last executing test programs:

2.300211287s ago: executing program 2 (id=998):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @remote}], 0x20)

2.299594439s ago: executing program 2 (id=999):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001780)={0x44, &(0x7f0000001600)={0x0, 0x15, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000780)=[{0xc0, 0x8000, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0xa000, 0x0, 0x0}], 0x3})

780.274916ms ago: executing program 1 (id=1012):
r0 = socket$inet(0x2b, 0x801, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3087, 0x10, 0x100004, 0x219}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

729.022095ms ago: executing program 0 (id=1013):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x12, 0x613, 0x70bd26, 0x25dfdbfd, {0x10, 0xff, 0x1, 0xfc, {0x4e24, 0x4e21, [0x3, 0xfffffffa, 0x6, 0x9], [0x7, 0x8, 0x2, 0x7], 0x0, [0x4, 0x4]}, 0xfffffffe, 0x8001}}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

728.655389ms ago: executing program 1 (id=1014):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r2, 0x12e9d000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

602.643709ms ago: executing program 1 (id=1015):
unshare(0x2c020400)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x20, r0}, 0x0)

548.78769ms ago: executing program 0 (id=1016):
r0 = socket$alg(0x26, 0x5, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18)

548.43399ms ago: executing program 1 (id=1017):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xc, 0x4000000000000, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0)

450.221193ms ago: executing program 1 (id=1018):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

390.113779ms ago: executing program 1 (id=1019):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="40d4823deffdbbeb65eeddb31203a829679a7a18f01faefa691c80df4e49f2c92d0c9708f605177b1f5699eeabb703cc126adf2f9c5167d17178b4e0c590345bad5de906894ef754ec7a8c3b32c7b9d0f74abf43c4dee78decff644fd28d7d874518bd960a098875b53d2005df3fb15a953031adb9887615b59f3caef2de95c9495a7154700055ef1a72", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0xec, 0x5ac4, &(0x7f0000008380)="$eJzs3WuQXNV9IPBzu3s0Lz1GAgcZzGjAaENwbI14lR+pWM4mdgocl1xOOYiVDQMaEdmSUOkRkEyCyILXKrDLTjmV4OQDcWHv2pZdVNkbo7AmYFZi/VKx8VJbNrV2FvuDtwiLyoCWcnk9qe6+p6f7dt+5PT09QoLfr2Bu39On//fcc0/fvv/TVzMBAACAV4Vjd+05+Z5zf+/bfz794u2//w877gij5Vr5UKwwli5vfblayKk0WFldW2bHxa9/5Is/nbjxd771wMjnXjq65YKtP/zds2586ENXHbn3bx59YdnXfvV0Udw4ni6ZXU+eTUIY+saJv/zo0e+cUy1Llld/lg6GsDJZ9ejKJIQ7m0NM/iKEsCVdWZ2J/9UXL9saQihnt7sis268v7pVj3MSQjhw8pY3hB+9Y9Od31vzlS8PHH7m4GyVZGh2PIUQll/f/PqBEMJw+n/VYLqM4zFJlxtDCCNNr3tzQbte30W7q9ZlyuP6eelySbocLYgXn78ws17K1MuuRwOZ5UjB9hYqrx291iuyNLOe9ClulNfOWL4yXX49XV4yz/jldB/KSSglodJo/vZkdoyEpuOWhKR2LIca66XGsQ3p/mfWk8x6KbNeHsjsV2276UArJ0lreayXKY+n40pafkHzubqD9zU9bq732liWvlFfytbJBB1te9DYr5rYrhNztOVUKDWdgzqVNw58ejBG07LRpH1Ez3QQnzu66Z615c3fPDaW047kgSSNn6TxV80r/oHvrlz6wS8d2pf9XG/Ev76Uxi/1FP/HVx9/7tpDn/1MbvxPxvjlnuJf+vDIs1c/dteFuf1zIvZPpaf4U08//vE1Z99wOLf998X4Qz3F33Dk+OCykw8/ktv+ydg/wz3Ff+pt7/zJF5588Jnc+CHGH+kp/uYjuz4xOH7y4tz4j8T+Ge1t/Dx/+MofjI//bCIv/hMx/rKe4n/+4OBb719x91W5x3dj7J+xnuK/+6KH7lx68sHz886dyX39+uQEeHU6K73G+li63mueuVBN+cJfT1Tq13xL0/+X9XNDmYvPbJ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP3wmjf8t3f97/ePPVtJ1wfTB0+V6stYviSEZDiEsGfv1O6923beNPGhm/ft3jm1fWJq78T0zr27909c/psTu6d3bZ/aX3128o2X1V+3KiT1ZXJ+27YHZ2ZmSmOtZXF7//aiwz9a++b/8y8hTL7m++OV3Pavu3fH/Wd3+JmRbJh5+4597/n+FX+X7tdY2q6xDu2amZmZCTnt+r/X/PL+vzjx04tDmPy1udr1+FO//Y/NDSqHasFsnFRpMNQbNJiMdGxHo9Vpe2J/VbZu2z49OXf/Vl9fztmPf/eRZ36x9dZP/bLev0O5+9Fl/w5vmNle+qtN7/7/f3VbvaCoXS/Xca/2dzknZrVdcS9i+2L/DaX9vTzdr+U5+1XJ2a+7vvfIk98499ALB8Nk5fk17ce6aL8G0gEwkLy2q+3GLYwkK1vKh9L68YjH163bu2PXuj37D7xx246pm6Zvmt75lvWXr79y8oorr1hX2/N1fd7/uP1/0+X+n5rxtOJPDn49/uxuPLW2a8m8+6ParuL+aG5R3vtv5H0f/fRb7n3sPfWCpvPKund06K9Yu3E+SZcj1eO8PjSNt/a+6rRfRccnhDDRqR+ee+GqcM7/3HZn0Xmo+cg0/8xINsx858Kf/92b/3b1b9ULTsl5vrlBj/d2nm+0erY9tf4aSo/HzGnav4Pp2XQwGe3YrvXfeWzgnmP/8qeN9i1ZEm6d2rt39/r6z6VpS5cm53VsV7Y07tea2s9ySLslNIZph/FaNRDq7cueP2P1Rq8OtT43mqzquF9Z8bmjm+5ZW978zWN5PZ08UN/icFhWXyavy6m5PfPCcqNRnbZ/ur7/isbH+Lv+9mvv/9rfX942Pi6t/yzaryRnv77y5Oc//blP/Ye/799+veu3j4/9/H/98dp6wSk4r4QFnVfK9YY0Wp22J2k+r1waQtH7b03ovB+5779S5/0pev9ltzNbv3O8icz6aCj39H699OGRZ69+7K4Lc9+vJ+Z6vzbv7G0trysXvF9Pl8+l7PsrqbS2Y/HeXy0DJdkw862PnXXw0ds3nlsvKPq8bNTuNK4v6yL/yNmvf7z2B+M3T/z7/9G/88YXf/Or1/1wasOf1Qt6P+6xLf057kNp/w7l9G+j1THvbO7fN9148/Yt9fKifn75rn/TZUH+E08le/Yf+PDU9u3Tu/d0t1/dfp7G7WR7udfP03h2W1WwX6W2/Vq8B930V7fvt9j+LT33V+v7bTQkPX0uHPjuyqUf/NKhfWNtr0o3dH0pjV/qKf6Prz7+3LWHPvuZ3PifjPErPcWfevrxj685+4bDufHvS9L4Q8Xxl4e2+BuOHB9cdvLhR3LjT8b2D/fU/qfe9s6ffOHJB5/JjR9i/NHe+v/5w1f+YHz8Z7nxn0jS7VSvkUL46ouXba2vJ2GgKU2otmOgpV0hu55k1kuZ9XLzeinOIqQbKCdJa3msl5Zf0JqytPmjnPJ4FTa0ur58Ka6H7IO5y083paZzf6fyoutUAIBXuvj9f7wGjd//T6cXSvkzDTBroXnY6py4MQ+bnc9p/Y51dRo/vj7OA46/KUxWl3dM1C/05/s9Qnw/ZOc543Yufn1rjI7zE0eaN1Lbfts8Z9H8+4WZ9diu+nx5pSkPTbXnNZXQxfx7+3bmnn/P7H7x91kTH2tr1kTTvFX2+A2kM2ad7nfItLdSjZA3PrLzYvF+jvHlYWNte12Oj+x9NPE4ZO+jids5N3Pi7PU+mrzxMdbeDy3tiuMj1ptjfNSaXPx9ZPvxC3P07+zx6xwte/wG0hZ2cbyHqvVHF/n72T7MG3Y8pZ26ecPF/T7stJiX7BD/FM9LLm2Ln77BTvd5w1ge+6nS5Xzi+3PK+zWfGE8XsV0n5mjLqWA+EXilivl//Iyo5v/VC/D/l6lXlKdkrxpjvNz7hHJuwi7KO7JX56NhpKfP8c1Hdn1icPzkxbnXOY90e5/erpa1kYL7for6cW1mvbAfcyZoivK97HaK+j17X8ZoWNZTv3/+4L1vvX/F3Vfl9vvG+gdpcb9/umVtWUG/nwH5Quf48oVXUr7QHn+h9zH8l5mu5s/y85Fyox2Lko+kNz4tVj7yhznl881HRtoeNPar5vTNR2Y/SFvykYFT2y4A4MwR8//G92dp/v/P8cIivY4oylsvyazHeLl5a871SV7e+gfp8tZM/dH0X1TM97r53Rc9dOfSkw+en5u33NdtHvqfWtbGCvPQheXNuXnExv7cL56bRzTyrIXlibntb+SJC8vTc76mbcrTF5ZH5/ZPI49unQf49PHZTGOu+HEeIDd+Yx6gj3nur2Yrnbo8t2C+LrOxuNrtfN1i34eSzaOrJQPLW/ezNS8e6U8enf7z2cXKo9+XUz7fPHq07UFjv2pO3zy6tVweDQC8UsX8P17G1fL/wRAeixWG44OFfc+emxf06bo9+/tAGvGfWJS8cjZ+n77/Lc77FjtvXey8frHnJc70738Xe15orPYLPBdrnuxlu991UfLif2486jovTjcqLwYA4HQW8/+Y5sfv/x/L1FtoftKWvw3ULyFn85MzLz9vrncG5+fXhFOVnw+eyfn5mT7/tbj3ybyy8v9ZPX4v/tLMGZn/f/lI3jPN+X+tzfJ/AIAzUsz/4z97jL//77+m69nfW99lnn5f9nZe36P7Hj3I07vI0/s8zxbjN98HcAbPA5QXPg8wfMrvjx+erX9mzAPM9z4AkwEAAKe7gbNW1HL77L+z/0C6zP47+7x/l39tTv1uVdLL4xv27p6evm7fri1Te6ev23nzluk9192ye9vevdONa+eF5Y25eUuaNw6EStofnetl87YV6e9DWFH/fQhtr8rWjxXOqz1o/30I2QDDBb9HYKCW6Xbf3rzjV5qjfqfxkXe88+L/UU79qHH8b/zjS6/buue6bTu37d02tX3bgenWemO1f0nd/d/NjN9TzuvvpWZ+tCnN/+93xsOzsHaU2toxkPZH3t9nTzLtWJm2ZGXe3z/Iafe3//tf/MlFM7/8QgiTrym/bkH9l2yY+c/XTP/B3mPf31Vtf2nO9jdqpu0q+nul2fpxfyrbb96z9w1bb963M/sXJXsT5zNKjfVFuq8hffuXu5yf2JxTXjA/cXs2aLntwemp6/kJAABaxO//4/Vs/P7wU+kFVCwvzNN31ust9Pvj3Dx9srs8Pft3yTJ5emH9uL/d5ulDC8zTs9svytM71e+Up+fl3Xnx/zCn/nx1P056uM+jkvbDlw7tyx0n13c3TrJ/z6BonGTrz3ecJAscJ9ntF42TTvU7jZO8454X/7059fMUjYdKYzws7L6c3PHwye7Gw29k1ovGQ7b+fMdDaYHjIbv9ovHQqX6n8ZB3fNvjt04Q9Gf+tzowauNi+rpbbt794aZ6i/33L0L7LRndtG/J7GsX9+9/9Kr7/l3c+74W3v4QNtRK8tofvx9YMq/2d3tf2cLbX9T/87ivbHlou68st/1PLGwmrPv2z+u+xDvic93+fZeMvOrtrz9V87XpsCu6/6xoHndTTvl8fw/rkrYHpyfzuPDyifl/vJqL+f/d6bLfXwOd+X8nrYf77+M52N8xy+//Lq9jXnWf59mv3H2eAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwiDFZW15bH7tpz8j3n/t63/3z6xdt//x923PHrH/niTydu/J1vPTDyuZeObrlg6w9/96wbH/rQVUfu/ZtHX1j2tV89XRh4rPazckm6OhRC8mwSwtA3TvzlR49+55xqWRJCKCdjB0NYmax6dGWSiTD5ixDClkY7W5/86ouXba0u77h7sKV8RSZIdr/CaDm2p7mdIdxauEecgYbScXbg5C1vCD96x6Y7v7fmK18eOPzMwdkqyVDTeAph+fXNrx8IIQyn/1fF0bY6vjhdbgwhjDS97s0F7Xp9l+1fl7N+Xrpcki5HC+LE5y/MrJcy9bLr0UBm2bSvwwWb7kleO3qtV2RpZj17MlqovHbG8pXp8uvp8pK5gnXo8XL8PwmlJFQazd+ezI6R0HTckpDUjuVQY73UOLYh3f/MepJZL2XWywOZ/aptNx1o5SRpLY/1MuXxdFxJyy9oPld38L6c8temy6H0jfpSXA/ZB3WjbQ8a+1UT23Vijrak/mPn4krxK7tQajoHdSpvHPj0YIymZaPJqrbXzHQQnzu66Z615c3fPDaW047kgSSNn/QU/8B3Vy794JcO7VudF//6Uhq/1FP8H199/LlrD332M7nxPxnjl3uKf+nDI89e/dhdF+b2z4nYP5We4k89/fjH15x9w+Hc9t8X4w/1FH/DkeODy04+/Ehu+ydj/wz3FP+pt73zJ1948sFncuOHGH+kp/ibj+z6xOD4yYtz4z8S+2e0t/Hz/OErfzA+/rOJvPhPxPjLeor/+YP3vvX+FXdflXt8N8b+Gesp/rsveujOpScfPD/v3Jnc169PToBXp7PSa6yPpeu95pkL1ZQv/PVEpX7NtzT9f1k/N5RR3c7yRYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAr0z/ddvkHrnn7ezdVkhCSWslMkq0z00F8rrxkw4aJHrY79fTjH19z9g2Hm8tW97YLAAAAQIGYh5caJUNhdbglGQ7ndawfJwfOi2tJa3l28iDGyc4R9Bqn1CFOqYc45T61p9KnOAN9irOkT3EG+xRnqCBO9fk3dhFneI44leoI6LI9I3O2p/s4o32Ks7RPcZZlQvQaZ3mf2rOiT3HG5ozT/Thc2ac4q/oU56w+xTl74XFqb/XX9Kk9v9anOOf0KU52Tnm+43BZWvPcvDi1B+XCOJWk3Hii03z6Oel2zl/gdkYLtrOs6PO4y+0Md7md12deV5rndoa63M7lC9xO0uV2fmOB2ykVbCeO21uz7YvbiWtdjv/9fYpzoE9xPtKnOLf1Kc6f9inOn/Upzu2h9eJ0vnEAuhXz/9l8bywMVn4rjKRnnOwsQMx319R+tn/e5Z2QYrzXZcqXFMXLJuqZeGvm277sBEJrvLZnB1riVRr5yBzxhprbtzbz5Fz7+7YNndvWHO+STPngHPFadgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAToF/uu3yD1zz9vduCkmo/tfRTAfxufKSDRsmWqsPdbPdo5vuWVve/M1jzWWDlZ52AQAAACgQ8/CBRslQGKysD4PJkpZ6Q+k8QEzuy2P15fjysLG6TCZKtfWRZOWcr6ukr1u3d8eudXv2H3jjth1TN03fNL3zLesvX3/l5BVXXrFu67bt05P1nyEMdoxXbi6qTT/s2X/gw1Pbt0/v3lMvzLZ/ddqO1el6kr5u/E1hsrq8I23/qoL2l9q2t384PjjQ5wdFxw4AAAAAAAAAAIB/Zdd+QySt6wCAf5+Z2Zlx9XLDf+PhncN5ipWVXmtoiftAkOGfw0WIWWuTI0+SVu/QOzGb9CA1pQiUg+PCF12YpElv/JMS+YcDwyyhvY5QKV/Ui0LLUPFFKBO7O8/82xlnm+z2tM/nxTzPfH/f3+/7+z0cB99nFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQ22+Pjlbm5qeGU8ikgE5jT6ysXwxTasj1P3y49u/X1r/1umdsVJhhIUAAACAobI+fKwVKUepkI98nLj4bUN0DES77wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7/zNcnZ2tT0zNHJhHJgJxGH9lYvpim1RHqvvzGg59+Yf36v3bGKiOsAwAAAAyX9eG5VqQclTglxpITFzr/VjR7N7C2Z/5SXlu2zroV5vW+OxiUd8oK805bYd5HhuRtbl5vDAAAAHj/y/r/QisyEaXCmmX9cNb/D+vrs7yTe/LyzWu1M+ldFVeSBAAAAKxA1v+XWpFKlAqVVr++0n5/Qzu0+NN5Nn/Y7/bZ/FN78rL5w37Pv6R59Ts9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx/zNcnZ2tT0zP5JCIZkNPoIxvLF9O0OkLdTU+M//2i/bdt6IyVCiMsBAAAAAyV9eHt1rscpcJ4jMWRi33/+gvuefiLDz86GRFLbX6xGDdu2bHjuk0Ln7Epyzvruf1j33vm1W8tyztr6XPVDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxn5uuTs7Wp6ZkjkohkQE6jj2wsX0zT6gh1X/rs5/98/8HHXumMVUZYBwAAABgu68PbvX85KlGMYhy/+K2z11+Q65k/6J0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MFx/Tdu+vqWubmt17lZnZtGPuIw2MZ/eZP9c1rFbRSbWzgMnsZ7cVNe7W2s3v9JAADA/8bJkUTjP3TCpau9awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HAwX5+crU1Nz5STiGRATiNTageysXwxTasj1E0ff7605q0nnuqMVUZYBwAAABgu68PbvX85KjEWY3Hc4rd+7wQaC/3/xCHcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBYma9PztampmfWJBHJgJxGH9lYvpim1RHq3rdr72fuPfq7F3bGSoURFgIAAACGyvrwYitSjlLho1GKk5rf57onJPnmtf97gfa87V3Txlc8r941L/9u85JCRGveHT0nKzRPszSvnK03sXRt1au25+Wa86od8yrRKl9tzVt8WLu7qq0Zcr7lTx4AAAAOnaz/L7UiE1EqlDr6/580r0c0r4P63Nyh3TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcNiZr0/O1qamZ5IkIhmQ0+gjG8sX07Q6Qt2bfvPho77y0zt3dsYqI6wDAAAADJf14e3evxyVWBcfinWLfX9MdOdnef+ovX3v3f/8y+kRZx5/YP0Xepf9YXbzq5fOf7L3IyLXnZ2LOLpZLxlQ79e/u/uGjY23748487j8SYWB5+lfr3vJtPFIbeslO545sH3IwwEAAIAPiKz/H2tFJqJUuHZg/5913t39/5B+/Ogbdv382OZnsyPvmZGbaNbLDaj3uY0P/unUc/726kL/v7zex1t3n9x7zb3HdhVcivRI0sbUNTs3Hzh7Xy479VL9fE/97Ll86Zuv/OuqG+96e6l+OcrN+NqerSxV6/y8uc9TSSJtzOX2zFz8zp56d/3CgPPf9tunDv5y7Z1vLtR/4+TxVv3Tol/9pZMXOnbR44i0MX7Z7bvP3bt/c3f9iKj2q//amxfGCX+4+tbe84/Hwa6FO59852fvA0gbz214fd8591TO666f9NTPnv/PDt63+8d3fefRrH72tyKnnxIrrJ/rqf/sHcfsevqWS9d2188NOP+Tl7+wflv127/vPf+VXasWBu5i+fkfOOOhK17ckvb75wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPABMl+fnK1NTc/kkohkQE6jj2wsX0zT6gh1X77o+dcuv/NHP+iMVUZYBwAAABgu68PbvX85KlGMYowv9v2P1LZesuOZA9tjYmk0aV4Lc9uu3/Gxq7btvPbKVdo5AAAAsFIvX5Qs9v+FVmQiSoWNMdbs/6eu2bn5wNn7cln/n1u4JhFx1dVzW8+MVt6zdxyz6+lbLl3bek8QsfhnAeWFvE+18y44//mJ1//4tVP75m1q5z234fV959xTOS/Li868s6L1fuKBMx664sUt6c2t/XXmfeKr2+aaryeydccvu333uXv3b85l7zGa1/HmulneXG7PzMXv7KnnJqK0MJ5v5pWb5wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlpuvT87WpqZnIh+RDMhpdGoGsrF8MU2rI9S9eOMvbj3qrcfWdcZKhREWAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s0OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9usnNI4qjgP4e7uJ2WSTNmkFo2KaVkWphxYFEb2oqEgrUvBUKVJt7UEUBBGlHkylFUtVvAhWL0VUUKMUKthYLK2Siv+KFw8qKFQPQikGNEvxoJLNm81mspPEjT1YPh9Y3r43M9/5zczbt7sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC/0tUxWG9P7Hmsdvclt3/xzIOTT9/50SO7rnrqnV+Gt936+cGeN8+Ob1+94/vbVm478tCGsf2vHf+j74O/Ti0Y/OR0szZ1KyHEMzGEyscTLz87/uVFU2MxhFCO/SMhDMQVxwdiLmH9nyGE7Y06Z288NHndjql2176uWePLcyH56wrVclbPtP7Z9XJ+qaR5trP2xDXhx1s27/561fvvdY6eHpnZJU7tU07zKYRlW5uP7wwhdKfXlGy2DWYHp3ZTCKGn6bgbFqjr8kXWvy6EWq5fd2lqL0htdYGcbPuaXL+U2y/fz3Tm2p75T7NkRXUsuF93e+frzfXzi9FSNepc13p8ILUfpnbtv8wvZ68YSjF0NMp/OM7MkdD03GKI9WdZafRLjWcb0vXn+jHXL+X65c7cddXPm2ZEOcbZ49l+ufFsOe5I46ub1+oW7ikYvzi1lfRBPZv1Q/7NtOqcN43rqsvqmsidp2Oe2s6FUtMa1Gq88eDTw6imsWpcMeeYv1vIto1vfv7K8pZPTvQX1BEPxpQf28rf+dVA733v7n18sCh/aynll9rK/2njyd/u3fv6q4X5L2X55bbyrz3ac2bjp3vWFN6fiZkVZDH5MfWzbfef+uyFVRc+MNrqWdczD2T3v9JW/TePnezqqx09Vlj/+uz+dLeV/8NNd/z89reHTxfmhyy/p638LWOPvtg1VLu6MP/Y9EehWp+hbcyf30ev/25o6Nfhovxvsvvf1yI/zpdf/2nw1sj+G99Yvm9D4fzclN2f/pQ/94ttvvrvuuLI7t7a4cuK1s54YLHfsAC0sjL9xnou9Rf6n3lostTyf+ZSNf1feGW4Y/obqDe9+v7LE+VMnWfZOcwHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiHHTggAQAAABD0/3U7AgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqQAAAP//e/AHqQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404})

