last executing test programs:

4m33.889065549s ago: executing program 0 (id=341):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000016, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@norecovery}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@mblk_io_submit}, {@delalloc}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f0000000300)=ANY=[], 0x381, 0x0)

4m33.822276254s ago: executing program 0 (id=343):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9)

4m33.822070263s ago: executing program 0 (id=344):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38)

4m33.722163422s ago: executing program 0 (id=345):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x22, 0x0, &(0x7f0000000080))

4m33.67167873s ago: executing program 0 (id=346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x0)

4m33.67143291s ago: executing program 0 (id=347):
syz_open_procfs$namespace(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000042, 0x0)

4m18.672254312s ago: executing program 32 (id=347):
syz_open_procfs$namespace(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000042, 0x0)

3m34.580653634s ago: executing program 3 (id=1116):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:0.0'], 0x13)

3m34.580427436s ago: executing program 3 (id=1117):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4440, &(0x7f00000088c0)="$eJzs3b9vHFkdAPA3Y4fYIQE7pAgSEisRCQTIslMFHAnHceLYiQkKJEI0m7W9SQxrb2SvEUUK00WiQqJAFBFIdK4iF7ThT6ChzNWR7opr7nRSdD7tzqy9M96V96xd+5L7fIqdnfdrnvc78+ZNMX5xqvZkZaOwslEorRWqS482Lhf+WK1srpZDfEzaHv/U8R2f7vTjPDnpc+/r7O71m79+cDmE/y7//83u7u5uqBsMbU20fP/k42dLrdumOFen3m425Vb7xo/sdyGECwf6VTcQQvjtf0KIQgjX0rTpdDscQjgXkrwHz/7ysNCj3rx8Xb5afLvwfGfy0vz2i503HQtGIfyj8t2fPl798AcDkx/8uEeHBwAAAAAAAAAAAAAAAADgHTd77+79X41PhFdRGNyODr6vO5tuO70fu9sz3+//HwsAAAAAAAAAAAAAAAAAAABfUfvv/xei823e/59Jt1Md6u/+ov99pH/mfnl35sb4RLr+e3Qg/0qa9NG1gTDaZt33/Prv13L1D67/HtJV13vjShRlVqsfCVE81tKPkRDHY2Mh/Ctd+P1idCauVDdqP3lU3Vxb7lk33lnZ+Cer92eiky7o3238p3Ptt49/L33nwNlU33/Yu1PsvZaN/0DHcv/+c9RV/K/n6h1H/Dm6bPyToXS4tcBUMgDU4//XwcPjP5Nrvz/xP7X3bTgUMiNAfQ5TiDrPV8jKxj/5XTNDZ/pDdrr+P8vF/0au/ZMa/7fyNyLaysb/G420oUyJ/et/ND78+r+Za/8k4l/v/5b7f1ey8T+dJGZm1MnP2+34P5trvyX+n/ay3/fjtJ/fijJnwHaUpHf6f3VkZeM/dCB///kv7mr+dytXv//Pf9njNp//msP/j6Lk+Y/2svEf7liu2+t/Llev3+P/VGP+x1Fl43+mkdacOyd3/pHGZ7fxn8+136/4N/o21Iz//njy+ekk/Z/mf13Jxv+bSWLcWmKr8dmY/0WHz/9v59o/iflfvf9bcX+P+r7Ixv9sx3L1+P+vi/v/nVy9/sc/hHFz/SPLxv9cx3KN63/o8Pgv5Or1O/4/7GfjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+A6XQ7EqJ4LLMfx2NjIVxP9y+GM9Fiabm4WKku/WEjhJk0vRDOR48r1cVSpbiyVl0uF0uVSnUphBtp/oUwFG1UqrXiaunpzb22hqMn5dJ6bbFcqoUQZtP074VzzbYWV2qrpachhFt7ed+Oq+tPn5TWissr6z8fHx8fD3N7fRiNyn+qlddqydGT3BDm9+qORC2da2Tf3uvL2ej31c31tVKlkX6npU6lulSqtNRZSPP+Fkaj2vrm2lKpVi5Wqo+bxztJU+l2Zu7eb+7dmTiQ/zBKttPH2y0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvqRXkz/7ewhhMNmLQwhTzS9Ru/IvX5evFt8uPN+ZvDS//WLnzanj7S4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZf+URoIojgAvxkL/1Qew2rZ7WxXFNHCFcET6DE8jB7FS3gHCwtbCwkkMyRsspAmKcL3NY/dHzPvwTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgINz+zQ8P7ZdRIqT/+OIz9ev79X8vtT3q83nj/YwI7tz9zBc37Rdefe0ll+WXz99nqd/v28vsaxn9bv6GO3JeJ8Wap/Tybmm9m1qvtr3PFJuIqIv+UXKuWm2uwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA///+NR/5")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40942, 0x0)
lseek(r1, 0x1, 0x3)

3m34.372929657s ago: executing program 3 (id=1126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0)

3m34.218270628s ago: executing program 3 (id=1131):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160)

3m34.208132127s ago: executing program 3 (id=1133):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

3m33.841337028s ago: executing program 3 (id=1136):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f0000000140)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@data_writeback}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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")

3m33.794357234s ago: executing program 33 (id=1136):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f0000000140)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@data_writeback}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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")

2m22.381702577s ago: executing program 4 (id=2308):
lsm_set_self_attr(0x68, &(0x7f0000000000)={0x6d, 0x3, 0x20}, 0x20, 0x0)

2m22.381533972s ago: executing program 4 (id=2309):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)

2m22.311485655s ago: executing program 4 (id=2310):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000200))

2m22.311261275s ago: executing program 4 (id=2311):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="135bd94a01f90605ee1a7b", 0xb, 0x3018}])

2m22.187176154s ago: executing program 4 (id=2312):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
unshare(0x20000400)
bind$l2tp6(r0, 0x0, 0x0)

2m21.850668901s ago: executing program 4 (id=2317):
syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x5, &(0x7f0000000140)={[{@errors_continue}, {@errors_remount_ro}, {@norecovery}, {@errors_continue}, {@snapshot={'cp', 0x3d, 0x2}}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xf63, &(0x7f0000000580)="$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")

2m21.776044968s ago: executing program 34 (id=2317):
syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x5, &(0x7f0000000140)={[{@errors_continue}, {@errors_remount_ro}, {@norecovery}, {@errors_continue}, {@snapshot={'cp', 0x3d, 0x2}}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xf63, &(0x7f0000000580)="$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")

1m40.961224111s ago: executing program 5 (id=2931):
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone(0x8000c00, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000400))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom1\x00', 0x800, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0xe4})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)

1m39.860476399s ago: executing program 5 (id=2945):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xc, 0xfd, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c)
openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680))
r2 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

1m38.771871895s ago: executing program 5 (id=2963):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x700})

1m38.771610478s ago: executing program 5 (id=2964):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

1m38.583369106s ago: executing program 5 (id=2966):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c, 0x4}, {}, {}, {}, {0xd360}, {0x0, 0xfffffffd}, {0x0, 0x80000}], 0x10}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x282b, 0x1, 0x0, "eee98fb006178749cb4dfd9300009b6b7bd152f35ed730fc700000cb4f1891e2", 0xf6c1a1f})

1m38.302134291s ago: executing program 5 (id=2970):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a)

1m38.223823417s ago: executing program 35 (id=2970):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a)

639.875048ms ago: executing program 6 (id=4687):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

597.160553ms ago: executing program 6 (id=4689):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000001c0)="ac7e", 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

596.80288ms ago: executing program 6 (id=4691):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0)

499.968167ms ago: executing program 6 (id=4694):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28)

499.688298ms ago: executing program 6 (id=4695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)

439.959619ms ago: executing program 6 (id=4697):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x15)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

439.627666ms ago: executing program 2 (id=4699):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='sched_switch\x00', r1}, 0x18)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

390.190598ms ago: executing program 2 (id=4700):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

341.53479ms ago: executing program 2 (id=4701):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x181000, 0x0)
lseek(r0, 0x401, 0x3)

341.394576ms ago: executing program 2 (id=4702):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48)

290.629216ms ago: executing program 2 (id=4704):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000abaff9)={0x77359400}, 0x10)

290.089721ms ago: executing program 2 (id=4705):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)
ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x2a, 0xa, 0x2, "140d5997c8b0852ffdffffff0000000300000000000000ffff00000000b28500", 0x32314d56})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$eJzs3c9rHFUcAPA3k7RJan8ktYcKggsWFJWQ9KRGME3TH0lbI9UWESHdJNs2ssmWZCMeeog3wZPgQTwUBW85SQ5e65/gxaOeC3rwIghiZHdn053JLlnrbmLL53PYt/N+J9+Z2TeH3RcnyrcXV3OLq7n8cq40f3P1dO6jUnFtqRDiPdJ0/AN7Nz7t6cZ50kafff995jQzc/b8O9dPh/DDwk8Ptra2tkJFb2hqtOH9H7/fnW9M6+JMm0q/zXvrlPdDCCd2zKuiJ4Tw3vchRCGEM0neRJIOhBCOhFrZ9buf3ch1aDZ9Sbo5dmp6495m6789CuGr4jOv3Fr69fmesV9e6tDwAAAAAAAAAAAAAAAAAAA85i5cnbn29shouB+F3o2o9n3dvsbyJG31/ditjnluD/5aAAAAAAAAAAAAAAAAAAAA+H96+P3/XHQ82rlf92SSjrdov/Vm9+dI90y9NTN5bmQ02f89aiiZOVZ5fTXJ+u1MTxhqsu97dv/3M5n+m+//HnVs/vX51ccdDFE8nDqO4+HhEL5JNn4/GR2Ki6XV8ss3S2vLCx2bxmMrHf/a7v2p6CQb+rcb/4lM/93f///pHWdT5fhG506xJ1o6/j0t6/WHqK34n82024v48+jS8e+t5g00Vhiv3QC+/SQKn/fuHv/JTP/div/REEIuqsw1l7oDVNYwlfxW6xXS0vE/UM1L3TqTf2Ql/s2u/z8z8T+X6X+/7v/r2Q8imkrH/2A1rz9V4+H1PxTvfv2fz/S/H/GvzH/d539b0vFPfvmtN1Wl+p9s9/5/IdN/t+J/LU7meTRKnQEbUS2/1e/VkZaOf/+O8ofPf3Fb67+LmfZ79fxXH7f+/Fe//b8Y1Z7/aC4d/4GW9dq9/qcy7bp9/x+vrv94VOn4H6rmpdfOg9XXduM/nem/O/E/uP1uPLP+/7uvtgD42vqvLen4P1XLjBtrrFdfq+u/aPf1/6VM//ux/qvMfz3u7qhPinT8D7esV4n/j218/l/OtOt+/EMYsdZ/ZOn4H2lZr3r99+8e/yuZdt2O/wvd7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgMTCRpIMhiodTx3E8PBzC2eT4ZDgUzeUXZueKpfkPVkOYTPJz4Xh0q1iayxdnF5dLC4XZfLFYmg/hXFJ+IvRHq8VSeXYpf+f8dl8D0e1CfqU8V8iXQwgXkvxnw5F6X3OL5aX8nRDCxe2yY3Fp5c7t/PLswuLK6yMjIyNhansOQ1Hh43JhuVwbvVYawvR228GoYXLV4kvbczkcfVhaW1nOF6v5lxvaFEvz+WJDmytJ2RdhKCqvrC3P58uF2WLpVn28/TSepJNTV9+9enl0R/mNqJZO7O20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiX7o+99mUIobd2FIcQxutvomb1v/u58MbsX1c+3Rw7Nb1xb/NBq3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWGXjlEqBoIwAM+uRazEY1iFpLONKKKFEcETaO0JPIwexUt4BwsLWwsR4gYkL3mkea/6vmZgf3Z2YAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1rm86+9vmzYixeFPVcXb4/vH//y61Jez+fsHe5iR3bm66c8vmrb8e9rIT8vRZ5eH9Pvr+SFm6uh1sifTffozNH062jLX0r4tzTe+exwp1xHRlfwk5VzX63oBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUXfBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//hykaaw==")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='.\x02\x00')
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00')
syz_emit_ethernet(0x1ee, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000100)="e4b63addf342c1e67c5779971fc96dc4f5a47a7ae5b3c63bfbbbbd3c7c", &(0x7f0000000240)=@udp6, 0x2}, 0x20)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
clock_gettime(0x0, &(0x7f0000000000)={<r6=>0x0, <r7=>0x0})
timer_settime(r2, 0x0, &(0x7f0000000040)={{}, {r6, r7+60000000}}, &(0x7f0000000080))
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$ndb(0x0, 0x0, 0x0)

