last executing test programs:

36.070886738s ago: executing program 1 (id=56):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='$', 0x1}, {&(0x7f0000000100)="f9", 0x1}], 0x2)

36.070643119s ago: executing program 1 (id=57):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
sendmmsg$inet(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="1c", 0x1}], 0x1}}], 0x1, 0x4000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x4, 0x200, 0x7fffffff, 0x800}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc)

36.02136469s ago: executing program 1 (id=59):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006a2ebfa9961c87fb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)

35.207628129s ago: executing program 1 (id=69):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@shortname_lower}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@sys_immutable}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

35.066101619s ago: executing program 1 (id=70):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x300, 0x59555956, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1, 0x6}, {0x8}, {}, {0x0, 0x4}], 0x6, 0x6}})

34.850338425s ago: executing program 1 (id=71):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)

34.689802211s ago: executing program 32 (id=71):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)

2.449069975s ago: executing program 2 (id=381):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

1.867696499s ago: executing program 0 (id=384):
syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20a6c93, 0x0, 0x4, 0x0, &(0x7f0000006380))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getgroups(0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x100000000000001, 0x2)
r3 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000280)={0x0, 0x2, 0x7})
mq_timedreceive(r3, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x23)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x8, 0x4}]}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x1074, &(0x7f0000001080)="$eJzs0MFNxEAMBdC/2iQsEkh7oBBEBXRAK5SQRjjRBS1wpgd64GDkZCRoAPbynpQZe8a2ogkXddi3NVe5/nVc970ue/LZdSPOuZebJHPeHraeuyypOkz77Vzzz5ivOvZ26u/p+T0vSaZz8tHBMdXpKF22iXlMVdU42n9unfrq9bQlt1tjRjz90asAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/6DgAA//82fBQf")

1.357440247s ago: executing program 2 (id=387):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800)

1.207660199s ago: executing program 3 (id=390):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$eJzs281vFOUfAPDvzG7L249fKyIKgjSisfGlpQWVgxeNJh40MdEDHmtbCLJQQ2sihGg1Bo+GxLvxaOJf4MmTUU8mXvVuSIgSE9CYsGZmZ9ruslsK3bKE/XySaZ9n59mZ57vzPDPPzLMbQN8ayf4kEf+LiF8jYqiRbS4w0vh37cr56b+vnJ9Ool5/84/BvNzVK+eny6Ll+7YVmdE0Iv00KXbSbP7suZNTtdrsmSI/vnDqvfH5s+eeOXFq6vjs8dnTk0eOHD408fxzk892Jc4svqt7Ppzbu/vVty++Pn304js/fpPVd9e+xvqVcXTLSBb4n/Vc67rHu72zHrteX44zqfa6NqxVJSKywzWQ9/+hqMTywRuKVz7paeWADZWdsze1ebn4v1gH7mFJ9LoGQG+UF/zs/rdc7uDwo+cuv9i4AcrivlYsjTXVSIsyAxu4/5GIOLr4z5fZEi3PIZaOz+AGVgAA6DvfZeOfp9uN/9LYtaLc/4u5oeGIuC8idkTE/RGxMyIeiMjLPhgRD93i/lunhm4cf6aXbiuwNcrGfy8Uc1vN479y9BfDlSK3PY9/IDl2ojZ7sPhMRmNgU5afaLfxchMv//J5p/2vHP9lS7b/cixYbORSteUB3czUwlS3BqWXP47YU20Xf7I0E5BExO6I2LPmrS5G8fHkTjz59d5OJW8e/yq6MM9U/yriicbxX4yW+EvJ6vOT45ujNntwvGwVN/rp5wtvdNp/2/ivb19/YGuUHf+tze1/aV0l/zv0V7JyvnY+bvmG5MJvn3W8p6zeZvsfTN7K53TLmnwwtbBwZiJiMHktovX1yeX3lvmyfBb/6IH2/X9H8Z4s/ocjImvE+yLikYjYHxH/FvfQj0bEgVXi/+Glx97ttG5d7T9iyxrLdZTFP9P2/LfU/oebj/+tJyonv//29uPPjv/hPDVavJKf/26ic3U2FyWWWzMAAADc69L8u/FJOraUTtOxscZ3+HfG1rQ2N7/w1LG590/PNL5DPxwDafmka2jF89CJZLHYYiM/WTwrLtcfKp4bf1HZkufHpudqMz2OHfrdtub+v7/s/5nfK72uHbDh/F4L+ldr/097VA/gznP9h/6l/0P/0v+hf7Xr/x+15M0FwL3J9R/6l/4P/Uv/h/6l/0NfWs/v+jcqUV3l1/sSd0si0ruiGhItiUgaF/RN6+zdvT4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMd/AQAA///gq/is")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x2, @desc1})

