/3ej/6//P8jr1//X/6dav/X/Y+7/tTCTTPI/AAAA5CDm/vvCTOR/AAAAqI2Y+z8VZiL/AwAAQG3E3P/rYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9z/G2EmmeR/AAAAyEHM/b8ZZiL/AwAAQG3E3P9bYSbyPwAAANRGzP33h5lkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/b4eZZJL/AQAAIAcx9z8QZiL/AwAAQG3E3P/pMBP5HwAAAGoj5v7PhJlkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/g2EmmeR/AAAAyEHM/Z8NM5H/AQAAoDZi7v+dMBP5HwAAAGoj5v7fDTPJJP/r/+v/6//r/+v/6//3kv6//n83+v/6/4O8fv1//X+q9Vv/P+b+z4WZZJL/AQAAIAcx9/9emIn8DwAAALURc//vh5nI/wAAAFAbMfc/FGaSSf7X/9f/1//X/9f/1//vJf1//f9u9P/1/wd5/fr/+v9U67f+f8z9nw8zyST/AwAAQA5i7v+DMBP5HwAAAGoj5v49YSbyPwAAANRGzP0Ph5lkkv/1//X/9f/1//X/9f97Sf9f/78b/X/9/0Fev/6//j/V+q3/H3P/3jCTTPI/AAAA5CDm/i+Emcj/AAAAUBsx9+8LM5H/AQAAoDZi7t8fZpJJ/tf/1//X/9f/1//X/+8l/X/9/270//X/B3n9+v/6/1Trt/5/zP0zYSaZ5H8AAADIQcz9B8JM5H8AAACojZj7D4aZyP8AAABQGzH3PxJmkkn+1//X/9f/1//X/9f/7yX9f/3/bvT/9f8Hef36//r/VOu3/n/M/YfCTDLJ/wAAAJCDmPu/GGYi/wMAAEBtxNz/pTAT+R8AAABqI+b+w2EmmeR//X/9f/1//X/9f/3/XtL/1//vRv9f/3+Q16//r/9PtX7r/8fcfyTMJJP8DwAAADmIuf9omIn8DwAAALURc/+xMBP5HwAAAGoj5v7jYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9G/1//f5DXr/+v/0+1fuv/x9z/h2EmmeR/AAAAyEHM/SfCTOR/AAAAqI2Y+2fDTOR/AAAAqI2Y++fCTDLJ//r/+v/6//r/+v/6/72k/6//343+v/7/IK9f/1//n2r91v+PuX8+zCST/A8AAAA5iLn/0TAT+R8AAABqI+b+x8JM5H8AAACojZj7Hw8zyST/6//r/+v/6//r/+v/95L+v/5/N/r/+v+DvH79f/1/qvVb/z/m/ifCTDLJ/wAAAJCDmPufDDOR/wEAAKA2Yu7/f/btWQvApQfD6IX/tm3btm3bPLaN4jRJym+qWWtmsneTNu1bPM+KW+x/AAAAOEbu/mfHLU32v/5f/6//1//r//X/M+n/9f9X9P/6/53/1//r/xlbrf/P3f+cuKXJ/gcAAIAOcvc/N26x/wEAAOAYufufF7fY/wAAAHCM3P3Pj1ua7H/9v/5f/6//1//r/2fS/+v/r+j/9f87/6//1/8ztlr/n7v/BXFLk/0PAAAAHeTuf2HcYv8DAADAMXL3vyhusf8BAADgGLn7Xxy3NNn/+n/9v/5f/6//1//PpP/X/1/R/+v/d/5f/6//Z2y1/j93/0vilib7HwAAADrI3f/SuMX+BwAAgGPk7n9Z3GL/AwAAwDFy9788bmmy//X/+n/9v/5f/6//n0n/r/+/ov/X/+/8v/5f/8/Yav1/7v5XxC1N9j8AAAB0kLv/lXGL/Q8AAADHyN3/qrjF/gcAAIBj5O5/ddzSZP/r//X/+n/9v/5f/z+T/l//f0X/r//f+X/9v/6fsdX6/9z9r4lbmux/AAAA6CB3/2vjFvsfAAAAjpG7/3Vxi/0PAAAAx8jd//q4pcn+1//r//X/+n/9v/5/Jv2//v+K/l//v/P/+n/9P2Or9f+5+98QtzTZ/wAAANBB7v43xi32PwAAABwjd/+b4hb7HwAAAI6Ru//NcUuT/a//1//r//X/+n/9/0z6f/3/Ff2//n/n//X/+n/GVuv/c/e/JW5psv8BAACgg9z9b41b7H8AAAA4Ru7+t8Ut9j8AAAAcI3f/2+OWJvtf/6//1//r//X/+v+Z9P/6/yv6f/3/zv/r//X/jK3W/+fuf0fc0mT/AwAAQAe5+98Zt9j/AAAAcIzc/e+KW+x/AAAAOEbu/nfHLU32v/5f/6//1//r//X/M+n/9f9X9P/6/53/1//r/xlbrf/P3f+euKXJ/gcAAIAOcve/N26x/wEAAOAYufvfF7fY/wAAAHCM3P3vj1ua7H/9v/5f/6//1//r/2fS/+v/r+j/9f87/6//1/8ztlr/n7v/A3FLk/0PAAAAHeTu/2DcYv8DAADAMXL3fyhusf8BAADgGLn7Pxy3NNn/+n/9v/5f/6//1//PpP/X/1/R/+v/d/5f/6//Z2y1/j93/0filib7HwAAADrI3f/RuMX+BwAAgGPk7v9Y3GL/AwAAwDFy9388bmmy//X/+n/9v/5f/6//n0n/r/+/ov/X/+/8v/5f/8/Yav1/7v5PxC1N9j8AAAB0kLv/k3GL/Q8AAADHyN3/qbjF/gcAAIBj5O7/dNzSZP/r//X/+n/9v/5f/z+T/l//f0X/r//f+X/9v/6fsdX6/9z9n4lbmux/AAAA6CB3/2fjFvsfAAAAjpG7/3Nxi/0PAAAAx8jd//m4pcn+1//r//X/+n/9v/5/Jv2//v+K/l//v/P/+n/9P2Or9f+5+78QtzTZ/wAAANBB7v4vxi32PwAAABwjd/+X4hb7HwAAAI6Ru//LcUuT/a//1//r//X/+n/9/0z6f/3/Ff2//n/n//X/+n/GVuv/c/d/JW5psv8BAACgg9z9X41b7H8AAAA4Ru7+r8Ut9j8AAAAcI3f/1+OWJvtf/6//1//r//X/+v+Z9P/6/yv6f/3/zv/r//X/jK3W/+fu/0bc0mT/AwAAQAe5+78Zt9j/AAAAcIzc/d+KW+x/AAAAOEbu/m/HLU32v/5f/6//1//r//X/M+n/9f9X9P/6/53/1//r/xlbrf/P3f+duKXJ/gcAAIAOcvd/N26x/wEAAOAYufu/F7fY/wAAAHCM3P3fj1ua7H/9v/5f/6//1//r/2fS/+v/r+j/9f87/6//1/8ztlr/n7v/B3FLk/0PAAAAHeTu/2HcYv8DAADAMXL3/yhusf8BAADgGLn7fxy3NNn/+n/9v/5f/6//1//PpP/X/1/R/+v/d/5f/6//Z2y1/j93/0/ilib7HwAAADrI3f/TuMX+BwAAgGPk7v9Z3GL/AwAAwDFy9/88bmmy//X/+n/9v/5f/6//n0n/r/+/ov/X/+/8v/5f/8/Yav1/7v5fxC1N9j8AAAB0kLv/l3GL/Q8AAADHyN3/q7jF/gcAAIBj5O7/ddzSZP/r//X/+n/9v/5f/z+T/l//f0X/r//f+X/9v/6fsdX6/9z9v4lbmux/AAAA6CB3/2/jFvsfAAAAjpG7/3dxi/0PAAAAx8jd//u4pcn+1//r//X/+n/9v/5/Jv2//v+K/l//v/P/+n/9P2Or9f+5+/8QtzTZ/wAAANBB7v4/xi32PwAAABwjd/+f4hb7HwAAAI6Ru//PcUuT/a//1//r//X/+n/9/0z6f/3/Ff2//n/n//X/+n/GVuv/c/f/JW5psv8BAACgg9z9f41b7H8AAAA4Ru7+v8Ut9j8AAAAcI3f/3+OWJvtf/6//1//r//X/+v+Z9P/6/yv6f/3/zv/r//X/jK3W/+fu/0fc0mT/AwAAQAe5+/8Zt9j/AAAAcIzc/f+KW+x/AAAAOEbu/n/HLU32v/5f/6//1//r//X/M+n/9f9X9P/6/53/1//r/xlbrf/P3f+fuKXJ/gcAAIAOcvf/N26x/wEAAOAYufv/F7fY/wAAAHCM3P3/j1ua7H/9v/5f/6//1//r/2fS/+v/r+j/9f87/6//1/8ztlr/n7v/hrilyf4HAACADnL33xi32P8AAABwjNz9N8Ut9j8AAAAcI3f/zXFLk/2v/9f/6//1//p//f9M+n/9/xX9v/5/5//1//p/xlbr/3P33xK3NNn/AAAA0EHu/lvjFvsfAAAAjpG7/7a4xf4HAACAY+Tuvz1uabL/9f/6f/2//l//r/+fSf+v/7+i/9f/7/y//l//z9hq/X/u/jvilib7HwAAADrI3X9n3GL/AwAAwDFy998Vt9j/AAAAcIzc/XfHLU32v/5f/6//1//r//X/M+n/9f9X9P/6/53/1//r/xlbrf/P3X9P3NJk/wMAAEAHufvvjVvsfwAAADhG7v774hb7HwAAAI6Ru//+uKXJ/tf/6//1//p//b/+fyb9v/7/iv5f/7/z//p//T9jq/X/ufsfiFua7H8AAADoIHf/g3GL/Q8AAADHyN3/UNxi/wMAAMAxcvc/HLc02f/6f/2//l//r//X/8+k/9f/X9H/6/93/l//r/9nbLX+P3f/I3FLk/0PAAAAHeTufzRusf8BAADgGLn7H4tb7H8AAAA4Ru7+x+OWJvtf/6//1//r//X/+v+Z9P/6/yv6f/3/zv/r//X/jK3W/+fufyJuabL/AQAAoIPc/U/GLfY/AAAAHCN3/1Nxi/0PAAAAx8jd/3Tc0mT/6//1//p//b/+X/8/k/5f/39F/6//3/l//b/+n7HV+v/c/c8EAAD//1fgRDE=") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 901.188942ms ago: executing program 6 (id=1050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r1) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x40080) 687.039964ms ago: executing program 6 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @void}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 525.599938ms ago: executing program 5 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x80000) 422.811076ms ago: executing program 6 (id=1053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x4, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x2, 0x6, 0x8, 0x81], 0x54000, 0x100204}) writev(r0, &(0x7f0000000480), 0x3) 58.035933ms ago: executing program 2 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) 0s ago: executing program 6 (id=1055): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): 7.741744][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 127.741786][ T30] audit: type=1800 audit(1786590840.688:882): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 127.800798][ T7131] tipc: Started in network mode [ 127.810006][ T7131] tipc: Node identity 7f000001, cluster identity 4711 [ 127.818701][ T7131] tipc: New replicast peer: 127.0.0.1 [ 127.830446][ T7131] tipc: Enabled bearer , priority 10 [ 127.880903][ T30] audit: type=1800 audit(1786590840.828:883): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 127.988601][ T30] audit: type=1800 audit(1786590840.938:884): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 128.047647][ T30] audit: type=1807 audit(1786590840.998:885): UNKNOWN=m res=0 [ 128.063803][ T30] audit: type=1802 audit(1786590841.008:886): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.490" res=0 errno=0 [ 128.081944][ T7134] ima: policy update failed [ 128.082394][ T7126] loop3: detected capacity change from 0 to 131072 [ 128.089918][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.090794][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.091073][ T30] audit: type=1802 audit(1786590841.038:887): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.490" res=0 errno=0 [ 128.109100][ T7126] F2FS-fs (loop3): invalid crc value [ 128.113991][ T5612] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.154134][ T5613] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.170657][ T30] audit: type=1800 audit(1786590841.118:888): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 128.204662][ T7126] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.212481][ T7126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 128.260803][ T7126] F2FS-fs (loop3): sanity_check_inode: inode (ino=7) has casefold flag, but casefold feature is off [ 128.291938][ T30] audit: type=1800 audit(1786590841.238:889): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 128.346810][ T30] audit: type=1800 audit(1786590841.298:890): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 128.378814][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.458752][ T30] audit: type=1800 audit(1786590841.408:891): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 128.892991][ T7151] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 128.944203][ T966] tipc: Node number set to 2130706433 [ 129.165188][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.203351][ T7158] loop1: detected capacity change from 0 to 1024 [ 129.232035][ T7158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 129.453621][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 129.697415][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.498'. [ 130.205893][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.266183][ T7183] jffs2: notice: (7183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.603049][ T7168] loop4: detected capacity change from 0 to 32768 [ 130.781444][ T7168] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.901611][ T7168] XFS (loop4): Ending clean mount [ 131.176956][ T5614] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.414703][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.481454][ T7195] loop2: detected capacity change from 0 to 131072 [ 131.488301][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.523627][ T7195] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 131.623836][ T7195] XFS (loop2): Starting recovery (logdev: internal) [ 131.661605][ T7195] XFS (loop2): Ending recovery (logdev: internal) [ 131.804817][ T5612] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 132.066070][ T7237] loop2: detected capacity change from 0 to 8 [ 132.330656][ T7231] loop1: detected capacity change from 0 to 32768 [ 132.409490][ T7231] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.447432][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.563385][ T7231] XFS (loop1): Ending clean mount [ 132.692505][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699224][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.756053][ T5613] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.769906][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 132.769935][ T30] audit: type=1800 audit(1786590845.718:937): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 132.794769][ T7266] netlink: 'syz.3.533': attribute type 2 has an invalid length. [ 132.864959][ T4945] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.873186][ T30] audit: type=1800 audit(1786590845.818:938): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 133.002767][ T30] audit: type=1800 audit(1786590845.948:939): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 133.036249][ T4945] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 133.038243][ T4945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.038269][ T4945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.038288][ T4945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.038324][ T4945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.048681][ T4945] usb 3-1: config 0 descriptor?? [ 133.182693][ T30] audit: type=1800 audit(1786590846.118:940): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 133.260881][ T30] audit: type=1800 audit(1786590846.208:941): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 133.325827][ C0] tipc: RX(7f000001): key[1] is activated [ 133.332419][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.359432][ T30] audit: type=1800 audit(1786590846.308:942): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 133.379382][ T30] audit: type=1800 audit(1786590846.308:943): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=121893 res=0 errno=0 [ 133.399168][ T30] audit: type=1800 audit(1786590846.338:944): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=121922 res=0 errno=0 [ 133.399218][ T30] audit: type=1800 audit(1786590846.338:945): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=121900 res=0 errno=0 [ 133.426081][ T30] audit: type=1800 audit(1786590846.358:946): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=121901 res=0 errno=0 [ 133.486942][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.547476][ T4945] hid_parser_main: 471 callbacks suppressed [ 133.547533][ T4945] playstation 0003:054C:09CC.0003: unknown main item tag 0x0 [ 133.547561][ T4945] playstation 0003:054C:09CC.0003: unknown main item tag 0x0 [ 133.547581][ T4945] playstation 0003:054C:09CC.0003: unknown main item tag 0x0 [ 133.547604][ T4945] playstation 0003:054C:09CC.0003: unknown main item tag 0x0 [ 133.547628][ T4945] playstation 0003:054C:09CC.0003: unknown main item tag 0x0 [ 133.549229][ T4945] playstation 0003:054C:09CC.0003: unknown main item tag 0x0 [ 133.591675][ T4945] playstation 0003:054C:09CC.0003: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 133.713477][ T4945] playstation 0003:054C:09CC.0003: Failed to retrieve feature with reportID 18: -71 [ 133.713521][ T4945] playstation 0003:054C:09CC.0003: Failed to retrieve DualShock4 pairing info: -71 [ 133.713562][ T4945] playstation 0003:054C:09CC.0003: Failed to get MAC address from DualShock4 [ 133.713575][ T4945] playstation 0003:054C:09CC.0003: Failed to create dualshock4. [ 133.781421][ T4945] playstation 0003:054C:09CC.0003: probe with driver playstation failed with error -71 [ 133.805194][ T4945] usb 3-1: USB disconnect, device number 4 [ 133.914647][ T7290] pimreg1: tun_chr_ioctl cmd 1074025677 [ 133.918973][ T7290] pimreg1: linktype set to 779 [ 134.044587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.141397][ T7292] loop3: detected capacity change from 0 to 32768 [ 134.161651][ T7292] [ 134.161651][ T7292] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.161651][ T7292] [ 134.278633][ T5720] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 134.346478][ T7292] ERROR: (device loop3): diWrite: ixpxd invalid [ 134.346478][ T7292] [ 134.378289][ T7292] ERROR: (device loop3): txCommit: [ 134.378289][ T7292] [ 134.390066][ T7292] ERROR: (device loop3): dtReadFirst: btstack overrun [ 134.390066][ T7292] [ 134.392793][ T7292] btstack dump: [ 134.392803][ T7292] bn = 0, index = 0 [ 134.392812][ T7292] bn = 0, index = 0 [ 134.392821][ T7292] bn = 0, index = 0 [ 134.392828][ T7292] bn = 0, index = 0 [ 134.392836][ T7292] bn = 0, index = 0 [ 134.392843][ T7292] bn = 0, index = 0 [ 134.392851][ T7292] bn = 0, index = 0 [ 134.392859][ T7292] bn = 0, index = 0 [ 134.454708][ T5720] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 134.467097][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.467132][ T5720] usb 1-1: Product: syz [ 134.467164][ T5720] usb 1-1: Manufacturer: syz [ 134.467180][ T5720] usb 1-1: SerialNumber: syz [ 134.500495][ T42] ERROR: (device loop3): diWrite: ixpxd invalid [ 134.500495][ T42] [ 134.500547][ T42] ERROR: (device loop3): txCommit: [ 134.500547][ T42] [ 134.500618][ T42] jfs_write_inode: jfs_commit_inode failed! [ 134.516777][ T7306] kAFS: bad VL server IP address [ 134.518353][ T5615] [ 