224.989477ms ago: executing program 1 (id=4709):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0186e86, &(0x7f0000000080)={@id={0x20000000, 0x2, @auto="660300002800a73e99ffffffffffffff"}})

98.004126ms ago: executing program 1 (id=4710):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_load_inode\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$eJzs28tvG8UfAPDvbh6/X1/EVOXRBzRQEBWPpElL6YELCCQOICHBoRxD4lahboOaINGqgoJQOaJK3BFHpP4FnOCCgBOCK3BGlSrUSwsno7V3G8e1XcdK6jT+fKRtZ3bHmfl6duzZHW8AA2s8+yeJ2B4Rv0fEWD27ssB4/b+b1y/M/nP9wmwS1epbfye1cjeuX5gtihav21ZkhiPSz5LY26LexXPnT81UKuWzeX5y6fT7k4vnzj83f3rmZPlk+cz0sWNHDk+9cHT6+TWJM4vrxp6PFvbtfu2dy2/MHr/87k9XkiL+pji6MXTnIuOdDj5Zra6mug1vR0M6Ge5jQ1iVofowjZHa+B+LoVjuvLF49dO+Ng5YV9Vqtfpg+8NXagWATSoxxGFAFV/02fVvsd2lqceGcO2l+gVQFvfNfKsfGY40LzPSdH27lsYj4vjFf7/Ktmi+D7FlnSoFAAbad9n859lW8780Gu8L3ZevoZQi4v6I2BkRRyNiV0Q8EFEr+1BEPLzK+psXSW6ff6ZXewqsS9n878V8bWvl/K+Y/UVpKM/tqMU/kpyYr5QPZe/Jr/vrJeYr5akOdXz/ym9ftDvWOP/Ltqz+Yi6Yt+Pq8P9WvmZuZmmm54CbXPskYs9wq/iTWysBSUTsjog9PdYx//Q3+9odaxP/aFd/eA3WmapfRzxV7/+L0RR/Iem8Pjn5/6iUD00WZ8Xtfv7l0pvt6r9z/6+vrP+3tjz/i/j/LCWN67WLq6/j0h+ft72m7PX8H03eXrHvw5mlpbNTEaPJ67V8qXH/dFO56eXyWfwHD7Qe/ztj+Z3YGxHZSfxIRDwaEfvztj8WEY9HxIEO8f/48hPv9R7/+srin+vY/9HU/8uJ0Wje0zoxdOqHb1dUWlpN/Fn/H6mlDuZ7uvn866ZdvZ3NAAAAcO9JI2J7JOnErXSaTkzUf8O/K7amlYXFpWdOLHxwZq7+jEApRtLiTtdYw/3QqfyyvshP578tLvKH8/vGXw5tqeUnZhcqc/0OHgbctjbjP/NXFw+5APe45nW0rX1qB3D3eV4TBpfxD4PL+IfB1WL8e/QMBkSr7/+P+9AO4O5rGv8dl/1MDGBzcf0Pg8v4h8Fl/MNAWtwSd35IfnMk0ojYAM3YLIlIN0QzJNYp0e9PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLXxXwAAAP//JI/k8w==")

97.894311ms ago: executing program 1 (id=4711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

51.496043ms ago: executing program 1 (id=4712):
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
epoll_create1(0x0)

51.33817ms ago: executing program 1 (id=4713):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

0s ago: executing program 1 (id=4714):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000d68000/0x3000)=nil, 0x3000})

kernel console output (not intermixed with test programs):