1.10693816s ago: executing program 3 (id=391):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x4, 0x6, 0x10001, 0x0, 0x1, 0xfffffffffffffffd, 0x27, 0x36a, 0xffffffff})

919.086729ms ago: executing program 0 (id=392):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000bc0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x30}}, 0x0)

765.163191ms ago: executing program 0 (id=393):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000)
read(r0, &(0x7f00000004c0)=""/241, 0xf1)

764.942102ms ago: executing program 0 (id=394):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$qrtrtun(r0, &(0x7f0000000240)="e853", 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x1], 0x0, 0x0, 0x1}}, 0x40)

656.756312ms ago: executing program 0 (id=395):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x8a, 0x0, 0x0, 0x2000000}})

654.862233ms ago: executing program 3 (id=396):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94OTe889k/t9Z8KcOXfm5t4ALqwnI+JGRIxFxDMRMVVsT4sSe52SP+7+/r3FvCSRZS+9nURSbOvu63KxvJb/qEZMRMQ3vhrx3eRo3K2d3bWFRqO+WdSnW+vJO1m2e3N1fWGlvlLfmJubfW7++flb8zND6Wc1Il748l9/8sNffuWF3372lT/d/vuN7+Vp/TfLXo2efgxTp+uV9nPRlT+Xm6MIVpLxdg87bpWcCwAAx8vn+x+OiE+25/9TMdaezQEAAADnSfaFyXgnicgAAACAcyuNiMlI0lpxvu9kccbqtYj4aFxNG82t1meWm9sbS3lbRDUq6fJqoz4TE+1zB6pRSfL6bHGObbf+bE99LiIejYgfT11p12uLzcZS2R9+AAAAwAVxref4/99TaVqrFY17JScHAAAADE+17AQAAACAkXP8DwAAAOdfNetzh66j0tFnAgAAAIzA1158MS9Z9/7XSy/vbK81X765VN9aq61vL9YWm5t3aivN5kr7mn3rJ+2v0Wze+VxsbN+dbtW3WtNbO7u315vbG63bq4dugQ0AAACcoUc/8cYfk4jY+/yVdsldKtoqEdnYwQePl5EhMCof6Jyev4wuD+DsHXx/v1JiHsDZM6WHi6tSdgJA6U76B6CBJ+/8fvi5AAAAo3H9Y4O//397udTUgBErvv9PTnUBEOBcGSs7AaA0ne//3ss6ys4GOEuV42YADgrg3EuH8/3/CacSJgYUAAAo2WS7JGmtOA6YjDSt1SIead8WsJIsrzbqMxHxoYh4a6pyOa/Ptn8zMZsHAAAAAAAAAAAAAAAAAAAAAAAAgFPKsiQyAAAA4FyLSP/WvTPX9amnJ3s/H7iU/GeqvYyIV3720k/vLrRam7P59n++v731erH92TI+wQAAAAB6dY/Tu8fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM9/fvLd7Psizbv7d4lnH/8aWIqBbxi9JpGY+J9nIiKhFx9V9JjB/4vSQixoYQf++1iHisX/wkTyuqRRaH4l+KSCPiyrDixweMH53414YQHy6yN/Lx54v9Xn9pPNle9n/9jRfl/zV4/EvfH//GBox/jwzaaeVw9fE3fz09MP5rEY+P9x9/uvGTfH994j91yj5+55u7u4Pasl9EXO83/iWHY0231u9Mb+3s3lxdX1ipr9Q35uZmn5t/fv7W/Mz08mqjXvzsG+NHH//New9q7x7p/9Vjxt92/wc8/0+fsv/vvnl3/yOd1Z6/TFTi51l246n+f//H8sWnj8bvvvd9qngfyOv5c5i+/q2+8Z/41R+eGJRb3v+lAf2f6On/5Z7+3zhl/5/5+vf/fMqHAgBnYGtnd22h0ahvWjm4EtWHIo2HdyWfd5aeRhJJ5CtvHWpaKD+xzsqrxWtsodF9tQ1pz78rDo5GmXxJ4xEAADA6Dyb9vS1JOQkBAAAAAAAAAAAAAAAAAADABXTiZcAGNaUR8WDLt39wzNXIemPuldNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBj/S8AAP//QELWQQ==")

533.451306ms ago: executing program 0 (id=397):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2200c840)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffe4, 0x50}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
io_uring_setup(0x7bda, 0x0)

262.769288ms ago: executing program 2 (id=398):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0)

240.967627ms ago: executing program 3 (id=399):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f000001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r0, 0x0, 0x0, 0x4}, 0x20)

165.475482ms ago: executing program 2 (id=400):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})