257.381498ms ago: executing program 2 (id=1020):
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$revoke(0x3, r0)
keyctl$read(0xb, r0, 0x0, 0x0)

256.988264ms ago: executing program 0 (id=1021):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003300004000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000ff0200000000000000000000000000010000000032ffec0000000000fe8000000000000000000000000000000000000001"], 0x13c}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

150.924204ms ago: executing program 0 (id=1022):
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff46ca9fbf7abae19cbb08004502005c00000000002f907800000000e0000001248081000000000010000800000086dd00090006080088be"], 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69)

150.625073ms ago: executing program 2 (id=1023):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0)
utimensat(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0)

80.616048ms ago: executing program 2 (id=1024):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8948, &(0x7f0000000180)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}})

80.368627ms ago: executing program 0 (id=1025):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = epoll_create1(0x80000)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60000021})
epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x1)

362.015µs ago: executing program 2 (id=1026):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c726573765f6c6576656c3d30303030303030303030303030303030303030302c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c646174613d77726974656261636b2c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00149e0cb4c679a55808f10855fc0d9b9d7241cc60c5c0b35a9ce6bd73d50a863d736b7f64cdbf2582b25c868128f5a0c3ca71ea7a85f79743e17bbb3291a3c43eb49fcfcab9a806f939773a5895370494ec438f24b77c23cb13a0c7c11503d4e4a25d5e8142cc163f75ca2557bc5b3dd2856dbf2f4fbffb092b1a8d3f410d0daefab8a2f41a23713a02fa9349bc76bc637fe28f733ee38a6de0e2174f54e7f4ebc705a06c4b7d76bcc94f8985dbf4791afe238c9f24f48c0f98d3898ad1f3597c15fdc241ce161617ca162b1d4a17900f12843677d372e706"], 0x1, 0x443b, &(0x7f0000010200)="$eJzs3c9PXNUeAPBzL7SFvrYP+rroS17yJnlNnlFDoCuVGimlpdBiTbWNcTMdYNqiA9PAYFx0gbsmrkxcGBeNJu5YNSzc1j/Bjcu6bqILNyYmjZiZuQPcy0wYGwYk/XwW3Lnn1z0z33vPPXdxOXGicnduKTe3lCss5Mozt5fO5j4ul5bniyHeI02Pf2jvjk97OnGe7Pe59yK7duHSuzfPhvD97I9P19fX10NVd2hqaMvn3369P7N12xBn6lTbbd7abvkghHAq+Xw41Z+uEML734UQhRDOJ2mjybY3hHA81PNu3v/sVm6XevPoSfFc/tnUg7XhM5OrD9daf/cohK9K/371zvzP/+sa/unldA4AAAAAAAAAAAAAAAAAAC+q8evXbrwzOBQeR6F7Ndr+vu54sm31fuz6rvlv578sAAAAAAAAAAAAAAAAAAAA/E1tvv+fi042ef9/LNmOtKi//lbn+0jnTLx9bezi4FCy/vv2pcdfS5J+Od8V+pus+55d//18pn7z9d93b4nzRv8ax+0LUTyQ2o/jgYEQvkkWfj8dHY1L5aXKK7fLywuzu9aNAysd//rq/anoJAv6txv/0Uz7nV///1/bzqbq/i2r6LclHf+uluW+/TRqK/4XMvX2Iv7P6dDu9uNgSse/u5bWu7XASH0AqMb/8+6d4z+Wab9T8T8RQshF1b7mUiNAdQ5TTW81XyEtHf/6JZEaOpMfstX1/3sm/hcz7e/X+L+SvRHRVDr+h2tpPakSm9d/f7zz9X8p0/5+xL/a/xX3/7ak43+kntidKlL7Jdsd/8cz7Xcq/jfipJ8notQZsBrV01v9vzrS0vHv2Za/+fwXtzX/u5ypv1fPf7XjvlndqT//NYb/l6L68x/NpePf27Jcu9f/RKZep8f/kdr8j+eVjv/RWlp67txX+9tu/Ccz7Xcq/rVZSU8j/pvjyR9H6ulfp+Z/HvVaScf/H/XEeGuJldrf2vwv2nn+fyXT/n7M/6r9X4lb14h29Q50sKXjf6xluWr8f2jj/n81U6/z8Q9hUDCfWzr+x1uWq13/PTvHfypTr9Px/38nGwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AEaTbV+I4oHUfhwPDIRwIdk/HY5G04XZ/HSpPPPRUghjSXounIzulMrThVJ+bqE8W8wXSqXyTAgXk/xToSdaKpUr+fnCvUsbbfVGd4uFxcp0sVAJIYwn6f8JxxttTc9V5gv3QgiXN/L+GZcX790tLORn5xbfGBwcHAwTG33oj4qfVIoLlfrR67khTG7U7Yu2dK6WfWWjL8eiD8vLiwuFUi396pY6pfJMobSlzlSS90XojyqLywszhUoxXyrfaRxvP40k27GJ6+9dvzq0Lf9WVN+O7m23AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLHg+//mUIobu+F4cQRhofomblHz0pnss/m3qwNnxmcvXh2tNW5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi4dozQQRGEAfjMWaucxrJbdznZFES1cETyBHsPD6FG8hHdIkSJtihBIZiFsdmGbpPq+5sH8zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgnqf37uOtbiJSXG0uI/6+/heH+UupP/fj9y/OMCOn8/zaPTzWTfn3dJTflaNlm3fpevX9GSO19zvYk+E+7fV9rifnmtq3qfn6vjeRchURbclvU85VNe8tAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W0fRtwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//6vAfUQ==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000001c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

0s ago: executing program 0 (id=1027):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$xdp(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="22613fdba0da05ae867cac56aab11ac819a18aa6c99d7fdee052ea631826c069d9fb7bfb1240a1b5f513daa7ab849014b47dea4039bc6b7006dc77e7d301078cd285f43e95002dab5758ce7e643c117ec7f7f7de04bd2940d7ee88f32c19d3fc098c6338fc038ff837a00b9dd4174284a1408ba88cb80fdb68c80e92dea7e1ab", 0x80}], 0x1, 0x0, 0x0, 0x20000010}, 0x840)
recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1401, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x400c4)

kernel console output (not intermixed with test programs):