: config 0 has no interface number 0
[  247.739547][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  247.742500][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.745998][   T47] usb 3-1: Product: syz
[  247.747418][   T47] usb 3-1: Manufacturer: syz
[  247.749119][   T47] usb 3-1: SerialNumber: syz
[  247.752222][   T47] usb 3-1: config 0 descriptor??
[  247.755605][   T47] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  247.757730][   T47] usb 3-1: No valid video chain found.
[  247.887456][T13011] loop5: detected capacity change from 0 to 512
[  247.890371][T13011] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  247.895819][T13011] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #17: comm syz.5.2914: iget: bad extra_isize 1568 (inode size 256)
[  247.900372][T13011] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2914: couldn't read orphan inode 17 (err -117)
[  247.908643][T13011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.917888][   T33] audit: type=1326 audit(1754928334.590:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  247.926102][   T33] audit: type=1326 audit(1754928334.590:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  247.933643][   T33] audit: type=1326 audit(1754928334.600:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  247.941619][   T33] audit: type=1326 audit(1754928334.600:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  247.949055][   T33] audit: type=1326 audit(1754928334.600:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  247.957357][T11579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.960696][   T33] audit: type=1326 audit(1754928334.600:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  247.969679][   T33] audit: type=1326 audit(1754928334.600:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  247.971011][   T47] usb 3-1: USB disconnect, device number 39
[  247.980659][   T33] audit: type=1326 audit(1754928334.600:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.5.2914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd41d8ebe9 code=0x7ffc0000
[  248.021395][T13017] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  248.025749][T13017] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  248.040851][T13017] 8021q: adding VLAN 0 to HW filter on device bond1
[  248.300570][T13028] loop5: detected capacity change from 0 to 32768
[  248.304196][T13028] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/255 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 3 3 4 5 5 5 5 5 5 6 6 6 6 8 8 10 11 32 33 83 108]
[  248.304196][T13028] replicas_v0 (size 24):
[  248.304196][T13028] btree: 1 [0] journal: 1 [0] user: 255 [0 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 2 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 
[  248.304278][T13028] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  248.443507][T13044] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  248.858908][T13061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.962682][T13065] netlink: 'syz.1.2939': attribute type 1 has an invalid length.
[  250.674806][T13119] binder: 13118:13119 ioctl c018620c 200000000380 returned -22
[  250.700947][T13121] loop5: detected capacity change from 0 to 512
[  250.707703][T13121] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  250.725375][T13121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  250.730114][T13121] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2964: corrupted in-inode xattr: e_value size too large
[  250.736538][T13121] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2964: couldn't read orphan inode 15 (err -117)
[  250.741559][T13121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.754671][   T33] audit: type=1800 audit(1754928337.431:84): pid=13121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2964" name="bus" dev="loop5" ino=18 res=0 errno=0
[  250.820056][T13121] loop5: detected capacity change from 512 to 64
[  250.825984][T13124] syz.5.2964: attempt to access beyond end of device
[  250.825984][T13124] loop5: rw=34817, sector=120, nr_sectors = 236 limit=64
[  250.870577][T11579] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0
[  250.918651][T11579] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.383621][T13146] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  251.410878][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.415583][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.418686][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.421473][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.426560][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.535460][T13147] chnl_net:caif_netlink_parms(): no params data found
[  251.599943][T13147] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.602647][T13147] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.605128][T13147] bridge_slave_0: entered allmulticast mode
[  251.607944][T13147] bridge_slave_0: entered promiscuous mode
[  251.613796][T13147] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.616267][T13147] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.618732][T13147] bridge_slave_1: entered allmulticast mode
[  251.622018][T13147] bridge_slave_1: entered promiscuous mode
[  251.647967][T13147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.653100][T13147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.671616][T13147] team0: Port device team_slave_0 added
[  251.675102][T13147] team0: Port device team_slave_1 added
[  251.691067][T13147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.693941][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.702276][T13147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.706657][T13147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.708929][T13147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.717614][T13147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.743345][T13147] hsr_slave_0: entered promiscuous mode
[  251.745560][T13147] hsr_slave_1: entered promiscuous mode
[  251.747684][T13147] debugfs: 'hsr0' already exists in 'hsr'
[  251.749636][T13147] Cannot create hsr debugfs directory
[  251.853379][T13147] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  251.859916][T13147] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  251.864069][T13147] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  251.868209][T13147] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  251.890361][T13147] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.892808][T13147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.895267][T13147] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.897610][T13147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.937060][T13147] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.948622][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.953568][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.963749][T13147] 8021q: adding VLAN 0 to HW filter on device team0
[  251.970207][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.972876][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.982209][T10064] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.984603][T10064] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.095423][T13147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.223342][T13147] veth0_vlan: entered promiscuous mode
[  252.235971][T13147] veth1_vlan: entered promiscuous mode
[  252.255344][T13147] veth0_macvtap: entered promiscuous mode
[  252.259244][T13147] veth1_macvtap: entered promiscuous mode
[  252.268391][T13147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.276417][T13147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.283402][ T5911] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.290063][ T5911] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.313942][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.319386][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.364759][T10064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.369801][T10064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.528403][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.537821][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.648921][T13185] loop2: detected capacity change from 0 to 512
[  252.654160][T13185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  252.667479][T13185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.673116][T13185] ext4 filesystem being mounted at /932/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.701268][   T33] audit: type=1800 audit(1754928339.362:85): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2983" name="file1" dev="loop2" ino=15 res=0 errno=0
[  252.855060][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.502693][T10063] Bluetooth: hci1: command tx timeout
[  253.671686][   T47] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  253.862008][   T47] usb 3-1: Using ep0 maxpacket: 16
[  253.865308][   T47] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  253.867951][   T47] usb 3-1: config 0 has no interface number 0
[  253.872719][   T47] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  253.875909][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.878502][   T47] usb 3-1: Product: syz
[  253.879916][   T47] usb 3-1: Manufacturer: syz
[  253.881615][   T47] usb 3-1: SerialNumber: syz
[  253.884863][   T47] usb 3-1: config 0 descriptor??
[  253.888593][   T47] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  254.091634][ T6196] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  254.240911][ T6196] usb 7-1: Using ep0 maxpacket: 8
[  254.244450][ T6196] usb 7-1: unable to get BOS descriptor or descriptor too short
[  254.247921][ T6196] usb 7-1: config 7 has an invalid descriptor of length 255, skipping remainder of the config
[  254.252547][ T6196] usb 7-1: config 7 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  254.256264][ T6196] usb 7-1: config 7 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  254.259811][ T6196] usb 7-1: config 7 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  254.263550][ T6196] usb 7-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.270053][ T6196] usb 7-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  254.274747][ T6196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.277351][ T6196] usb 7-1: Product: syz
[  254.278775][ T6196] usb 7-1: Manufacturer: syz
[  254.280378][ T6196] usb 7-1: SerialNumber: syz
[  254.284333][T13217] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  254.499682][ T6196] usb 7-1: USB disconnect, device number 2
[  255.095782][T13231] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  255.135655][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3003'.
[  255.192406][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.298929][   T47] gspca_spca1528: reg_w err -71
[  255.301386][   T47] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  255.312902][   T47] usb 3-1: USB disconnect, device number 40
[  255.525770][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'.
[  255.582126][T10063] Bluetooth: hci1: command tx timeout
[  255.652129][   T33] audit: type=1326 audit(1754928342.324:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  255.663750][   T33] audit: type=1326 audit(1754928342.324:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  255.671725][   T33] audit: type=1326 audit(1754928342.324:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  255.678839][   T33] audit: type=1326 audit(1754928342.324:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe32eb8ec23 code=0x7ffc0000
[  255.686439][   T33] audit: type=1326 audit(1754928342.324:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe32eb8d69f code=0x7ffc0000
[  255.694689][   T33] audit: type=1326 audit(1754928342.324:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe32eb8ec77 code=0x7ffc0000
[  255.701932][   T33] audit: type=1326 audit(1754928342.334:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe32eb8d550 code=0x7ffc0000
[  255.709425][   T33] audit: type=1326 audit(1754928342.334:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe32eb8d84a code=0x7ffc0000
[  255.716658][   T33] audit: type=1326 audit(1754928342.334:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.1.3013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  255.833971][T13261] loop2: detected capacity change from 0 to 16
[  255.839076][T13261] erofs (device loop2): bogus i_mode (0) @ nid 58320
[  255.902706][T13265] loop2: detected capacity change from 0 to 1024
[  256.783643][   T27] hfsplus: b-tree write err: -5, ino 4
[  256.831541][T13296] dummy0: entered allmulticast mode
[  257.129472][   T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  257.184771][T13311] loop2: detected capacity change from 0 to 256
[  257.187257][T13311] exfat: Deprecated parameter 'utf8'
[  257.188935][T13311] exfat: Deprecated parameter 'namecase'
[  257.192525][T13311] exfat: Deprecated parameter 'namecase'
[  257.194601][T13311] exfat: Deprecated parameter 'utf8'
[  257.200451][T13311] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d)
[  257.280308][   T47] usb 7-1: Using ep0 maxpacket: 32
[  257.285365][   T47] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  257.288176][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.292094][   T47] usb 7-1: Product: syz
[  257.293445][   T47] usb 7-1: Manufacturer: syz
[  257.295013][   T47] usb 7-1: SerialNumber: syz
[  257.297676][   T47] usb 7-1: config 0 descriptor??
[  257.303239][   T47] ums-onetouch 7-1:0.0: USB Mass Storage device detected
[  257.316093][T13317] No buffer was provided with the request
[  257.350515][   T47] usb 7-1: Found UVC 0.00 device syz (0d49:7000)
[  257.352591][   T47] usb 7-1: No valid video chain found.
[  257.506433][   T47] usb 7-1: USB disconnect, device number 3
[  257.663514][T10063] Bluetooth: hci1: command tx timeout
[  257.777512][ T5910] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  257.939351][ T5910] usb 3-1: Using ep0 maxpacket: 16
[  257.942753][ T5910] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[  257.945548][ T5910] usb 3-1: config 0 has no interface number 0
[  257.947667][ T5910] usb 3-1: config 0 interface 191 has no altsetting 0
[  257.952882][ T5910] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=c2.08
[  257.955918][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.958556][ T5910] usb 3-1: Product: syz
[  257.960123][ T5910] usb 3-1: Manufacturer: syz
[  257.961745][ T5910] usb 3-1: SerialNumber: syz
[  257.966995][ T5910] usb 3-1: config 0 descriptor??
[  258.176689][  T791] usb 3-1: USB disconnect, device number 41
[  258.378911][   T47] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  258.531872][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  258.535768][   T47] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  258.540244][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.544084][   T47] usb 7-1: config 0 descriptor??
[  258.852978][T13353] loop2: detected capacity change from 0 to 40427
[  258.952516][   T47] sigmamicro 0003:1C4F:0059.000F: unknown main item tag 0x3
[  258.956146][   T47] sigmamicro 0003:1C4F:0059.000F: hidraw0: USB HID v0.05 Device [HID 1c4f:0059] on usb-dummy_hcd.6-1/input0
[  259.159491][  T791] usb 7-1: USB disconnect, device number 4
[  259.256091][T13376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3069'.
[  259.308477][ T5910] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  259.458353][ T5910] usb 3-1: Using ep0 maxpacket: 16
[  259.461953][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  259.465710][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  259.471369][ T5910] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  259.474259][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.476721][ T5910] usb 3-1: Product: syz
[  259.478057][ T5910] usb 3-1: Manufacturer: syz
[  259.479920][ T5910] usb 3-1: SerialNumber: syz
[  259.484352][ T5910] usb 3-1: config 0 descriptor??
[  259.498126][ T5910] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  259.502319][ T5910] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  259.671562][T13394] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  259.740439][T10063] Bluetooth: hci1: command tx timeout
[  260.017625][T13420] loop6: detected capacity change from 0 to 1024
[  260.102135][ T5910] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  260.104629][ T5910] em28xx 3-1:0.0: Config register raw data: 0xfe
[  260.108001][ T5910] em28xx 3-1:0.0: I2S Audio (3 sample rate(s))
[  260.116785][ T5910] em28xx 3-1:0.0: No AC97 audio processor
[  260.123868][T13426] loop6: detected capacity change from 0 to 1024
[  260.126366][T13426] EXT4-fs: Ignoring removed orlov option
[  260.128434][T13426] EXT4-fs: Ignoring removed mblk_io_submit option
[  260.131016][T13426] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  260.143366][T13426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.171917][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.402578][T13445] loop6: detected capacity change from 0 to 4096
[  260.412200][T13445] ntfs3(loop6): ino=19, mi_enum_attr
[  260.413933][T13445] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  261.023513][   T47] usb 3-1: USB disconnect, device number 42
[  261.146990][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'.
[  261.153268][T13484] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  261.262999][T13492] overlayfs: failed to clone upperpath
[  261.391403][T13502] loop6: detected capacity change from 0 to 512
[  261.401861][T13502] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  261.408445][T13502] EXT4-fs (loop6): Remounting filesystem read-only
[  261.410922][T13502] EXT4-fs (loop6): 1 truncate cleaned up
[  261.413531][T13502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.420197][T13502] EXT4-fs (loop6): shut down requested (2)
[  261.433250][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.997000][T13530] loop2: detected capacity change from 0 to 32768
[  263.002214][T13530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3137 (13530)