117.48494ms ago: executing program 3 (id=401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setgid(0x0)

62.079735ms ago: executing program 2 (id=402):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x8)
lsetxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x1, 0x2)

313.346µs ago: executing program 3 (id=403):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x33, 0xcd, 0x2e, 0x8, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc9, 0x12, 0x60}}]}}]}}, 0x0)

0s ago: executing program 2 (id=404):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
sendfile(r1, r1, 0x0, 0x800000009)
truncate(&(0x7f00000002c0)='./file1\x00', 0x7ff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58087' (ED25519) to the list of known hosts.
syzkaller login: [   55.998327][ T5785] cgroup: Unknown subsys name 'net'
[   56.117177][ T5785] cgroup: Unknown subsys name 'cpuset'
[   56.123785][ T5785] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.778167][ T5785] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.768118][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.784004][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.787104][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.790504][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.794281][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.830238][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.844190][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.847918][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.850741][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.854837][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.857872][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.884144][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.888900][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.894504][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.898112][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.219844][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.227763][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   65.263640][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.441654][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.444560][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.447126][ T5855] bridge_slave_0: entered allmulticast mode
[   65.451297][ T5855] bridge_slave_0: entered promiscuous mode
[   65.465073][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.467622][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.470059][ T5852] bridge_slave_0: entered allmulticast mode
[   65.474259][ T5852] bridge_slave_0: entered promiscuous mode
[   65.486477][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.488823][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.491373][ T5847] bridge_slave_0: entered allmulticast mode
[   65.495326][ T5847] bridge_slave_0: entered promiscuous mode
[   65.498573][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.500884][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.504443][ T5855] bridge_slave_1: entered allmulticast mode
[   65.507767][ T5855] bridge_slave_1: entered promiscuous mode
[   65.511501][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.514040][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.516444][ T5852] bridge_slave_1: entered allmulticast mode
[   65.520203][ T5852] bridge_slave_1: entered promiscuous mode
[   65.536527][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.539397][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.542309][ T5847] bridge_slave_1: entered allmulticast mode
[   65.547044][ T5847] bridge_slave_1: entered promiscuous mode
[   65.588302][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.603215][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.608242][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.614421][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.633169][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.676069][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.696209][ T5852] team0: Port device team_slave_0 added
[   65.714403][ T5855] team0: Port device team_slave_0 added
[   65.718462][ T5852] team0: Port device team_slave_1 added
[   65.724037][ T5855] team0: Port device team_slave_1 added
[   65.775143][ T5847] team0: Port device team_slave_0 added
[   65.787896][ T5847] team0: Port device team_slave_1 added
[   65.790723][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.793820][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.803595][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.808953][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.811176][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.820465][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.842317][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.845619][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.856006][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.865565][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.868373][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.879013][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.886386][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.888562][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.898005][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.902760][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.905250][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.914986][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.989788][ T5852] hsr_slave_0: entered promiscuous mode
[   65.995021][ T5852] hsr_slave_1: entered promiscuous mode
[   66.003281][ T5855] hsr_slave_0: entered promiscuous mode
[   66.006211][ T5855] hsr_slave_1: entered promiscuous mode
[   66.008606][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   66.010590][ T5855] Cannot create hsr debugfs directory
[   66.070946][ T5847] hsr_slave_0: entered promiscuous mode
[   66.074077][ T5847] hsr_slave_1: entered promiscuous mode
[   66.076635][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   66.078811][ T5847] Cannot create hsr debugfs directory