84.531411][  T972] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   84.660798][ T6290] loop0: detected capacity change from 0 to 2048
[   84.679525][  T972] usb 2-1: Using ep0 maxpacket: 8
[   84.685938][ T6290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.686858][  T972] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[   84.694925][  T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.698209][  T972] usb 2-1: Product: syz
[   84.700730][  T972] usb 2-1: Manufacturer: syz
[   84.702605][  T972] usb 2-1: SerialNumber: syz
[   84.705887][   T33] audit: type=1800 audit(1755547208.031:2): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.215" name="file1" dev="loop0" ino=15 res=0 errno=0
[   84.708701][  T972] usb 2-1: config 0 descriptor??
[   84.725518][ T6289] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   84.736219][  T972] gspca_main: sq905-2.14.0 probing 2770:9120
[   84.741084][   T33] audit: type=1800 audit(1755547208.041:3): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.215" name="file1" dev="loop0" ino=15 res=0 errno=0
[   84.750862][ T6290] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   84.757156][ T6290] EXT4-fs (loop0): This should not happen!! Data will be lost
[   84.757156][ T6290] 
[   84.763201][ T6290] EXT4-fs (loop0): Total free blocks count 0
[   84.765690][ T6290] EXT4-fs (loop0): Free/Dirty block details
[   84.769065][ T6290] EXT4-fs (loop0): free_blocks=4096
[   84.771303][ T6290] EXT4-fs (loop0): dirty_blocks=16
[   84.773674][ T6290] EXT4-fs (loop0): Block reservation details
[   84.775968][ T6290] EXT4-fs (loop0): i_reserved_data_blocks=1
[   84.807456][   T26] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   84.951779][ T6297] loop0: detected capacity change from 0 to 1024
[   84.959073][ T6297] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data
[   85.249473][  T972] gspca_sq905: sq905_command: usb_control_msg failed (-110)
[   85.252771][  T972] sq905 2-1:0.0: probe with driver sq905 failed with error -110
[   85.993341][ T6304] loop0: detected capacity change from 0 to 2048
[   86.018014][ T6304] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   86.020744][ T6280] udevd[6280]: incorrect nilfs2 checksum on /dev/loop0
[   86.097308][ T6280] udevd[6280]: incorrect nilfs2 checksum on /dev/loop0
[   86.107469][ T6305] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.230502][ T6304] kAFS: unable to lookup cell '̅?ۛkմ]-״8ވ>~OC1sߘi?Ϯaya<C'
[   86.496034][ T6311] loop2: detected capacity change from 0 to 1024
[   86.597635][ T6313] loop0: detected capacity change from 0 to 128
[   86.631346][ T6313] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.637251][ T6313] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.747428][ T5968] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.863036][ T6319] loop0: detected capacity change from 0 to 4096
[   87.122231][  T972] usb 2-1: USB disconnect, device number 2
[   87.157564][ T6323] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   87.206392][ T6325] netlink: 'syz.1.227': attribute type 21 has an invalid length.
[   88.477980][ T6373] loop0: detected capacity change from 0 to 2048
[   88.496805][ T6373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.809409][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   89.825429][ T6400] loop0: detected capacity change from 0 to 4096
[   89.870831][   T33] audit: type=1800 audit(1755547213.201:4): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.259" name="file1" dev="loop0" ino=30 res=0 errno=0
[   89.976254][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   89.989570][   T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[   89.993281][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.002011][   T10] usb 2-1: config 0 descriptor??
[   90.464987][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.467802][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.471869][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.474628][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.477273][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.481445][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.484341][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.487714][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.490314][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.492768][   T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0
[   90.503628][   T10] elecom 0003:056E:00E6.0002: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0
[   90.651932][   T10] usb 2-1: USB disconnect, device number 3
[   90.670141][   T95] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   90.832878][   T95] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.843197][   T95] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   90.848480][   T95] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   90.853679][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   90.856664][   T95] usb 1-1: SerialNumber: syz
[   90.882407][ T6411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'.
[   90.889487][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'.
[   90.898692][ T6411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'.
[   90.903499][ T6411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.264'.
[   91.085661][   T95] usb 1-1: 0:2 : does not exist
[   91.110595][   T95] usb 1-1: USB disconnect, device number 3
[   91.142167][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.595193][ T6427] ptrace attach of "/syz-executor exec"[6429] was attempted by "/syz-executor exec"[6427]
[   91.684600][ T6432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.273'.
[   91.820613][ T6434] netlink: 'syz.1.274': attribute type 8 has an invalid length.
[   92.685318][ T6031] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   92.841191][ T6031] usb 3-1: Using ep0 maxpacket: 8
[   92.857236][ T6031] usb 3-1: config 0 has no interfaces?
[   92.867129][ T6031] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[   92.883373][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.909014][ T6031] usb 3-1: config 0 descriptor??
[   93.184687][ T6031] usb 3-1: USB disconnect, device number 3
[   93.503826][ T6469] loop1: detected capacity change from 0 to 256
[   93.530463][ T6469] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   94.245489][ T6479] loop0: detected capacity change from 0 to 32768
[   94.297536][ T6479] (syz.0.295,6479,0):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[   94.306305][ T6479] (syz.0.295,6479,0):ocfs2_fill_super:1177 ERROR: status = -22
[   94.845515][   T33] audit: type=1326 audit(1755547218.171:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7ffc0000
[   94.847619][ T6506] syz.1.307 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   94.852716][   T33] audit: type=1326 audit(1755547218.171:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7ffc0000
[   94.852744][   T33] audit: type=1326 audit(1755547218.171:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.307" exe="/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f49b358ebe9 code=0x7ffc0000
[   94.877322][   T33] audit: type=1326 audit(1755547218.211:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.307" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7ffc0000
[   95.040226][ T6003] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.194796][ T6003] usb 3-1: unable to get BOS descriptor or descriptor too short
[   95.200942][ T6003] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 157, changing to 11
[   95.205392][ T6003] usb 3-1: config 1 interface 0 has no altsetting 0
[   95.211683][ T6003] usb 3-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[   95.215117][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.218054][ T6003] usb 3-1: Product: syz
[   95.219971][ T6003] usb 3-1: Manufacturer: syz
[   95.221979][ T6003] usb 3-1: SerialNumber: syz
[   95.410915][ T6031] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.463477][ T6003] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input4
[   95.483618][ T5278] bcm5974 3-1:1.0: could not read from device
[   95.493720][ T5278] bcm5974 3-1:1.0: could not read from device
[   95.504258][ T5278] bcm5974 3-1:1.0: could not read from device
[   95.506148][ T6003] usb 3-1: USB disconnect, device number 4
[   95.566144][ T6031] usb 2-1: Using ep0 maxpacket: 8
[   95.574915][ T6031] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.585251][ T6031] usb 2-1: config 0 has no interfaces?
[   95.593417][ T6031] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[   95.597018][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.600883][ T6031] usb 2-1: Product: syz
[   95.602484][ T6031] usb 2-1: Manufacturer: syz
[   95.604206][ T6031] usb 2-1: SerialNumber: syz
[   95.608894][ T6031] usb 2-1: config 0 descriptor??
[   95.809345][  T972] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   95.841664][ T6003] usb 2-1: USB disconnect, device number 4
[   95.965306][  T972] usb 1-1: unable to get BOS descriptor or descriptor too short
[   95.970942][  T972] usb 1-1: config 176 has an invalid interface number: 122 but max is 0
[   95.987879][  T972] usb 1-1: config 176 has no interface number 0
[   95.998594][  T972] usb 1-1: config 176 interface 122 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   96.003439][  T972] usb 1-1: config 176 interface 122 has no altsetting 0
[   96.008917][  T972] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[   96.014498][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.018918][  T972] usb 1-1: Product: syz
[   96.021769][  T972] usb 1-1: Manufacturer: syz
[   96.023571][  T972] usb 1-1: SerialNumber: syz
[   96.253659][  T972] radioshark2 1-1:176.122: Invalid radioSHARK2 device
[   96.256323][  T972] radioshark2 1-1:176.122: probe with driver radioshark2 failed with error -22
[   96.272108][  T972] usbhid 1-1:176.122: couldn't find an input interrupt endpoint
[   96.283344][  T972] usb 1-1: USB disconnect, device number 4
[   97.452891][ T6548] loop0: detected capacity change from 0 to 8
[   97.746826][ T6556] loop0: detected capacity change from 0 to 4096
[   97.779849][ T6556] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   98.012443][ T6556] ntfs3(loop0): ino=19, mi_enum_attr
[   98.026718][ T6556] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   98.084720][ T6556] ntfs3(loop0): failed to convert "c46c" to cp862
[   98.097098][ T6556] ntfs3(loop0): ino=20, mi_enum_attr
[   98.268248][ T6570] loop0: detected capacity change from 0 to 512
[   98.274687][ T6570] EXT4-fs: Ignoring removed bh option
[   98.283355][ T6570] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   98.296234][ T6570] EXT4-fs (loop0): 1 truncate cleaned up
[   98.302546][ T6570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.335704][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.380017][ T6574] warning: `syz.0.338' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.469329][  T972] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   98.629310][  T972] usb 3-1: Using ep0 maxpacket: 16
[   98.660537][  T972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.664531][  T972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.672936][  T972] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[   98.676070][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.686126][  T972] usb 3-1: Product: syz
[   98.687753][  T972] usb 3-1: Manufacturer: syz
[   98.689914][  T972] usb 3-1: SerialNumber: syz
[   98.720316][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'.
[   98.723970][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[   99.390648][  T972] usb 3-1: 0:2 : does not exist
[   99.399661][  T972] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   99.417781][  T972] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[   99.444823][  T972] usb 3-1: USB disconnect, device number 5
[   99.462216][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.736068][ T6618] loop1: detected capacity change from 0 to 256
[   99.772282][ T6620] loop0: detected capacity change from 0 to 2048
[   99.784478][ T6620] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   99.805800][ T6620] NILFS (loop0): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[   99.969319][  T972] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  100.137168][  T972] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64
[  100.152963][  T972] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 32
[  100.156593][  T972] usb 3-1: config 1 interface 0 has no altsetting 0
[  100.181254][  T972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  100.185523][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.188739][  T972] usb 3-1: Product: syz
[  100.191333][  T972] usb 3-1: Manufacturer: syz
[  100.193215][  T972] usb 3-1: SerialNumber: syz
[  100.206788][ T6614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  100.210214][ T6614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  100.430456][ T6031] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  100.601480][ T6031] usb 1-1: config index 0 descriptor too short (expected 539, got 27)
[  100.604295][ T6031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4
[  100.607667][ T6031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 15692, setting to 1023
[  100.640691][ T6031] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  100.647065][ T6031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.661303][ T6031] usb 1-1: Product: syz
[  100.662738][ T6031] usb 1-1: Manufacturer: syz
[  100.664539][ T6031] usb 1-1: SerialNumber: syz
[  100.686635][ T6031] usb 1-1: config 0 descriptor??
[  100.702420][ T6031] hub 1-1:0.0: bad descriptor, ignoring hub
[  100.711275][ T6031] hub 1-1:0.0: probe with driver hub failed with error -5
[  100.732627][ T6031] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[  100.753304][ T6031] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  100.777378][ T6031] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -22
[  101.019565][ T6031] usb 1-1: USB disconnect, device number 5
[  101.071619][  T972] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  101.104320][  T972] usb 3-1: USB disconnect, device number 6
[  101.169094][ T6642] loop1: detected capacity change from 0 to 128
[  101.173395][ T6642] msdos: Unexpected value for 'dots'
[  101.363331][ T6648] tc_dump_action: action bad kind
[  101.435581][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'.
[  101.469529][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'.
[  101.487608][ T6640] loop2: detected capacity change from 0 to 32768
[  101.564686][ T6640] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  101.655693][ T6659] tipc: Started in network mode
[  101.657807][ T6659] tipc: Node identity 9e2b7bd631d4, cluster identity 4711
[  101.664178][ T5972] ocfs2: Unmounting device (7,2) on (node local)
[  101.682824][ T6659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.693377][ T6659] syzkaller0: entered promiscuous mode
[  101.701028][ T6659] syzkaller0: entered allmulticast mode
[  101.755121][ T6659] tipc: Resetting bearer <eth:syzkaller0>
[  101.771696][ T6657] tipc: Resetting bearer <eth:syzkaller0>
[  101.810613][ T6657] tipc: Disabling bearer <eth:syzkaller0>
[  101.980391][ T6660] loop1: detected capacity change from 0 to 32768
[  101.992583][ T6660] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  102.054693][ T5974] ocfs2: Unmounting device (7,1) on (node local)
[  102.171959][ T6675] bond0: entered allmulticast mode
[  102.184650][ T6675] bond_slave_0: entered allmulticast mode
[  102.187521][ T6675] bond_slave_1: entered allmulticast mode
[  102.219227][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.251400][ T6679] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  102.370877][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  102.375080][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.380267][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  102.384231][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.389893][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.392655][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.397371][   T10] usb 1-1: config 0 descriptor??
[  102.519405][ T6031] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.679221][ T6031] usb 2-1: Using ep0 maxpacket: 16
[  102.688581][ T6031] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  102.692545][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  102.699174][ T6031] usb 2-1: Product: syz
[  102.701134][ T6031] usb 2-1: Manufacturer: syz
[  102.703135][ T6031] usb 2-1: SerialNumber: syz
[  102.710993][ T6031] usb 2-1: config 0 descriptor??
[  102.821261][   T10] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max
[  102.854221][   T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  102.936734][   T10] usb 2-1: USB disconnect, device number 5
[  103.388642][ T6695] loop2: detected capacity change from 0 to 32768
[  103.392272][ T6695] XFS: noikeep mount option is deprecated.
[  103.428998][ T6695] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.470571][ T6695] XFS (loop2): Ending clean mount
[  103.507802][ T6695] XFS (loop2): Quotacheck needed: Please wait.
[  103.525480][ T6705] loop1: detected capacity change from 0 to 1024
[  103.536472][ T6705] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  103.541920][ T6705] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  103.547346][ T6705] JBD2: no valid journal superblock found
[  103.553353][ T6705] EXT4-fs (loop1): Could not load journal inode
[  103.571900][ T6695] XFS (loop2): Quotacheck: Done.
[  103.662131][   T33] audit: type=1800 audit(1755547226.991:9): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.392" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  103.768527][ T5972] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.165193][ T6709] loop1: detected capacity change from 0 to 40427
[  104.193485][ T6709] F2FS-fs (loop1): invalid crc value
[  104.258511][ T6709] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  104.273861][ T6709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  104.310094][ T6709] syz.1.395: attempt to access beyond end of device
[  104.310094][ T6709] loop1: rw=2049, sector=53248, nr_sectors = 136 limit=40427
[  104.317080][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[  104.322437][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.399'.
[  104.368278][ T5974] syz-executor: attempt to access beyond end of device
[  104.368278][ T5974] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.381168][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  104.381191][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.381200][ T5974] Call Trace:
[  104.381219][ T5974]  <TASK>
[  104.381235][ T5974]  dump_stack_lvl+0x189/0x250
[  104.381269][ T5974]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.381282][ T5974]  ? __pfx_queue_work_on+0x10/0x10
[  104.381291][ T5974]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  104.381303][ T5974]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.381319][ T5974]  f2fs_handle_critical_error+0x37c/0x540
[  104.381335][ T5974]  f2fs_write_end_io+0x886/0xb60
[  104.381352][ T5974]  __submit_merged_bio+0x27a/0x6a0
[  104.381367][ T5974]  __submit_merged_write_cond+0x255/0x530
[  104.381381][ T5974]  f2fs_write_data_pages+0x261d/0x3000