134.518353][ T5615] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.518353][ T5615] [ 134.527643][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.528425][ T5615] [ 134.528425][ T5615] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.528425][ T5615] [ 134.547441][ T5720] usb 1-1: config 0 descriptor?? [ 134.571718][ T5720] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 134.654943][ T7308] loop2: detected capacity change from 0 to 512 [ 134.662356][ T7308] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.709997][ T7308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.724540][ T7308] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.925028][ T966] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.943409][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.084595][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 135.090680][ T966] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.101132][ T966] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.101173][ T966] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.127469][ T966] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 135.127505][ T966] usb 2-1: Product: syz [ 135.127546][ T966] usb 2-1: Manufacturer: syz [ 135.152381][ T966] hub 2-1:4.0: USB hub found [ 135.538055][ T5720] gspca_stk1135: reg_w 0x5 err -71 [ 135.539135][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539170][ T5720] gspca_stk1135: Sensor write failed [ 135.539199][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539211][ T5720] gspca_stk1135: Sensor write failed [ 135.539240][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539252][ T5720] gspca_stk1135: Sensor read failed [ 135.539280][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539292][ T5720] gspca_stk1135: Sensor read failed [ 135.539302][ T5720] gspca_stk1135: Detected sensor type unknown (0x0) [ 135.539339][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539350][ T5720] gspca_stk1135: Sensor read failed [ 135.539378][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539390][ T5720] gspca_stk1135: Sensor read failed [ 135.539418][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539647][ T5720] gspca_stk1135: Sensor write failed [ 135.539678][ T5720] gspca_stk1135: serial bus timeout: status=0x00 [ 135.539691][ T5720] gspca_stk1135: Sensor write failed [ 135.539852][ T5720] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 135.545339][ T7329] loop2: detected capacity change from 0 to 32768 [ 135.546256][ T7329] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 135.546876][ T7329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.561 (7329) [ 135.554223][ T966] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 135.569789][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 135.569975][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.564'. [ 135.624103][ T4945] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.709231][ T7329] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.709260][ T7329] BTRFS info (device loop2): using crc32c checksum algorithm [ 135.711353][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.763396][ T5720] usb 1-1: USB disconnect, device number 6 [ 135.774950][ T4945] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 135.776755][ T4945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.776775][ T4945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.780530][ T4945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.780551][ T4945] usb 4-1: Product: syz [ 135.780564][ T4945] usb 4-1: Manufacturer: syz [ 135.780577][ T4945] usb 4-1: SerialNumber: syz [ 135.889528][ T7329] BTRFS info (device loop2): rebuilding free space tree [ 135.904349][ T966] usb 2-1: USB disconnect, device number 4 [ 135.927443][ T7329] BTRFS info (device loop2): disabling free space tree [ 135.927516][ T7329] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.927559][ T7329] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.966281][ T7329] BTRFS info (device loop2): enabling ssd optimizations [ 135.966976][ T7329] BTRFS info (device loop2): disabling tree log [ 135.967018][ T7329] BTRFS info (device loop2): turning on sync discard [ 135.967038][ T7329] BTRFS info (device loop2): force clearing of disk cache [ 136.141862][ T4945] usb 4-1: unit 5 not found! [ 136.193875][ T5612] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.239580][ T7356] loop0: detected capacity change from 0 to 1024 [ 136.366502][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.595089][ T966] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.755506][ T966] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.765233][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.768079][ T4945] usb 4-1: USB disconnect, device number 6 [ 136.782243][ T966] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.782274][ T966] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.789467][ T7367] loop3: detected capacity change from 0 to 128 [ 136.810506][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.810553][ T966] usb 1-1: SerialNumber: syz [ 136.840517][ T7367] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.848170][ T7367] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.007307][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.059706][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 137.084439][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.158672][ T966] usb 1-1: 0:2 : does not exist [ 137.177843][ T4945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.237989][ T966] usb 1-1: USB disconnect, device number 7 [ 137.285163][ T7376] netlink: 924 bytes leftover after parsing attributes in process `syz.2.576'. [ 137.648416][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.673263][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 137.804248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.811246][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.940661][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 137.940711][ T30] audit: type=1800 audit(1786590850.888:1028): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 138.010075][ T30] audit: type=1800 audit(1786590850.958:1029): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 138.033235][ T7392] loop1: detected capacity change from 0 to 40427 [ 138.046850][ T7392] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 138.056092][ T7392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 138.074937][ T7392] F2FS-fs (loop1): invalid crc value [ 138.096781][ T30] audit: type=1800 audit(1786590851.048:1030): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15092 res=0 errno=0 [ 138.113213][ T7404] cifs: Unknown parameter 'éýf#%À#¬H¢Šé–Äa»~™Äa;M)Ú Zô™Ê§uœÆg¯ŠÎ¦ÜR3INýª«c‚Õã4q¡ìGß[SvNLh„/Ñ¢Q.' [ 138.124785][ T4945] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 138.193206][ T30] audit: type=1800 audit(1786590851.138:1031): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 138.268716][ T7392] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.278906][ T30] audit: type=1800 audit(1786590851.238:1032): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 138.302760][ T4945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.302805][ T4945] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.303955][ T4945] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 138.303987][ T4945] usb 3-1: can't read configurations, error -71 [ 138.341952][ T30] audit: type=1800 audit(1786590851.288:1033): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 138.382538][ T7392] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 138.389886][ T7392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.395475][ T10] kernel read not supported for file /comedi4 (pid: 10 comm: kworker/0:1) [ 138.419126][ T30] audit: type=1800 audit(1786590851.368:1034): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.583" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 138.490022][ T5613] syz-executor: attempt to access beyond end of device [ 138.490022][ T5613] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.520235][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 138.520262][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.520273][ T5613] Call Trace: [ 138.520280][ T5613] [ 138.520288][ T5613] dump_stack_lvl+0xe8/0x150 [ 138.520319][ T5613] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 138.520350][ T5613] f2fs_write_end_bio+0x1211/0x16e0 [ 138.520372][ T5613] ? blkg_put+0x22/0x240 [ 138.520412][ T5613] __submit_merged_bio+0x258/0x6a0 [ 138.520440][ T5613] ? rcu_is_watching+0x16/0xb0 [ 138.520467][ T5613] __submit_merged_write_cond+0x3c9/0x4e0 [ 138.520502][ T5613] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 138.520551][ T5613] f2fs_write_data_pages+0x2a27/0x36f0 [ 138.520577][ T5613] ? __lock_acquire+0x6df/0x2e50 [ 138.520632][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.520657][ T5613] ? is_bpf_text_address+0x26/0x2b0 [ 138.520691][ T5613] ? arch_stack_walk+0xfb/0x150 [ 138.520742][ T5613] ? add_lock_to_list+0xc7/0x100 [ 138.520766][ T5613] ? lockdep_unlock+0x5c/0xd0 [ 138.520790][ T5613] ? __lock_acquire+0x14b9/0x2e50 [ 138.520843][ T5613] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.520879][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 138.520903][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.520931][ T5613] do_writepages+0x338/0x560 [ 138.520965][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 138.520994][ T5613] filemap_fdatawrite+0x1e9/0x2f0 [ 138.521021][ T5613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 138.521092][ T5613] ? do_raw_spin_unlock+0xf5/0x200 [ 138.521121][ T5613] f2fs_sync_dirty_inodes+0x30e/0x830 [ 138.521156][ T5613] f2fs_write_checkpoint+0xa3d/0x2710 [ 138.521174][ T5613] ? __lock_acquire+0x6df/0x2e50 [ 138.521225][ T5613] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 138.521284][ T5613] ? try_to_wake_up+0x8b6/0x14d0 [ 138.521318][ T5613] kill_f2fs_super+0x2dd/0x700 [ 138.521359][ T5613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 138.521400][ T5613] ? call_rcu+0x64d/0x8b0 [ 138.521422][ T5613] ? lockdep_hardirqs_on+0x7b/0x110 [ 138.521463][ T5613] deactivate_locked_super+0xbc/0x110 [ 138.521498][ T5613] cleanup_mnt+0x3d3/0x460 [ 138.521526][ T5613] task_work_run+0x1d9/0x270 [ 138.521548][ T5613] ? __pfx_task_work_run+0x10/0x10 [ 138.521579][ T5613] exit_to_user_mode_loop+0x204/0x770 [ 138.521598][ T5613] ? rcu_is_watching+0x16/0xb0 [ 138.521624][ T5613] do_syscall_64+0x328/0x520 [ 138.521651][ T5613] ? trace_irq_disable+0x3b/0x140 [ 138.521668][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.521687][ T5613] ? clear_bhb_loop+0x70/0xc0 [ 138.521711][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.521729][ T5613] RIP: 0033:0x7f891999f317 [ 138.521747][ T5613] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 138.521763][ T5613] RSP: 002b:00007fff8d742d18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 138.521783][ T5613] RAX: 0000000000000000 RBX: 00007f8919a34474 RCX: 00007f891999f317 [ 138.521796][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8d742dd0 [ 138.521808][ T5613] RBP: 00007fff8d742dd0 R08: 00007fff8d743dd0 R09: 00000000ffffffff [ 138.521826][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8d743e60 [ 138.521839][ T5613] R13: 00007f8919a34474 R14: 0000000000021cb9 R15: 00007fff8d743ea0 [ 138.521871][ T5613] [ 138.532335][ T5613] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 138.568286][ T30] audit: type=1800 audit(1786590851.518:1035): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 138.642919][ T30] audit: type=1800 audit(1786590851.588:1036): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 138.682843][ T30] audit: type=1800 audit(1786590851.638:1037): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 138.737620][ T7420] loop3: detected capacity change from 0 to 1024 [ 138.793137][ T7420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.793225][ T7420] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.846298][ T966] net_ratelimit: 2 callbacks suppressed [ 138.846315][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.063504][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.200638][ T7434] bcache: register_bcache() error : failed to open device [ 139.405239][ T4945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.744593][ T5619] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.886016][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.915528][ T5619] usb 1-1: Using ep0 maxpacket: 8 [ 139.922671][ T5619] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 139.933263][ T5619] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 139.941704][ T5619] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 139.950299][ T5619] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 139.958639][ T7460] loop4: detected capacity change from 0 to 128 [ 139.967003][ T5619] usb 1-1: config 250 has no interface number 0 [ 139.973400][ T5619] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 139.985095][ T5619] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 139.988357][ T7461] loop3: detected capacity change from 0 to 512 [ 140.001985][ T5619] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11 [ 140.013622][ T5619] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 140.027267][ T5619] usb 1-1: config 250 interface 228 has no altsetting 0 [ 140.038737][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 140.038773][ T5619] usb 1-1: Product: syz [ 140.038799][ T5619] usb 1-1: SerialNumber: syz [ 140.074614][ T7461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.087739][ T7460] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.101967][ T7460] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.119932][ T7461] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.146159][ T5619] hub 1-1:250.228: bad descriptor, ignoring hub [ 140.154083][ T5619] hub 1-1:250.228: probe with driver hub failed with error -5 [ 140.245988][ T7461] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz.3.613: invalid size [ 140.268916][ T7461] EXT4-fs (loop3): Remounting filesystem read-only [ 140.298608][ T5614] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.405389][ T5619] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 140.423035][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.426980][ T50] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.427213][ T50] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.506493][ T7472] loop2: detected capacity change from 0 to 64 [ 140.728711][ T4945] usb 1-1: USB disconnect, device