[   66.432196][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.444851][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.452307][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.465648][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.507276][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.513736][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.529627][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.546292][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.580875][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.600138][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.608408][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.619869][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.706886][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.735673][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.754159][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.758400][ T2182] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.760650][ T2182] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.774908][ T2182] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.777541][ T2182] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.808936][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   66.826199][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.836512][ T1863] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.838883][ T1863] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.846517][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.853011][ T5858] Bluetooth: hci0: command tx timeout
[   66.867925][ T1863] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.870699][ T1863] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.894155][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.910612][ T2182] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.913560][ T2182] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.923369][ T5858] Bluetooth: hci2: command tx timeout
[   66.936326][ T5858] Bluetooth: hci1: command tx timeout
[   66.945754][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.974172][ T2182] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.977001][ T2182] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.108566][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.174249][ T5852] veth0_vlan: entered promiscuous mode
[   67.185795][ T5852] veth1_vlan: entered promiscuous mode
[   67.197414][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.234334][ T5852] veth0_macvtap: entered promiscuous mode
[   67.239319][ T5852] veth1_macvtap: entered promiscuous mode
[   67.252067][ T5855] veth0_vlan: entered promiscuous mode
[   67.271300][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.276690][ T5855] veth1_vlan: entered promiscuous mode
[   67.287068][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.306582][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.310239][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.331602][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.336555][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.351300][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.368187][ T5855] veth0_macvtap: entered promiscuous mode
[   67.378242][ T5855] veth1_macvtap: entered promiscuous mode
[   67.403895][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.432573][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.441762][ T2182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.448792][ T2182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.471939][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.478055][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.487439][ T1863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.490374][ T1863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.491059][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.497696][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.504579][ T5847] veth0_vlan: entered promiscuous mode
[   67.527338][ T5847] veth1_vlan: entered promiscuous mode
[   67.561729][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.658016][ T5847] veth0_macvtap: entered promiscuous mode
[   67.673277][ T5847] veth1_macvtap: entered promiscuous mode
[   67.693346][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.696453][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.710890][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.730504][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.749332][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.754205][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.758311][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.763697][ T1863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.768828][ T1863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.792347][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.878715][ T2182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.887620][ T2182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.956085][ T2182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.959174][ T2182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.054021][ T5922] =======================================================
[   68.054021][ T5922] WARNING: The mand mount option has been deprecated and
[   68.054021][ T5922]          and is ignored by this kernel. Remove the mand
[   68.054021][ T5922]          option from the mount to silence this warning.
[   68.054021][ T5922] =======================================================
[   68.278095][ T5926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.971866][ T5947] loop1: detected capacity change from 0 to 64
[   69.015587][   T55] Bluetooth: hci2: command tx timeout
[   69.017885][ T5858] Bluetooth: hci1: command tx timeout
[   69.110099][ T5936] loop0: detected capacity change from 0 to 32768
[   69.139980][ T5936] 
[   69.139980][ T5936]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   69.139980][ T5936] 
[   69.164764][ T5936] JFS: metapage_get_blocks failed
[   69.167397][ T5936] ERROR: (device loop0): release_metapage: metapage_write_one() failed
[   69.167397][ T5936] 
[   69.180669][ T5936] ERROR: (device loop0): diWrite: ixpxd invalid
[   69.180669][ T5936] 
[   69.187455][ T5936] ERROR: (device loop0): txCommit: 
[   69.187455][ T5936] 
[   69.196744][ T5936] ERROR: (device loop0): diWrite: ixpxd invalid
[   69.196744][ T5936] 
[   69.208504][ T5936] ERROR: (device loop0): txCommit: 
[   69.208504][ T5936] 
[   69.249265][ T5912] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   69.254630][ T5847] 
[   69.254630][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   69.254630][ T5847] 
[   69.261683][ T5847] 
[   69.261683][ T5847]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   69.261683][ T5847] 
[   69.404271][ T5912] usb 3-1: Using ep0 maxpacket: 32
[   69.413018][ T5912] usb 3-1: config 0 has an invalid interface number: 169 but max is 0
[   69.416575][ T5912] usb 3-1: config 0 has no interface number 0
[   69.419248][ T5912] usb 3-1: config 0 interface 169 has no altsetting 0