[  104.381422][ T5974]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.381480][ T5974]  ? check_path+0x21/0x40
[  104.381493][ T5974]  ? check_noncircular+0xe0/0x160
[  104.381542][ T5974]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  104.381554][ T5974]  do_writepages+0x32e/0x550
[  104.381572][ T5974]  ? do_raw_spin_unlock+0x4d/0x240
[  104.381584][ T5974]  filemap_fdatawrite+0x199/0x240
[  104.381597][ T5974]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  104.381631][ T5974]  ? do_raw_spin_unlock+0x4d/0x240
[  104.381643][ T5974]  f2fs_sync_dirty_inodes+0x31f/0x830
[  104.381659][ T5974]  f2fs_write_checkpoint+0x95a/0x1df0
[  104.381680][ T5974]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  104.381737][ T5974]  ? kill_f2fs_super+0x298/0x6c0
[  104.381751][ T5974]  kill_f2fs_super+0x2c3/0x6c0
[  104.381762][ T5974]  ? __pfx_kill_f2fs_super+0x10/0x10
[  104.381769][ T5974]  ? radix_tree_delete_item+0x2b6/0x400
[  104.381784][ T5974]  ? shrinker_free+0x2ce/0x3e0
[  104.381795][ T5974]  deactivate_locked_super+0xbc/0x130
[  104.381807][ T5974]  cleanup_mnt+0x425/0x4c0
[  104.381817][ T5974]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.381832][ T5974]  task_work_run+0x1d4/0x260
[  104.381851][ T5974]  ? __pfx_task_work_run+0x10/0x10
[  104.381862][ T5974]  ? __x64_sys_umount+0x122/0x160
[  104.381883][ T5974]  ? exit_to_user_mode_loop+0x40/0x110
[  104.381902][ T5974]  exit_to_user_mode_loop+0xec/0x110
[  104.381913][ T5974]  do_syscall_64+0x2bd/0x3b0
[  104.381925][ T5974]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.381936][ T5974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.381949][ T5974]  ? exc_page_fault+0x9f/0xf0
[  104.381966][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.381978][ T5974] RIP: 0033:0x7f49b358ff17
[  104.381992][ T5974] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  104.382003][ T5974] RSP: 002b:00007ffc419a7428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  104.382019][ T5974] RAX: 0000000000000000 RBX: 00007f49b3611c05 RCX: 00007f49b358ff17
[  104.382024][ T5974] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc419a74e0
[  104.382029][ T5974] RBP: 00007ffc419a74e0 R08: 0000000000000000 R09: 0000000000000000
[  104.382034][ T5974] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc419a8570
[  104.382042][ T5974] R13: 00007f49b3611c05 R14: 0000000000019728 R15: 00007ffc419a85b0
[  104.382066][ T5974]  </TASK>
[  104.382072][ T5974] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.717906][ T6727] loop0: detected capacity change from 0 to 1024
[  104.770281][   T26] hfsplus: b-tree write err: -5, ino 4
[  104.791192][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  104.917076][ T6017] usb 1-1: USB disconnect, device number 6
[  104.949910][ T6737] loop1: detected capacity change from 0 to 512
[  104.962755][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.966740][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.969438][ T6737] EXT4-fs (loop1): Test dummy encryption mode enabled
[  104.972827][   T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  104.974456][ T6737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  104.975862][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  104.995313][   T24] usb 3-1: SerialNumber: syz
[  105.000304][ T6737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  105.008127][ T6737] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.406: bad orphan inode 131083
[  105.031384][ T6737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.081471][ T6743] tmpfs: Bad value for 'mpol'
[  105.142137][ T6737] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  105.192549][ T5974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.242480][   T24] usb 3-1: 0:2 : does not exist
[  105.244358][   T24] usb 3-1: unit 255 not found!
[  105.271315][   T24] usb 3-1: USB disconnect, device number 7
[  105.299628][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.418539][ T6748] loop0: detected capacity change from 0 to 32768
[  105.452540][ T6750] loop1: detected capacity change from 0 to 32768
[  105.454373][ T6748] JBD2: Ignoring recovery information on journal
[  105.475106][ T6750] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  105.500511][ T6748] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  105.502236][ T6750] XFS (loop1): Ending clean mount
[  105.528806][ T6748] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  105.528865][ T6748] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  105.542003][ T6748] OCFS2: File system is now read-only.
[  105.555225][ T5974] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  105.629255][ T5968] ocfs2: Unmounting device (7,0) on (node local)
[  105.733076][ T6762] loop1: detected capacity change from 0 to 256
[  105.943044][ T6780] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[  106.380739][ T6811] loop1: detected capacity change from 0 to 512
[  106.386325][ T6811] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  106.439738][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.449820][ T6811] FAT-fs (loop1): Filesystem has been set read-only
[  106.452047][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.459548][   T33] audit: type=1800 audit(1755547229.761:10): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.436" name="file1" dev="loop1" ino=1048612 res=0 errno=0
[  106.469959][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.473330][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.476585][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.485992][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.491422][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.504106][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.507218][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.512776][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.515525][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.518597][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.523412][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.526930][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.530828][ T6811] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  106.534484][ T6811] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  106.688510][ T6815] ip6erspan0: entered promiscuous mode
[  106.813359][ T6816] tipc: Started in network mode
[  106.815493][ T6816] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711
[  106.958659][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'.
[  106.972727][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.977448][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.386995][ T6823] tmpfs: Bad value for 'mpol'
[  107.598262][ T6834] 9pnet_rdma: rdma_create_trans (6834): problem binding to privport: 13
[  108.326806][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'.
[  108.428959][ T6860] loop1: detected capacity change from 0 to 512
[  108.457057][ T6860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  108.462601][ T6860] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  108.665358][ T5974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  108.718085][ T6868] bond0: option mode: unable to set because the bond device has slaves
[  108.746054][ T6870] loop1: detected capacity change from 0 to 256
[  108.786973][ T6870] FAT-fs (loop1): Directory bread(block 64) failed
[  108.798504][ T6870] FAT-fs (loop1): Directory bread(block 65) failed
[  108.803028][ T6870] FAT-fs (loop1): Directory bread(block 66) failed
[  108.806233][ T6870] FAT-fs (loop1): Directory bread(block 67) failed
[  108.813454][ T6870] FAT-fs (loop1): Directory bread(block 68) failed
[  108.818902][ T6870] FAT-fs (loop1): Directory bread(block 69) failed
[  108.821696][ T6870] FAT-fs (loop1): Directory bread(block 70) failed
[  108.824233][ T6870] FAT-fs (loop1): Directory bread(block 71) failed
[  108.826711][ T6870] FAT-fs (loop1): Directory bread(block 72) failed
[  108.829066][ T6870] FAT-fs (loop1): Directory bread(block 73) failed
[  109.085261][ T6872] loop0: detected capacity change from 0 to 32768
[  109.088630][ T6872] XFS: ikeep mount option is deprecated.
[  109.106221][ T6872] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  109.155077][ T6872] XFS (loop0): Ending clean mount
[  109.163337][ T6872] XFS (loop0): Quotacheck needed: Please wait.
[  109.240410][ T6872] XFS (loop0): Quotacheck: Done.
[  109.357853][ T5968] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  109.365640][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'.
[  109.632081][ T6899] tc_dump_action: action bad kind
[  109.688371][ T6903] capability: warning: `syz.2.467' uses 32-bit capabilities (legacy support in use)
[  109.748910][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[  109.928958][ T6912] loop0: detected capacity change from 0 to 164
[  110.025254][ T6891] loop1: detected capacity change from 0 to 40427
[  110.046998][ T6891] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  110.061184][ T6891] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  110.079764][ T6891] F2FS-fs (loop1): invalid crc value
[  110.675145][ T6891] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.700090][ T6891] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  110.702802][ T6891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.949059][ T6935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'.
[  110.957461][ T6935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'.
[  111.088289][ T6938] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  111.092140][  T972] IPVS: starting estimator thread 0...
[  111.101438][ T6939] loop0: detected capacity change from 0 to 2048
[  111.117787][ T6939] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  111.126740][ T6939] UDF-fs: Scanning with blocksize 512 failed
[  111.143836][ T6939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.211082][ T6940] IPVS: using max 36 ests per chain, 86400 per kthread
[  111.218700][ T6943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.478'.
[  111.686152][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'.
[  111.728504][ T6964] loop2: detected capacity change from 0 to 256
[  111.746788][ T6964] exfat: Deprecated parameter 'utf8'
[  111.776135][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  111.778764][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.781904][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.784379][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.787054][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.789683][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.792274][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.794607][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.797455][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.800634][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.803529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.806229][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.808580][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.811109][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.813511][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.816044][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.818892][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.821943][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.824323][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.827044][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.830185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.833029][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.835960][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.838815][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.841344][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.843918][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.846388][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.848881][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.851323][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.853853][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.856439][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.859023][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.861596][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.863891][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.863936][ T6964] exFAT-fs (loop2): IO charset lacroman not found
[  111.866726][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.866853][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.875037][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.877583][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.880264][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.882743][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.885566][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.888766][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.891676][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.894585][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.897413][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.900629][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.903791][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.906993][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.909588][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.912497][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.915530][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.918623][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.921784][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.924860][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.927919][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.931240][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.934404][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.937485][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.940492][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.943586][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.946631][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.949932][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.952935][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.956104][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.959299][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.962515][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.965630][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.968962][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.972020][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.975128][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.978078][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.980687][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.983136][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.986100][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.988904][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.991826][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.994510][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  111.997305][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  111.999720][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.002198][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.004760][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.007398][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.009988][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.013131][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.015679][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.018004][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.020445][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.022955][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.026044][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.028482][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.031036][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.034208][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.036648][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.039467][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.041802][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  112.044109][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  112.046602][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  113.277504][ T6969] loop0: detected capacity change from 0 to 32768
[  113.289554][ T6969] (syz.0.494,6969,1):ocfs2_read_blocks:239 ERROR: status = -12
[  113.292671][ T6969] (syz.0.494,6969,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[  113.296124][ T6969] (syz.0.494,6969,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  113.299844][ T6969] (syz.0.494,6969,1):ocfs2_read_blocks:239 ERROR: status = -12
[  113.307643][ T6969] (syz.0.494,6969,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[  113.315402][ T6969] (syz.0.494,6969,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  113.321271][ T6969] (syz.0.494,6969,1):ocfs2_read_blocks:239 ERROR: status = -12
[  113.329068][ T6969] (syz.0.494,6969,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[  113.333749][ T6969] (syz.0.494,6969,1):ocfs2_read_dir_block:511 ERROR: status = -12
[  113.337138][ T6969] (syz.0.494,6969,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  113.340964][ T6969] (syz.0.494,6969,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  113.340989][ T6969] (syz.0.494,6969,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  113.358368][ T6969] (syz.0.494,6969,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  113.371510][ T6969] (syz.0.494,6969,1):ocfs2_fill_super:1177 ERROR: status = -22
[  113.484548][ T6979] loop2: detected capacity change from 0 to 256
[  113.709879][ T6031] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  113.804791][ T6997] loop2: detected capacity change from 0 to 4096
[  113.859306][ T6031] usb 2-1: Using ep0 maxpacket: 32
[  113.865278][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.879566][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.885455][ T6031] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  113.892376][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.908679][ T6031] usb 2-1: config 0 descriptor??
[  113.919836][ T6031] hub 2-1:0.0: USB hub found
[  114.018259][ T6999] loop2: detected capacity change from 0 to 32768
[  114.019285][ T6017] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  114.029348][ T6999] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.508 (6999)
[  114.045091][ T6999] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  114.048374][ T6999] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  114.051412][ T6999] BTRFS info (device loop2): using free-space-tree
[  114.092943][ T6999] BTRFS info (device loop2): rebuilding free space tree
[  114.130747][ T6031] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  114.182162][ T6017] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  114.185908][ T6017] usb 1-1: config 0 has no interface number 0
[  114.188416][ T6017] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  114.210316][ T6017] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  114.226828][ T6017] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  114.233855][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.237255][ T6017] usb 1-1: Product: syz
[  114.238985][ T6017] usb 1-1: Manufacturer: syz
[  114.249651][ T5972] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  114.254963][ T6017] usb 1-1: SerialNumber: syz