number 8 [ 140.740479][ T4945] usblp0: removed [ 140.890419][ T7482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.620'. [ 140.924665][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.002567][ T7487] loop3: detected capacity change from 0 to 64 [ 141.175329][ T4945] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.326379][ T4945] usb 3-1: Using ep0 maxpacket: 8 [ 141.327247][ T4945] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 141.328476][ T4945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.328521][ T4945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.331323][ T4945] usb 3-1: config 0 descriptor?? [ 141.603127][ T4945] usb 3-1: USB disconnect, device number 7 [ 141.966772][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.977657][ T7507] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.445756][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.953593][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 142.953645][ T30] audit: type=1800 audit(1786590855.898:1112): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 142.981956][ T30] audit: type=1800 audit(1786590855.918:1113): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 143.022176][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.046949][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 143.136749][ T30] audit: type=1800 audit(1786590856.088:1114): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 143.188423][ T30] audit: type=1800 audit(1786590856.138:1115): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 143.242814][ T30] audit: type=1800 audit(1786590856.188:1116): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 143.289033][ T30] audit: type=1800 audit(1786590856.238:1117): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 143.334190][ T966] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.434105][ T5619] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.463888][ T30] audit: type=1800 audit(1786590856.408:1118): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 143.504140][ T966] usb 1-1: Using ep0 maxpacket: 8 [ 143.509972][ T966] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.521173][ T30] audit: type=1800 audit(1786590856.458:1119): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 143.543348][ T966] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.543388][ T966] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.543441][ T966] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.543467][ T966] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.543510][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.599912][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.611936][ T30] audit: type=1800 audit(1786590856.568:1120): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=123699 res=0 errno=0 [ 143.624219][ T7556] loop2: detected capacity change from 0 to 512 [ 143.637361][ T30] audit: type=1800 audit(1786590856.568:1121): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=123728 res=0 errno=0 [ 143.639158][ T5619] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 143.642322][ T7557] loop4: detected capacity change from 0 to 2048 [ 143.669988][ T5619] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 143.670011][ T5619] usb 4-1: config 1 has no interface number 0 [ 143.670049][ T5619] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.670068][ T5619] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.670112][ T5619] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 1463, setting to 1024 [ 143.670136][ T5619] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 143.687731][ T7557] EXT4-fs (loop4): invalid inodes per group: 0 [ 143.687756][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.687775][ T5619] usb 4-1: Product: syz [ 143.687787][ T5619] usb 4-1: Manufacturer: syz [ 143.687799][ T5619] usb 4-1: SerialNumber: syz [ 143.707724][ T7556] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.654: ea_inode with extended attributes [ 143.707751][ T7556] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.714042][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 143.714061][ C0] EXT4-fs (loop2): initial error at time 1786590856: ext4_xattr_inode_iget:437: inode 11 [ 143.714089][ C0] EXT4-fs (loop2): last error at time 1786590856: ext4_xattr_inode_iget:437: inode 11 [ 143.714634][ T7556] EXT4-fs (loop2): Remounting filesystem read-only [ 143.714755][ T7556] EXT4-fs (loop2): 1 orphan inode deleted [ 143.742498][ T7556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.756187][ T7549] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.843879][ T966] usb 1-1: GET_CAPABILITIES returned 0 [ 143.843924][ T966] usbtmc 1-1:16.0: can't read capabilities [ 143.891014][ T5619] usb 4-1: Error in usbnet_get_endpoints (-22) [ 143.995470][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.020318][ T5742] usb 4-1: USB disconnect, device number 7 [ 144.044765][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.160338][ T7561] could not allocate digest TFM handle -¿ÆqøêÊâ4¿OÃ(0&qú´f·=¯*΀¯òøj„¸$€ŒÆª­ü€«;º}'üj°O [ 144.162115][ T10] usb 1-1: USB disconnect, device number 9 [ 144.392810][ T7569] block2mtd: device name too long [ 144.867907][ T7584] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.092153][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.182847][ T7592] loop4: detected capacity change from 0 to 256 [ 145.243587][ T7592] FAT-fs (loop4): unable to read block(21474836480) for building NFS inode [ 145.400799][ T7595] loop0: detected capacity change from 0 to 1024 [ 145.416757][ T7595] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 145.434546][ T7595] hfsplus: hfsplus: invalid btree header node [ 145.443007][ T7595] hfsplus: (loop0): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only. [ 145.462987][ T7595] hfsplus: Run fsck.hfsplus to repair. [ 145.478104][ T7598] batman_adv: batadv0: Adding interface: vlan2 [ 145.478137][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.478154][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.478162][ T7598] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 145.594315][ T5619] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 145.744716][ T5619] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 145.755492][ T5619] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 145.763655][ T5619] usb 3-1: config 0 has no interface number 0 [ 145.769984][ T5619] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.781068][ T5619] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 145.792621][ T5619] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 145.804539][ T5619] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 145.804598][ T5619] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 145.804626][ T5619] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.804670][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.852007][ T5619] usb 3-1: config 0 descriptor?? [ 145.857700][ T7596] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.857826][ T7596] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.891755][ T5619] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 145.953777][ T7583] loop3: detected capacity change from 0 to 32768 [ 145.979204][ T7583] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.990593][ T7608] loop0: detected capacity change from 0 to 2048 [ 146.073291][ T7608] Alternate GPT is invalid, using primary GPT. [ 146.087191][ T7608] loop0: p1 p2 p3 [ 146.087234][ T7608] loop0: partition table partially beyond EOD, truncated [ 146.124277][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.177156][ T5616] Bluetooth: hci1: unexpected cc 0x080f length: 90 > 1 [ 146.183661][ T7583] XFS (loop3): Ending clean mount [ 146.185206][ T10] usb 3-1: USB disconnect, device number 8 [ 146.208515][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 146.310741][ T5615] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.508775][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 146.523377][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 146.530155][ T7621] loop4: detected capacity change from 0 to 164 [ 146.538523][ T7621] Unable to read rock-ridge attributes [ 146.553080][ T7621] Unable to read rock-ridge attributes [ 146.566088][ T5901] udevd[5901]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 146.670668][ T7625] loop0: detected capacity change from 0 to 512 [ 146.687399][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.700286][ T7625] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.683: inode #2147418112: comm syz.0.683: iget: illegal inode # [ 146.700329][ T7625] loop0: lost filesystem error report for type 5 error -117 [ 146.700752][ T7625] EXT4-fs (loop0): no journal found [ 146.700773][ T7625] EXT4-fs (loop0): can't get journal size [ 146.714166][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 146.714185][ C0] EXT4-fs (loop0): initial error at time 1786590859: ext4_get_journal_inode:5927 [ 146.714207][ C0] EXT4-fs (loop0): last error at time 1786590859: ext4_get_journal_inode:5927 [ 146.762975][ T7625] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 146.784307][ T7625] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 146.787529][ T7625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.980216][ T7625] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.683: Invalid inode bitmap blk 4 in block_group 0 [ 147.008515][ T7625] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 147.040081][ T7625] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.683: Invalid inode bitmap blk 4 in block_group 0 [ 147.090793][ T7632] input: syz0 as /devices/virtual/input/input7 [ 147.112650][ T7625] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 147.164460][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.300597][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.349774][ T7638] tun0: tun_chr_ioctl cmd 1074025672 [ 147.349815][ T7638] tun0: ignored: set checksum disabled [ 147.406668][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.681783][ T7640] loop2: detected capacity change from 0 to 32768 [ 147.703026][ T7649] loop4: detected capacity change from 0 to 256 [ 147.735437][ T7640] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 147.766901][ T7649] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.826239][ T7640] XFS (loop2): Ending clean mount [ 147.920017][ T7659] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002] [ 147.920133][ T7659] System zones: 0-1, 3-12 [ 147.927150][ T7659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.969532][ T5612] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 148.041350][ T7649] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 148.057064][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.113557][ T5611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.205081][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.261461][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 148.261510][ T30] audit: type=1800 audit(1786590861.208:1189): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 148.327589][ T30] audit: type=1800 audit(1786590861.268:1190): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 148.330688][ T7652] F2FS-fs (loop3): build fault injection rate: 174 [ 148.330706][ T7652] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 148.342991][ T7652] F2FS-fs (loop3): invalid crc value [ 148.401100][ T30] audit: type=1800 audit(1786590861.348:1191): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 148.451994][ T30] audit: type=1800 audit(1786590861.398:1192): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 148.501283][ T30] audit: type=1800 audit(1786590861.448:1193): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 148.685498][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.777133][ T30] audit: type=1800 audit(1786590861.728:1194): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 148.799691][ T7652] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 148.845797][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 148.849852][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 148.849879][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 148.849901][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 148.853314][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.853336][ T10] usb 1-1: Product: syz [ 148.853348][ T10] usb 1-1: Manufacturer: syz [ 148.853361][ T10] usb 1-1: SerialNumber: syz [ 148.856806][ T10] usb 1-1: config 0 descriptor?? [ 148.858215][ T7668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.858345][ T7668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.860081][ T30] audit: type=1800 audit(1786590861.808:1195): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124806 res=0 errno=0 [ 148.861507][ T10] usb 1-1: ucan: probing device on interface #0 [ 148.869606][ T30] audit: type=1800 audit(1786590861.818:1196): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=124838 res=0 errno=0 [ 148.870856][ T30] audit: type=1800 audit(1786590861.818:1197): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=124813 res=0 errno=0 [ 148.873563][ T30] audit: type=1800 audit(1786590861.818:1198): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=124814 res=0 errno=0 [ 148.921480][ T7652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.195704][ T5615] syz-executor: attempt to access beyond end of device [ 149.195704][ T5615] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.196230][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 149.196253][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.196272][ T5615] Call Trace: [ 149.196281][ T5615] [ 149.196288][ T5615] dump_stack_lvl+0xe8/0x150 [ 149.196318][ T5615] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 149.196351][ T5615] f2fs_write_end_bio+0x1211/0x16e0 [ 149.196373][ T5615] ? blkg_put+0x22/0x240 [ 149.196410][ T5615] __submit_merged_bio+0x258/0x6a0 [ 149.196446][ T5615] ? rcu_is_watching+0x16/0xb0 [ 149.196472][ T5615] __submit_merged_write_cond+0x3c9/0x4e0 [ 149.196504][ T5615] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 149.196551][ T5615] f2fs_write_data_pages+0x2a27/0x36f0 [ 149.196580][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 149.196630][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.196654][ T5615] ? is_bpf_text_address+0x26/0x2b0 [ 149.196687][ T5615] ? arch_stack_walk+0xfb/0x150 [ 149.196734][ T5615] ? add_lock_to_list+0xc7/0x100 [ 149.196758][ T5615] ? lockdep_unlock+0x5c/0xd0 [ 149.196779][ T5615] ? __lock_acquire+0x14b9/0x2e50 [ 