[  263.009555][T13530] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.013328][T13530] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  263.016127][T13530] BTRFS info (device loop2): using free-space-tree
[  263.052833][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.140049][   T47] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  263.302979][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3144'.
[  263.306470][   T47] usb 7-1: Using ep0 maxpacket: 16
[  263.310893][   T47] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  263.313648][   T47] usb 7-1: config 0 has no interface number 0
[  263.377967][   T47] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  263.380923][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.383534][   T47] usb 7-1: Product: syz
[  263.384952][   T47] usb 7-1: Manufacturer: syz
[  263.397366][   T47] usb 7-1: SerialNumber: syz
[  263.400465][   T47] usb 7-1: config 0 descriptor??
[  263.406952][   T47] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  263.810998][   T47] gspca_spca1528: reg_w err -71
[  263.826166][   T47] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  263.830526][   T47] usb 7-1: USB disconnect, device number 5
[  263.896456][ T5896] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  264.046275][ T5896] usb 3-1: Using ep0 maxpacket: 16
[  264.052304][ T5896] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  264.054959][ T5896] usb 3-1: config 0 has no interface number 0
[  264.058614][ T5896] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.062209][ T5896] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.065317][ T5896] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  264.068449][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.072749][ T5896] usb 3-1: config 0 descriptor??
[  264.402679][T13620] loop6: detected capacity change from 0 to 128
[  264.411157][T13620] FAT-fs (loop6): Directory bread(block 32) failed
[  264.413471][T13620] FAT-fs (loop6): Directory bread(block 33) failed
[  264.415684][T13620] FAT-fs (loop6): Directory bread(block 34) failed
[  264.418050][T13620] FAT-fs (loop6): Directory bread(block 35) failed
[  264.420331][T13620] FAT-fs (loop6): Directory bread(block 36) failed
[  264.422524][T13620] FAT-fs (loop6): Directory bread(block 37) failed
[  264.424823][T13620] FAT-fs (loop6): Directory bread(block 38) failed
[  264.430077][T13620] FAT-fs (loop6): Directory bread(block 39) failed
[  264.432340][T13620] FAT-fs (loop6): Directory bread(block 40) failed
[  264.434511][T13620] FAT-fs (loop6): Directory bread(block 41) failed
[  264.679718][ T5896] uclogic 0003:28BD:0071.0010: pen parameters not found
[  264.682016][ T5896] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring
[  264.728260][T13640] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3182'.
[  264.869983][T13654] netlink: 'syz.1.3189': attribute type 2 has an invalid length.
[  264.881648][ T5910] usb 3-1: USB disconnect, device number 43
[  265.001282][T13672] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  265.172502][T13676] loop6: detected capacity change from 0 to 32768
[  265.178906][T13676] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  265.190800][T13676] XFS (loop6): Ending clean mount
[  265.198875][T13676] XFS (loop6): Quotacheck needed: Please wait.
[  265.232339][T13676] XFS (loop6): Quotacheck: Done.
[  265.298487][T13147] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  265.721014][T13698] loop2: detected capacity change from 0 to 65536
[  265.749824][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3210'.
[  265.760551][T13698] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  265.793561][T13698] XFS (loop2): Ending clean mount
[  265.797701][T13698] XFS (loop2): Quotacheck needed: Please wait.
[  265.820428][T13698] XFS (loop2): Quotacheck: Done.
[  265.974744][ T5856] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  266.348248][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'.
[  266.351388][T13737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.429259][T13737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.664746][   T47] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  266.705559][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[  266.834693][   T47] usb 7-1: Using ep0 maxpacket: 16
[  266.841927][   T47] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  266.844927][   T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.848373][   T47] usb 7-1: config 0 has no interface number 0
[  266.854831][   T47] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  266.858648][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.865729][   T47] usb 7-1: Product: syz
[  266.867600][   T47] usb 7-1: Manufacturer: syz
[  266.869614][   T47] usb 7-1: SerialNumber: syz
[  266.880809][   T47] usb 7-1: config 0 descriptor??
[  266.893395][   T47] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[  266.896512][   T47] usb 7-1: No valid video chain found.
[  267.126709][   T47] usb 7-1: USB disconnect, device number 6
[  267.331940][T13749] loop2: detected capacity change from 0 to 8192
[  267.627218][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'.
[  268.229790][T13775] netlink: 'syz.1.3235': attribute type 2 has an invalid length.
[  268.572329][T13790] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3241'.
[  268.689083][T13805] loop6: detected capacity change from 0 to 512
[  268.691518][T13805] EXT4-fs: Ignoring removed oldalloc option
[  268.698332][T13805] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3247: Parent and EA inode have the same ino 15
[  268.706245][T13805] EXT4-fs (loop6): Remounting filesystem read-only
[  268.708535][T13805] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30)
[  268.711523][T13805] EXT4-fs (loop6): 1 orphan inode deleted
[  268.714321][T13805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.736999][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.839515][T13815] netlink: 'syz.1.3251': attribute type 83 has an invalid length.
[  269.615972][T13833] loop2: detected capacity change from 0 to 32768
[  269.710241][T13833] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  269.710253][T13833]   allowing incompatible features above 0.0: (unknown version)
[  269.710258][T13833]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  269.725040][T13833] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  269.727663][T13833] bcachefs (loop2): initializing new filesystem
[  269.734211][T13833] bcachefs (loop2): going read-write
[  269.745450][T13833] bcachefs (loop2): marking superblocks
[  269.758174][T13833] bcachefs (loop2): initializing freespace
[  269.762191][T13833] bcachefs (loop2): done initializing freespace
[  269.769887][T13833] bcachefs (loop2): reading snapshots table
[  269.772286][T13833] bcachefs (loop2): reading snapshots done
[  269.827714][T13833] bcachefs (loop2): done starting filesystem
[  270.764472][T13833] syz.2.3258 (13833) used greatest stack depth: 16056 bytes left
[  270.820619][ T5856] bcachefs (loop2): shutting down
[  270.826519][ T5856] bcachefs (loop2): going read-only
[  270.830491][ T5856] bcachefs (loop2): finished waiting for writes to stop
[  270.836904][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  270.885048][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  270.901501][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 5
[  270.907043][ T5856] bcachefs (loop2): marking filesystem clean
[  270.924821][ T5856] bcachefs (loop2): shutdown complete
[  271.328182][T13911] loop6: detected capacity change from 0 to 512
[  271.331073][T13911] EXT4-fs (loop6): Invalid default hash set in the superblock
[  271.414903][T13918] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3289'.
[  271.596004][T13918] nbd: socks must be embedded in a SOCK_ITEM attr
[  271.700141][T13925] fuse: Unknown parameter 'grou00000000000000000000'
[  271.771870][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3295'.
[  272.360259][T13948] loop6: detected capacity change from 0 to 2048
[  272.364750][T13948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.391902][  T791] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  272.398187][  T791] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  272.585891][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'.
[  272.589223][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'.
[  272.678723][T13958] loop6: detected capacity change from 0 to 4096
[  272.878879][T13960] loop2: detected capacity change from 0 to 32768
[  272.889281][T13960] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.927908][T13960] XFS (loop2): Ending clean mount
[  272.928026][T13988] overlayfs: failed to verify upper (108/file0, ino=590, err=-116)
[  272.935012][T13960] XFS (loop2): Quotacheck needed: Please wait.
[  272.936281][T13988] overlayfs: failed to verify index dir 'upper' xattr
[  272.940299][T13988] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  272.974126][T13960] XFS (loop2): Quotacheck: Done.
[  273.021992][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.079855][T14000] vlan2: entered allmulticast mode
[  273.085385][T14000] erspan0: entered allmulticast mode
[  273.295988][T14014] vxcan0: tx address claim with different name
[  273.932381][   T47] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  274.082431][   T47] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  274.085100][   T47] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  274.088349][   T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  274.091426][   T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.094840][   T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.099372][   T47] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  274.102283][   T47] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  274.104850][   T47] usb 7-1: Product: syz
[  274.106241][   T47] usb 7-1: Manufacturer: syz
[  274.110364][   T47] cdc_wdm 7-1:1.0: skipping garbage
[  274.112111][   T47] cdc_wdm 7-1:1.0: skipping garbage
[  274.123340][   T47] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  274.127569][   T47] cdc_wdm 7-1:1.0: Unknown control protocol
[  274.329861][ T5910] usb 7-1: USB disconnect, device number 7
[  275.025532][T14057] 9pnet_virtio: no channels available for device syz
[  277.048779][T14104] loop2: detected capacity change from 0 to 4096
[  277.055436][T14104] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  277.083148][T14104] ntfs3(loop2): ino=1a, mi_enum_attr
[  277.084945][T14104] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  277.085170][T14108] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3365'.
[  277.090602][T14108] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3365'.
[  277.093441][T14108] netlink: 'syz.1.3365': attribute type 5 has an invalid length.
[  277.097215][T14108] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3365'.
[  277.097273][T14104] ntfs3(loop2): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  277.633335][T14122] support for the xor transformation has been removed.
[  277.638394][T14129] loop2: detected capacity change from 0 to 512
[  277.654985][T14129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.659992][T14129] ext4 filesystem being mounted at /1016/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.690229][T14129] EXT4-fs warning (device loop2): ext4_group_add:1716: Can't resize non-sparse filesystem further
[  277.705648][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.942057][T14147] loop6: detected capacity change from 0 to 512
[  277.945150][T14147] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001)
[  277.947601][T14147] FAT-fs (loop6): Filesystem has been set read-only
[  278.328921][ T5896] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  278.480456][ T5896] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  278.484076][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[  278.487523][ T5896] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  278.490742][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.495095][ T5896] usb 7-1: config 0 descriptor??
[  278.497422][T14159] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  278.503119][ T5896] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  278.706778][ T5910] usb 7-1: USB disconnect, device number 8
[  278.794405][T14176] netlink: 'syz.2.3393': attribute type 4 has an invalid length.
[  278.826485][T14179] loop8: detected capacity change from 0 to 79
[  279.069301][T14179] loop8: detected capacity change from 79 to 78
[  279.096100][T14185] loop2: detected capacity change from 0 to 512
[  279.101236][T14185] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  279.107133][T14185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  279.112330][T14185] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3395: corrupted in-inode xattr: e_value size too large
[  279.116988][T14185] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3395: couldn't read orphan inode 15 (err -117)
[  279.121890][T14185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.542009][T14196] netlink: 'syz.6.3399': attribute type 6 has an invalid length.
[  280.058687][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.114177][T14228] loop2: detected capacity change from 0 to 128
[  281.231936][T14259] loop2: detected capacity change from 0 to 2048
[  281.235465][T14259] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  281.247119][T14259] syz.2.3426: attempt to access beyond end of device
[  281.247119][T14259] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  281.252409][T14260] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.268750][T14259] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  281.274808][T14259] Remounting filesystem read-only
[  281.276793][T14259] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16)
[  281.280681][T14259] NILFS (loop2): error -5 truncating bmap (ino=16)
[  281.302128][ T5856] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  281.369115][T14264] loop2: detected capacity change from 0 to 3
[  281.381806][T14264] syz.2.3428: attempt to access beyond end of device
[  281.381806][T14264] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3
[  281.386138][T14264] SQUASHFS error: Failed to read block 0x0: -5
[  281.390093][T14264] unable to read squashfs_super_block
[  281.526223][T14268] sctp: [Deprecated]: syz.2.3430 (pid 14268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.526223][T14268] Use struct sctp_sack_info instead
[  281.992264][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3437'.
[  281.995123][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3437'.
[  281.999487][T14283] netlink: 'syz.6.3437': attribute type 6 has an invalid length.
[  282.177404][T14302] 9p: Unknown access argument 18446744073709551615: -34
[  282.215021][T14292] loop6: detected capacity change from 0 to 32768
[  282.218214][T14292] XFS (loop6): Invalid device [./file0], error=-16
[  282.241053][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3448'.
[  282.584965][T14347] loop6: detected capacity change from 0 to 4096
[  282.593480][T14347] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  282.906988][T14355] ntfs3(loop6): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  282.916099][T14355] ntfs3(loop6): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  283.265651][T14366] loop2: detected capacity change from 0 to 4096
[  283.364261][T14368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  283.367383][T14368] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  283.371193][T14368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  283.386332][T14368] fuse: Bad value for 'fd'
[  284.156197][  T791] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  284.215967][ T2220] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  284.307648][  T791] usb 3-1: config 0 has an invalid interface number: 235 but max is 0
[  284.310273][  T791] usb 3-1: config 0 has no interface number 0
[  284.313310][  T791] usb 3-1: config 0 interface 235 has no altsetting 0
[  284.319447][  T791] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  284.322211][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.324771][  T791] usb 3-1: Product: syz
[  284.328776][  T791] usb 3-1: Manufacturer: syz
[  284.334828][  T791] usb 3-1: SerialNumber: syz
[  284.337728][  T791] usb 3-1: config 0 descriptor??
[  284.348557][T14416] netlink: 'syz.1.3496': attribute type 5 has an invalid length.
[  284.376157][ T2220] usb 7-1: Using ep0 maxpacket: 8
[  284.382017][ T2220] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  284.384773][ T2220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.387412][ T2220] usb 7-1: Product: syz
[  284.388793][ T2220] usb 7-1: Manufacturer: syz
[  284.390240][ T2220] usb 7-1: SerialNumber: syz
[  284.392922][ T2220] usb 7-1: config 0 descriptor??
[  284.396385][ T2220] gspca_main: sq905-2.14.0 probing 2770:9120
[  284.542544][ T3144] usb 3-1: USB disconnect, device number 44
[  284.907930][ T2220] gspca_sq905: sq905_command: usb_control_msg failed (-110)
[  284.910342][ T2220] sq905 7-1:0.0: probe with driver sq905 failed with error -110
[  285.065028][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  285.065046][   T33] audit: type=1326 audit(1754928371.748:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.2.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15bb8ebe9 code=0x7ffc0000
[  285.075193][   T33] audit: type=1326 audit(1754928371.748:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.2.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15bb8ebe9 code=0x7ffc0000
[  285.087743][   T33] audit: type=1326 audit(1754928371.748:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.2.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fb15bb8ebe9 code=0x7ffc0000
[  285.101323][   T33] audit: type=1326 audit(1754928371.748:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.2.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15bb8ebe9 code=0x7ffc0000