[  114.263952][ T6017] usb 1-1: config 0 descriptor??
[  114.274877][ T6995] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  114.281684][ T6017] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  114.320932][ T6017] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  114.549527][ T6031] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1
[  114.560345][ T6031] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22
[  114.697320][ T7022] loop2: detected capacity change from 0 to 32768
[  114.705934][ T7022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.511 (7022)
[  114.716905][ T6031] usb 1-1: USB disconnect, device number 7
[  114.722870][ T7022] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.736826][ T6031] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  114.742736][ T7022] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  114.746113][ T7022] BTRFS info (device loop2): using free-space-tree
[  114.751798][ T6031] cyberjack 1-1:0.69: device disconnected
[  114.836430][ T5972] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.850693][  T972] usb 2-1: USB disconnect, device number 6
[  115.332921][ T7048] process 'syz.0.515' launched './file1' with NULL argv: empty string added
[  117.564709][ T7099] loop2: detected capacity change from 0 to 32768
[  117.587362][ T7099] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  117.617218][ T7099] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.687440][ T7099] XFS (loop2): Ending clean mount
[  117.697890][ T7099] XFS (loop2): Quotacheck needed: Please wait.
[  117.733884][ T7099] XFS (loop2): Quotacheck: Done.
[  117.857350][ T5972] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.147173][ T7133] loop2: detected capacity change from 0 to 1024
[  118.151363][ T7133] EXT4-fs: Ignoring removed nomblk_io_submit option
[  118.174980][ T7133] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  118.178231][ T7133] System zones: 0-1, 3-36
[  118.206270][ T7133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.334954][ T5972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.337925][ T7145] loop1: detected capacity change from 0 to 512
[  118.347512][ T7145] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.370782][   T33] audit: type=1800 audit(1755547241.701:11): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.556" name="file1" dev="loop1" ino=1048613 res=0 errno=0
[  118.590326][ T7153] loop2: detected capacity change from 0 to 4096
[  118.604699][ T7153] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  118.622496][ T7153] ntfs3(loop2): ino=2, mi_enum_attr
[  118.624679][ T7153] ntfs3(loop2): Failed to load $LogFile (-22).
[  118.796771][ T7162] tmpfs: Bad value for 'mpol'
[  118.984368][ T7151] loop1: detected capacity change from 0 to 40427
[  118.988039][ T7151] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  118.999220][ T7151] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  119.012597][ T7151] F2FS-fs (loop1): build fault injection rate: 17008
[  119.015331][ T7151] F2FS-fs (loop1): build fault injection type: 0x7
[  119.024695][ T7151] F2FS-fs (loop1): invalid crc value
[  119.111412][ T7160] loop0: detected capacity change from 0 to 32768
[  119.135753][ T7160] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  119.198606][ T7160] XFS (loop0): Ending clean mount
[  119.202011][ T7151] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  119.213878][ T7151] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  119.216447][ T7151] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  119.231403][ T5968] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  119.274650][ T5974] syz-executor: attempt to access beyond end of device
[  119.274650][ T5974] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.303370][ T5974] CPU: 0 UID: 0 PID: 5974 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  119.303388][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.303393][ T5974] Call Trace:
[  119.303398][ T5974]  <TASK>
[  119.303403][ T5974]  dump_stack_lvl+0x189/0x250
[  119.303421][ T5974]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.303431][ T5974]  ? __pfx_queue_work_on+0x10/0x10
[  119.303440][ T5974]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  119.303451][ T5974]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.303465][ T5974]  f2fs_handle_critical_error+0x37c/0x540
[  119.303481][ T5974]  f2fs_write_end_io+0x886/0xb60
[  119.303498][ T5974]  __submit_merged_bio+0x27a/0x6a0
[  119.303511][ T5974]  __submit_merged_write_cond+0x255/0x530
[  119.303525][ T5974]  f2fs_write_data_pages+0x261d/0x3000
[  119.303552][ T5974]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.303568][ T5974]  ? arch_stack_walk+0xfc/0x150
[  119.303592][ T5974]  ? __mod_zone_page_state+0xd7/0x140
[  119.303608][ T5974]  ? folios_put_refs+0x560/0x640
[  119.303622][ T5974]  ? __pfx_folios_put_refs+0x10/0x10
[  119.303630][ T5974]  ? rcu_is_watching+0x15/0xb0
[  119.303643][ T5974]  ? __lock_acquire+0xab9/0xd20
[  119.303661][ T5974]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.303672][ T5974]  do_writepages+0x32e/0x550
[  119.303727][ T5974]  ? do_raw_spin_unlock+0x4d/0x240
[  119.303741][ T5974]  filemap_fdatawrite+0x199/0x240
[  119.303754][ T5974]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  119.303785][ T5974]  ? do_raw_spin_unlock+0x4d/0x240
[  119.303799][ T5974]  f2fs_sync_dirty_inodes+0x31f/0x830
[  119.303821][ T5974]  f2fs_write_checkpoint+0x95a/0x1df0
[  119.303848][ T5974]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  119.303888][ T5974]  ? kill_f2fs_super+0x298/0x6c0
[  119.303899][ T5974]  kill_f2fs_super+0x2c3/0x6c0
[  119.303910][ T5974]  ? __pfx_kill_f2fs_super+0x10/0x10
[  119.303917][ T5974]  ? radix_tree_delete_item+0x2b6/0x400
[  119.303931][ T5974]  ? shrinker_free+0x2ce/0x3e0
[  119.303942][ T5974]  deactivate_locked_super+0xbc/0x130
[  119.303954][ T5974]  cleanup_mnt+0x425/0x4c0
[  119.303965][ T5974]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.303977][ T5974]  task_work_run+0x1d4/0x260
[  119.303996][ T5974]  ? __pfx_task_work_run+0x10/0x10
[  119.304004][ T5974]  ? __x64_sys_umount+0x122/0x160
[  119.304018][ T5974]  ? exit_to_user_mode_loop+0x40/0x110
[  119.304031][ T5974]  exit_to_user_mode_loop+0xec/0x110
[  119.304041][ T5974]  do_syscall_64+0x2bd/0x3b0
[  119.304053][ T5974]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.304062][ T5974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.304070][ T5974]  ? exc_page_fault+0x9f/0xf0
[  119.304080][ T5974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.304088][ T5974] RIP: 0033:0x7f49b358ff17
[  119.304097][ T5974] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  119.304105][ T5974] RSP: 002b:00007ffc419a7428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  119.304114][ T5974] RAX: 0000000000000000 RBX: 00007f49b3611c05 RCX: 00007f49b358ff17
[  119.304120][ T5974] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc419a74e0
[  119.304125][ T5974] RBP: 00007ffc419a74e0 R08: 0000000000000000 R09: 0000000000000000
[  119.304129][ T5974] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc419a8570
[  119.304134][ T5974] R13: 00007f49b3611c05 R14: 000000000001d176 R15: 00007ffc419a85b0
[  119.304147][ T5974]  </TASK>
[  119.304152][ T5974] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  119.434071][  T972] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  119.599624][  T972] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  119.602531][  T972] usb 3-1: config 0 has no interface number 0
[  119.610444][  T972] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  119.618394][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.624719][ T7188] loop0: detected capacity change from 0 to 4096
[  119.627974][  T972] usb 3-1: Product: syz
[  119.636270][  T972] usb 3-1: Manufacturer: syz
[  119.637771][  T972] usb 3-1: SerialNumber: syz
[  119.663608][  T972] usb 3-1: config 0 descriptor??
[  119.870681][  T972] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  119.888249][  T972] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  119.899461][  T972] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  119.902586][  T972] usb 3-1: media controller created
[  119.965482][  T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.233670][  T972] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  120.256729][  T972] usb 3-1: USB disconnect, device number 8
[  120.446872][ T7210] delete_channel: no stack
[  120.452468][ T7209] delete_channel: no stack
[  120.801635][ T7218] loop0: detected capacity change from 0 to 32768
[  120.853805][ T7218] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  120.859501][ T7218] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  120.896391][ T5968] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.000363][ T7220] loop1: detected capacity change from 0 to 32768
[  121.555409][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[  121.875755][ T7266] loop0: detected capacity change from 0 to 2048
[  121.998879][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.008143][ T7274] loop2: detected capacity change from 0 to 256
[  122.008670][ T7266] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.475136][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.730329][ T7287] loop0: detected capacity change from 0 to 4096
[  122.732404][ T7289] loop2: detected capacity change from 0 to 512
[  122.749819][ T7289] EXT4-fs: Ignoring removed nobh option
[  122.754753][ T7289] EXT4-fs (loop2): Test dummy encryption mode enabled
[  122.759825][ T7290] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.773213][ T7289] EXT4-fs error (device loop2): __ext4_iget:5464: inode #11: block 1: comm syz.2.611: invalid block
[  122.787695][ T7289] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.611: couldn't read orphan inode 11 (err -117)
[  122.798317][ T7289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.937252][ T5972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.025184][ T7301] loop2: detected capacity change from 0 to 1024
[  123.027768][ T7301] EXT4-fs: Ignoring removed nobh option
[  123.029916][ T7301] EXT4-fs: Ignoring removed bh option
[  123.053284][ T7301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.289622][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  123.420206][ T7309] overlayfs: conflicting lowerdir path
[  123.651275][   T24] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  123.659234][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.669690][   T24] usb 2-1: config 0 descriptor??
[  123.674899][   T24] gspca_main: cpia1-2.14.0 probing 0813:0001
[  123.975093][ T5972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.282114][   T24] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  125.328105][ T7328] block device autoloading is deprecated and will be removed.
[  125.338103][ T7328] syz.0.626: attempt to access beyond end of device
[  125.338103][ T7328] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  125.363465][   T24] gspca_cpia1: usb_control_msg 01, error -110
[  125.377333][   T24] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  125.630594][ T6031] usb 2-1: USB disconnect, device number 7
[  125.852090][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.632'.
[  126.641623][ T7350] tmpfs: User quota inode hardlimit too large.
[  126.818384][ T7352] loop2: detected capacity change from 0 to 512
[  126.828671][ T7352] EXT4-fs: Ignoring removed oldalloc option
[  126.874988][ T7352] EXT4-fs (loop2): 1 truncate cleaned up
[  126.881568][ T5235] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  126.885776][ T5235] Bluetooth: hci1: Injecting HCI hardware error event
[  126.887379][ T7352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.890825][ T5235] Bluetooth: hci1: hardware error 0x00
[  127.102379][ T5972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.342831][ T7348] loop1: detected capacity change from 0 to 32768
[  127.351624][ T7348] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.635 (7348)
[  127.373770][ T7348] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  127.377943][ T7348] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  127.399461][ T7348] BTRFS info (device loop1): disk space caching is enabled
[  127.402846][ T7348] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  127.464475][ T7366] netlink: 128 bytes leftover after parsing attributes in process `syz.2.640'.
[  127.468407][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  127.600035][ T7348] BTRFS info (device loop1): rebuilding free space tree
[  127.627392][ T7348] BTRFS info (device loop1): disabling free space tree
[  127.633349][ T7348] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  127.642262][ T7348] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  127.642389][ T7377] loop2: detected capacity change from 0 to 4096
[  127.727870][   T33] audit: type=1800 audit(1755547251.051:12): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.635" name="bus" dev="loop1" ino=263 res=0 errno=0
[  127.754410][   T33] audit: type=1800 audit(1755547251.051:13): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.635" name="bus" dev="loop1" ino=263 res=0 errno=0
[  127.919705][   T33] audit: type=1800 audit(1755547251.241:14): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.635" name="bus" dev="loop1" ino=263 res=0 errno=0
[  128.090746][ T7388] loop0: detected capacity change from 0 to 1024
[  128.104360][ T7388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.205649][ T5974] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.437848][   T33] audit: type=1800 audit(1755547251.761:15): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="bus" dev="loop0" ino=18 res=0 errno=0
[  128.496354][ T7388] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  128.543495][ T7394] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  128.546741][ T7394] vlan2: entered promiscuous mode
[  128.547646][ T7386] loop2: detected capacity change from 0 to 32768
[  128.564523][ T7386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.643 (7386)
[  128.596918][ T7386] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.602548][ T7386] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  128.612372][ T7386] BTRFS info (device loop2): using free-space-tree
[  128.654948][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.800330][ T5972] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.832475][ T7416] loop0: detected capacity change from 0 to 128
[  128.858712][ T7416] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.900825][ T7416] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.959439][ T5235] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  129.009936][ T7416] EXT4-fs error (device loop0): make_indexed_dir:2269: inode #2: block 18: comm syz.0.650: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0
[  129.068858][ T7416] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.650: dx entry: limit 0 != root limit 125
[  129.090489][ T7416] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.650: Corrupt directory, running e2fsck is recommended
[  129.147150][ T5968] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.341093][ T7428] batadv0: entered allmulticast mode
[  129.899324][ T6017] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  130.052482][ T6017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.058726][ T6017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.064094][ T6017] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  130.067795][ T6017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.074528][ T6017] usb 2-1: config 0 descriptor??
[  130.127191][ T7464] netlink: 'syz.0.666': attribute type 4 has an invalid length.
[  130.327814][ T7466] loop0: detected capacity change from 0 to 32768
[  130.332093][ T7466] XFS: ikeep mount option is deprecated.
[  130.335768][ T7466] XFS: ikeep mount option is deprecated.
[  130.343238][ T7466] XFS: noikeep mount option is deprecated.
[  130.382064][ T7466] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.433956][ T7466] XFS (loop0): Ending clean mount
[  130.495727][ T5968] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.501722][ T6017] hid_parser_main: 59 callbacks suppressed
[  130.501745][ T6017] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  130.507209][ T6017] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  130.521739][ T6017] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  130.541901][ T6017] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  130.544802][ T6017] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  130.573698][ T6017] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  130.893848][ T6017] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 32: -71
[  130.897632][ T6017] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense firmware info: -71
[  130.902877][ T6017] playstation 0003:054C:0DF2.0005: Failed to get firmware info from DualSense
[  130.920954][ T6017] playstation 0003:054C:0DF2.0005: Failed to create dualsense.
[  130.933957][ T6017] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71
[  130.950973][ T6017] usb 2-1: USB disconnect, device number 8
[  131.280186][ T7484] loop0: detected capacity change from 0 to 40427
[  131.292183][ T7484] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[  131.295125][ T7484] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  131.320450][ T7484] F2FS-fs (loop0): invalid crc value
[  131.390329][ T7484] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  131.397241][ T7484] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  131.400073][ T7484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  131.448364][ T7492] loop2: detected capacity change from 0 to 32768
[  131.453781][ T7492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.676 (7492)
[  131.474055][ T7492] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.478034][ T7492] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  131.495436][ T7492] BTRFS info (device loop2): using free-space-tree
[  131.544162][ T5968] syz-executor: attempt to access beyond end of device
[  131.544162][ T5968] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  131.568249][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  131.568274][ T5968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.568283][ T5968] Call Trace:
[  131.568288][ T5968]  <TASK>
[  131.568294][ T5968]  dump_stack_lvl+0x189/0x250
[  131.568321][ T5968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.568338][ T5968]  ? __pfx_queue_work_on+0x10/0x10
[  131.568353][ T5968]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  131.568370][ T5968]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.568401][ T5968]  f2fs_handle_critical_error+0x37c/0x540
[  131.568425][ T5968]  f2fs_write_end_io+0x886/0xb60
[  131.568453][ T5968]  __submit_merged_bio+0x27a/0x6a0
[  131.568477][ T5968]  __submit_merged_write_cond+0x255/0x530
[  131.568498][ T5968]  f2fs_write_data_pages+0x261d/0x3000
[  131.568535][ T5968]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.568597][ T5968]  ? __lock_acquire+0xab9/0xd20
[  131.568615][ T5968]  ? do_raw_spin_lock+0x121/0x290
[  131.568630][ T5968]  ? do_raw_spin_unlock+0x4d/0x240
[  131.568639][ T5968]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  131.568650][ T5968]  do_writepages+0x32e/0x550