149.196823][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.196857][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 149.196881][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.196909][ T5615] do_writepages+0x338/0x560 [ 149.196941][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 149.196968][ T5615] filemap_fdatawrite+0x1e9/0x2f0 [ 149.196994][ T5615] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 149.197060][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 149.197088][ T5615] f2fs_sync_dirty_inodes+0x30e/0x830 [ 149.197121][ T5615] f2fs_write_checkpoint+0xa3d/0x2710 [ 149.197137][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 149.197185][ T5615] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 149.197239][ T5615] ? try_to_wake_up+0x8b6/0x14d0 [ 149.197279][ T5615] kill_f2fs_super+0x2dd/0x700 [ 149.197315][ T5615] ? __pfx_kill_f2fs_super+0x10/0x10 [ 149.197353][ T5615] ? call_rcu+0x64d/0x8b0 [ 149.197372][ T5615] ? lockdep_hardirqs_on+0x7b/0x110 [ 149.197412][ T5615] deactivate_locked_super+0xbc/0x110 [ 149.197441][ T5615] cleanup_mnt+0x3d3/0x460 [ 149.197467][ T5615] task_work_run+0x1d9/0x270 [ 149.197489][ T5615] ? __pfx_task_work_run+0x10/0x10 [ 149.197518][ T5615] exit_to_user_mode_loop+0x204/0x770 [ 149.197535][ T5615] ? rcu_is_watching+0x16/0xb0 [ 149.197559][ T5615] do_syscall_64+0x328/0x520 [ 149.197584][ T5615] ? trace_irq_disable+0x3b/0x140 [ 149.197601][ T5615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.197619][ T5615] ? clear_bhb_loop+0x70/0xc0 [ 149.197640][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.197658][ T5615] RIP: 0033:0x7fa99599f317 [ 149.197674][ T5615] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 149.197690][ T5615] RSP: 002b:00007ffcd048d8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 149.197709][ T5615] RAX: 0000000000000000 RBX: 00007fa995a34474 RCX: 00007fa99599f317 [ 149.197722][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd048d970 [ 149.197732][ T5615] RBP: 00007ffcd048d970 R08: 00007ffcd048e970 R09: 00000000ffffffff [ 149.197744][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd048ea00 [ 149.197756][ T5615] R13: 00007fa995a34474 R14: 0000000000024686 R15: 00007ffcd048ea40 [ 149.197786][ T5615] [ 149.201120][ T5615] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 149.247387][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.520887][ T10] ucan 1-1:0.0: probe with driver ucan failed with error -71 [ 149.560846][ T10] usb 1-1: USB disconnect, device number 10 [ 149.727879][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.192905][ T7694] set_capacity_and_notify: 2 callbacks suppressed [ 150.192954][ T7694] loop2: detected capacity change from 0 to 1024 [ 150.212052][ T5616] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 150.212127][ T5616] Bluetooth: hci1: Injecting HCI hardware error event [ 150.218014][ T5624] Bluetooth: hci1: hardware error 0x00 [ 150.277186][ T7694] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.289016][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.462061][ T7694] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.705: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.462114][ T7694] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.477509][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 150.477534][ C1] EXT4-fs (loop2): initial error at time 1786590863: ext4_map_blocks:790: inode 3: block 2 [ 150.477573][ C1] EXT4-fs (loop2): last error at time 1786590863: ext4_map_blocks:790: inode 3: block 2 [ 150.518187][ T7694] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.705: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.518244][ T7694] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.518484][ T7694] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.705: Failed to acquire dquot type 0 [ 150.518506][ T7694] loop2: lost filesystem error report for type 5 error -117 [ 150.518846][ T7694] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 150.518865][ T7694] loop2: lost filesystem error report for type 5 error -117 [ 150.558659][ T7694] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.705: mark_inode_dirty error [ 150.558689][ T7694] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.559621][ T7694] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 150.559708][ T7694] EXT4-fs (loop2): 1 orphan inode deleted [ 150.568144][ T7694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.578360][ T50] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.641429][ T50] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 150.890895][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.901822][ T5612] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 150.901877][ T5612] loop2: lost filesystem error report for type 5 error -117 [ 150.919336][ T5612] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 150.919668][ T5612] loop2: lost filesystem error report for type 5 error -117 [ 150.919884][ T5612] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 150.919906][ T5612] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 150.920155][ T5612] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 150.920178][ T5612] loop2: lost filesystem error report for type 5 error -117 [ 151.245248][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.342429][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.345381][ T7729] loop0: detected capacity change from 0 to 8 [ 151.401446][ T7729] SQUASHFS error: Failed to read block 0x6e6: -5 [ 151.401488][ T7729] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 151.401500][ T7729] SQUASHFS error: Unable to read directory block [6e4:0] [ 151.668306][ T7735] netlink: 'syz.3.722': attribute type 4 has an invalid length. [ 152.222323][ T7755] loop2: detected capacity change from 0 to 2048 [ 152.247096][ T7755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.297715][ T5624] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 152.364801][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.378285][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.764880][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.931852][ T7771] netlink: 104 bytes leftover after parsing attributes in process `syz.3.740'. [ 153.192693][ T7781] loop0: detected capacity change from 0 to 8 [ 153.277029][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 153.277073][ T30] audit: type=1800 audit(1786590866.228:1252): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 153.329289][ T7781] SQUASHFS error: Unable to read inode 0xe3 [ 153.336379][ T30] audit: type=1800 audit(1786590866.288:1253): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 153.363988][ T30] audit: type=1800 audit(1786590866.308:1254): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 153.405591][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.600318][ T30] audit: type=1800 audit(1786590866.548:1255): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 153.747148][ T30] audit: type=1800 audit(1786590866.698:1256): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 153.793093][ T30] audit: type=1800 audit(1786590866.738:1257): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 153.872815][ T30] audit: type=1800 audit(1786590866.818:1258): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 153.891314][ T7795] loop0: detected capacity change from 0 to 8 [ 153.898893][ T30] audit: type=1800 audit(1786590866.818:1259): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.750" name="allow_writes" dev="sysfs" ino=54739 res=0 errno=0 [ 153.980127][ T7795] SQUASHFS error: Failed to read block 0x2d7: -5 [ 153.980189][ T7795] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 154.075649][ T30] audit: type=1800 audit(1786590867.028:1260): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 154.181363][ T30] audit: type=1800 audit(1786590867.128:1261): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14969 res=0 errno=0 [ 154.216393][ T7792] loop3: detected capacity change from 0 to 8192 [ 154.447505][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.533184][ T7807] loop2: detected capacity change from 0 to 512 [ 154.554301][ T7807] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.581900][ T7807] EXT4-fs (loop2): 1 truncate cleaned up [ 154.600733][ T7807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.887797][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.904706][ T5619] kernel read not supported for file /mdstat (pid: 5619 comm: kworker/1:3) [ 155.027698][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.042621][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.054517][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.063582][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.071257][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.401053][ T7801] loop0: detected capacity change from 0 to 32768 [ 155.471117][ T7801] JBD2: Ignoring recovery information on journal [ 155.472489][ T7801] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 155.472815][ T7801] JBD2: bad block at offset 32 [ 155.486334][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.520576][ T7801] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 155.839862][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.938656][ T5611] ocfs2: Unmounting device (7,0) on (node local) [ 156.123893][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 156.160560][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.218460][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.773'. [ 156.398159][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.443406][ T7856] loop2: detected capacity change from 0 to 4096 [ 156.524968][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.534485][ T7844] loop3: detected capacity change from 0 to 32768 [ 156.549570][ T7865] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.648091][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.732750][ T7844] jfs_unlink: dtDelete returned -2 [ 156.940644][ T7876] loop0: detected capacity change from 0 to 256 [ 156.991022][ T7876] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 157.005707][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.020705][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.131964][ T7883] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.166690][ T5624] Bluetooth: hci5: command tx timeout [ 157.528990][ T7889] loop3: detected capacity change from 0 to 4096 [ 157.536750][ T7889] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 157.564690][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.586570][ T7889] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 157.606129][ T7889] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 157.652751][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.714108][ T966] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.715835][ T7889] ntfs3(loop3): ino=1e, mi_enum_attr [ 157.715859][ T7889] ntfs3(loop3): ino=1e, mi_enum_attr [ 157.763273][ T7889] ntfs3(loop3): ino=1e, "file1" mi_enum_attr [ 157.775190][ T7889] ntfs3(loop3): ino=1e, "file1" mi_enum_attr [ 157.781450][ T7889] ntfs3(loop3): ino=1e, "file1" mi_enum_attr [ 157.791007][ T7889] ntfs3(loop3): ino=1e, "file1" mi_enum_attr [ 157.797274][ T7889] ntfs3(loop3): ino=1e, "file1" mi_enum_attr [ 157.886784][ T966] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.897331][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.897397][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.939763][ T966] usb 1-1: config 0 descriptor?? [ 158.255946][ T50] bridge_slave_1: left allmulticast mode [ 158.256010][ T50] bridge_slave_1: left promiscuous mode [ 158.258296][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.282747][ T50] bridge_slave_0: left allmulticast mode [ 158.282792][ T50] bridge_slave_0: left promiscuous mode [ 158.283000][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.292525][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.358670][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 158.358711][ T30] audit: type=1800 audit(1786590871.308:1333): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 158.429950][ T966] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 158.446381][ T966] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input8 [ 158.461174][ T30] audit: type=1800 audit(1786590871.378:1334): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126823 res=0 errno=0 [ 158.489561][ T30] audit: type=1800 audit(1786590871.438:1335): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126845 res=0 errno=0 [ 158.528331][ T30] audit: type=1800 audit(1786590871.438:1336): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=126861 res=0 errno=0 [ 158.530602][ T30] audit: type=1800 audit(1786590871.468:1337): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=126864 res=0 errno=0 [ 158.530638][ T30] audit: type=1800 audit(1786590871.468:1338): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=126863 res=0 errno=0 [ 158.530672][ T30] audit: type=1800 audit(1786590871.468:1339): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=126862 res=0 errno=0 [ 158.555869][ T30] audit: type=1800 audit(1786590871.508:1340): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=126853 res=0 errno=0 [ 158.555910][ T30] audit: type=1800 audit(1786590871.508:1341): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=126856 res=0 errno=0 [ 158.559978][ T30] audit: type=1800 audit(1786590871.508:1342): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=126827 res=0 errno=0 [ 158.680368][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.753139][ T7918] loop3: detected capacity change from 0 to 4096 [ 158.779916][ T7918] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 158.841316][ T966] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 158.857539][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.877405][ T7918] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 158.878464][ T7918] ntfs3(loop3): Failed to load $Extend (-22). [ 158.878483][ T7918] ntfs3(loop3): Failed to initialize $Extend. [ 158.900761][ T966] usb 1-1: USB disconnect, device number 11 [ 158.905719][ T7922] use of bytesused == 0 is deprecated and will be removed in the future, [ 158.905732][ T7922] use the actual size instead. [ 159.227509][ T7927] fido_id[7927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 159.254243][ T5624] Bluetooth: hci5: command tx timeout [ 159.724878][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.815054][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.854627][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.857220][ T50] bond0 (unregistering): Released all slaves [ 159.905434][ T7943] loop0: detected capacity change from 0 to 512 [ 159.910538][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 159.917377][ T7943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.917401][ T7943] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.959182][ T7943] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.006529][ T7943] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.804: bg 0: block 64: padding at end of block bitmap is not set [ 160.006581][ T7943] loop0: lost filesystem error report for type 5 error -117 [ 160.016059][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 160.016081][ C1] EXT4-fs (loop0): initial error at time 1786590872: ext4_validate_block_bitmap:445 [ 160.016123][ C1] EXT4-fs (loop0): last error at time 1786590872: ext4_validate_block_bitmap:445 [ 160.066593][ T7943] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.804: Failed to acquire dquot type 0 [ 160.066654][ T7943] loop0: lost filesystem error report for type 5 error -117 [ 160.088547][ T7943] EXT4-fs (loop0): 1 truncate cleaned up [ 160.114962][ T7943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.265754][ T7943] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 160.329583][ T7943] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.804: Failed to acquire dquot type 0 [ 160.342577][ T7943] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-28, ino=3). Please run e2fsck to fix. [ 160.516392][ T5611] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 160.519139][ T5611] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 160.765616][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.776531][ T7962] loop3: detected capacity change from 0 to 256 [ 160.821367][ T7962] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.200975][ T50] hsr_slave_0: left promiscuous mode [ 161.208493][ T50] hsr_slave_1: left promiscuous mode [ 161.209504][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.209536][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.230741][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.230782][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.302405][ T50] veth1_macvtap: left promiscuous mode [ 161.309868][ T50] veth0_macvtap: left promiscuous mode [ 161.310001][ T50] veth1_vlan: left promiscuous mode [ 161.310177][ T50] veth0_vlan: left promiscuous mode [ 161.335913][ T5624] Bluetooth: hci5: command tx timeout [ 161.569697][ T7978] netlink: 277 bytes leftover after parsing attributes in process `syz.3.816'. [ 161.643869][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.654171][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.662333][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.675896][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.683686][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.807052][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.894248][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.913389][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.923666][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.931108][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.938842][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.950519][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.303478][ T50] team0 (unregistering): Port device team_slave_1 removed [ 162.329387][ T50] team0 (unregistering): Port device team_slave_0 removed [ 162.585384][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 162.845779][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.868280][ T7818] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.868443][ T7818] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.868562][ T7818] bridge_slave_0: entered allmulticast mode [ 162.871347][ T7818] bridge_slave_0: entered promiscuous mode [ 162.887936][ T7818] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.888361][ T7818] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.888485][ T7818] bridge_slave_1: entered allmulticast mode [ 162.892340][ T7818] bridge_slave_1: entered promiscuous mode [ 162.978656][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 163.161184][ T7818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.206643][ T7818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.375679][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 163.375721][ T30] audit: type=1800 audit(1786590876.328:1390): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 163.404494][ T5624] Bluetooth: hci5: command tx timeout [ 163.448254][ T7818] team0: Port device team_slave_0 added [ 163.453944][ T30] audit: type=1800 audit(1786590876.388:1391): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 163.479787][ T7818] team0: Port device team_slave_1 added [ 163.533243][ T30] audit: type=1800 audit(1786590876.478:1392): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 163.583580][ T8047] loop4: detected capacity change from 0 to 256 [ 163.677903][ T30] audit: type=1800 audit(1786590876.628:1393): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 163.726595][ T5624] Bluetooth: hci0: command tx timeout [ 163.826980][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.827019][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.827043][ T7818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.888274][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.928975][ T7818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.929011][ T7818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.930683][ T7818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.045452][ T5624] Bluetooth: hci1: command tx timeout [ 164.154296][ T30] audit: type=1800 audit(1786590877.098:1394): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 164.193737][ T30] audit: type=1800 audit(1786590877.138:1395): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.835" name="ignore_ce" dev="sysfs" ino=53302 res=0 errno=0 [ 164.203933][ T30] audit: type=1800 audit(1786590877.138:1396): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 164.284832][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.315326][ T30] audit: type=1800 audit(1786590877.268:1397): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 164.430884][ T7818] hsr_slave_0: entered promiscuous mode [ 164.431392][ T30] audit: type=1800 audit(1786590877.368:1398): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 164.437937][ T7818] hsr_slave_1: entered promiscuous mode [ 164.438654][ T7818] debugfs: 'hsr0' already exists in 'hsr' [ 164.438671][ T7818] Cannot create hsr debugfs directory [ 164.461714][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 164.499569][ T30] audit: type=1800 audit(1786590877.448:1399): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 164.651272][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.910129][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.924500][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.926443][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.169797][ T8088] loop3: detected capacity change from 0 to 1024 [ 165.330645][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.363416][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.637966][ T8097] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 165.804127][ T5624] Bluetooth: hci0: command tx timeout [ 165.965818][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.070267][ T8121] program syz.4.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.099727][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 166.125662][ T5624] Bluetooth: hci1: command tx timeout [ 166.312572][ T8130] program syz.4.855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.562827][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.562942][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.563062][ T7979] bridge_slave_0: entered allmulticast mode [ 166.566677][ T7979] bridge_slave_0: entered promiscuous mode [ 166.570215][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.570356][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.570490][ T7979] bridge_slave_1: entered allmulticast mode [ 166.572214][ T7979] bridge_slave_1: entered promiscuous mode [ 166.615101][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.719548][ T50] bridge_slave_1: left allmulticast mode [ 166.719596][ T50] bridge_slave_1: left promiscuous mode [ 166.719779][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.727672][ T50] bridge_slave_0: left allmulticast mode [ 166.727693][ T50] bridge_slave_0: left promiscuous mode [ 166.727876][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.999178][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.010699][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.020747][ T50] bond0 (unregistering): Released all slaves [ 167.136187][ T8156] Line length is too long: Should be less than 4094 [ 167.153640][ T7979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.174710][ T7979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.174905][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.175027][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.175138][ T7986] bridge_slave_0: entered allmulticast mode [ 167.181111][ T7986] bridge_slave_0: entered promiscuous mode [ 167.186361][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.188077][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.188813][ T7986] bridge_slave_1: entered allmulticast mode [ 167.190772][ T7986] bridge_slave_1: entered promiscuous mode [ 167.194236][ T5742] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.344419][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 167.345275][ T5742] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 167.348235][ T5742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.348255][ T5742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.349212][ T5742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.349232][ T5742] usb 4-1: SerialNumber: syz [ 167.360229][ T7818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.369025][ T5742] usb 4-1: 0:2 : does not exist [ 167.393557][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.477047][ T7818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.504788][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.505701][ T7818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.525407][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.610931][ T7979] team0: Port device team_slave_0 added [ 167.611392][ T7818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.625988][ T7818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.632827][ T7986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.639630][ T7979] team0: Port device team_slave_1 added [ 167.663765][ T7986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.885497][ T5624] Bluetooth: hci0: command tx timeout [ 167.885614][ T50] hsr_slave_0: left promiscuous mode [ 167.891042][ T50] hsr_slave_1: left promiscuous mode [ 167.891968][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.892008][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.897609][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.897628][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.902770][ T50] batman_adv: batadv0: Interface deactivated: dummy0 [ 167.902787][ T50] batman_adv: batadv0: Removing interface: dummy0 [ 167.936678][ T50] veth1_macvtap: left promiscuous mode [ 167.936711][ T50] veth0_macvtap: left promiscuous mode [ 167.943576][ T50] veth1_vlan: left promiscuous mode [ 167.944464][ T50] veth0_vlan: left promiscuous mode [ 168.149404][ T8185] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 168.149480][ T8185] netlink: 200 bytes leftover after parsing attributes in process `syz.4.871'. [ 168.205862][ T5624] Bluetooth: hci1: command tx timeout [ 168.211172][ T5742] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 168.347806][ T5742] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 168.354617][ T8189] netlink: 'syz.4.872': attribute type 10 has an invalid length. [ 168.386663][ T5742] usb 4-1: USB disconnect, device number 8 [ 168.412823][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 168.412868][ T30] audit: type=1800 audit(1786590881.358:1463): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139399 res=0 errno=0 [ 168.450416][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.536373][ T50] team0 (unregistering): Port device team_slave_1 removed [ 168.558917][ T50] team0 (unregistering): Port device team_slave_0 removed [ 168.670062][ T7979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.670095][ T7979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.670118][ T7979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.672137][ T7979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.672150][ T7979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.672173][ T7979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.686818][ T7986] team0: Port device team_slave_0 added [ 168.700137][ T7986] team0: Port device team_slave_1 added [ 168.720963][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 168.805898][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.814857][ T8189] team0: Port device bond0 added [ 168.853911][ T30] audit: type=1800 audit(1786590881.798:1464): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 168.908201][ T30] audit: type=1800 audit(1786590881.858:1465): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 168.930564][ T7986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.938360][ T7986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.938530][ T7986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.942247][ T7986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.942260][ T7986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.942282][ T7986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.018373][ T7979] hsr_slave_0: entered promiscuous mode [ 169.019452][ T7979] hsr_slave_1: entered promiscuous mode [ 169.020249][ T7979] debugfs: 'hsr0' already exists in 'hsr' [ 169.020275][ T7979] Cannot create hsr debugfs directory [ 169.097673][ T7986] hsr_slave_0: entered promiscuous mode [ 169.098671][ T7986] hsr_slave_1: entered promiscuous mode [ 169.099313][ T7986] debugfs: 'hsr0' already exists in 'hsr' [ 169.099329][ T7986] Cannot create hsr debugfs directory [ 169.148309][ T5742] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 169.294474][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 169.295264][ T5742] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 169.296458][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 