[  285.112788][   T33] audit: type=1326 audit(1754928371.748:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14435 comm="syz.2.3506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb15bb8ebe9 code=0x7ffc0000
[  285.670417][T14462] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3519'.
[  286.304992][  T791] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  286.465862][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.469098][  T791] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  286.471958][  T791] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  286.478643][  T791] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  286.481421][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.483880][  T791] usb 3-1: Product: syz
[  286.485307][  T791] usb 3-1: Manufacturer: syz
[  286.486796][  T791] usb 3-1: SerialNumber: syz
[  286.490139][  T791] usb 3-1: config 0 descriptor??
[  286.493970][  T791] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  286.749261][ T3144] usb 7-1: USB disconnect, device number 9
[  286.759126][ T5910] usb 3-1: USB disconnect, device number 45
[  286.855246][T14510] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3542'.
[  287.224437][  T791] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  287.374463][  T791] usb 7-1: Using ep0 maxpacket: 8
[  287.377528][  T791] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  287.380166][  T791] usb 7-1: config 0 has no interface number 0
[  287.383815][  T791] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  287.386851][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.389496][  T791] usb 7-1: Product: syz
[  287.393041][  T791] usb 7-1: Manufacturer: syz
[  287.395139][  T791] usb 7-1: SerialNumber: syz
[  287.401531][  T791] usb 7-1: config 0 descriptor??
[  287.523857][   T33] audit: type=1326 audit(1754928374.210:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.1.3556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  287.547148][   T33] audit: type=1326 audit(1754928374.210:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.1.3556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  287.553858][   T33] audit: type=1326 audit(1754928374.220:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.1.3556" exe="/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  287.584917][   T33] audit: type=1326 audit(1754928374.220:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.1.3556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  287.591596][   T33] audit: type=1326 audit(1754928374.220:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14540 comm="syz.1.3556" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x7ffc0000
[  287.616933][  T791] usb 7-1: Found UVC 0.04 device syz (046d:08c3)
[  287.619012][  T791] usb 7-1: No valid video chain found.
[  287.621930][  T791] usb 7-1: USB disconnect, device number 10
[  287.641709][T14535] loop2: detected capacity change from 0 to 32768
[  287.646924][T14535] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  287.659856][T14535] XFS (loop2): Ending clean mount
[  287.697538][ T5856] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  288.509668][  T791] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  288.673702][  T791] usb 3-1: Using ep0 maxpacket: 16
[  288.678009][  T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.681344][  T791] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.687144][  T791] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  288.690009][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.692582][  T791] usb 3-1: Product: syz
[  288.694268][  T791] usb 3-1: Manufacturer: syz
[  288.695882][  T791] usb 3-1: SerialNumber: syz
[  288.903219][  T791] usb 3-1: 0:2 : does not exist
[  288.908673][  T791] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  288.918770][  T791] usb 3-1: USB disconnect, device number 46
[  289.323536][ T3144] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  289.473466][ T3144] usb 7-1: Using ep0 maxpacket: 32
[  289.480098][T10063] Bluetooth: hci1: Dropping invalid advertising data
[  289.487741][ T3144] usb 7-1: unable to get BOS descriptor or descriptor too short
[  289.490278][ T3144] usb 7-1: no configurations
[  289.491829][ T3144] usb 7-1: can't read configurations, error -22
[  289.703201][  T791] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  289.854857][  T791] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[  289.857453][  T791] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[  289.860830][  T791] usb 3-1: config 160 has no interface number 0
[  289.863273][  T791] usb 3-1: config 160 interface 200 has no altsetting 0
[  289.868497][  T791] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  289.871567][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.874381][  T791] usb 3-1: Product: syz
[  289.876086][  T791] usb 3-1: Manufacturer: syz
[  289.877665][  T791] usb 3-1: SerialNumber: syz
[  290.089635][  T791] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  290.092744][  T791] usb 3-1: MIDIStreaming interface descriptor not found
[  290.116061][  T791] usb 3-1: USB disconnect, device number 47
[  290.116586][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3592'.
[  290.217812][T14639] lo: entered promiscuous mode
[  290.219589][T14639] lo: entered allmulticast mode
[  290.281899][T14643] libceph: resolve '4' (ret=-3): failed
[  290.699396][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3608'.
[  290.702796][ T3144] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  290.805429][T14665] vlan2: entered allmulticast mode
[  290.863171][ T3144] usb 7-1: Using ep0 maxpacket: 8
[  290.898666][ T3144] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.907254][ T3144] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  290.911375][ T3144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.917020][ T3144] usb 7-1: Product: syz
[  290.920752][ T3144] usb 7-1: Manufacturer: syz
[  290.924422][ T3144] usb 7-1: SerialNumber: syz
[  290.928463][ T3144] usb 7-1: config 0 descriptor??
[  290.932683][ T3144] cdc_phonet 7-1:0.0: skipping garbage
[  290.934686][ T3144] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22
[  291.137743][   T47] usb 7-1: USB disconnect, device number 13
[  291.212776][  T791] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  291.362664][  T791] usb 3-1: Using ep0 maxpacket: 32
[  291.365965][  T791] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  291.368979][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.373159][  T791] usb 3-1: config 0 descriptor??
[  291.581091][  T791] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  291.586563][  T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  291.592469][  T791] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  291.595480][  T791] usb 3-1: media controller created
[  291.607900][  T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  291.784708][  T791] az6027: usb out operation failed. (-71)
[  291.788990][  T791] az6027: usb out operation failed. (-71)
[  291.790856][  T791] stb0899_attach: Driver disabled by Kconfig
[  291.793101][  T791] az6027: no front-end attached
[  291.793101][  T791] 
[  291.802210][  T791] az6027: usb out operation failed. (-71)
[  291.804157][  T791] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  291.807879][  T791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  291.815253][  T791] dvb-usb: schedule remote query interval to 400 msecs.
[  291.817576][  T791] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  291.875150][T14686] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3613'.
[  292.019850][T14685] loop6: detected capacity change from 0 to 1024
[  292.023192][  T791] usb 3-1: USB disconnect, device number 48
[  292.044933][  T791] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  292.389690][T14689] netlink: 'syz.2.3618': attribute type 2 has an invalid length.
[  292.392572][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'.
[  292.973162][ T3144] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  293.122333][ T3144] usb 3-1: Using ep0 maxpacket: 32
[  293.135684][ T3144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.139272][ T3144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.144140][ T3144] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  293.147703][ T3144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.160955][ T3144] usb 3-1: config 0 descriptor??
[  293.362678][   T27] hfsplus: b-tree write err: -5, ino 3
[  293.375777][ T3144] usbhid 3-1:0.0: can't add hid device: -71
[  293.377871][ T3144] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  293.383765][ T3144] usb 3-1: USB disconnect, device number 49
[  294.503499][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3636'.
[  294.718540][T14744] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3641'.
[  294.755051][T14746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  294.775435][T14746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  294.979126][T14756] loop6: detected capacity change from 0 to 32768
[  294.993213][T14769] loop2: detected capacity change from 0 to 256
[  294.995641][T14769] exfat: Deprecated parameter 'utf8'
[  295.004594][T14769] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  295.045332][T14756] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  295.045346][T14756]   allowing incompatible features above 0.0: (unknown version)
[  295.045350][T14756]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  295.072704][T14756] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  295.075354][T14756] bcachefs (loop6): initializing new filesystem
[  295.084100][T14756] bcachefs (loop6): going read-write
[  295.096072][T14756] bcachefs (loop6): marking superblocks
[  295.153576][T14756] bcachefs (loop6): initializing freespace
[  295.169877][T14756] bcachefs (loop6): done initializing freespace
[  295.187118][T14756] bcachefs (loop6): reading snapshots table
[  295.189322][T14756] bcachefs (loop6): reading snapshots done
[  295.209216][T14756] bcachefs (loop6): done starting filesystem
[  295.260495][T13147] bcachefs (loop6): shutting down
[  295.262290][T13147] bcachefs (loop6): going read-only
[  295.264169][T13147] bcachefs (loop6): finished waiting for writes to stop
[  295.268917][T13147] bcachefs (loop6): flushing journal and stopping allocators, journal seq 7
[  295.296399][T14793] loop2: detected capacity change from 0 to 64
[  295.310449][T14793] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  295.314958][T13147] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 9
[  295.321764][T13147] bcachefs (loop6): clean shutdown complete, journal seq 10
[  295.326466][T13147] bcachefs (loop6): marking filesystem clean
[  295.347172][T13147] bcachefs (loop6): shutdown complete
[  295.401201][T14797] netlink: 'syz.2.3662': attribute type 21 has an invalid length.
[  295.404819][T14797] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3662'.
[  295.428856][T14799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3663'.
[  295.479969][T14803] loop2: detected capacity change from 0 to 1024
[  295.483923][T14803] EXT4-fs: Ignoring removed orlov option
[  295.494603][T14803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.508823][T14803] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3665: Allocating blocks 481-513 which overlap fs metadata
[  295.534547][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.566528][T14808] loop2: detected capacity change from 0 to 256
[  295.573523][T14808] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  297.443652][T14849] netlink: 'syz.2.3682': attribute type 1 has an invalid length.
[  297.446366][T14849] netlink: 'syz.2.3682': attribute type 4 has an invalid length.
[  297.450396][T14849] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3682'.
[  298.103877][T14861] autofs: Unknown parameter '00000000000000000000'
[  298.253729][T14864] loop2: detected capacity change from 0 to 512
[  298.257192][T14864] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  298.261626][T14864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  298.264326][T14864] EXT4-fs (loop2): orphan cleanup on readonly fs
[  298.267289][T14864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3687: bg 0: block 361: padding at end of block bitmap is not set
[  298.276559][T14864] EXT4-fs (loop2): Remounting filesystem read-only
[  298.281116][T14864] EXT4-fs (loop2): 1 truncate cleaned up
[  298.283897][T14864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  298.582758][T14866] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.3687: dx entry: limit 0 != root limit 125
[  298.586331][T14866] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3687: Corrupt directory, running e2fsck is recommended
[  298.591046][T14866] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.3687: dx entry: limit 0 != root limit 125
[  298.594748][T14866] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3687: Corrupt directory, running e2fsck is recommended
[  298.599644][T14866] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.3687: dx entry: limit 0 != root limit 125
[  298.603971][T14866] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3687: Corrupt directory, running e2fsck is recommended
[  298.608337][T14866] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.3687: dx entry: limit 0 != root limit 125
[  298.612069][T14866] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3687: Corrupt directory, running e2fsck is recommended
[  298.687500][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  298.713984][   T33] audit: type=1326 audit(1754928385.405:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.2.3688" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb15bb8ebe9 code=0x0
[  298.804255][T14872] netlink: 'syz.1.3689': attribute type 74 has an invalid length.
[  299.567805][T14905] loop2: detected capacity change from 0 to 512
[  299.576322][T14905] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  299.624524][T14905] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6).
[  299.629562][T14905] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  299.672344][ T5856] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  299.760404][T14926] netlink: 'syz.6.3712': attribute type 2 has an invalid length.
[  299.840677][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'.
[  299.909409][T14949] loop6: detected capacity change from 0 to 16
[  299.915917][T14949] erofs (device loop6): mounted with root inode @ nid 36.
[  300.014309][T14952] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  300.017063][T14952] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  300.019564][T14952] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  300.021879][T14952] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  300.024179][T14952] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  300.026286][T14952] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  300.032442][T14952] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  300.034662][T14952] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  300.036697][T14952] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  300.041162][T14952] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  300.043504][T14952] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  300.045627][T14952] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  300.134318][  T791] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  300.322735][  T791] usb 3-1: config 252 has an invalid interface number: 107 but max is 0
[  300.326611][  T791] usb 3-1: config 252 has no interface number 0
[  300.333692][  T791] usb 3-1: config 252 interface 107 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB
[  300.340767][  T791] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  300.344066][  T791] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  300.351161][  T791] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67
[  300.354253][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.357170][  T791] usb 3-1: Product: syz
[  300.359269][  T791] usb 3-1: Manufacturer: syz
[  300.361086][  T791] usb 3-1: SerialNumber: syz
[  300.369574][  T791] usbtouchscreen 3-1:252.107: probe with driver usbtouchscreen failed with error -8
[  300.600421][T14962] loop6: detected capacity change from 0 to 128
[  300.605329][T14962] adfs: Bad value for 'uid'
[  300.606860][T14962] adfs: Bad value for 'uid'
[  300.802020][  T791] usb 3-1: USB disconnect, device number 50
[  300.892514][T14961] loop6: detected capacity change from 0 to 128
[  300.896511][T14961] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  300.903147][T14961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.696680][  T791] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  301.847129][  T791] usb 7-1: Using ep0 maxpacket: 16
[  301.850200][  T791] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  301.852720][  T791] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  301.855954][  T791] usb 7-1: config 0 has no interface number 0
[  301.862377][  T791] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  301.865180][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.868180][  T791] usb 7-1: Product: syz
[  301.869919][  T791] usb 7-1: Manufacturer: syz
[  301.871578][  T791] usb 7-1: SerialNumber: syz
[  301.874476][  T791] usb 7-1: config 0 descriptor??
[  301.879910][  T791] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[  301.881926][  T791] usb 7-1: No valid video chain found.
[  302.082436][  T791] usb 7-1: USB disconnect, device number 14
[  302.848933][T15031] openvswitch: netlink: Flow key attribute not present in set flow.
[  304.215258][T15087] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  304.218642][T15086] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[  304.505972][ T3144] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  304.657368][ T3144] usb 7-1: config 0 has an invalid interface number: 103 but max is 0