[  131.568672][ T5968]  ? do_raw_spin_unlock+0x4d/0x240
[  131.568688][ T5968]  filemap_fdatawrite+0x199/0x240
[  131.568704][ T5968]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  131.568752][ T5968]  ? do_raw_spin_unlock+0x4d/0x240
[  131.568771][ T5968]  f2fs_sync_dirty_inodes+0x31f/0x830
[  131.568795][ T5968]  f2fs_write_checkpoint+0x95a/0x1df0
[  131.568828][ T5968]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  131.568896][ T5968]  ? kill_f2fs_super+0x298/0x6c0
[  131.568915][ T5968]  kill_f2fs_super+0x2c3/0x6c0
[  131.568931][ T5968]  ? __pfx_kill_f2fs_super+0x10/0x10
[  131.568942][ T5968]  ? radix_tree_delete_item+0x2b6/0x400
[  131.568967][ T5968]  ? shrinker_free+0x2ce/0x3e0
[  131.568984][ T5968]  deactivate_locked_super+0xbc/0x130
[  131.569003][ T5968]  cleanup_mnt+0x425/0x4c0
[  131.569020][ T5968]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.569040][ T5968]  task_work_run+0x1d4/0x260
[  131.569062][ T5968]  ? __pfx_task_work_run+0x10/0x10
[  131.569078][ T5968]  ? __x64_sys_umount+0x122/0x160
[  131.569132][ T5968]  ? exit_to_user_mode_loop+0x40/0x110
[  131.569154][ T5968]  exit_to_user_mode_loop+0xec/0x110
[  131.569170][ T5968]  do_syscall_64+0x2bd/0x3b0
[  131.569185][ T5968]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.569199][ T5968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.569212][ T5968]  ? exc_page_fault+0x9f/0xf0
[  131.569230][ T5968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.569242][ T5968] RIP: 0033:0x7fbfbab8ff17
[  131.569257][ T5968] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  131.569268][ T5968] RSP: 002b:00007ffd1ded2598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  131.569284][ T5968] RAX: 0000000000000000 RBX: 00007fbfbac11c05 RCX: 00007fbfbab8ff17
[  131.569293][ T5968] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1ded2650
[  131.569301][ T5968] RBP: 00007ffd1ded2650 R08: 0000000000000000 R09: 0000000000000000
[  131.569322][ T5968] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd1ded36e0
[  131.569331][ T5968] R13: 00007fbfbac11c05 R14: 0000000000020137 R15: 00007ffd1ded3720
[  131.569352][ T5968]  </TASK>
[  131.724593][ T5968] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  131.732429][ T7492] BTRFS info (device loop2): rebuilding free space tree
[  131.845399][ T5972] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.850228][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'.
[  132.456187][ T7540] loop1: detected capacity change from 0 to 8
[  132.473548][ T7540] squashfs image failed sanity check
[  132.523707][   T33] audit: type=1326 audit(1755547255.851:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.562435][ T7544] loop1: detected capacity change from 0 to 16
[  132.565605][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.568066][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.571491][   T33] audit: type=1326 audit(1755547255.881:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.579539][ T7544] erofs (device loop1): mounted with root inode @ nid 36.
[  132.599021][   T33] audit: type=1326 audit(1755547255.881:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.645595][   T33] audit: type=1326 audit(1755547255.881:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.685229][   T33] audit: type=1326 audit(1755547255.881:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.710862][   T33] audit: type=1326 audit(1755547255.881:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.730808][   T33] audit: type=1326 audit(1755547255.881:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.740792][ T7547] loop2: detected capacity change from 0 to 2048
[  132.771394][   T33] audit: type=1326 audit(1755547255.881:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.795620][ T7547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.801412][   T33] audit: type=1326 audit(1755547255.881:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.811205][   T33] audit: type=1326 audit(1755547255.881:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.2.689" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246158ebe9 code=0x7ffc0000
[  132.820329][   T33] audit: type=1800 audit(1755547255.921:26): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.690" name="file1" dev="loop1" ino=86 res=0 errno=0
[  132.840800][ T7547] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.896029][ T5972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.042705][ T7535] loop0: detected capacity change from 0 to 32768
[  133.085696][ T7535] Mount JFS Failure: -5
[  134.054653][ T7569] loop2: detected capacity change from 0 to 1024
[  134.063628][ T7569] EXT4-fs: Ignoring removed mblk_io_submit option
[  134.097791][ T7569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.280190][ T7572] loop0: detected capacity change from 0 to 32768
[  134.289003][ T5972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.324626][ T7572] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  134.396151][   T33] audit: type=1800 audit(1755547257.711:27): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.700" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  134.750039][  T972] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  134.947574][   T33] audit: type=1804 audit(1755547258.271:28): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.700" name="/newroot/197/file1/file1" dev="loop0" ino=17058 res=1 errno=0
[  134.968156][   T33] audit: type=1800 audit(1755547258.291:29): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.700" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  136.128685][ T7602] loop2: detected capacity change from 0 to 512
[  136.451687][ T7598] loop1: detected capacity change from 0 to 32768
[  136.470854][ T7598] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.708 (7598)
[  136.613949][ T7598] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  136.618028][ T7598] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  136.621470][ T7598] BTRFS info (device loop1): using free-space-tree
[  137.065514][ T7572] syz.0.700 (7572) used greatest stack depth: 18136 bytes left
[  137.101781][ T5974] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  137.128495][  T972] usb 1-1: unable to get BOS descriptor or descriptor too short
[  137.136847][  T972] usb 1-1: no configurations
[  137.147857][  T972] usb 1-1: can't read configurations, error -22
[  137.331487][ T7627] netlink: 'syz.2.715': attribute type 10 has an invalid length.
[  137.356253][ T7627] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  137.541959][ T5968] ocfs2: Unmounting device (7,0) on (node local)
[  137.553782][ T7633] loop1: detected capacity change from 0 to 512
[  137.570048][ T7633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  137.615671][ T7633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  137.618896][ T7633] System zones: 0-2, 18-18, 34-34
[  137.657520][ T7633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.680705][ T7633] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.750545][ T7633] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  137.771286][ T7633] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  137.777187][ T7633] EXT4-fs (loop1): This should not happen!! Data will be lost
[  137.777187][ T7633] 
[  137.813785][ T7633] EXT4-fs (loop1): Total free blocks count 0
[  137.819819][ T7633] EXT4-fs (loop1): Free/Dirty block details
[  137.830190][ T7633] EXT4-fs (loop1): free_blocks=39626
[  137.832017][ T7633] EXT4-fs (loop1): dirty_blocks=17
[  137.834174][ T7633] EXT4-fs (loop1): Block reservation details
[  137.836557][ T7633] EXT4-fs (loop1): i_reserved_data_blocks=17
[  137.918007][ T3570] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 23 with error 28
[  138.231054][ T7648] loop0: detected capacity change from 0 to 4096
[  138.369431][ T6017] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  138.529409][ T6017] usb 2-1: Using ep0 maxpacket: 32
[  138.537645][ T6017] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.555053][ T6017] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  138.569702][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.573220][ T6017] usb 2-1: Product: syz
[  138.574927][ T6017] usb 2-1: Manufacturer: syz
[  138.576828][ T6017] usb 2-1: SerialNumber: syz
[  138.591487][ T6017] usb 2-1: config 0 descriptor??
[  138.610748][ T6017] usb 2-1: bad CDC descriptors
[  138.619506][ T6017] usb 2-1: unsupported MDLM descriptors
[  138.845305][ T6017] usb 2-1: USB disconnect, device number 9
[  139.369678][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'.
[  139.661722][   T33] audit: type=1800 audit(1755547262.991:30): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.729" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  141.879548][ T7691] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[  141.981707][ T6016] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  142.171555][ T6016] usb 1-1: unable to get BOS descriptor or descriptor too short
[  142.188209][ T6016] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  142.196432][ T6016] usb 1-1: config 1 has no interface number 1
[  142.204814][ T6016] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  142.215356][ T6016] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.218787][ T6016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.225064][ T6016] usb 1-1: Product: syz
[  142.226745][ T6016] usb 1-1: Manufacturer: syz
[  142.228552][ T6016] usb 1-1: SerialNumber: syz
[  142.364448][ T7697] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[  142.404851][ T7697] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.467003][ T7697] bond1: (slave veth3): Enslaving as an active interface with a down link
[  142.493996][ T6016] usb 1-1: found format II with max.bitrate = 26774, frame size=2
[  142.497184][ T6016] usb 1-1: found format II with max.bitrate = 26774, frame size=2
[  142.512656][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv1
[  142.513127][ T6016] usb 1-1: failed to enable PITCH for EP 0x82
[  142.515279][ T7697] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  142.574314][ T6016] usb 1-1: USB disconnect, device number 10
[  142.647072][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  142.797524][ T7710] loop1: detected capacity change from 0 to 512
[  142.834506][ T7710] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  142.850866][ T7710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  142.854242][ T7710] EXT4-fs (loop1): orphan cleanup on readonly fs
[  142.868681][ T7710] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.745: bg 0: block 361: padding at end of block bitmap is not set
[  142.877869][ T7710] EXT4-fs (loop1): Remounting filesystem read-only
[  142.882171][ T7710] EXT4-fs (loop1): 1 truncate cleaned up
[  142.885663][ T7710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  143.228499][ T7716] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.745: dx entry: limit 0 != root limit 125
[  143.233496][ T7716] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.745: Corrupt directory, running e2fsck is recommended
[  143.243224][ T7716] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.745: dx entry: limit 0 != root limit 125
[  143.248072][ T7716] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.745: Corrupt directory, running e2fsck is recommended
[  143.257141][ T7716] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.745: dx entry: limit 0 != root limit 125
[  143.262392][ T7716] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.745: Corrupt directory, running e2fsck is recommended
[  143.273393][ T7716] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.745: dx entry: limit 0 != root limit 125
[  143.277978][ T7716] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.745: Corrupt directory, running e2fsck is recommended
[  143.710564][ T5974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  144.025234][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.749'.
[  144.259461][ T6017] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  144.720433][ T6017] usb 2-1: Using ep0 maxpacket: 8
[  144.725298][ T6017] usb 2-1: unable to get BOS descriptor or descriptor too short
[  144.734411][ T6017] usb 2-1: config 127 has an invalid interface number: 250 but max is 1
[  144.737641][ T6017] usb 2-1: config 127 has an invalid interface number: 129 but max is 1
[  144.744988][ T6017] usb 2-1: config 127 has no interface number 0
[  144.747756][ T6017] usb 2-1: config 127 has no interface number 1
[  144.753125][ T6017] usb 2-1: config 127 interface 250 altsetting 8 bulk endpoint 0xA has invalid maxpacket 64
[  144.757247][ T6017] usb 2-1: config 127 interface 250 has no altsetting 0
[  144.761852][ T6017] usb 2-1: config 127 interface 129 has no altsetting 0
[  144.768867][ T6017] usb 2-1: New USB device found, idVendor=0582, idProduct=04f4, bcdDevice=51.ac
[  144.774352][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.777615][ T6017] usb 2-1: Product: syz
[  144.780400][ T6017] usb 2-1: Manufacturer: syz
[  144.782572][ T6017] usb 2-1: SerialNumber: syz
[  144.803623][ T7726] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  145.096733][ T6017] usb 2-1: USB disconnect, device number 10
[  145.165532][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:127.250/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.257126][ T7735] netlink: 'syz.2.752': attribute type 16 has an invalid length.
[  145.262779][ T7735] netlink: 'syz.2.752': attribute type 3 has an invalid length.
[  145.265742][ T7735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.752'.
[  145.292506][ T7737] loop0: detected capacity change from 0 to 256
[  145.315529][ T7737] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  145.354171][ T7741] loop2: detected capacity change from 0 to 4096
[  145.382131][ T7742] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.051472][ T7757] loop0: detected capacity change from 0 to 4096
[  146.659846][ T5972] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  147.828807][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.833051][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.836484][ T7785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.726325][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[  148.734529][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[  148.958712][ T7825] loop1: detected capacity change from 0 to 8
[  148.961905][ T7825] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  148.976872][ T7825] cramfs: Error -3 while decompressing!
[  148.980168][ T7825] cramfs: ffffffff99beb642(26)->ffff88802b62f000(4096)
[  148.982723][ T7825] cramfs: Error -3 while decompressing!
[  148.984999][ T7825] cramfs: ffffffff99beb65c(16)->ffff88802b628000(4096)
[  148.987280][ T7825] cramfs: Error -3 while decompressing!
[  148.991027][ T7825] cramfs: ffffffff99beb642(26)->ffff88802b62f000(4096)
[  148.994132][   T33] audit: type=1800 audit(1755547272.321:31): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.792" name="file2" dev="loop1" ino=348 res=0 errno=0
[  149.122438][ T7834] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  149.189941][ T6003] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  149.351895][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.356196][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.367538][ T6003] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  149.373015][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.383127][ T6003] usb 3-1: config 0 descriptor??
[  149.606400][ T7849] loop0: detected capacity change from 0 to 1024
[  149.610244][ T7849] EXT4-fs: Ignoring removed nobh option
[  149.612661][ T7849] EXT4-fs: Ignoring removed bh option
[  149.633349][ T7849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.810558][ T6003] hkems 0003:2006:0118.0006: ignoring exceeding usage max
[  149.814307][ T6003] hkems 0003:2006:0118.0006: item fetching failed at offset 5/7
[  149.818007][ T6003] hkems 0003:2006:0118.0006: parse failed
[  149.829283][ T6003] hkems 0003:2006:0118.0006: probe with driver hkems failed with error -22
[  150.014750][ T6031] usb 3-1: USB disconnect, device number 9
[  150.072906][ T7855] loop1: detected capacity change from 0 to 32768
[  150.086812][ T7855] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  150.096862][ T7855] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  150.607072][ T7853] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  150.783141][ T5968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.950068][ T5974] ocfs2: Unmounting device (7,1) on (node local)
[  150.978292][ T7865] netlink: 'syz.0.805': attribute type 21 has an invalid length.
[  150.987965][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'.
[  151.590722][ T7885] loop0: detected capacity change from 0 to 4096
[  151.727133][ T7885] ntfs3(loop0): ino=19, mi_enum_attr
[  151.737697][ T7885] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  152.000386][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout
[  152.006749][   T33] audit: type=1326 audit(1755547275.331:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7fc00000
[  152.058232][   T33] audit: type=1326 audit(1755547275.331:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.807" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49b358ebe9 code=0x7fc00000
[  152.088864][ T7891] loop2: detected capacity change from 0 to 512
[  152.103937][ T7891] EXT4-fs: Ignoring removed orlov option
[  152.110557][   T33] audit: type=1326 audit(1755547275.331:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7fc00000
[  152.113363][ T7894] netlink: 'syz.0.819': attribute type 16 has an invalid length.
[  152.134023][ T7891] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  152.144597][   T33] audit: type=1326 audit(1755547275.331:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7fc00000
[  152.165974][ T7894] netlink: 'syz.0.819': attribute type 17 has an invalid length.
[  152.180998][   T33] audit: type=1326 audit(1755547275.331:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7fc00000
[  152.305070][ T7894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.372814][ T7896] sp0: Synchronizing with TNC
[  152.889312][ T6016] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  153.064533][ T6016] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  153.067668][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.083198][ T6016] usb 3-1: config 0 descriptor??
[  153.157070][ T7933] input: syz1 as /devices/virtual/input/input6
[  153.375798][ T7931] loop1: detected capacity change from 0 to 32768
[  153.473885][ T7931] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=yes,norecovery,nojournal_transaction_names,read_only
[  153.473902][ T7931]   allowing incompatible features above 0.0: (unknown version)
[  153.473907][ T7931]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  153.489084][ T7931] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  153.492421][ T7931] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  153.495086][ T7931] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  153.495086][ T7931]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  153.497026][ T6016] viewsonic 0003:2133:0018.0007: unknown main item tag 0x0
[  153.512265][ T6016] viewsonic 0003:2133:0018.0007: item fetching failed at offset 3/5
[  153.516210][ T6016] viewsonic 0003:2133:0018.0007: probe with driver viewsonic failed with error -22