169.296499][ T5742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.299247][ T5742] usb 4-1: config 0 descriptor?? [ 169.306567][ T30] audit: type=1800 audit(1786590882.248:1466): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142587 res=0 errno=0 [ 169.309772][ T30] audit: type=1800 audit(1786590882.248:1467): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=142616 res=0 errno=0 [ 169.317173][ T30] audit: type=1800 audit(1786590882.268:1468): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=142594 res=0 errno=0 [ 169.322959][ T30] audit: type=1800 audit(1786590882.268:1469): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=142595 res=0 errno=0 [ 169.323020][ T30] audit: type=1800 audit(1786590882.278:1470): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=142596 res=0 errno=0 [ 169.341772][ T30] audit: type=1800 audit(1786590882.298:1471): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142636 res=0 errno=0 [ 169.541839][ T30] audit: type=1800 audit(1786590882.488:1472): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24607 res=0 errno=0 [ 169.695058][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.733569][ T5742] playstation 0003:054C:0BA0.0005: unknown main item tag 0x4 [ 169.733843][ T5742] playstation 0003:054C:0BA0.0005: reserved main item tag 0xd [ 169.742997][ T5742] playstation 0003:054C:0BA0.0005: hidraw0: USB HID v9.42 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 169.843455][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.872069][ T641] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.872178][ T641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.920295][ T5742] playstation 0003:054C:0BA0.0005: Invalid byte count transferred, expected 16 got 0 [ 169.920342][ T5742] playstation 0003:054C:0BA0.0005: Failed to retrieve DualShock4 pairing info: -22 [ 169.920758][ T5742] playstation 0003:054C:0BA0.0005: Failed to get MAC address from DualShock4 [ 169.920774][ T5742] playstation 0003:054C:0BA0.0005: Failed to create dualshock4. [ 169.927360][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.927455][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.933984][ T5742] playstation 0003:054C:0BA0.0005: probe with driver playstation failed with error -22 [ 169.974286][ T5624] Bluetooth: hci0: command tx timeout [ 169.982646][ T7979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.999579][ T7979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.060751][ T7986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.092754][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 170.099473][ T7979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.113930][ T7979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.124990][ T7979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 170.139594][ T5740] usb 4-1: USB disconnect, device number 9 [ 170.150503][ T7979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.174417][ T7979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.189059][ T7979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.221317][ T7986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.294432][ T5624] Bluetooth: hci1: command tx timeout [ 170.325777][ T7986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.462814][ T7986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.577442][ T7979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.611179][ T7979] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.627812][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.627923][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.662377][ T641] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.662522][ T641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.083337][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 171.191455][ T7986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.211575][ T7986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.217966][ T7986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.227382][ T7986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.229008][ T7986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.253025][ T7986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.260305][ T7986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.263915][ T7986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.392830][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.529259][ T7986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.574779][ T7986] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.610077][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.610262][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.640710][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.640864][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.813839][ T7979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.144317][ T7818] veth0_vlan: entered promiscuous mode [ 172.197131][ T7818] veth1_vlan: entered promiscuous mode [ 172.337498][ T7818] veth0_macvtap: entered promiscuous mode [ 172.373870][ T7818] veth1_macvtap: entered promiscuous mode [ 172.471265][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.499748][ T8297] program syz.4.879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.500855][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.531519][ T980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.533751][ T980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.533844][ T980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.533900][ T980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.628599][ T8284] loop3: detected capacity change from 0 to 32768 [ 172.681929][ T8284] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 172.725904][ T8310] loop4: detected capacity change from 0 to 1024 [ 172.871668][ T8284] XFS (loop3): Ending clean mount [ 172.992102][ T5615] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 173.091906][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 173.096750][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.096768][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.308907][ T7979] veth0_vlan: entered promiscuous mode [ 173.367232][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.367270][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.400289][ T7979] veth1_vlan: entered promiscuous mode [ 173.548924][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 173.548968][ T30] audit: type=1800 audit(1786590886.498:1493): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 173.575573][ T7979] veth0_macvtap: entered promiscuous mode [ 173.604308][ T7979] veth1_macvtap: entered promiscuous mode [ 173.677178][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.690834][ T30] audit: type=1800 audit(1786590886.628:1494): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.883" name="add_local_port" dev="sysfs" ino=21888 res=0 errno=0 [ 173.705729][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.707035][ T8329] nvme_fcloop: unknown parameter or missing value 'ww' [ 173.790862][ T1115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.790936][ T1115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.819659][ T7986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.828707][ T30] audit: type=1800 audit(1786590886.778:1495): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 173.865711][ T1115] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.867616][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.892647][ T30] audit: type=1800 audit(1786590886.838:1496): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 174.052137][ T30] audit: type=1800 audit(1786590886.998:1497): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 174.102098][ T30] audit: type=1800 audit(1786590887.048:1498): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144936 res=0 errno=0 [ 174.193569][ T30] audit: type=1800 audit(1786590887.138:1499): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 174.261407][ T30] audit: type=1800 audit(1786590887.208:1500): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 174.338956][ T30] audit: type=1800 audit(1786590887.288:1501): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 174.397724][ T30] audit: type=1800 audit(1786590887.348:1502): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 174.401529][ T980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.401546][ T980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.512894][ T7986] veth0_vlan: entered promiscuous mode [ 174.581974][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.582010][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.595837][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.607072][ T7986] veth1_vlan: entered promiscuous mode [ 174.655984][ T7986] veth0_macvtap: entered promiscuous mode [ 174.666266][ T7986] veth1_macvtap: entered promiscuous mode [ 174.698658][ T7986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.713980][ T7986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.734356][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.744122][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 174.752922][ T44] usb 6-1: New USB device found, idVendor=0f11, idProduct=1033, bcdDevice=fb.34 [ 174.765762][ T44] usb 6-1: config 251 has an invalid interface number: 94 but max is 0 [ 174.765798][ T44] usb 6-1: config 251 has no interface number 0 [ 174.765852][ T44] usb 6-1: config 251 interface 94 altsetting 2 bulk endpoint 0xA has invalid maxpacket 8 [ 174.765879][ T44] usb 6-1: config 251 interface 94 has no altsetting 0 [ 174.766745][ T1115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.767702][ T1115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.822288][ T641] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.838385][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.838424][ T44] usb 6-1: Product: syz [ 174.838453][ T44] usb 6-1: Manufacturer: syz [ 174.838470][ T44] usb 6-1: SerialNumber: syz [ 174.893428][ T8349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 175.061226][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.061261][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.135743][ T44] ldusb 6-1:251.94: Interrupt in endpoint not found [ 175.178773][ T44] usb 6-1: USB disconnect, device number 2 [ 175.180956][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.180974][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.628415][ T8403] bridge_slave_1: default FDB implementation only supports local addresses [ 177.083667][ T8417] loop6: detected capacity change from 0 to 4096 [ 177.132609][ T8417] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 177.245843][ T8417] ntfs3(loop6): ino=19, mi_enum_attr [ 177.343933][ T8429] program syz.5.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.481999][ T5741] kernel read not supported for file /dsp (pid: 5741 comm: kworker/0:6) [ 177.612985][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 177.623778][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 178.261712][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.940'. [ 178.378457][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.942'. [ 178.408701][ T5616] Bluetooth: hci2: sending frame failed (-49) [ 178.418968][ T5624] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 178.426543][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.942'. [ 178.554450][ T8476] loop3: detected capacity change from 0 to 128 [ 178.622108][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 178.622154][ T30] audit: type=1800 audit(1786590891.568:1577): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 178.675565][ T30] audit: type=1800 audit(1786590891.628:1578): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 178.707195][ T30] audit: type=1800 audit(1786590891.658:1579): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 178.737930][ T30] audit: type=1800 audit(1786590891.688:1580): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 178.867577][ T30] audit: type=1800 audit(1786590891.818:1581): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 178.944144][ T30] audit: type=1800 audit(1786590891.878:1582): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 178.983026][ T30] audit: type=1800 audit(1786590891.928:1583): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 179.016613][ T30] audit: type=1800 audit(1786590891.968:1584): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 179.057620][ T30] audit: type=1800 audit(1786590892.008:1585): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 179.157293][ T30] audit: type=1800 audit(1786590892.108:1586): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145738 res=0 errno=0 [ 179.259476][ T8493] input: syz0 as /devices/virtual/input/input9 [ 179.572222][ T8514] loop3: detected capacity change from 0 to 512 [ 179.691108][ T8514] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.958: bad orphan inode 15 [ 179.691151][ T8514] loop3: lost filesystem error report for type 5 error -117 [ 179.701258][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 179.701279][ C1] EXT4-fs (loop3): initial error at time 1786590892: ext4_orphan_get:1429 [ 179.701303][ C1] EXT4-fs (loop3): last error at time 1786590892: ext4_orphan_get:1429 [ 179.710634][ T8514] ext4_test_bit(bit=14, block=5) = 0 [ 179.755374][ T8514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.826654][ T8514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 179.991754][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.162334][ T8490] loop2: detected capacity change from 0 to 32768 [ 180.208189][ T8490] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 180.240932][ T8490] JBD2: Ignoring recovery information on journal [ 180.333077][ T8490] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.375706][ T8509] loop4: detected capacity change from 0 to 131072 [ 180.378220][ T8509] F2FS-fs (loop4): invalid crc value [ 180.497585][ T8509] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 180.508783][ T8509] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.575850][ T8509] F2FS-fs (loop4): access invalid blkaddr:0 [ 180.575901][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.4.956 Not tainted syzkaller #0 PREEMPT(full) [ 180.575922][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.575931][ T8509] Call Trace: [ 180.575937][ T8509] [ 180.575944][ T8509] dump_stack_lvl+0xe8/0x150 [ 180.575975][ T8509] __f2fs_is_valid_blkaddr+0xe62/0x14f0 [ 180.576010][ T8509] sanity_check_extent_cache+0x1ab/0xa30 [ 180.576042][ T8509] ? f2fs_sanity_check_inline_data+0x70/0x740 [ 