[   69.430151][ T5912] usb 3-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[   69.433985][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.437463][ T5912] usb 3-1: Product: syz
[   69.449925][ T5912] usb 3-1: Manufacturer: syz
[   69.453750][ T5912] usb 3-1: SerialNumber: syz
[   69.465250][ T5912] usb 3-1: config 0 descriptor??
[   69.477142][ T5912] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   69.670193][ T5972] loop1: detected capacity change from 0 to 256
[   69.690956][ T5899] usb 3-1: USB disconnect, device number 2
[   69.691515][ T5972] exfat: Deprecated parameter 'utf8'
[   69.700355][ T5972] exfat: Deprecated parameter 'namecase'
[   69.703245][ T5972] exfat: Deprecated parameter 'namecase'
[   69.705616][ T5972] exfat: Deprecated parameter 'utf8'
[   69.713933][ T5972] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d)
[   69.788573][ T5976] capability: warning: `syz.1.27' uses 32-bit capabilities (legacy support in use)
[   69.932823][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.197180][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   70.201021][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.205002][ T5912] usb 1-1: Product: syz
[   70.206796][ T5912] usb 1-1: Manufacturer: syz
[   70.209037][ T5912] usb 1-1: SerialNumber: syz
[   70.363041][ T5858] Bluetooth: hci0: command tx timeout
[   70.802824][   T47] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   70.843228][ T5993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.34'.
[   70.956230][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[   70.965631][   T47] usb 3-1: not running at top speed; connect to a high speed hub
[   70.973227][   T47] usb 3-1: config 14 has an invalid interface number: 18 but max is 0
[   70.977436][   T47] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[   70.982068][   T47] usb 3-1: config 14 has no interface number 0
[   70.987088][   T47] usb 3-1: config 14 interface 18 altsetting 180 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   70.994328][   T47] usb 3-1: config 14 interface 18 has no altsetting 0
[   71.011041][   T47] usb 3-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62
[   71.015596][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.018842][   T47] usb 3-1: Product: syz
[   71.020517][   T47] usb 3-1: Manufacturer: syz
[   71.022429][   T47] usb 3-1: SerialNumber: syz
[   71.083010][ T5858] Bluetooth: hci1: command tx timeout
[   71.085283][ T5858] Bluetooth: hci2: command tx timeout
[   71.248932][   T47] rtl8150 3-1:14.18: couldn't find required endpoints
[   71.255378][   T47] rtl8150 3-1:14.18: probe with driver rtl8150 failed with error -5
[   71.268527][   T47] usb 3-1: USB disconnect, device number 3
[   71.407465][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.409539][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.773880][ T6014] loop1: detected capacity change from 0 to 40427
[   71.785953][ T6014] F2FS-fs (loop1): invalid crc value
[   71.858378][ T6014] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.865670][ T6014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   71.880797][ T6014] syz.1.44: attempt to access beyond end of device
[   71.880797][ T6014] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   71.891342][ T6014] syz.1.44: attempt to access beyond end of device
[   71.891342][ T6014] loop1: rw=2049, sector=53256, nr_sectors = 128 limit=40427
[   71.897702][ T6014] syz.1.44: attempt to access beyond end of device
[   71.897702][ T6014] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   71.920687][ T5852] syz-executor: attempt to access beyond end of device
[   71.920687][ T5852] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   71.927424][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   71.927442][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.927451][ T5852] Call Trace:
[   71.927467][ T5852]  <TASK>
[   71.927473][ T5852]  dump_stack_lvl+0x189/0x250
[   71.927497][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.927513][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[   71.927526][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   71.927574][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.927601][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[   71.927624][ T5852]  f2fs_write_end_io+0x886/0xb60
[   71.927652][ T5852]  __submit_merged_bio+0x27a/0x6a0
[   71.927676][ T5852]  __submit_merged_write_cond+0x255/0x530
[   71.927701][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[   71.927719][ T5852]  ? __lock_acquire+0xab9/0xd20
[   71.927768][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.927831][ T5852]  ? check_path+0x21/0x40
[   71.927843][ T5852]  ? check_noncircular+0xe0/0x160
[   71.927897][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   71.927915][ T5852]  do_writepages+0x32e/0x550
[   71.927941][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   71.927959][ T5852]  filemap_fdatawrite+0x199/0x240
[   71.927975][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   71.928030][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   71.928047][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[   71.928071][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[   71.928107][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   71.928168][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[   71.928186][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[   71.928203][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[   71.928213][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[   71.928231][ T5852]  ? shrinker_free+0x2ce/0x3e0
[   71.928244][ T5852]  deactivate_locked_super+0xbc/0x130
[   71.928257][ T5852]  cleanup_mnt+0x425/0x4c0
[   71.928268][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.928284][ T5852]  task_work_run+0x1d4/0x260
[   71.928302][ T5852]  ? __pfx_task_work_run+0x10/0x10
[   71.928318][ T5852]  ? __x64_sys_umount+0x122/0x160
[   71.928339][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[   71.928357][ T5852]  exit_to_user_mode_loop+0xec/0x110
[   71.928372][ T5852]  do_syscall_64+0x2bd/0x3b0
[   71.928386][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.928400][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.928413][ T5852]  ? exc_page_fault+0x9f/0xf0
[   71.928432][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.928444][ T5852] RIP: 0033:0x7f8b55f8ff17
[   71.928459][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   71.928470][ T5852] RSP: 002b:00007ffe7e0e4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   71.928484][ T5852] RAX: 0000000000000000 RBX: 00007f8b56011c05 RCX: 00007f8b55f8ff17