[  153.523936][ T7931] bcachefs (loop1): btree node read error at btree alloc level 0/0
[  153.523985][ T7931]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  153.523992][ T7931]   loop1 node offset 0/24: got wrong btree node: got
[  153.523997][ T7931]   btree=alloc level=0 seq 98dc7e261 1
[  153.524001][ T7931]   min: POS_MIN
[  153.524006][ T7931]   max: SPOS_MAX
[  153.524009][ T7931]   loop1 btree validate error
[  153.524013][ T7931]   flagging btree alloc lost data
[  153.524018][ T7931]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  153.524023][ T7931]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  153.524029][ T7931]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  153.524034][ T7931]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  153.524040][ T7931]   ret btree_node_read_err_bad_node
[  153.564030][ T7931] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  153.575503][ T7931] bcachefs (loop1): btree node read error at btree lru level 0/0
[  153.575521][ T7931]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  153.575534][ T7931]   loop1 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  153.575544][ T7931]   loop1 btree validate error
[  153.575552][ T7931]   flagging btree lru lost data
[  153.575559][ T7931]   ret btree_node_read_err_bad_node
[  153.593726][ T7931] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  153.598661][ T7931] bcachefs (loop1): btree node read error at btree freespace level 0/0
[  153.598675][ T7931]   u64s 11 type btree_ptr_v2 36591746972385279:U64_MAX:U32_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  153.598688][ T7931]   loop1 node offset 0/32 bset u64s 0: incorrect max key SPOS_MAX
[  153.598696][ T7931]   loop1 btree validate error
[  153.598704][ T7931]   flagging btree freespace lost data
[  153.598711][ T7931]   ret btree_node_read_err_bad_node
[  153.617880][ T7931] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  153.624787][ T7931] bcachefs (loop1): check_topology... done
[  153.628123][ T7931] bcachefs (loop1): accounting_read... done
[  153.634223][ T7931] bcachefs (loop1): alloc_read... done
[  153.636823][ T7931] bcachefs (loop1): snapshots_read... done
[  153.640680][ T7931] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  153.644930][ T7931] bcachefs (loop1): done starting filesystem
[  153.669254][  T972] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  153.683880][ T5974] bcachefs (loop1): shutting down
[  153.705050][ T5974] bcachefs (loop1): shutdown complete
[  153.819382][  T972] usb 1-1: Using ep0 maxpacket: 16
[  153.823686][  T972] usb 1-1: config 9 has an invalid interface number: 196 but max is 2
[  153.826439][  T972] usb 1-1: config 9 has an invalid interface number: 15 but max is 2
[  153.829590][  T972] usb 1-1: config 9 has an invalid interface number: 223 but max is 2
[  153.832677][  T972] usb 1-1: config 9 has no interface number 0
[  153.835007][  T972] usb 1-1: config 9 has no interface number 1
[  153.837293][  T972] usb 1-1: config 9 has no interface number 2
[  153.840732][  T972] usb 1-1: config 9 interface 196 has no altsetting 0
[  153.843360][  T972] usb 1-1: config 9 interface 223 has no altsetting 0
[  153.848460][  T972] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=7b.09
[  153.852697][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.855886][  T972] usb 1-1: Product: syz
[  153.857528][  T972] usb 1-1: Manufacturer: syz
[  153.859612][  T972] usb 1-1: SerialNumber: syz
[  154.076709][  T972] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  154.080981][  T972] usb 1-1: selecting invalid altsetting 0
[  154.083611][ T2396] pvrusb2: Invalid write control endpoint
[  154.086375][  T972] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  154.097050][  T972] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  154.101337][  T972] usb 1-1: selecting invalid altsetting 0
[  154.108966][  T972] usb 1-1: USB disconnect, device number 11
[  154.150666][ T2396] pvrusb2: Invalid write control endpoint
[  154.153119][ T2396] pvrusb2: Invalid write control endpoint
[  154.155394][ T2396] pvrusb2: Invalid write control endpoint
[  154.157653][ T2396] pvrusb2: Invalid write control endpoint
[  154.161519][ T2396] pvrusb2: Invalid write control endpoint
[  154.163959][ T2396] pvrusb2: Invalid write control endpoint
[  154.166390][ T2396] pvrusb2: Invalid write control endpoint
[  154.168700][ T2396] pvrusb2: Invalid write control endpoint
[  154.172793][ T2396] pvrusb2: Invalid write control endpoint
[  154.175202][ T2396] pvrusb2: Invalid write control endpoint
[  154.177754][ T2396] pvrusb2: Invalid write control endpoint
[  154.182400][ T2396] pvrusb2: Invalid write control endpoint
[  154.184796][ T2396] pvrusb2: Invalid write control endpoint
[  154.187224][ T2396] pvrusb2: Invalid write control endpoint
[  154.190351][ T2396] pvrusb2: Invalid write control endpoint
[  154.192750][ T2396] pvrusb2: Invalid write control endpoint
[  154.195065][ T2396] pvrusb2: Invalid write control endpoint
[  154.197512][ T2396] pvrusb2: Invalid write control endpoint
[  154.200500][ T2396] pvrusb2: Invalid write control endpoint
[  154.202934][ T2396] pvrusb2: Invalid write control endpoint
[  154.205381][ T2396] pvrusb2: Invalid write control endpoint
[  154.207857][ T2396] pvrusb2: Invalid write control endpoint
[  154.210913][ T2396] pvrusb2: Invalid write control endpoint
[  154.213179][ T2396] pvrusb2: Invalid write control endpoint
[  154.215422][ T2396] pvrusb2: Invalid write control endpoint
[  154.217670][ T2396] pvrusb2: Invalid write control endpoint
[  154.220979][ T2396] pvrusb2: Invalid write control endpoint
[  154.223279][ T2396] pvrusb2: Invalid write control endpoint
[  154.225082][ T2396] pvrusb2: Invalid write control endpoint
[  154.227115][ T2396] pvrusb2: Invalid write control endpoint
[  154.229741][ T2396] pvrusb2: Invalid write control endpoint
[  154.231669][ T2396] pvrusb2: Invalid write control endpoint
[  154.235291][ T2396] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  154.259985][ T2396] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a)
[  154.262313][ T2396] pvrusb2: Invalid write control endpoint
[  154.264080][ T2396] pvrusb2: Invalid write control endpoint
[  154.265844][ T2396] pvrusb2: Invalid write control endpoint
[  154.267705][ T2396] pvrusb2: Invalid write control endpoint
[  154.270482][ T2396] pvrusb2: Invalid write control endpoint
[  154.272705][ T2396] pvrusb2: Invalid write control endpoint
[  154.274580][ T2396] pvrusb2: Invalid write control endpoint
[  154.277108][ T2396] pvrusb2: Invalid write control endpoint
[  154.279649][ T2396] pvrusb2: Invalid write control endpoint
[  154.282854][ T2396] pvrusb2: Invalid write control endpoint
[  154.285145][ T2396] pvrusb2: Invalid write control endpoint
[  154.287503][ T2396] pvrusb2: Invalid write control endpoint
[  154.289984][ T2396] pvrusb2: Invalid write control endpoint
[  154.292358][ T2396] pvrusb2: Invalid write control endpoint
[  154.294377][ T2396] pvrusb2: Invalid write control endpoint
[  154.296156][ T2396] pvrusb2: Invalid write control endpoint
[  154.298465][ T2396] pvrusb2: Invalid write control endpoint
[  154.300962][ T2396] pvrusb2: Invalid write control endpoint
[  154.302766][ T2396] pvrusb2: Invalid write control endpoint
[  154.304532][ T2396] pvrusb2: Invalid write control endpoint
[  154.306280][ T2396] pvrusb2: Invalid write control endpoint
[  154.312026][ T2396] pvrusb2: Attached sub-driver cs53l32a
[  154.328622][ T2396] pvrusb2: Invalid write control endpoint
[  154.331964][ T2396] pvrusb2: Invalid write control endpoint
[  154.333808][ T2396] pvrusb2: Invalid write control endpoint
[  154.336091][ T2396] pvrusb2: Invalid write control endpoint
[  154.338366][ T2396] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  154.344582][ T2396] pvrusb2: Device being rendered inoperable
[  154.346926][ T2396] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  154.355244][ T2396] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  154.367925][ T2396] pvrusb2: Invalid write control endpoint
[  154.393983][ T2396] pvrusb2: Invalid write control endpoint
[  154.396108][ T2396] pvrusb2: Invalid write control endpoint
[  154.398059][ T2396] pvrusb2: Invalid write control endpoint
[  154.400962][ T2396] pvrusb2: Invalid write control endpoint
[  154.403174][ T2396] pvrusb2: Invalid write control endpoint
[  154.405247][ T2396] pvrusb2: Invalid write control endpoint
[  154.407404][ T2396] pvrusb2: Invalid write control endpoint
[  154.410509][ T2396] pvrusb2: Invalid write control endpoint
[  154.412542][ T2396] pvrusb2: Invalid write control endpoint
[  154.414513][ T2396] pvrusb2: Invalid write control endpoint
[  154.416211][ T2396] pvrusb2: Invalid write control endpoint
[  154.418256][ T2396] pvrusb2: Invalid write control endpoint
[  154.421606][ T2396] pvrusb2: Invalid write control endpoint
[  154.423766][ T2396] pvrusb2: Invalid write control endpoint
[  154.425851][ T2396] pvrusb2: Invalid write control endpoint
[  154.427937][ T2396] pvrusb2: Invalid write control endpoint
[  154.430632][ T2396] pvrusb2: Invalid write control endpoint
[  154.432816][ T2396] pvrusb2: Invalid write control endpoint
[  154.435037][ T2396] pvrusb2: Invalid write control endpoint
[  154.437265][ T2396] pvrusb2: Invalid write control endpoint
[  154.440690][ T2396] pvrusb2: Invalid write control endpoint
[  154.442827][ T2396] pvrusb2: Invalid write control endpoint
[  154.444717][ T2396] pvrusb2: Invalid write control endpoint
[  154.446614][ T2396] pvrusb2: Invalid write control endpoint
[  154.448420][ T2396] pvrusb2: Invalid write control endpoint
[  154.450728][ T2396] pvrusb2: Invalid write control endpoint
[  154.452871][ T2396] pvrusb2: Invalid write control endpoint
[  154.454812][ T2396] pvrusb2: Invalid write control endpoint
[  154.457035][ T2396] pvrusb2: Invalid write control endpoint
[  154.458827][ T2396] pvrusb2: Invalid write control endpoint
[  154.460968][ T2396] pvrusb2: Invalid write control endpoint
[  154.463127][ T2396] pvrusb2: Invalid write control endpoint
[  154.465803][ T2396] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  154.513444][ T2396] cs53l32a 3-0011: chip found @ 0x22 (pvrusb2_b)
[  154.516004][ T2396] pvrusb2: Invalid write control endpoint
[  154.518179][ T2396] pvrusb2: Invalid write control endpoint
[  154.553164][ T2396] pvrusb2: Invalid write control endpoint
[  154.555485][ T2396] pvrusb2: Invalid write control endpoint
[  154.557754][ T2396] pvrusb2: Invalid write control endpoint
[  154.574007][ T2396] pvrusb2: Invalid write control endpoint
[  154.576184][ T2396] pvrusb2: Invalid write control endpoint
[  154.591103][ T2396] pvrusb2: Invalid write control endpoint
[  154.593348][ T2396] pvrusb2: Invalid write control endpoint
[  154.595577][ T2396] pvrusb2: Invalid write control endpoint
[  154.597821][ T2396] pvrusb2: Invalid write control endpoint
[  154.612627][ T2396] pvrusb2: Invalid write control endpoint
[  154.614892][ T2396] pvrusb2: Invalid write control endpoint
[  154.617150][ T2396] pvrusb2: Invalid write control endpoint
[  154.620452][ T2396] pvrusb2: Invalid write control endpoint
[  154.622946][ T2396] pvrusb2: Invalid write control endpoint
[  154.625213][ T2396] pvrusb2: Invalid write control endpoint
[  154.627460][ T2396] pvrusb2: Invalid write control endpoint
[  154.630463][ T2396] pvrusb2: Invalid write control endpoint
[  154.632964][ T2396] pvrusb2: Invalid write control endpoint
[  154.635249][ T2396] pvrusb2: Invalid write control endpoint
[  154.637708][ T2396] pvrusb2: Attached sub-driver cs53l32a
[  154.675833][ T2396] pvrusb2: Invalid write control endpoint
[  154.678135][ T2396] pvrusb2: Invalid write control endpoint
[  154.690157][ T2396] pvrusb2: Invalid write control endpoint
[  154.695507][ T2396] pvrusb2: Invalid write control endpoint
[  154.697750][ T2396] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  154.719338][ T2396] pvrusb2: Device being rendered inoperable
[  154.721729][ T2396] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  154.729370][ T2396] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  154.746406][ T2396] pvrusb2: Invalid write control endpoint
[  154.800563][ T2396] pvrusb2: Invalid write control endpoint
[  154.804302][ T2396] pvrusb2: Invalid write control endpoint
[  154.808037][ T2396] pvrusb2: Invalid write control endpoint
[  154.812302][ T2396] pvrusb2: Invalid write control endpoint
[  154.814742][ T2396] pvrusb2: Invalid write control endpoint
[  154.817166][ T2396] pvrusb2: Invalid write control endpoint
[  154.822152][ T2396] pvrusb2: Invalid write control endpoint
[  154.826004][ T2396] pvrusb2: Invalid write control endpoint
[  154.828696][ T2396] pvrusb2: Invalid write control endpoint
[  154.834145][ T2396] pvrusb2: Invalid write control endpoint
[  154.838865][ T2396] pvrusb2: Invalid write control endpoint
[  154.845463][ T2396] pvrusb2: Invalid write control endpoint
[  154.863349][ T2396] pvrusb2: Invalid write control endpoint
[  154.873017][ T2396] pvrusb2: Invalid write control endpoint
[  154.874878][ T2396] pvrusb2: Invalid write control endpoint
[  154.876669][ T2396] pvrusb2: Invalid write control endpoint
[  154.878523][ T2396] pvrusb2: Invalid write control endpoint
[  154.895666][ T2396] pvrusb2: Invalid write control endpoint
[  154.898555][ T2396] pvrusb2: Invalid write control endpoint
[  154.902109][ T2396] pvrusb2: Invalid write control endpoint
[  154.904497][ T2396] pvrusb2: Invalid write control endpoint
[  154.906837][ T2396] pvrusb2: Invalid write control endpoint
[  154.909069][ T2396] pvrusb2: Invalid write control endpoint
[  154.911864][ T2396] pvrusb2: Invalid write control endpoint
[  154.922054][ T2396] pvrusb2: Invalid write control endpoint
[  154.924366][ T2396] pvrusb2: Invalid write control endpoint
[  154.926514][ T2396] pvrusb2: Invalid write control endpoint
[  154.928767][ T2396] pvrusb2: Invalid write control endpoint
[  154.937585][ T2396] pvrusb2: Invalid write control endpoint
[  154.941076][ T2396] pvrusb2: Invalid write control endpoint
[  154.943734][ T2396] pvrusb2: Invalid write control endpoint
[  154.948746][ T2396] pvrusb2: Invalid write control endpoint
[  154.952406][ T2396] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  155.112500][ T2396] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_c)
[  155.114994][ T2396] pvrusb2: Invalid write control endpoint
[  155.117024][ T2396] pvrusb2: Invalid write control endpoint
[  155.118833][ T2396] pvrusb2: Invalid write control endpoint
[  155.127953][ T2396] pvrusb2: Invalid write control endpoint
[  155.129906][ T2396] pvrusb2: Invalid write control endpoint
[  155.131681][ T2396] pvrusb2: Invalid write control endpoint
[  155.133438][ T2396] pvrusb2: Invalid write control endpoint
[  155.135344][ T2396] pvrusb2: Invalid write control endpoint
[  155.137392][ T2396] pvrusb2: Invalid write control endpoint
[  155.139459][ T2396] pvrusb2: Invalid write control endpoint
[  155.141302][ T2396] pvrusb2: Invalid write control endpoint
[  155.144041][ T2396] pvrusb2: Invalid write control endpoint
[  155.145836][ T2396] pvrusb2: Invalid write control endpoint
[  155.147597][ T2396] pvrusb2: Invalid write control endpoint
[  155.149948][ T2396] pvrusb2: Invalid write control endpoint
[  155.151927][ T2396] pvrusb2: Invalid write control endpoint
[  155.153760][ T2396] pvrusb2: Invalid write control endpoint
[  155.155470][ T2396] pvrusb2: Invalid write control endpoint
[  155.157103][ T2396] pvrusb2: Invalid write control endpoint
[  155.159017][ T2396] pvrusb2: Invalid write control endpoint
[  155.161053][ T2396] pvrusb2: Invalid write control endpoint
[  155.166892][ T2396] pvrusb2: Attached sub-driver cs53l32a
[  155.435930][ T2396] pvrusb2: Invalid write control endpoint
[  155.446109][ T2396] pvrusb2: Invalid write control endpoint
[  155.464994][ T2396] pvrusb2: Invalid write control endpoint
[  155.475750][ T2396] pvrusb2: Invalid write control endpoint
[  155.487820][ T2396] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  155.521998][ T2396] pvrusb2: Device being rendered inoperable
[  155.548069][ T2396] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  155.553149][ T2396] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  155.647555][ T6031] usb 3-1: USB disconnect, device number 10
[  155.830996][ T7981] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (36)
[  156.135748][ T7986] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  156.140869][ T7986] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  157.311724][ T8001] loop0: detected capacity change from 0 to 8
[  157.318149][ T8001] SQUASHFS error: Unable to read inode 0x127
[  157.332981][ T8001] loop0: detected capacity change from 0 to 128
[  157.353436][ T8001] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.379798][ T8001] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.414706][ T8005] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  158.404785][ T8000] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.476910][ T8014] loop2: detected capacity change from 0 to 32768
[  158.518320][ T8014] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  158.535793][ T8014] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  158.810929][ T5972] ocfs2: Unmounting device (7,2) on (node local)
[  159.508377][ T8050] loop1: detected capacity change from 0 to 512
[  159.520341][ T8050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  159.542554][ T8050] EXT4-fs (loop1): 1 truncate cleaned up
[  159.547047][ T8050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.577605][   T33] audit: type=1800 audit(1755547282.901:37): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="file1" dev="loop1" ino=15 res=0 errno=0
[  159.666397][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'.
[  159.771717][ T5974] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.394981][ T8092] netlink: 6 bytes leftover after parsing attributes in process `syz.1.899'.
[  160.412395][ T8092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.471539][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'.
[  162.486691][ T8128] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.511959][ T8128] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  162.531949][ T8128] vlan2: entered allmulticast mode
[  162.534191][ T8128] bond1: entered allmulticast mode
[  162.536337][ T8128] gretap1: entered allmulticast mode
[  162.947561][ T8137] loop2: detected capacity change from 0 to 4096
[  162.953258][ T8137] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  163.348037][ T8145] loop2: detected capacity change from 0 to 4096
[  163.359574][ T8145] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  164.339634][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'.
[  164.342778][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'.
[  165.002875][   T95] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  165.161846][   T95] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.166087][   T95] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  165.173428][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  165.177780][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64
[  165.182234][   T95] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  165.192008][   T95] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  165.195709][   T95] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.198685][   T95] usb 2-1: Product: syz