180.576071][ T8509] f2fs_iget+0x4211/0x6270 [ 180.576117][ T8509] f2fs_lookup+0x3ff/0xa50 [ 180.576139][ T8509] ? d_alloc_parallel+0x39c/0x16b0 [ 180.576172][ T8509] ? __pfx_f2fs_lookup+0x10/0x10 [ 180.576195][ T8509] ? __pfx_d_alloc_parallel+0x10/0x10 [ 180.576234][ T8509] __lookup_slow+0x1fb/0x2f0 [ 180.576256][ T8509] lookup_slow+0x53/0x70 [ 180.576276][ T8509] path_lookupat+0x3f5/0x8c0 [ 180.576309][ T8509] filename_lookup+0x265/0x5d0 [ 180.576332][ T8509] ? __pfx_filename_lookup+0x10/0x10 [ 180.576373][ T8509] ? strncpy_from_user+0x150/0x2c0 [ 180.576405][ T8509] ? do_getname+0x151/0x250 [ 180.576433][ T8509] user_path_at+0x40/0x160 [ 180.576455][ T8509] __se_sys_mount+0x2dc/0x420 [ 180.576479][ T8509] ? __pfx___se_sys_mount+0x10/0x10 [ 180.576503][ T8509] ? __x64_sys_mount+0x20/0xc0 [ 180.576523][ T8509] do_syscall_64+0x166/0x520 [ 180.576550][ T8509] ? trace_irq_disable+0x3b/0x140 [ 180.576567][ T8509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.576585][ T8509] ? clear_bhb_loop+0x70/0xc0 [ 180.576608][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.576626][ T8509] RIP: 0033:0x7fb83cd9e0d9 [ 180.576644][ T8509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.576659][ T8509] RSP: 002b:00007fb83dbc5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.576678][ T8509] RAX: ffffffffffffffda RBX: 00007fb83d025fa0 RCX: 00007fb83cd9e0d9 [ 180.576692][ T8509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 180.576704][ T8509] RBP: 00007fb83ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 180.576716][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.576727][ T8509] R13: 00007fb83d026038 R14: 00007fb83d025fa0 R15: 00007ffc41e73fb8 [ 180.576757][ T8509] [ 180.578141][ T8509] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 181.089527][ T7986] ocfs2: Unmounting device (7,2) on (node local) [ 181.168934][ T10] kernel write not supported for file bpf-map (pid: 10 comm: kworker/0:1) [ 181.895845][ T8555] loop6: detected capacity change from 0 to 1024 [ 181.907429][ T8555] EXT4-fs: Ignoring removed nobh option [ 181.907576][ T8555] EXT4-fs: Ignoring removed bh option [ 181.907620][ T8555] EXT4-fs: Ignoring removed nobh option [ 181.920939][ T8555] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 181.934648][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 181.996218][ T8555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.085300][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 182.092819][ T44] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 182.103313][ T44] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.103350][ T44] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 182.103393][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 182.132094][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.132130][ T44] usb 4-1: Product: syz [ 182.132163][ T44] usb 4-1: Manufacturer: syz [ 182.132180][ T44] usb 4-1: SerialNumber: syz [ 182.159858][ T44] usb 4-1: config 0 descriptor?? [ 182.229769][ T7979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.578799][ T44] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 182.763985][ T8570] cramfs: checking physical address 0x00000000292e0000 for linear cramfs image [ 182.792414][ T44] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 182.805620][ T8572] loop2: detected capacity change from 0 to 64 [ 182.820284][ T8570] cramfs: wrong magic [ 182.832586][ T44] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 182.916601][ T8570] cramfs: wrong magic [ 182.999518][ T44] usb 4-1: USB disconnect, device number 10 [ 183.590473][ T8593] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 183.595314][ T8593] CIFS: Attempting to mount //127.0.0.1/share [ 183.608339][ T8593] CIFS: VFS: Error connecting to socket. Aborting operation. [ 183.608467][ T8593] CIFS: VFS: cifs_mount failed w/return code = -111 [ 183.707202][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 183.707243][ T30] audit: type=1800 audit(1786590896.658:1642): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15338 res=0 errno=0 [ 183.773764][ T30] audit: type=1800 audit(1786590896.718:1643): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 183.820411][ T30] audit: type=1800 audit(1786590896.768:1644): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 183.902466][ T30] audit: type=1800 audit(1786590896.848:1645): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 183.987622][ T8607] loop5: detected capacity change from 0 to 1024 [ 183.996304][ T30] audit: type=1800 audit(1786590896.938:1646): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 184.018234][ T30] audit: type=1800 audit(1786590896.948:1647): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146258 res=0 errno=0 [ 184.068769][ T30] audit: type=1800 audit(1786590897.018:1648): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 184.100375][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.994'. [ 184.110164][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.994'. [ 184.121660][ T30] audit: type=1800 audit(1786590897.078:1649): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15461 res=0 errno=0 [ 184.200467][ T30] audit: type=1800 audit(1786590897.148:1650): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 184.270891][ T30] audit: type=1800 audit(1786590897.218:1651): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 184.691879][ T8639] loop2: detected capacity change from 0 to 256 [ 184.708343][ T8639] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 184.723559][ T8639] FAT-fs (loop2): Filesystem has been set read-only [ 184.872989][ T8650] kAFS: bad VL server IP address [ 184.911205][ T8643] loop3: detected capacity change from 0 to 2368 [ 185.133159][ T8659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.254389][ T5719] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 185.404890][ T5719] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 185.415843][ T5719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.415886][ T5719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.415910][ T5719] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.415952][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.462955][ T5719] usb 7-1: config 0 descriptor?? [ 185.477779][ T8672] loop3: detected capacity change from 0 to 128 [ 185.488758][ T8672] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 185.531751][ T8672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.921533][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.934230][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.942017][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.950444][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.958757][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.966699][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.966750][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.966779][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.966807][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 185.966836][ T5719] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 186.014527][ T5719] hid-multitouch 0003:0457:07DA.0006: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 186.154486][ T4945] usb 7-1: USB disconnect, device number 2 [ 186.181190][ T8693] fido_id[8693]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 186.360903][ T8699] program syz.4.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.621379][ T8696] loop2: detected capacity change from 0 to 32768 [ 186.632369][ T8696] xfs: Deprecated parameter 'ikeep' [ 186.632405][ T8696] XFS: ikeep mount option is deprecated. [ 186.677250][ T8696] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 186.825285][ T8696] XFS (loop2): Ending clean mount [ 186.991938][ T7986] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 187.161023][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 187.187024][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 187.246302][ T8732] device-mapper: ioctl: name not supplied when creating device [ 187.265615][ T8689] loop3: detected capacity change from 0 to 40427 [ 187.302004][ T8689] F2FS-fs (loop3): build fault injection rate: 174 [ 187.302048][ T8689] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 187.312735][ T8689] F2FS-fs (loop3): invalid crc value [ 187.514616][ T5619] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.675221][ T5619] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.675275][ T5619] usb 6-1: too many configurations: 42, using maximum allowed: 8 [ 187.703054][ T5619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.703094][ T5619] usb 6-1: Product: syz [ 187.703133][ T5619] usb 6-1: Manufacturer: syz [ 187.703150][ T5619] usb 6-1: SerialNumber: syz [ 187.716670][ T8689] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 187.815840][ T8689] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.982298][ T5619] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 187.994851][ T5619] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 188.006119][ T5619] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 188.044434][ T5619] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 188.067144][ T5615] syz-executor: attempt to access beyond end of device [ 188.067144][ T5615] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.092006][ T5619] usb 6-1: USB disconnect, device number 3 [ 188.120799][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 188.120824][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.120835][ T5615] Call Trace: [ 188.120843][ T5615] [ 188.120850][ T5615] dump_stack_lvl+0xe8/0x150 [ 188.120882][ T5615] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 188.120912][ T5615] f2fs_write_end_bio+0x1211/0x16e0 [ 188.120935][ T5615] ? blkg_put+0x22/0x240 [ 188.120972][ T5615] __submit_merged_bio+0x258/0x6a0 [ 188.120995][ T5615] ? rcu_is_watching+0x16/0xb0 [ 188.121023][ T5615] __submit_merged_write_cond+0x3c9/0x4e0 [ 188.121057][ T5615] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 188.121105][ T5615] f2fs_write_data_pages+0x2a27/0x36f0 [ 188.121131][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 188.121184][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.121209][ T5615] ? is_bpf_text_address+0x26/0x2b0 [ 188.121243][ T5615] ? arch_stack_walk+0xfb/0x150 [ 188.121293][ T5615] ? add_lock_to_list+0xc7/0x100 [ 188.121317][ T5615] ? lockdep_unlock+0x5c/0xd0 [ 188.121342][ T5615] ? __lock_acquire+0x14b9/0x2e50 [ 188.121389][ T5615] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.121425][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 188.121456][ T5615] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.121486][ T5615] do_writepages+0x338/0x560 [ 188.121520][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 188.121549][ T5615] filemap_fdatawrite+0x1e9/0x2f0 [ 188.121576][ T5615] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 188.121644][ T5615] ? do_raw_spin_unlock+0xf5/0x200 [ 188.121673][ T5615] f2fs_sync_dirty_inodes+0x30e/0x830 [ 188.121708][ T5615] f2fs_write_checkpoint+0xa3d/0x2710 [ 188.121726][ T5615] ? __lock_acquire+0x6df/0x2e50 [ 188.121775][ T5615] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 188.121832][ T5615] ? try_to_wake_up+0x8b6/0x14d0 [ 188.121867][ T5615] kill_f2fs_super+0x2dd/0x700 [ 188.121908][ T5615] ? __pfx_kill_f2fs_super+0x10/0x10 [ 188.121947][ T5615] ? call_rcu+0x64d/0x8b0 [ 188.121967][ T5615] ? lockdep_hardirqs_on+0x7b/0x110 [ 188.122008][ T5615] deactivate_locked_super+0xbc/0x110 [ 188.122039][ T5615] cleanup_mnt+0x3d3/0x460 [ 188.122065][ T5615] task_work_run+0x1d9/0x270 [ 188.122089][ T5615] ? __pfx_task_work_run+0x10/0x10 [ 188.122120][ T5615] exit_to_user_mode_loop+0x204/0x770 [ 188.122138][ T5615] ? rcu_is_watching+0x16/0xb0 [ 188.122165][ T5615] do_syscall_64+0x328/0x520 [ 188.122191][ T5615] ? trace_irq_disable+0x3b/0x140 [ 188.122208][ T5615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.122228][ T5615] ? clear_bhb_loop+0x70/0xc0 [ 188.122251][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.122270][ T5615] RIP: 0033:0x7fa99599f317 [ 188.122288][ T5615] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 188.122306][ T5615] RSP: 002b:00007ffcd048d8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 188.122326][ T5615] RAX: 0000000000000000 RBX: 00007fa995a34474 RCX: 00007fa99599f317 [ 188.122339][ T5615] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd048d970 [ 188.122350][ T5615] RBP: 00007ffcd048d970 R08: 00007ffcd048e970 R09: 00000000ffffffff [ 188.122363][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd048ea00 [ 188.122374][ T5615] R13: 00007fa995a34474 R14: 000000000002de0b R15: 00007ffcd048ea40 [ 188.122406][ T5615] [ 188.137855][ T5615] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 188.721729][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 188.721772][ T30] audit: type=1800 audit(1786590901.668:1717): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15584 res=0 errno=0 [ 188.790330][ T30] audit: type=1800 audit(1786590901.738:1718): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 188.858868][ T30] audit: type=1800 audit(1786590901.808:1719): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 188.977352][ T30] audit: type=1800 audit(1786590901.928:1720): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 189.176951][ T30] audit: type=1800 audit(1786590902.128:1721): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 189.270770][ T30] audit: type=1800 audit(1786590902.218:1722): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15215 res=0 errno=0 [ 189.424122][ T4945] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.488624][ T30] audit: type=1800 audit(1786590902.438:1723): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15707 res=0 errno=0 [ 189.604893][ T4945] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 189.605877][ T4945] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.605899][ T4945] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 189.605916][ T4945] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 189.605933][ T4945] usb 4-1: config 220 has no interface number 2 [ 189.605986][ T4945] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.606011][ T4945] usb 4-1: config 220 interface 0 has no altsetting 0 [ 189.606026][ T4945] usb 4-1: config 220 interface 76 has no altsetting 0 [ 189.606042][ T4945] usb 4-1: config 220 interface 1 has no altsetting 0 [ 189.607922][ T4945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.607941][ T4945] usb 4-1: Product: syz [ 189.607954][ T4945] usb 4-1: Manufacturer: syz [ 189.607967][ T4945] usb 