[  304.659970][ T3144] usb 7-1: config 0 has no interface number 0
[  304.664077][ T3144] usb 7-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00
[  304.667478][ T3144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.670124][ T3144] usb 7-1: Product: syz
[  304.671514][ T3144] usb 7-1: Manufacturer: syz
[  304.677423][ T3144] usb 7-1: SerialNumber: syz
[  304.683779][ T3144] usb 7-1: config 0 descriptor??
[  304.889318][ T3144] usb-storage 7-1:0.103: USB Mass Storage device detected
[  304.897884][ T3144] usb-storage 7-1:0.103: Quirks match for vid 0781 pid 0001: 1
[  304.948504][ T3144] usb 7-1: USB disconnect, device number 15
[  305.266031][T15109] netlink: 'syz.1.3785': attribute type 1 has an invalid length.
[  305.268543][T15109] netlink: 'syz.1.3785': attribute type 4 has an invalid length.
[  305.271008][T15109] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3785'.
[  305.703976][T15129] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  305.775965][   T33] audit: type=1326 audit(1754928392.469:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.782942][   T33] audit: type=1326 audit(1754928392.479:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.790140][   T33] audit: type=1326 audit(1754928392.479:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.801654][   T33] audit: type=1326 audit(1754928392.479:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.810594][   T33] audit: type=1326 audit(1754928392.479:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.817977][T15135] vxlan0: entered promiscuous mode
[  305.819927][T15135] vxlan0: entered allmulticast mode
[  305.822884][   T33] audit: type=1326 audit(1754928392.479:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.834098][ T5863] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.837161][   T33] audit: type=1326 audit(1754928392.479:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.844682][ T5863] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.850257][ T5863] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.853475][ T5863] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.855183][   T33] audit: type=1326 audit(1754928392.479:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.863642][   T33] audit: type=1326 audit(1754928392.479:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  305.874671][   T33] audit: type=1326 audit(1754928392.479:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3796" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06f38ebe9 code=0x7ffc0000
[  306.288207][T15149] loop6: detected capacity change from 0 to 512
[  306.292682][T15149] EXT4-fs: Ignoring removed mblk_io_submit option
[  306.294928][T15149] EXT4-fs: Ignoring removed bh option
[  306.300982][T15149] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  306.336296][T15149] EXT4-fs (loop6): 1 truncate cleaned up
[  306.338827][T15149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.483902][T15144] loop2: detected capacity change from 0 to 32768
[  306.489807][T15144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3801 (15144)
[  306.496895][T15144] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  306.500217][T15144] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  306.502929][T15144] BTRFS info (device loop2): disk space caching is enabled
[  306.506717][T15144] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  306.541269][T15144] BTRFS info (device loop2): rebuilding free space tree
[  306.550751][T15144] BTRFS info (device loop2): disabling free space tree
[  306.553533][T15144] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  306.557120][T15144] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  306.623289][ T5856] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  306.770209][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.778978][T15188] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  306.803597][T15192] loop6: detected capacity change from 0 to 1024
[  306.852396][T15192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.864644][T15192] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.892729][T15192] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  306.921526][T15198] loop4: detected capacity change from 1024 to 959
[  306.947227][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.981170][T15201] lo: Caught tx_queue_len zero misconfig
[  307.497869][ T5594] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  307.616819][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3828'.
[  307.664505][ T5594] usb 3-1: Using ep0 maxpacket: 32
[  307.675341][ T5594] usb 3-1: config 0 interface 0 has no altsetting 0
[  307.687388][ T5594] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  307.690347][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.710235][ T5594] usb 3-1: Product: syz
[  307.712376][ T5594] usb 3-1: Manufacturer: syz
[  307.714035][ T5594] usb 3-1: SerialNumber: syz
[  307.719283][ T5594] usb 3-1: config 0 descriptor??
[  308.167466][ T5594] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  308.279289][T15233] syzkaller1: tun_chr_ioctl cmd 1074025677
[  308.281432][T15233] syzkaller1: linktype set to 823
[  308.571359][ T5594] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  308.581843][ T5594] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[  308.590936][ T5594] usb 3-1: USB disconnect, device number 51
[  309.112726][T15241] loop2: detected capacity change from 0 to 512
[  309.147739][T15241] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3835: Failed to acquire dquot type 1
[  309.157194][T15241] EXT4-fs (loop2): 1 truncate cleaned up
[  309.160199][T15241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.167502][T15241] ext4 filesystem being mounted at /1142/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.181333][T15241] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3835: Failed to acquire dquot type 1
[  309.214640][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.250914][T15250] misc userio: Invalid payload size
[  309.280073][   T47] IPVS: starting estimator thread 0...
[  309.312967][T15257] loop2: detected capacity change from 0 to 256
[  309.354858][T15259] loop6: detected capacity change from 0 to 4096
[  309.393393][T15255] IPVS: using max 79 ests per chain, 189600 per kthread
[  309.468126][   T27] ntfs3(loop6): ino=5, mi_enum_attr
[  309.873123][ T5594] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  309.920380][T15298] geneve2: entered promiscuous mode
[  309.924509][T15298] geneve2: entered allmulticast mode
[  310.712809][ T5594] usb 7-1: Using ep0 maxpacket: 16
[  310.718061][ T5594] usb 7-1: config 0 has an invalid interface number: 48 but max is 0
[  310.721447][ T5594] usb 7-1: config 0 has no interface number 0
[  310.724395][ T5594] usb 7-1: config 0 interface 48 has no altsetting 0
[  310.729587][ T5594] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  310.733523][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.736844][ T5594] usb 7-1: Product: syz
[  310.738624][ T5594] usb 7-1: Manufacturer: syz
[  310.740621][ T5594] usb 7-1: SerialNumber: syz
[  310.744721][ T5594] usb 7-1: config 0 descriptor??
[  310.922630][ T6196] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  310.960608][ T5594] usb 7-1: USB disconnect, device number 16
[  311.083015][ T6196] usb 3-1: Using ep0 maxpacket: 32
[  311.095846][ T6196] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  311.098681][ T6196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.101127][ T6196] usb 3-1: Product: syz
[  311.103054][ T6196] usb 3-1: Manufacturer: syz
[  311.104518][ T6196] usb 3-1: SerialNumber: syz
[  311.107280][ T6196] usb 3-1: config 0 descriptor??
[  311.312159][ T6196] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate
[  311.316335][ T6196] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71
[  311.322018][ T6196] usb 3-1: USB disconnect, device number 52
[  312.573757][T15364] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004
[  312.895864][T15385] overlayfs: failed to resolve './file0': -2
[  313.006609][T15386] loop6: detected capacity change from 0 to 4096
[  313.189968][T15407] loop6: detected capacity change from 0 to 2048
[  313.194837][T15407] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  313.207016][T15407] UDF-fs: unknown compression code (0)
[  313.371382][   T47] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  313.532681][   T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.536004][   T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.540500][   T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  313.544737][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.547853][   T47] usb 3-1: Product: syz
[  313.549198][   T47] usb 3-1: Manufacturer: syz
[  313.550731][   T47] usb 3-1: SerialNumber: syz
[  313.682510][T15424] 9pnet: p9_errstr2errno: server reported unknown error 6G)Do')=0O]|[
[  313.760302][   T47] usb 3-1: 0:2 : does not exist
[  313.767716][   T47] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  313.779339][   T47] usb 3-1: USB disconnect, device number 53
[  313.818691][T15430] pimreg: entered allmulticast mode
[  313.825781][T15430] pimreg: left allmulticast mode
[  314.058601][T15444] 9pnet: Unknown protocol version 9p20\++}
[  314.551202][ T5896] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  314.746652][ T5896] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  314.749402][ T5896] usb 3-1: config 0 has no interface number 0
[  314.751873][ T5896] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  314.755652][ T5896] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9
[  314.759299][ T5896] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024
[  314.764193][ T5896] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  314.767187][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.767932][T15478] loop6: detected capacity change from 0 to 32768
[  314.772807][T15478] XFS: attr2 mount option is deprecated.
[  314.772856][ T5896] usb 3-1: config 0 descriptor??
[  314.779471][ T5896] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input22
[  314.792385][T15478] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  314.819967][T15478] XFS (loop6): Ending clean mount
[  314.827114][T15478] XFS (loop6): Quotacheck needed: Please wait.
[  314.853268][T15478] XFS (loop6): Quotacheck: Done.
[  314.878605][T13147] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  314.988204][ T5896] usb 3-1: USB disconnect, device number 54
[  315.128579][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  315.128594][   T33] audit: type=1804 audit(1754928401.885:131): pid=15495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3946" name="/newroot/288/file0" dev="tmpfs" ino=1529 res=1 errno=0
[  315.546595][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3953'.
[  315.554579][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3953'.
[  315.666710][T15518] netlink: zone id is out of range
[  315.672197][T15518] netlink: zone id is out of range
[  315.676477][T15518] netlink: zone id is out of range
[  315.681548][T15518] netlink: zone id is out of range
[  315.685503][T15518] netlink: zone id is out of range
[  315.689638][T15518] netlink: zone id is out of range
[  315.696113][T15518] netlink: zone id is out of range
[  315.706777][T15518] netlink: zone id is out of range
[  315.714833][T15518] netlink: zone id is out of range
[  315.722300][T15518] netlink: zone id is out of range
[  315.963837][T15535] loop2: detected capacity change from 0 to 4096
[  315.975855][T15535] ntfs3: Bad value for 'uid'
[  315.977612][T15535] ntfs3: Bad value for 'uid'
[  316.034462][T15543] loop6: detected capacity change from 0 to 256
[  316.044154][T15545] loop2: detected capacity change from 0 to 164
[  316.052263][T15543] FAT-fs (loop6): Directory bread(block 64) failed
[  316.054365][T15543] FAT-fs (loop6): Directory bread(block 65) failed
[  316.056435][T15543] FAT-fs (loop6): Directory bread(block 66) failed
[  316.058535][T15543] FAT-fs (loop6): Directory bread(block 67) failed
[  316.061273][T15543] FAT-fs (loop6): Directory bread(block 68) failed
[  316.063366][T15543] FAT-fs (loop6): Directory bread(block 69) failed
[  316.065668][T15543] FAT-fs (loop6): Directory bread(block 70) failed
[  316.068173][T15543] FAT-fs (loop6): Directory bread(block 71) failed
[  316.072213][T15543] FAT-fs (loop6): Directory bread(block 72) failed
[  316.074412][T15543] FAT-fs (loop6): Directory bread(block 73) failed
[  316.178647][T15553] sctp: [Deprecated]: syz.6.3973 (pid 15553) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.178647][T15553] Use struct sctp_sack_info instead
[  316.234452][T15557] loop6: detected capacity change from 0 to 512
[  316.236833][T15547] loop2: detected capacity change from 0 to 32768
[  316.237534][T15557] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  316.241797][T15547] XFS (loop2): logbuf size must be greater than or equal to log stripe size
[  316.258499][T15557] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  316.261307][T15557] System zones: 1-12
[  316.262678][T15557] EXT4-fs (loop6): orphan cleanup on readonly fs
[  316.265699][T15557] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3975: invalid indirect mapped block 12 (level 1)
[  316.278722][T15557] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3975: invalid indirect mapped block 2 (level 2)
[  316.283389][T15557] EXT4-fs (loop6): 1 truncate cleaned up
[  316.285829][T15557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  316.329457][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  316.488129][T15573] loop2: detected capacity change from 0 to 2048
[  316.498730][T15575] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  316.508113][T15573] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=32528, name_len=0
[  316.520273][T15573] Remounting filesystem read-only
[  316.604550][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.006154][T15583] loop2: detected capacity change from 0 to 40427
[  317.009098][T15583] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  317.011638][T15583] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  317.015632][T15583] F2FS-fs (loop2): invalid crc value
[  317.047008][T15583] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  317.050854][T15583] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  317.054071][T15583] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  317.075679][   T33] audit: type=1800 audit(1754928403.826:132): pid=15583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3983" name="bus" dev="loop2" ino=10 res=0 errno=0
[  317.636816][T15620] futex_wake_op: syz.2.3998 tries to shift op by -1; fix this program
[  318.248640][T15645] loop2: detected capacity change from 0 to 1764
[  318.321189][T15649] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  318.324853][ T5896] kernel write not supported for file /audio (pid: 5896 comm: kworker/1:4)
[  318.374365][   T55] Bluetooth: min 0 < 6
[  318.973902][T15728] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.4047'.
[  319.117774][T15747] Bluetooth: hci0: unsupported parameter 60160
[  319.121187][T15747] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  319.631551][T15758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  319.636379][T15758] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  319.784900][T15761] loop2: detected capacity change from 0 to 512
[  319.787416][T15761] EXT4-fs: Ignoring removed i_version option
[  319.789572][T15761] EXT4-fs: Ignoring removed nobh option
[  319.791904][T15761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  319.798897][T15761] EXT4-fs (loop2): 1 truncate cleaned up
[  319.801548][T15761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.994745][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.162203][T15782] loop6: detected capacity change from 0 to 512
[  320.166869][T15782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  320.189004][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.283322][T15798] loop6: detected capacity change from 0 to 1024
[  320.300705][T15798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.304595][T15798] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.312155][   T33] audit: type=1800 audit(1754928407.078:133): pid=15798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4076" name="file1" dev="loop6" ino=15 res=0 errno=0
[  320.334774][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.432190][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  320.439410][T15803] loop2: detected capacity change from 0 to 32768
[  320.448047][T15803] ERROR: (device loop2): dbAllocAG: allocation request is larger than the allocation group size
[  320.448047][T15803] 
[  320.450280][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4082'.
[  320.455648][T15803] ERROR: (device loop2): dbDiscardAG: -EIO
[  320.455648][T15803] 
[  320.737957][ T3144] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  320.888587][ T3144] usb 7-1: Using ep0 maxpacket: 8
[  320.903152][ T3144] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  320.906364][ T3144] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  320.915300][ T3144] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  320.931717][ T3144] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  320.935103][ T3144] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  320.942653][ T3144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.948064][ T3144] usb 7-1: config 0 descriptor??
[  320.951368][T15813] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  321.177225][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  321.188254][   T47] usb 7-1: USB disconnect, device number 17
[  321.729719][T15836] overlayfs: failed to clone upperpath
[  321.796204][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4099'.