[  165.200539][   T95] usb 2-1: Manufacturer: syz
[  165.202381][   T95] usb 2-1: SerialNumber: syz
[  165.206626][   T95] usb 2-1: config 0 descriptor??
[  165.210149][ T8184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  165.269298][   T95] rc_core: IR keymap rc-xbox-dvd not found
[  165.271692][   T95] Registered IR keymap rc-empty
[  165.275868][   T95] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  165.281675][   T95] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  165.431441][ T6016] usb 2-1: USB disconnect, device number 11
[  165.431477][    C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  165.613170][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'.
[  165.642369][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.945'.
[  165.788680][ T8206] bond_slave_0: entered promiscuous mode
[  165.791488][ T8206] bond_slave_1: entered promiscuous mode
[  165.796234][ T8206] vlan2: entered promiscuous mode
[  165.798377][ T8206] bond0: entered promiscuous mode
[  166.024004][ T8208] loop1: detected capacity change from 0 to 512
[  166.034901][ T8208] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  166.264634][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'.
[  166.517550][ T8214] loop2: detected capacity change from 0 to 32768
[  166.521217][ T8214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.953 (8214)
[  166.532292][ T8214] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.535661][ T8214] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  166.538358][ T8214] BTRFS info (device loop2): using free-space-tree
[  166.635909][ T5972] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.618190][ T8253] loop1: detected capacity change from 0 to 256
[  167.652189][ T8253] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  167.805951][ T8262] netlink: 14 bytes leftover after parsing attributes in process `syz.0.967'.
[  167.969714][ T8262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.972961][ T8262] bond_slave_0: left promiscuous mode
[  167.978545][ T8262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.982670][ T8262] bond_slave_1: left promiscuous mode
[  167.985400][ T8262] bond0 (unregistering): Released all slaves
[  168.069461][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  168.161918][ T6031] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  168.231017][   T24] usb 2-1: Using ep0 maxpacket: 32
[  168.236316][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  168.240659][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  168.248029][   T24] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  168.252635][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.255113][   T24] usb 2-1: Product: syz
[  168.256558][   T24] usb 2-1: Manufacturer: syz
[  168.258091][   T24] usb 2-1: SerialNumber: syz
[  168.263065][   T24] usb 2-1: config 0 descriptor??
[  168.268454][   T24] usb 2-1: no audio or video endpoints found
[  168.309664][ T6031] usb 3-1: Using ep0 maxpacket: 8
[  168.325868][ T6031] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  168.332867][ T6031] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.336528][ T6031] usb 3-1: Product: syz
[  168.338359][ T6031] usb 3-1: Manufacturer: syz
[  168.342006][ T6031] usb 3-1: SerialNumber: syz
[  168.352743][ T6031] usb 3-1: config 0 descriptor??
[  168.485650][   T24] usb 2-1: USB disconnect, device number 12
[  168.558313][ T6031] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  169.294383][ T8293] loop1: detected capacity change from 0 to 40427
[  169.311224][ T8293] F2FS-fs (loop1): invalid crc value
[  169.370471][ T8293] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.377124][ T8293] F2FS-fs (loop1): Start checkpoint disabled!
[  169.387898][ T8293] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  169.405924][ T8293] F2FS-fs (loop1): disabling checkpoint not compatible with read-only
[  169.981598][ T6031] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  169.999622][ T6031] usb 3-1: USB disconnect, device number 11
[  170.015102][   T33] audit: type=1326 audit(1755547293.341:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.030000][   T33] audit: type=1326 audit(1755547293.341:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.048686][   T33] audit: type=1326 audit(1755547293.341:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7ffc0000
[  170.063960][   T33] audit: type=1326 audit(1755547293.341:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b358ebe9 code=0x7ffc0000
[  170.089626][   T33] audit: type=1326 audit(1755547293.351:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.099059][   T33] audit: type=1326 audit(1755547293.351:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.115187][   T33] audit: type=1326 audit(1755547293.351:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.129310][   T33] audit: type=1326 audit(1755547293.351:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.149461][   T33] audit: type=1326 audit(1755547293.351:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.161662][   T33] audit: type=1326 audit(1755547293.351:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.1.988" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49b352add9 code=0x7ffc0000
[  170.318723][ T8315] netlink: 136 bytes leftover after parsing attributes in process `syz.1.992'.
[  170.813027][ T8340] netlink: 'syz.0.1003': attribute type 4 has an invalid length.
[  170.823852][ T8340] netlink: 'syz.0.1003': attribute type 4 has an invalid length.
[  170.955529][ T8336] loop1: detected capacity change from 0 to 40427
[  170.960687][ T8336] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  170.963861][ T8336] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  170.969543][ T8336] F2FS-fs (loop1): invalid crc value
[  171.024396][ T8336] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  171.032443][ T8336] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  171.034682][ T8336] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  171.201876][ T6017] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  171.447299][ T6017] usb 3-1: Using ep0 maxpacket: 32
[  171.652449][ T6017] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  171.656072][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.662331][ T6017] usb 3-1: config 0 descriptor??
[  171.909412][ T6017] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  171.943499][ T6017] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  171.964062][ T6017] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  171.967021][ T6017] usb 3-1: media controller created
[  172.003874][ T6017] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  172.114942][ T6017] az6027: usb out operation failed. (-71)
[  172.126389][ T6017] az6027: usb out operation failed. (-71)
[  172.131548][ T6017] stb0899_attach: Driver disabled by Kconfig
[  172.134055][ T6017] az6027: no front-end attached
[  172.134055][ T6017] 
[  172.149733][ T6017] az6027: usb out operation failed. (-71)
[  172.152110][ T6017] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  172.176057][ T6017] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  172.190018][ T6017] dvb-usb: schedule remote query interval to 400 msecs.
[  172.202600][ T6017] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  172.227237][ T6017] usb 3-1: USB disconnect, device number 12
[  172.307339][ T6017] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  172.751503][ T8385] loop1: detected capacity change from 0 to 32768
[  172.886321][ T8385] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  172.886337][ T8385]   allowing incompatible features above 0.0: (unknown version)
[  172.886342][ T8385]   features: 
[  172.902514][ T8385] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  172.904993][ T8385] bcachefs (loop1): initializing new filesystem
[  172.932569][ T8385] bcachefs (loop1): going read-write
[  172.959862][ T8385] bcachefs (loop1): marking superblocks
[  172.995504][ T8385] bcachefs (loop1): initializing freespace
[  173.017577][ T8385] bcachefs (loop1): done initializing freespace
[  173.031411][ T8385] bcachefs (loop1): reading snapshots table
[  173.033772][ T8385] bcachefs (loop1): reading snapshots done
[  173.353802][ T8385] bcachefs (loop1): done starting filesystem
[  173.441925][ T8411] loop2: detected capacity change from 0 to 32768
[  173.489448][ T8411] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  173.498342][   T13] (kworker/u8:1,13,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1
[  173.509393][ T8385] syz.1.1019 (8385) used greatest stack depth: 15896 bytes left
[  173.512410][ T8411] 
[  173.513361][ T8411] ======================================================
[  173.515977][ T8411] WARNING: possible circular locking dependency detected
[  173.518689][ T8411] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  173.522412][ T8411] ------------------------------------------------------
[  173.525779][ T8411] syz.2.1026/8411 is trying to acquire lock:
[  173.528132][ T8411] ffff88801149c0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  173.531819][ T8411] 
[  173.531819][ T8411] but task is already holding lock:
[  173.534710][ T8411] ffff888020a60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  173.538186][ T8411] 
[  173.538186][ T8411] which lock already depends on the new lock.
[  173.538186][ T8411] 
[  173.542193][ T8411] 
[  173.542193][ T8411] the existing dependency chain (in reverse order) is:
[  173.545696][ T8411] 
[  173.545696][ T8411] -> #2 (jbd2_handle){++++}-{0:0}:
[  173.548445][ T8411]        lock_acquire+0x120/0x360
[  173.550408][ T8411]        jbd2_log_wait_commit+0x17c/0x4a0
[  173.552657][ T8411]        ocfs2_try_to_free_truncate_log+0x317/0x360
[  173.555260][ T8411]        ocfs2_write_begin_nolock+0x3143/0x4340
[  173.557716][ T8411]        ocfs2_write_begin+0x1bb/0x310
[  173.560017][ T8411]        generic_perform_write+0x2c5/0x900
[  173.562301][ T8411]        ocfs2_file_write_iter+0x157a/0x1d10
[  173.564638][ T8411]        iter_file_splice_write+0x9c9/0x10b0
[  173.567049][ T8411]        direct_splice_actor+0x101/0x160
[  173.569265][ T8411]        splice_direct_to_actor+0x5a8/0xcc0
[  173.571618][ T8411]        do_splice_direct+0x181/0x270
[  173.573730][ T8411]        do_sendfile+0x4da/0x7e0
[  173.575714][ T8411]        __se_sys_sendfile64+0x13e/0x190
[  173.577928][ T8411]        do_syscall_64+0xfa/0x3b0
[  173.579936][ T8411]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.582529][ T8411] 
[  173.582529][ T8411] -> #1 (&oi->ip_alloc_sem){++++}-{4:4}:
[  173.585673][ T8411]        lock_acquire+0x120/0x360
[  173.587692][ T8411]        down_write+0x96/0x1f0
[  173.589550][ T8411]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  173.592166][ T8411]        ocfs2_truncate_file+0xda0/0x1420
[  173.594449][ T8411]        ocfs2_setattr+0x1520/0x1b40
[  173.596571][ T8411]        notify_change+0xb36/0xe40
[  173.598587][ T8411]        do_truncate+0x1a4/0x220
[  173.600519][ T8411]        path_openat+0x306c/0x3830
[  173.602492][ T8411]        do_filp_open+0x1fa/0x410
[  173.604486][ T8411]        do_sys_openat2+0x121/0x1c0
[  173.606571][ T8411]        __x64_sys_open+0x11e/0x150
[  173.608632][ T8411]        do_syscall_64+0xfa/0x3b0
[  173.610633][ T8411]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.613158][ T8411] 
[  173.613158][ T8411] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  173.616178][ T8411]        validate_chain+0xb9b/0x2140
[  173.618262][ T8411]        __lock_acquire+0xab9/0xd20
[  173.620341][ T8411]        lock_acquire+0x120/0x360
[  173.622340][ T8411]        down_read+0x46/0x2e0
[  173.624252][ T8411]        ocfs2_init_acl+0x2f9/0x720
[  173.626353][ T8411]        ocfs2_mknod+0x1321/0x2050
[  173.628388][ T8411]        ocfs2_mkdir+0x191/0x440
[  173.630352][ T8411]        vfs_mkdir+0x306/0x510
[  173.632253][ T8411]        do_mkdirat+0x247/0x590
[  173.634225][ T8411]        __x64_sys_mkdirat+0x87/0xa0
[  173.636361][ T8411]        do_syscall_64+0xfa/0x3b0
[  173.638373][ T8411]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.640875][ T8411] 
[  173.640875][ T8411] other info that might help us debug this:
[  173.640875][ T8411] 
[  173.644740][ T8411] Chain exists of:
[  173.644740][ T8411]   &oi->ip_xattr_sem --> &oi->ip_alloc_sem --> jbd2_handle
[  173.644740][ T8411] 
[  173.649741][ T8411]  Possible unsafe locking scenario:
[  173.649741][ T8411] 
[  173.652615][ T8411]        CPU0                    CPU1
[  173.654716][ T8411]        ----                    ----
[  173.656818][ T8411]   rlock(jbd2_handle);
[  173.658485][ T8411]                                lock(&oi->ip_alloc_sem);
[  173.661301][ T8411]                                lock(jbd2_handle);
[  173.663830][ T8411]   rlock(&oi->ip_xattr_sem);
[  173.665711][ T8411] 
[  173.665711][ T8411]  *** DEADLOCK ***
[  173.665711][ T8411] 
[  173.668864][ T8411] 8 locks held by syz.2.1026/8411:
[  173.670875][ T8411]  #0: ffff888029300428 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  173.674428][ T8411]  #1: ffff88801149c3c0 (&type->i_mutex_dir_key#20/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  173.678506][ T8411]  #2: ffff8881132209c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  173.683804][ T8411]  #3: ffff88801149b540 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  173.689228][ T8411]  #4: ffff888113225240 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  173.694568][ T8411]  #5: ffff888029300618 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  173.698064][ T8411]  #6: ffff8880118d90e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  173.702102][ T8411]  #7: ffff888020a60950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  173.705735][ T8411] 
[  173.705735][ T8411] stack backtrace:
[  173.707928][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.2.1026 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  173.707949][ T8411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.707961][ T8411] Call Trace:
[  173.707996][ T8411]  <TASK>
[  173.708005][ T8411]  dump_stack_lvl+0x189/0x250
[  173.708028][ T8411]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.708046][ T8411]  ? __pfx__printk+0x10/0x10
[  173.708064][ T8411]  ? stack_trace_save+0x9c/0xe0
[  173.708085][ T8411]  print_circular_bug+0x2ee/0x310
[  173.708104][ T8411]  check_noncircular+0x134/0x160
[  173.708122][ T8411]  validate_chain+0xb9b/0x2140
[  173.708137][ T8411]  ? __pfx_find_get_block_common+0x10/0x10
[  173.708160][ T8411]  __lock_acquire+0xab9/0xd20
[  173.708180][ T8411]  ? ocfs2_init_acl+0x2f9/0x720
[  173.708196][ T8411]  lock_acquire+0x120/0x360
[  173.708215][ T8411]  ? ocfs2_init_acl+0x2f9/0x720
[  173.708231][ T8411]  ? do_raw_spin_unlock+0x4d/0x240
[  173.708247][ T8411]  down_read+0x46/0x2e0
[  173.708270][ T8411]  ? ocfs2_init_acl+0x2f9/0x720
[  173.708286][ T8411]  ocfs2_init_acl+0x2f9/0x720
[  173.708304][ T8411]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  173.708317][ T8411]  ? dquot_alloc_inode+0x216/0xa50
[  173.708332][ T8411]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  173.708349][ T8411]  ? ocfs2_block_signals+0x94/0xe0
[  173.708370][ T8411]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  173.708390][ T8411]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  173.708402][ T8411]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  173.708417][ T8411]  ocfs2_mknod+0x1321/0x2050
[  173.708436][ T8411]  ? __pfx_ocfs2_mknod+0x10/0x10
[  173.708447][ T8411]  ? do_raw_spin_unlock+0x4d/0x240
[  173.708464][ T8411]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  173.708485][ T8411]  ? __lock_acquire+0xab9/0xd20
[  173.708517][ T8411]  ? __lock_acquire+0xab9/0xd20
[  173.708539][ T8411]  ? do_raw_spin_lock+0x121/0x290
[  173.708560][ T8411]  ? do_raw_spin_unlock+0x4d/0x240
[  173.708576][ T8411]  ? put_pid+0xe9/0x130
[  173.708592][ T8411]  ocfs2_mkdir+0x191/0x440
[  173.708605][ T8411]  ? __pfx_from_kgid+0x10/0x10
[  173.708622][ T8411]  ? apparmor_path_mkdir+0x1a7/0x220
[  173.708639][ T8411]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  173.708651][ T8411]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  173.708667][ T8411]  ? inode_permission+0x149/0x470
[  173.708679][ T8411]  ? __pfx_ocfs2_permission+0x10/0x10
[  173.708699][ T8411]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  173.708715][ T8411]  vfs_mkdir+0x306/0x510
[  173.708734][ T8411]  do_mkdirat+0x247/0x590
[  173.708750][ T8411]  ? __pfx_do_mkdirat+0x10/0x10
[  173.708767][ T8411]  ? getname_flags+0x1e5/0x540
[  173.708781][ T8411]  __x64_sys_mkdirat+0x87/0xa0
[  173.708798][ T8411]  do_syscall_64+0xfa/0x3b0
[  173.708817][ T8411]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.708834][ T8411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.708848][ T8411]  ? exc_page_fault+0x9f/0xf0
[  173.708866][ T8411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.708878][ T8411] RIP: 0033:0x7f246158d457
[  173.708893][ T8411] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.708906][ T8411] RSP: 002b:00007f24623a8e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  173.708920][ T8411] RAX: ffffffffffffffda RBX: 00007f24623a8ef0 RCX: 00007f246158d457
[  173.708932][ T8411] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c
[  173.708942][ T8411] RBP: 00002000000002c0 R08: 00002000000001c0 R09: 0000000000000000
[  173.708952][ T8411] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000040
[  173.708962][ T8411] R13: 00007f24623a8eb0 R14: 0000000000000000 R15: 0000000000000000
[  173.709006][ T8411]  </TASK>
[  173.855534][ T5974] bcachefs (loop1): shutting down
[  173.861373][ T5974] bcachefs (loop1): going read-only
[  173.864815][ T5974] bcachefs (loop1): finished waiting for writes to stop
[  173.868461][ T5974] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  173.880641][ T5974] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  173.885384][ T5974] bcachefs (loop1): clean shutdown complete, journal seq 5
[  173.888774][ T5974] bcachefs (loop1): marking filesystem clean
[  173.903246][ T5974] bcachefs (loop1): shutdown complete
[  173.948542][ T5972] ocfs2: Unmounting device (7,2) on (node local)

VM DIAGNOSIS:
20:01:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002339 RDI=000000000000233a RBP=00000000000003f8 RSP=ffffc90006956d10
R8 =ffff8880215e8237 R9 =1ffff110042bd046 R10=dffffc0000000000 R11=ffffffff854f00f0
R12=dffffc0000000000 R13=ffffffff99af990f R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f016c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f24623a96c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3211dff8 CR3=00000000308ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f2461612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c8d7222abf187f00 RBX=ffffffff81968308 RCX=c8d7222abf187f00 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c4878847e8 CR3=0000000031440000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbfbad87498 00007fbfbad87470 XMM03=00007fbfbad874a8 00007fbfbad874a0
XMM04=00007fbfbb8ed100 00007fbfbad87460 XMM05=00007fbfbad87478 00007fbfbad874c0
XMM06=00007fbfbad874b8 00007fbfbad874b0 XMM07=00007fbfbad874a8 00007fbfbad874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbfbac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