[   71.928493][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7e0e4f20
[   71.928500][ T5852] RBP: 00007ffe7e0e4f20 R08: 0000000000000000 R09: 0000000000000000
[   71.928508][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7e0e5fb0
[   71.928516][ T5852] R13: 00007f8b56011c05 R14: 0000000000011865 R15: 00007ffe7e0e5ff0
[   71.928539][ T5852]  </TASK>
[   71.928573][ T5852] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   72.312706][ T5848] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   72.450821][   T55] Bluetooth: hci0: command tx timeout
[   72.458325][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[   72.472475][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[   72.478123][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short
[   72.489907][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[   72.497188][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   72.503523][ T5848] usb 3-1: no configurations
[   72.505438][ T5848] usb 3-1: can't read configurations, error -22
[   72.509964][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   72.522005][ T5912] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[   72.540480][ T5912] usb 1-1: USB disconnect, device number 2
[   73.165513][   T55] Bluetooth: hci2: command tx timeout
[   73.168352][ T5858] Bluetooth: hci1: command tx timeout
[   73.553366][ T5848] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   73.565827][ T6054] random: crng reseeded on system resumption
[   73.690124][ T6062] loop0: detected capacity change from 0 to 4096
[   73.696366][ T6062] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   73.701044][ T6062] ntfs3(loop0): $Volume is corrupted.
[   73.715320][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.719918][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.733010][ T5848] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   73.736766][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.749905][ T5848] usb 3-1: config 0 descriptor??
[   73.822034][ T6065] loop0: detected capacity change from 0 to 4096
[   73.828009][ T6065] ntfs3(loop0): ino=3, Correct links count -> 2.
[   73.849634][ T6065] ntfs3(loop0): Failed to load $BadClus (-22).
[   74.094690][ T6074] loop0: detected capacity change from 0 to 256
[   74.329814][ T6080] syz.0.67 uses obsolete (PF_INET,SOCK_PACKET)
[   74.366614][ T5848] usb 3-1: string descriptor 0 read error: -22
[   74.529102][ T6084] loop1: detected capacity change from 0 to 128
[   74.576150][ T5848] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input4
[   74.671710][ T5848] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[   74.692955][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   74.770873][ T5859] usb 3-1: USB disconnect, device number 5
[   74.848921][ T5716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.857593][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   74.862048][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[   74.872232][   T10] usb 1-1: config 253 has an invalid interface number: 153 but max is 0
[   74.876105][   T10] usb 1-1: config 253 has no interface number 0
[   74.881041][   T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=56.96
[   74.889048][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.892296][   T10] usb 1-1: Product: syz
[   74.894610][   T10] usb 1-1: Manufacturer: syz
[   74.896106][   T10] usb 1-1: SerialNumber: syz
[   74.928413][ T5716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.997434][ T5716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.055745][ T5716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.114993][   T10] usbhid 1-1:253.153: couldn't find an input interrupt endpoint
[   75.127991][   T10] usb 1-1: USB disconnect, device number 3
[   75.218697][ T5716] bridge_slave_1: left allmulticast mode
[   75.224159][ T5716] bridge_slave_1: left promiscuous mode
[   75.227031][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.236384][ T5716] bridge_slave_0: left allmulticast mode
[   75.238094][ T5716] bridge_slave_0: left promiscuous mode
[   75.239977][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.325151][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.328879][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.337184][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.353387][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.359500][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.559579][ T6100] loop2: detected capacity change from 0 to 512
[   75.568804][ T6100] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.618106][ T6100] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   75.621308][ T6100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[   75.627983][ T6100] EXT4-fs (loop2): orphan cleanup on readonly fs
[   75.630845][ T6100] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[   75.634821][ T6100] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   75.641659][ T6100] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   75.649992][ T6100] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.75: bg 0: block 40: padding at end of block bitmap is not set
[   75.657346][ T6100] EXT4-fs (loop2): Remounting filesystem read-only
[   75.660089][ T6100] EXT4-fs (loop2): 1 truncate cleaned up
[   75.667023][ T6100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   75.700244][ T6100] EXT4-fs (loop2): shut down requested (2)
[   75.759727][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.806774][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.828449][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.846691][ T5716] bond0 (unregistering): Released all slaves
[   75.856795][ T6105] loop2: detected capacity change from 0 to 1024
[   75.879639][ T6105] EXT4-fs: Ignoring removed nobh option
[   75.942910][ T6087] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   75.949230][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.113190][ T6087] usb 1-1: Using ep0 maxpacket: 8
[   76.121694][ T6087] usb 1-1: config 162 has an invalid interface number: 45 but max is 1
[   76.143111][ T6087] usb 1-1: config 162 has an invalid interface number: 87 but max is 1
[   76.146651][ T6087] usb 1-1: config 162 has no interface number 0
[   76.149212][ T6087] usb 1-1: config 162 has no interface number 1