[  321.805057][T15846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.809594][T15846] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.813333][T15846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.815666][T15846] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.830943][T15849] loop2: detected capacity change from 0 to 4096
[  321.844109][T15849] EXT4-fs (loop2): Test dummy encryption mode enabled
[  321.855549][T15849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0043]
[  321.858247][T15849] System zones: 0-5
[  321.860820][T15849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.985015][T15849] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  322.039635][T15870] netlink: 'syz.1.4109': attribute type 1 has an invalid length.
[  322.049884][T15872] loop6: detected capacity change from 0 to 512
[  322.056569][T15872] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4108: corrupted in-inode xattr: invalid ea_ino
[  322.061380][T15872] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4108: couldn't read orphan inode 15 (err -117)
[  322.066042][T15872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.069461][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.100715][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.135605][T15877] loop6: detected capacity change from 0 to 164
[  322.139663][T15879] loop2: detected capacity change from 0 to 512
[  322.144068][T15879] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  322.148175][T15877] isofs: isofs_export_get_parent(): child directory not normalized!
[  322.153135][T15879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  322.155949][T15879] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4112: corrupted in-inode xattr: e_value size too large
[  322.164788][T15879] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4112: couldn't read orphan inode 15 (err -117)
[  322.172038][T15879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.129270][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.414083][T15907] 9pnet_virtio: no channels available for device syz
[  323.644647][T15914] loop2: detected capacity change from 0 to 32768
[  323.751991][T15914] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  323.752005][T15914]   allowing incompatible features above 0.0: (unknown version)
[  323.752009][T15914]   features: lz4
[  323.763692][T15914] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  323.766449][T15914] bcachefs (loop2): initializing new filesystem
[  323.773560][T15914] bcachefs (loop2): going read-write
[  323.777160][T15914] bcachefs (loop2): marking superblocks
[  323.785991][T15914] bcachefs (loop2): initializing freespace
[  323.791143][T15914] bcachefs (loop2): done initializing freespace
[  323.794946][T15914] bcachefs (loop2): reading snapshots table
[  323.797085][T15914] bcachefs (loop2): reading snapshots done
[  323.842847][T15914] bcachefs (loop2): done starting filesystem
[  323.880341][T15914] syz.2.4126 (15914) used greatest stack depth: 15768 bytes left
[  323.905546][ T5856] bcachefs (loop2): shutting down
[  323.912438][ T5856] bcachefs (loop2): going read-only
[  323.915134][ T5856] bcachefs (loop2): finished waiting for writes to stop
[  323.922386][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  323.940100][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  323.944035][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 4
[  323.946949][ T5856] bcachefs (loop2): marking filesystem clean
[  323.958784][ T5856] bcachefs (loop2): shutdown complete
[  324.826695][T15956] loop6: detected capacity change from 0 to 8
[  324.831577][T15956] squashfs image failed sanity check
[  325.426342][T15980] tap0: tun_chr_ioctl cmd 2147767520
[  325.512322][T15990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4155'.
[  325.638398][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'.
[  325.659425][T15996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  325.662539][T15996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  326.624838][ T3144] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  326.775032][ T3144] usb 3-1: Using ep0 maxpacket: 32
[  326.781841][ T3144] usb 3-1: config 0 has an invalid interface number: 225 but max is 0
[  326.787567][ T3144] usb 3-1: config 0 has no interface number 0
[  326.789538][ T3144] usb 3-1: config 0 interface 225 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  326.799765][ T3144] usb 3-1: config 0 interface 225 has no altsetting 0
[  326.815024][ T3144] usb 3-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=f8.67
[  326.822734][ T3144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.830385][ T3144] usb 3-1: Product: syz
[  326.832139][ T3144] usb 3-1: Manufacturer: syz
[  326.833914][ T3144] usb 3-1: SerialNumber: syz
[  326.858945][ T3144] usb 3-1: config 0 descriptor??
[  326.862767][ T3144] usb 3-1: Interface #225 referenced by multiple IADs
[  326.918636][T16032] usb usb8: usbfs: process 16032 (syz.6.4173) did not claim interface 0 before use
[  327.047226][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4178'.
[  327.050519][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4178'.
[  327.087413][ T3144] usb 3-1: USB disconnect, device number 55
[  327.090512][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4179'.
[  327.093403][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4179'.
[  327.216797][T16053] binder: 16052:16053 ioctl 4018620d 0 returned -22
[  327.323210][T16057] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4184'.
[  327.634308][ T3144] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  327.784152][ T3144] usb 7-1: Using ep0 maxpacket: 32
[  327.787885][ T3144] usb 7-1: unable to get BOS descriptor or descriptor too short
[  327.791225][ T3144] usb 7-1: config 128 has an invalid interface number: 127 but max is 3
[  327.793899][ T3144] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  327.797687][ T3144] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4
[  327.800913][ T3144] usb 7-1: config 128 has no interface number 0
[  327.803166][ T3144] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  327.807008][ T3144] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.810169][ T3144] usb 7-1: config 128 interface 127 has no altsetting 0
[  327.814310][ T3144] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  327.817662][ T3144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.820240][ T3144] usb 7-1: Product: syz
[  327.821584][ T3144] usb 7-1: Manufacturer: syz
[  327.823086][ T3144] usb 7-1: SerialNumber: syz
[  327.864314][ T6196] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  328.039410][ T6196] usb 3-1: unable to get BOS descriptor or descriptor too short
[  328.048191][ T6196] usb 3-1: config 250 has an invalid interface number: 222 but max is 1
[  328.052662][ T6196] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  328.057013][ T3144] usb 7-1: USB disconnect, device number 18
[  328.060195][ T6196] usb 3-1: config 250 has no interface number 1
[  328.062259][ T6196] usb 3-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  328.067241][ T6196] usb 3-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  328.070781][ T6196] usb 3-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[  328.074499][ T6196] usb 3-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  328.077896][ T6196] usb 3-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping
[  328.081267][ T6196] usb 3-1: config 250 interface 222 has no altsetting 0
[  328.087374][ T6196] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  328.090222][ T6196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.092762][ T6196] usb 3-1: Product: syz
[  328.095250][ T6196] usb 3-1: Manufacturer: syz
[  328.096794][ T6196] usb 3-1: SerialNumber: syz
[  328.100517][T16063] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  328.272972][T16071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4191'.
[  328.317573][ T6196] usb 3-1: USB disconnect, device number 56
[  328.587590][T16093] loop6: detected capacity change from 0 to 512
[  328.590053][T16093] EXT4-fs: Ignoring removed i_version option
[  328.592041][T16093] EXT4-fs: Ignoring removed mblk_io_submit option
[  328.596162][T16093] EXT4-fs (loop6): Test dummy encryption mode enabled
[  328.599949][T16093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c018, mo2=0103]
[  328.603223][T16093] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.4201: inode #13: comm syz.6.4201: iget: illegal inode #
[  328.608907][T16093] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4201: couldn't read orphan inode 13 (err -117)
[  328.615366][T16093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.625161][T16093] EXT4-fs error (device loop6): ext4_resize_begin:60: comm syz.6.4201: resize_inode disabled but reserved GDT blocks non-zero
[  328.645588][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.017762][T16142] loop2: detected capacity change from 0 to 4096
[  329.144057][T16145] loop2: detected capacity change from 0 to 256
[  329.205205][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4224'.
[  329.214385][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4224'.
[  329.598231][T16158] loop2: detected capacity change from 0 to 32768
[  329.600825][T16158] XFS: noikeep mount option is deprecated.
[  329.607854][T16158] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.625378][T16158] XFS (loop2): Ending clean mount
[  329.630508][T16158] XFS (loop2): Quotacheck needed: Please wait.
[  329.663489][T16158] XFS (loop2): Quotacheck: Done.
[  329.685580][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.785825][T16172] loop2: detected capacity change from 0 to 256
[  329.794358][T16172] FAT-fs (loop2): Directory bread(block 64) failed
[  329.796514][T16172] FAT-fs (loop2): Directory bread(block 65) failed
[  329.798586][T16172] FAT-fs (loop2): Directory bread(block 66) failed
[  329.803586][T16172] FAT-fs (loop2): Directory bread(block 67) failed
[  329.805733][T16172] FAT-fs (loop2): Directory bread(block 68) failed
[  329.807792][T16172] FAT-fs (loop2): Directory bread(block 69) failed
[  329.809828][T16172] FAT-fs (loop2): Directory bread(block 70) failed
[  329.811861][T16172] FAT-fs (loop2): Directory bread(block 71) failed
[  329.814194][T16172] FAT-fs (loop2): Directory bread(block 72) failed
[  329.816249][T16172] FAT-fs (loop2): Directory bread(block 73) failed
[  329.830707][T16172] FAT-fs (loop2): Filesystem has been set read-only
[  329.836318][   T33] audit: type=1800 audit(1754928416.602:134): pid=16172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4235" name="cpu.stat" dev="loop2" ino=1048669 res=0 errno=0
[  330.022843][T16188] loop2: detected capacity change from 0 to 1024
[  330.031512][T16188] hfsplus: invalid extent max_key_len 1280
[  330.034401][T16188] hfsplus: failed to load extents file
[  330.098244][T16195] [U] ^C
[  330.159431][T16206] loop2: detected capacity change from 0 to 512
[  330.181296][T16206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  330.189601][T16206] System zones: 1-12
[  330.194234][T16206] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4251: corrupted in-inode xattr: e_value size too large
[  330.204376][T16206] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4251: couldn't read orphan inode 15 (err -117)
[  330.209560][T16206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.243945][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.295695][T16226] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4259'.
[  330.298677][T16226] nbd: must specify at least one socket
[  330.348719][   T47] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  330.366616][   T47] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  330.585818][T16247] loop6: detected capacity change from 0 to 2364
[  330.644654][T16251] net_ratelimit: 17 callbacks suppressed
[  330.644667][T16251] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  330.649536][T16251] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  330.652710][ T3144] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  330.698956][T16255] loop6: detected capacity change from 0 to 1024
[  330.815613][ T3144] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[  330.818998][ T3144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.822401][ T3144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.825763][ T3144] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  330.829793][ T3144] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[  330.833933][ T3144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.837601][ T3144] usb 3-1: config 0 descriptor??
[  330.865223][T16259] loop6: detected capacity change from 0 to 32768
[  330.878372][T16259] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  331.001597][T13147] ocfs2: Unmounting device (7,6) on (node local)
[  331.190652][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4287'.
[  331.228859][T16291] netlink: 'syz.1.4290': attribute type 11 has an invalid length.
[  331.246562][ T3144] cmedia_hs100b 0003:0D8C:0014.0013: item fetching failed at offset 5/7
[  331.249678][ T3144] cmedia_hs100b 0003:0D8C:0014.0013: probe with driver cmedia_hs100b failed with error -22
[  331.426108][T16312] loop6: detected capacity change from 0 to 128
[  331.439626][   T47] Process accounting resumed
[  331.446107][   T47] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512)
[  331.448908][   T47] FAT-fs (loop6): Filesystem has been set read-only
[  331.455312][ T3144] usb 3-1: USB disconnect, device number 57
[  331.528717][T16324] overlayfs: failed to clone upperpath
[  331.754959][   T47] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  331.904821][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.909134][   T47] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  331.915511][   T47] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  331.919401][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.925778][   T47] usb 7-1: config 0 descriptor??
[  331.982237][T16349] loop2: detected capacity change from 0 to 16
[  331.984755][T16349] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  331.989810][T16349] cramfs: empty filesystem
[  332.400039][   T47] wacom 0003:056A:0045.0014: Unknown device_type for 'HID 056a:0045'. Assuming pen.
[  332.415077][   T47] wacom 0003:056A:0045.0014: hidraw0: USB HID v0.00 Device [HID 056a:0045] on usb-dummy_hcd.6-1/input0
[  332.419681][   T47] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0045.0014/input/input23
[  332.501110][T16368] loop2: detected capacity change from 0 to 2048
[  332.509954][T16369] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.560788][T16369] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  332.565278][T16369] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  332.569935][T16369] Remounting filesystem read-only
[  332.573192][ T5856] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  332.587325][   T47] usb 7-1: USB disconnect, device number 19
[  332.677294][T16377] @: renamed from vlan0 (while UP)
[  333.047254][T16391] __nla_validate_parse: 1 callbacks suppressed
[  333.047266][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4333'.
[  333.157230][T16399] bridge5: entered promiscuous mode
[  334.180758][T16447] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4357'.
[  334.183977][T16449] netlink: 'syz.6.4359': attribute type 1 has an invalid length.
[  334.186569][T16447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4357'.
[  334.324182][T16463] loop6: detected capacity change from 0 to 2048
[  334.343923][T16463]  loop6: [POWERTEC]
[  334.450837][ T5910] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  334.525894][T16467] loop6: detected capacity change from 0 to 32768
[  334.544299][T16467] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  334.547390][T16467] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  334.573652][T16467] XFS (loop6): Ending clean mount
[  334.585079][T16467] XFS (loop6): Quotacheck needed: Please wait.
[  334.620909][ T5910] usb 3-1: Using ep0 maxpacket: 32
[  334.626517][T16467] XFS (loop6): Quotacheck: Done.
[  334.627539][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  334.635899][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  334.644491][ T5910] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  334.647858][ T5910] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  334.652292][ T5910] usb 3-1: Product: syz
[  334.653630][ T5910] usb 3-1: Manufacturer: syz
[  334.655541][ T5910] usb 3-1: SerialNumber: syz
[  334.658219][ T5910] usb 3-1: config 0 descriptor??
[  334.666267][T13147] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  334.677198][ T5910] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  334.877635][ T3144] usb 3-1: USB disconnect, device number 58
[  334.884180][   T12] usb 3-1: Failed to submit usb control message: -71
[  334.886756][   T12] usb 3-1: unable to send the bmi data to the device: -71
[  334.888997][   T12] usb 3-1: unable to get target info from device
[  334.891165][   T12] usb 3-1: could not get target info (-71)
[  334.893304][   T12] usb 3-1: could not probe fw (-71)
[  335.181988][T16509] loop6: detected capacity change from 0 to 256
[  335.184895][T16509] exfat: Deprecated parameter 'namecase'
[  335.189937][T16509] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  335.603487][T16519] loop2: detected capacity change from 0 to 40427
[  335.606696][T16519] F2FS-fs (loop2): Image doesn't support compression
[  335.608815][T16519] F2FS-fs (loop2): build fault injection rate: 690
[  335.612090][T16519] F2FS-fs (loop2): invalid crc value
[  335.652075][T16519] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  335.656967][T16519] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  335.664869][   T33] audit: type=1800 audit(1754928422.435:135): pid=16519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4386" name="file1" dev="loop2" ino=10 res=0 errno=0
[  335.689194][ T5856] syz-executor: attempt to access beyond end of device