4-1: SerialNumber: syz [ 189.619701][ T30] audit: type=1800 audit(1786590902.568:1724): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146827 res=0 errno=0 [ 189.629299][ T30] audit: type=1800 audit(1786590902.568:1725): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=146859 res=0 errno=0 [ 189.630400][ T30] audit: type=1800 audit(1786590902.568:1726): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=146834 res=0 errno=0 [ 189.902377][ T8787] loop2: detected capacity change from 0 to 32768 [ 189.931932][ T4945] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 189.931995][ T4945] uvcvideo 4-1:220.0: No valid video chain found. [ 189.932082][ T4945] usb 4-1: selecting invalid altsetting 0 [ 190.026514][ T8800] netlink: 'syz.5.1052': attribute type 12 has an invalid length. [ 190.038358][ T4945] usb 4-1: selecting invalid altsetting 0 [ 190.038409][ T4945] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 190.063609][ T8787] Bad stbl[5] index:0 (stblindex 9) in dtpage [ 190.063609][ T8787] [ 190.073095][ T8787] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 190.073095][ T8787] [ 190.090755][ T4945] usb 4-1: USB disconnect, device number 11 [ 190.096948][ T8787] ERROR: (device loop2): remounting filesystem as read-only [ 190.106757][ T8787] jfs_rename did not expect dtDelete to return rc = -5 [ 190.106803][ T8787] ERROR: (device loop2): jfs_rename: [ 190.106803][ T8787] [ 190.120326][ T8804] Bad stbl[5] index:0 (stblindex 9) in dtpage [ 190.120326][ T8804] [ 190.120365][ T8804] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 190.120365][ T8804] [ 190.120408][ T8804] jfs_readdir: unexpected rc = -5 from dtReadNext [ 194.132149][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.141777][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.205724][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.207136][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 255.565117][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.565181][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.244698][ T4932] Bluetooth: hci5: command 0x0406 tx timeout [ 288.364124][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 288.364207][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 317.007506][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.007581][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.644733][ T31] INFO: task kworker/u8:3:50 blocked in I/O wait for more than 143 seconds. [ 333.644775][ T31] Not tainted syzkaller #0 [ 333.644802][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.644819][ T31] task:kworker/u8:3 state:D stack:20304 pid:50 tgid:50 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 333.644875][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 333.644927][ T31] Call Trace: [ 333.644941][ T31] [ 333.644980][ T31] __schedule+0x1b4d/0x59e0 [ 333.645014][ T31] ? blk_mq_flush_plug_list+0x415/0x540 [ 333.645047][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 333.645072][ T31] ? pte_offset_map_lock+0x13d/0x210 [ 333.645100][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 333.645156][ T31] ? __pfx___schedule+0x10/0x10 [ 333.645203][ T31] ? schedule+0x90/0x2b0 [ 333.645235][ T31] schedule+0x164/0x2b0 [ 333.645265][ T31] io_schedule+0x7f/0xd0 [ 333.645295][ T31] rq_qos_wait+0x266/0x360 [ 333.645325][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 333.645346][ T31] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 333.645370][ T31] ? __pfx_rq_qos_wait+0x10/0x10 [ 333.645397][ T31] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 333.645426][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 333.645459][ T31] wbt_wait+0x326/0x550 [ 333.645484][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 333.645506][ T31] ? __pfx_dd_bio_merge+0x10/0x10 [ 333.645539][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 333.645559][ T31] __rq_qos_throttle+0x6b/0xb0 [ 333.645601][ T31] blk_mq_submit_bio+0x1512/0x2a70 [ 333.645631][ T31] ? blk_mq ** replaying previous printk message ** [ 333.645631][ T31] ? blk_mq_submit_bio+0x2fd/0x2a70 [ 333.645660][ T31] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 333.645682][ T31] ? blk_cgroup_bio_start+0x5d7/0x670 [ 333.645713][ T31] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 333.645744][ T31] ? __submit_bio+0x7e/0x340 [ 333.645770][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 333.645799][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 333.645823][ T31] ? submit_bio_noacct+0x104f/0x1b80 [ 333.645848][ T31] ? blkcg_set_ioprio+0x16b/0x2a0 [ 333.645884][ T31] ext4_bio_write_folio+0xf90/0x1780 [ 333.645929][ T31] mpage_process_page_bufs+0x6bd/0x8a0 [ 333.645972][ T31] mpage_prepare_extent_to_map+0xf92/0x1890 [ 333.645995][ T31] ? process_scheduled_works+0xc3d/0x1630 [ 333.646043][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 333.646091][ T31] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 333.646114][ T31] ? ext4_init_io_end+0x29/0x130 [ 333.742249][ T31] ? kmem_cache_alloc_noprof+0x156/0x600 [ 333.749016][ T31] ? ext4_init_io_end+0x29/0x130 [ 333.749062][ T31] ext4_do_writepages+0xb8a/0x4770 [ 333.749135][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 333.749161][ T31] ? __lock_acquire+0x6df/0x2e50 [ 333.749183][ T31] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 333.749236][ T31] ? finish_task_switch+0x40e/0xc60 [ 333.749263][ T31] ? lock_acquire+0x115/0x350 [ 333.749301][ T31] ext4_writepages+0x241/0x3b0 [ 333.749324][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 333.749362][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 333.749383][ T31] do_writepages+0x338/0x560 [ 333.749406][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.749434][ T31] ? reacquire_held_locks+0x117/0x1a0 [ 333.749454][ T31] ? writeback_sb_inodes+0x450/0x1b00 [ 333.749483][ T31] __writeback_single_inode+0x136/0x1220 [ 333.749512][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 333.749540][ T31] writeback_sb_inodes+0x9de/0x1b00 [ 333.749590][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 333.749646][ T31] ? __pfx_down_read_trylock+0x10/0x10 [ 333.749670][ T31] ? __pfx___up_read+0x10/0x10 [ 333.749702][ T31] __writeback_inodes_wb+0x114/0x240 [ 333.749736][ T31] wb_writeback+0x42f/0xad0 [ 333.749765][ T31] ? queue_io+0x1e1/0x470 [ 333.749796][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 333.749820][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.749858][ T31] wb_workfn+0xc92/0x10f0 [ 333.749899][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 333.749945][ T31] ? lock_acquire+0x115/0x350 [ 333.749971][ T31] ? rcu_is_watching+0x16/0xb0 [ 333.750002][ T31] ? process_scheduled_works+0x97a/0x1630 [ 333.750023][ T31] process_scheduled_works+0xc3d/0x1630 [ 333.750075][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.750104][ T31] ? assign_work+0x3cf/0x5d0 [ 333.750132][ T31] worker_thread+0xa47/0xfb0 [ 333.750181][ T31] kthread+0x38b/0x480 [ 333.750198][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.750220][ T31] ? __pfx_kthread+0x10/0x10 [ 333.750240][ T31] ret_from_fork+0x514/0xb70 [ 333.750269][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.750296][ T31] ? __switch_to+0xc89/0x1420 [ 333.750322][ T31] ? __pfx_kthread+0x10/0x10 [ 333.750342][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.750385][ T31] [ 333.797024][ T31] [ 333.797024][ T31] Showing all locks held in the system: [ 333.797038][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 333.797052][ T31] #0: ffffffff8ec365f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 333.797104][ T31] #1: ffffffff9ad0ebb8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 333.797155][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 333.797168][ T31] #0: ffffffff8ed5ca20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.797213][ T31] locks held by kworker/u8:3/50: 4, on CPU#0: [ 333.797225][ T31] #0: ffff888020a87940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.797274][ T31] #1: ffffc90000bb7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 333.797321][ T31] #2: ffff8880350900e8 (&type->s_umount_key#35){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 333.797367][ T31] #3: ffff88803508ec98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 333.797433][ T31] locks held by klogd/4973: 1, last CPU#0: [ 333.797445][ T31] #0: ffffffff8ed5ca20 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 333.797500][ T31] locks held by getty/5368: 2, on CPU#1: [ 333.797512][ T31] #0: ffff8880366a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.797560][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 333.797603][ T31] locks held by syz-executor/5601: 3, on CPU#0: [ 333.797616][ T31] #0: ffff88801ffcd948 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 333.797659][ T31] #1: ffff888035090558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x202/0x1140 [ 333.797701][ T31] #2: ffff88803508c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 333.797761][ T31] locks held by syz.6.1055/8808: 3, on CPU#1: [ 333.797773][ T31] #0: ffff8880517203b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 333.797820][ T31] #1: ffff888035090460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 333.797873][ T31] #2: ffff88803508c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 333.797923][ T31] locks held by syz.2.1054/8809: 3, on CPU#0: [ 333.797935][ T31] #0: ffff88807c76c378 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 333.797981][ T31] #1: ffff888035090460 (sb_writers#4){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x277/0x450 [ 333.798032][ T31] #2: ffff88803508c938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200 [ 333.798082][ T31] [ 333.798087][ T31] ============================================= [ 333.798087][ T31] [ 333.798104][ T31] NMI backtrace for cpu 0 [ 333.798119][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.798138][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.798148][ T31] Call Trace: [ 333.798155][ T31] [ 333.798163][ T31] dump_stack_lvl+0xe8/0x150 [ 333.798188][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 333.798209][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.798238][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 333.798262][ T31] sys_info+0x135/0x170 [ 333.798280][ T31] watchdog+0xfd7/0x1030 [ 333.798304][ T31] ? watchdog+0x1c7/0x1030 [ 333.798328][ T31] kthread+0x38b/0x480 [ 333.798345][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.798360][ T31] ? __pfx_kthread+0x10/0x10 [ 333.798378][ T31] ret_from_fork+0x514/0xb70 [ 333.798406][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.798432][ T31] ? __switch_to+0xc89/0x1420 [ 333.798457][ T31] ? __pfx_kthread+0x10/0x10 [ 333.798480][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.798519][ T31] [ 333.798541][ T31] Sending NMI from CPU 0 to CPUs 1: [ 333.798567][ C1] NMI backtrace for cpu 1 [ 333.798583][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 333.798604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.798615][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 333.798636][ C1] Code: e8 3e 54 59 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af c1 c7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 52 72 06 cc 44 89 f9 80 e1 07 [ 333.798652][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 333.798669][ C1] RAX: 1ffffffff35a1d00 RBX: 00000000000003fd RCX: 0000000000000000 [ 333.798682][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 333.798704][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 333.798717][ C1] R10: dffffc0000000000 R11: ffffffff856e56d0 R12: dffffc0000000000 [ 333.798731][ C1] R13: 0000000000000000 R14: ffffffff9ad0ebe0 R15: 0000000000000000 [ 333.798743][ C1] FS: 0000000000000000(0000) GS:ffff888124dfc000(0000) knlGS:0000000000000000 [ 333.798759][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.798772][ C1] CR2: 00005649ae74f660 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 333.798789][ C1] Call Trace: [ 333.798795][ C1] [ 333.798803][ C1] wait_for_lsr+0x184/0x2f0 [ 333.798836][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 333.798864][ C1] serial8250_console_write+0xaa1/0x1200 [ 333.798898][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 333.798927][ C1] ? __schedule+0x1b63/0x59e0 [ 333.798961][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 333.798995][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 333.799018][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 333.799046][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 333.799073][ C1] nbcon_kthread_func+0x679/0x880 [ 333.799095][ C1] ? nbcon_kthread_func+0x163/0x880 [ 333.799113][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 333.799136][ C1] ? __kthread_parkme+0x71/0x1f0 [ 333.799163][ C1] ? __kthread_parkme+0x199/0x1f0 [ 333.799192][ C1] kthread+0x38b/0x480 [ 333.799210][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 333.799227][ C1] ? __pfx_kthread+0x10/0x10 [ 333.799245][ C1] ret_from_fork+0x514/0xb70 [ 333.799275][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 333.799303][ C1] ? __switch_to+0xc89/0x1420 [ 333.799329][ C1] ? __pfx_kthread+0x10/0x10 [ 333.799347][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.799384][ C1] [ 333.802723][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 334.725487][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.734570][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.744600][ T31] Call Trace: [ 334.747861][ T31] [ 334.750787][ T31] vpanic+0x56d/0xa60 [ 334.754755][ T31] ? __pfx___schedule+0x10/0x10 [ 334.759588][ T31] ? __pfx_vpanic+0x10/0x10 [ 334.764084][ T31] panic+0xc5/0xd0 [ 334.767807][ T31] ? __pfx_panic+0x10/0x10 [ 334.772214][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 334.777662][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 334.783012][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 334.789147][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 334.795279][ T31] watchdog+0x1030/0x1030 [ 334.799589][ T31] ? watchdog+0x1c7/0x1030 [ 334.803981][ T31] kthread+0x38b/0x480 [ 334.808030][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.812678][ T31] ? __pfx_kthread+0x10/0x10 [ 334.817243][ T31] ret_from_fork+0x514/0xb70 [ 334.821818][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.826922][ T31] ? __switch_to+0xc89/0x1420 [ 334.831580][ T31] ? __pfx_kthread+0x10/0x10 [ 334.836244][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.840995][ T31] [ 334.844258][ T31] Kernel Offset: disabled [ 334.848575][ T31] Rebooting in 86400 seconds..