[   76.151761][ T6087] usb 1-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   76.162068][ T6087] usb 1-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   76.177376][ T6087] usb 1-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[   76.182412][ T6087] usb 1-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[   76.192597][ T6087] usb 1-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[   76.200262][ T6087] usb 1-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   76.207299][ T6087] usb 1-1: config 162 interface 45 has no altsetting 0
[   76.210208][ T6087] usb 1-1: config 162 interface 87 has no altsetting 0
[   76.217403][ T6087] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e
[   76.219784][ T6089] chnl_net:caif_netlink_parms(): no params data found
[   76.221119][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.230208][ T6087] usb 1-1: Product: syz
[   76.232105][ T6087] usb 1-1: Manufacturer: syz
[   76.234856][ T6087] usb 1-1: SerialNumber: syz
[   76.316455][ T5716] hsr_slave_0: left promiscuous mode
[   76.320865][ T5716] hsr_slave_1: left promiscuous mode
[   76.330044][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.333452][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.338643][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.341865][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.373709][ T5716] veth1_macvtap: left promiscuous mode
[   76.376552][ T5716] veth0_macvtap: left promiscuous mode
[   76.379200][ T5716] veth1_vlan: left promiscuous mode
[   76.381831][ T5716] veth0_vlan: left promiscuous mode
[   76.475585][ T6087] pl2303 1-1:162.45: required endpoints missing
[   76.484934][ T6087] pl2303 1-1:162.87: required interrupt-in endpoint missing
[   76.500339][ T6087] usb 1-1: USB disconnect, device number 4
[   76.741668][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.927058][ T5716] team0 (unregistering): Port device team_slave_1 removed
[   76.958124][ T5716] team0 (unregistering): Port device team_slave_0 removed
[   77.051721][ T5859] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   77.084441][ T5859] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   77.089394][ T6125] loop2: detected capacity change from 0 to 32768
[   77.109632][ T6125] bcachefs: bch2_fs_parse_param() Error parsing option fix_errors: option_value
[   77.339738][ T6134] Zero length message leads to an empty skb
[   77.414544][   T55] Bluetooth: hci1: command tx timeout
[   77.581132][ T6140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.711086][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.725126][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.727865][ T6089] bridge_slave_0: entered allmulticast mode
[   77.730721][ T6089] bridge_slave_0: entered promiscuous mode
[   77.750055][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.752488][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.757285][ T6089] bridge_slave_1: entered allmulticast mode
[   77.760240][ T6089] bridge_slave_1: entered promiscuous mode
[   77.787773][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.795404][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.863557][ T6089] team0: Port device team_slave_0 added
[   77.869050][ T6089] team0: Port device team_slave_1 added
[   77.913358][ T6087] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   77.916692][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.919665][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.930741][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.941722][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.945971][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.956130][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.984008][   T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   78.001048][ T6089] hsr_slave_0: entered promiscuous mode
[   78.003613][ T6089] hsr_slave_1: entered promiscuous mode
[   78.078276][ T6087] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.082010][ T6087] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   78.089206][ T6087] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   78.092020][ T6087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   78.104351][ T6087] usb 1-1: SerialNumber: syz
[   78.146625][   T10] usb 3-1: config 0 has an invalid interface number: 93 but max is 0
[   78.149320][   T10] usb 3-1: config 0 has no interface number 0
[   78.154356][   T10] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[   78.157196][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.170183][   T10] usb 3-1: Product: syz
[   78.171628][   T10] usb 3-1: Manufacturer: syz
[   78.173755][   T10] usb 3-1: SerialNumber: syz
[   78.182268][   T10] usb 3-1: config 0 descriptor??
[   78.212185][ T6089] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.220816][ T6089] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.227041][ T6089] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.232365][ T6089] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.256863][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.259230][ T6089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.262492][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.265608][ T6089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.304145][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.312095][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.317049][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.337418][ T6087] usb 1-1: USB disconnect, device number 5
[   78.347029][ T6089] 8021q: adding VLAN 0 to HW filter on device team0
[   78.367252][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.377445][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.379735][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.384607][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.386832][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.402361][   T10] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[   78.409622][   T10] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   78.413379][   T10] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[   78.417536][   T10] usb 3-1: media controller created
[   78.422211][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   78.457243][   T10] DVB: Unable to find symbol dib7000p_attach()
[   78.459235][   T10] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[   78.463840][   T10] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   78.466914][   T10] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[   78.469610][   T10] usb 3-1: media controller created
[   78.473284][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   78.478177][   T10] dib0700: the master dib7090 has to be initialized first
[   78.480438][   T10] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[   78.523457][   T10] rc_core: IR keymap rc-dib0700-rc5 not found