[  335.689194][ T5856] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  335.693962][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  335.693974][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.693979][ T5856] Call Trace:
[  335.693983][ T5856]  <TASK>
[  335.693987][ T5856]  dump_stack_lvl+0x189/0x250
[  335.694004][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.694013][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  335.694023][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  335.694032][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.694045][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  335.694060][ T5856]  f2fs_write_end_io+0x886/0xb60
[  335.694079][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  335.694091][ T5856]  __submit_merged_write_cond+0x255/0x530
[  335.694104][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[  335.694129][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  335.694146][ T5856]  ? is_bpf_text_address+0x26/0x2b0
[  335.694170][ T5856]  ? kernel_text_address+0xa5/0xe0
[  335.694181][ T5856]  ? __kernel_text_address+0xd/0x40
[  335.694192][ T5856]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  335.694210][ T5856]  ? __lock_acquire+0xab9/0xd20
[  335.694225][ T5856]  ? do_raw_spin_lock+0x121/0x290
[  335.694239][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  335.694248][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  335.694275][ T5856]  do_writepages+0x32e/0x550
[  335.694293][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  335.694304][ T5856]  filemap_fdatawrite+0x199/0x240
[  335.694315][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  335.694347][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  335.694357][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[  335.694376][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[  335.694397][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  335.694451][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  335.694467][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  335.694480][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  335.694489][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  335.694502][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  335.694513][ T5856]  deactivate_locked_super+0xbc/0x130
[  335.694523][ T5856]  cleanup_mnt+0x425/0x4c0
[  335.694532][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.694544][ T5856]  task_work_run+0x1d4/0x260
[  335.694555][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  335.694563][ T5856]  ? __x64_sys_umount+0x122/0x160
[  335.694576][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  335.694589][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  335.694599][ T5856]  do_syscall_64+0x2bd/0x3b0
[  335.694608][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.694615][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.694623][ T5856]  ? exc_page_fault+0x9f/0xf0
[  335.694632][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.694639][ T5856] RIP: 0033:0x7fb15bb8ff17
[  335.694647][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  335.694654][ T5856] RSP: 002b:00007ffcec7083f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  335.694663][ T5856] RAX: 0000000000000000 RBX: 00007fb15bc11c05 RCX: 00007fb15bb8ff17
[  335.694668][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcec7084b0
[  335.694673][ T5856] RBP: 00007ffcec7084b0 R08: 0000000000000000 R09: 0000000000000000
[  335.694677][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcec709540
[  335.694682][ T5856] R13: 00007fb15bc11c05 R14: 0000000000051f05 R15: 00007ffcec709580
[  335.694696][ T5856]  </TASK>
[  335.696053][ T5856] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  335.723921][T16526] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  336.049205][T16552] input: syz0 as /devices/virtual/input/input26
[  336.362031][T16583] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4410'.
[  336.474611][T16592] netlink: 'syz.6.4413': attribute type 21 has an invalid length.
[  336.477118][T16592] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4413'.
[  336.481102][T16592] netlink: 'syz.6.4413': attribute type 1 has an invalid length.
[  336.912732][T16618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4424'.
[  337.009520][ T5594] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  337.261761][ T5594] usb 7-1: Using ep0 maxpacket: 8
[  337.264986][ T5594] usb 7-1: config 5 has an invalid interface number: 52 but max is 1
[  337.267770][ T5594] usb 7-1: config 5 has an invalid interface number: 4 but max is 1
[  337.270478][ T5594] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  337.273770][ T5594] usb 7-1: config 5 has no interface number 0
[  337.275740][ T5594] usb 7-1: config 5 has no interface number 1
[  337.277667][ T5594] usb 7-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  337.282052][ T5594] usb 7-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0
[  337.285160][ T5594] usb 7-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  337.289381][ T5594] usb 7-1: config 5 interface 52 has no altsetting 0
[  337.291801][ T5594] usb 7-1: config 5 interface 4 has no altsetting 0
[  337.296059][ T5594] usb 7-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c
[  337.298948][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.301627][ T5594] usb 7-1: Product: syz
[  337.303167][ T5594] usb 7-1: Manufacturer: syz
[  337.304723][ T5594] usb 7-1: SerialNumber: syz
[  337.384960][T16638] loop2: detected capacity change from 0 to 512
[  337.387853][T16638] EXT4-fs: Ignoring removed orlov option
[  337.397923][T16638] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  337.404387][T16638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  337.408571][T16638] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.4433: corrupted in-inode xattr: e_value size too large
[  337.413767][T16638] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4433: couldn't read orphan inode 15 (err -117)
[  337.413858][T16642] macvtap0: refused to change device tx_queue_len
[  337.423329][T16638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.460537][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.522256][ T5594] cytherm 7-1:5.52: Cypress thermometer device now attached
[  337.532337][ T5594] cytherm 7-1:5.4: Cypress thermometer device now attached
[  337.546141][ T5594] usb 7-1: USB disconnect, device number 20
[  337.549269][ T5594] cytherm 7-1:5.52: Cypress thermometer now disconnected
[  337.553890][ T5594] cytherm 7-1:5.4: Cypress thermometer now disconnected
[  338.202089][T16663] loop6: detected capacity change from 0 to 512
[  338.222320][T16663] EXT4-fs error (device loop6): ext4_init_orphan_info:585: comm syz.6.4444: inode #0: comm syz.6.4444: iget: illegal inode #
[  338.227109][T16663] EXT4-fs (loop6): Remounting filesystem read-only
[  338.229659][T16663] EXT4-fs (loop6): get orphan inode failed
[  338.232701][T16663] EXT4-fs (loop6): mount failed
[  338.259075][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  338.263275][   T47] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  338.266048][   T47] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  338.312104][T16666] loop6: detected capacity change from 0 to 256
[  338.331626][T16666] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  338.731509][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4456'.
[  338.763643][T16694] tmpfs: Bad value for 'nr_inodes'
[  340.033423][T16756] loop6: detected capacity change from 0 to 8
[  340.044757][T16756] SQUASHFS error: Unable to read directory block [249:c]
[  340.084992][T16759] loop6: detected capacity change from 0 to 256
[  340.087830][T16759] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  340.091629][T16759] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  340.097549][T16759] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb62de5b7, utbl_chksum : 0xe619d30d)
[  340.176514][T16763] loop6: detected capacity change from 0 to 128
[  340.181243][T16763] Invalid source name
[  340.182942][T16763] UBIFS error (pid: 16763): cannot open "/dev/loop6", error -22
[  340.259292][T16777] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4497'.
[  340.312175][T16785] loop6: detected capacity change from 0 to 64
[  340.315626][T16784] pimreg0: tun_chr_ioctl cmd 1074812117
[  340.516060][T16805] loop2: detected capacity change from 0 to 512
[  340.581009][   T55] Bluetooth: hci1: command 0x0405 tx timeout
[  340.584948][   T47] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  340.587108][   T47] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  340.987055][T16828] openvswitch: netlink: Tunnel attr 171 out of range max 16
[  341.697266][ T5594] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  341.860513][ T5594] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.899471][ T5594] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.902812][ T5594] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  341.906036][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.919157][ T5594] usb 7-1: config 0 descriptor??
[  342.292686][T16873] Invalid ELF header type: 0 != 1
[  342.374993][ T5594] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0
[  342.384572][ T5594] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[  342.387777][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'.
[  342.754566][T16862] orangefs_mount: mount request failed with -4
[  342.761278][T16885] loop2: detected capacity change from 0 to 4096
[  342.763925][T16885] ntfs3: Unknown parameter ''
[  342.778679][T16884] loop2: detected capacity change from 0 to 512
[  342.793973][T16884] EXT4-fs (loop2): orphan cleanup on readonly fs
[  342.797713][T16884] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  342.801105][T16884] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  342.804444][T16884] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4547: Failed to acquire dquot type 1
[  342.810267][T16884] EXT4-fs (loop2): 1 truncate cleaned up
[  342.813179][T16884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  342.960053][   T47] usb 7-1: USB disconnect, device number 21
[  343.281364][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.491193][T16924] loop6: detected capacity change from 0 to 1024
[  343.520322][T16924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  343.524298][T16924] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.533663][T16924] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.4565: lblock 0 mapped to illegal pblock 0 (length 1)
[  343.542804][T16924] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  343.549188][T16924] EXT4-fs (loop6): This should not happen!! Data will be lost
[  343.549188][T16924] 
[  343.553072][T16924] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: comm syz.6.4565: lblock 0 mapped to illegal pblock 0 (length 1)
[  343.575833][T16930] input: syz0 as /devices/virtual/input/input27
[  343.637426][   T33] audit: type=1800 audit(1754928430.399:136): pid=16931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4561" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[  343.761119][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  343.793661][T16936] loop6: detected capacity change from 0 to 512
[  343.803185][T16936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.815636][T16936] EXT4-fs warning (device loop6): ext4_begin_enable_verity:135: inode #13: comm syz.6.4567: verity is only allowed on extent-based files
[  343.832938][T13147] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.094277][T16958] tipc: Failed to remove unknown binding: 66,1,1/4:210903810/210903812
[  344.101154][T16958] tipc: Failed to remove unknown binding: 66,1,1/4:210903810/210903812
[  344.126200][   T47] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  344.148517][T16960] loop2: detected capacity change from 0 to 4096
[  344.151776][T16960] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  344.157908][T16960] ntfs3(loop2): ino=0, mi_enum_attr
[  344.161086][T16960] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  344.303988][   T47] usb 7-1: Using ep0 maxpacket: 16
[  344.311642][   T47] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.314826][   T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  344.323658][   T47] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  344.328074][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.330759][   T47] usb 7-1: Product: syz
[  344.332196][   T47] usb 7-1: Manufacturer: syz
[  344.333790][   T47] usb 7-1: SerialNumber: syz
[  344.504703][T16969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  344.774524][   T47] usb 7-1: cannot find UAC_HEADER
[  344.816016][   T47] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  344.821335][   T47] usb 7-1: USB disconnect, device number 22
[  345.042751][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'.
[  345.055191][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'.
[  345.296183][T16989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4593'.
[  345.588997][T17006] loop6: detected capacity change from 0 to 256
[  345.598581][T17006] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  345.601918][T17006] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  345.607611][T17006] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  345.630249][   T33] audit: type=1326 audit(1754928432.410:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17007 comm="syz.2.4602" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb15bb8ebe9 code=0x0
[  345.776872][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4605'.
[  345.821416][   T33] audit: type=1326 audit(1754928432.600:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.1.4607" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32eb8ebe9 code=0x0
[  345.925097][  T791] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  346.086839][  T791] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  346.090176][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  346.093825][  T791] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  346.101618][  T791] usb 7-1: language id specifier not provided by device, defaulting to English
[  346.111106][  T791] usb 7-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  346.114010][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.117577][  T791] usb 7-1: Manufacturer: 
[  346.119050][  T791] usb 7-1: SerialNumber: syz
[  346.121778][  T791] usb 7-1: config 0 descriptor??
[  346.125745][  T791] em28xx 7-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  346.129257][  T791] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  346.238422][T17050] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  346.246521][T17050] CIFS: Unable to determine destination address
[  346.251406][T17050] overlayfs: failed to clone upperpath
[  346.387081][  T791] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  346.390390][  T791] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  346.392835][  T791] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  346.395224][  T791] em28xx 7-1:0.0: No AC97 audio processor
[  346.399180][  T791] usb 7-1: USB disconnect, device number 23
[  346.402940][  T791] em28xx 7-1:0.0: Disconnecting em28xx
[  346.413650][  T791] em28xx 7-1:0.0: Freeing device
[  347.099169][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4646'.
[  347.368618][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4659'.
[  347.371588][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4659'.
[  347.374998][T17131] netlink: 'syz.6.4659': attribute type 13 has an invalid length.
[  347.377627][T17131] netlink: 'syz.6.4659': attribute type 14 has an invalid length.
[  348.748698][T17185] libceph: resolve 'R' (ret=-3): failed
[  348.894419][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4692'.
[  348.936034][T17212] loop2: detected capacity change from 0 to 2048
[  348.940443][T17212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  349.026692][T17225] netlink: 'syz.2.4699': attribute type 10 has an invalid length.
[  349.029419][T17225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4699'.
[  349.346056][T17244] loop2: detected capacity change from 0 to 32768
[  349.357770][T17244] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  349.643183][ T7140] unregister_netdevice: waiting for lo to become free. Usage count = 3
[  349.646139][ T7140] ref_tracker: netdev@ffff888122b7e610 has 1/1 users at
[  349.646139][ T7140]      ib_device_set_netdev+0x31f/0x6d0
[  349.646139][ T7140]      siw_newlink+0x40c/0xd70
[  349.646139][ T7140]      nldev_newlink+0x4a5/0x5a0
[  349.646139][ T7140]      rdma_nl_rcv+0x6ae/0x980
[  349.646139][ T7140]      netlink_unicast+0x82f/0x9e0
[  349.646139][ T7140]      netlink_sendmsg+0x805/0xb30
[  349.646139][ T7140]      __sock_sendmsg+0x21c/0x270
[  349.646139][ T7140]      ____sys_sendmsg+0x505/0x830
[  349.646139][ T7140]      ___sys_sendmsg+0x21f/0x2a0
[  349.646139][ T7140]      __x64_sys_sendmsg+0x19b/0x260
[  349.646139][ T7140]      do_syscall_64+0xfa/0x3b0
[  349.646139][ T7140]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.646139][ T7140] 
[  350.303807][ T5856] ocfs2: Unmounting device (7,2) on (node local)

VM DIAGNOSIS:
16:03:00  Registers:
info registers vcpu 0

CPU#0
RAX=68f32b30fbc43a00 RBX=ffffffff81968308 RCX=68f32b30fbc43a00 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe32f90fd58 CR3=000000011cd00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007fb06f587498 00007fb06f587470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007fb06f587478 00007fb06f5874c0
XMM06=00007fb06f5874b8 00007fb06f5874b0 XMM07=00007fb06f5874a8 00007fb06f5874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb06f412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007386eb0
R8 =ffff8880207c8237 R9 =1ffff110040f9046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18ef R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000009000 CR3=000000012a202000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb06f412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