[   78.525626][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.525746][   T10] Registered IR keymap rc-empty
[   78.529821][   T10] dvb-usb: could not initialize remote control.
[   78.531896][   T10] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[   78.558527][ T6089] veth0_vlan: entered promiscuous mode
[   78.566791][ T6089] veth1_vlan: entered promiscuous mode
[   78.584987][ T6089] veth0_macvtap: entered promiscuous mode
[   78.589612][ T6089] veth1_macvtap: entered promiscuous mode
[   78.600720][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.609756][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.618576][ T5913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.637128][   T10] usb 3-1: USB disconnect, device number 6
[   78.640592][ T5913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.647760][ T5913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.650569][ T5913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.670457][   T10] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[   78.713953][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.719807][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.742298][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.745523][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.813578][ T6172] Bluetooth: MGMT ver 1.23
[   78.815262][ T6172] Bluetooth: hci0: invalid length 0, exp 2 for type 1
[   79.373117][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.472672][ T5859] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   79.482760][   T55] Bluetooth: hci1: command tx timeout
[   79.523124][   T24] usb 1-1: Using ep0 maxpacket: 32
[   79.530272][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[   79.535661][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.538783][   T24] usb 1-1: Product: syz
[   79.540622][   T24] usb 1-1: Manufacturer: syz
[   79.542462][   T24] usb 1-1: SerialNumber: syz
[   79.547472][   T24] usb 1-1: config 0 descriptor??
[   79.622658][ T5859] usb 3-1: Using ep0 maxpacket: 32
[   79.628779][ T5859] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   79.638304][ T5859] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   79.642100][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   79.647428][ T5859] usb 3-1: Product: syz
[   79.649252][ T5859] usb 3-1: Manufacturer: syz
[   79.650983][ T5859] usb 3-1: SerialNumber: syz
[   79.657501][ T5859] usb 3-1: config 0 descriptor??
[   79.660731][ T6187] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   79.756475][   T24] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device:
[   79.759502][   T24] 13 57 c4 36 7e 4b e4 0d 
[   79.760962][   T24] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5
[   79.968508][ T5912] usb 1-1: USB disconnect, device number 6
[   80.901960][ T6215] loop0: detected capacity change from 0 to 32768
[   80.977649][ T6215] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   80.981217][   T33] audit: type=1326 audit(1756260858.425:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[   80.990429][   T33] audit: type=1326 audit(1756260858.425:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[   80.999318][   T33] audit: type=1326 audit(1756260858.425:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[   81.008227][ T6215] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   81.034291][   T33] audit: type=1326 audit(1756260858.425:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[   81.047353][   T33] audit: type=1326 audit(1756260858.425:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[   81.060776][   T33] audit: type=1800 audit(1756260858.465:7): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.101" name="bus" dev="loop0" ino=17058 res=0 errno=0
[   81.097016][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[   81.172451][ T6225] netlink: 260 bytes leftover after parsing attributes in process `syz.3.106'.
[   81.179858][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'.
[   81.418539][ T6231] loop3: detected capacity change from 0 to 32768
[   81.432398][ T6231] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.108 (6231)
[   81.459367][ T6231] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.462983][ T6231] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[   81.538607][ T6231] BTRFS info (device loop3): rebuilding free space tree
[   81.563323][   T55] Bluetooth: hci1: command tx timeout
[   81.606530][ T6231] BTRFS info (device loop3): allowing degraded mounts
[   81.609589][ T6231] BTRFS info (device loop3): enabling ssd optimizations
[   81.612989][ T6231] BTRFS info (device loop3): enabling free space tree
[   81.615841][ T6231] BTRFS info (device loop3): force clearing of disk cache
[   81.618690][ T6231] BTRFS info (device loop3): use zstd compression, level 3
[   81.621671][ T6231] BTRFS info (device loop3): max_inline set to 0
[   81.665829][ T6089] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.971318][ T6256] netlink: 156 bytes leftover after parsing attributes in process `syz.3.112'.
[   81.986557][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'.
[   82.260461][ T5859] usb 3-1: USB disconnect, device number 7
[   82.520889][ T6277] loop2: detected capacity change from 0 to 16
[   82.549356][ T6277] erofs (device loop2): mounted with root inode @ nid 36.
[   82.573096][ T6277] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[   82.581887][ T6277] erofs (device loop2): failed to decompress -44 in[46, 4050] out[1851]
[   82.589447][ T6277] erofs (device loop2): read error -117 @ 43 of nid 36
[   82.903549][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   82.912347][ T6287] loop2: detected capacity change from 0 to 2048
[   82.925834][ T6287] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   82.937115][ T6287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.073592][ T5859] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   83.077103][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.117968][ T5859] usb 4-1: config 0 descriptor??
[   83.130070][ T5859] gspca_main: cpia1-2.14.0 probing 0813:0001
[   83.231280][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[   83.289721][   T55] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[   83.289774][   T55] Bluetooth: hci2: Unknown advertising packet type: 0x72
[   83.293625][   T55] Bluetooth: hci2: Malformed LE Event: 0x0d
[   83.309617][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'.
[   83.415393][ T5859] gspca_cpia1: usb_control_msg 05, error -71
[   83.644378][   T55] Bluetooth: hci1: command tx timeout
[   83.849358][ T5859] gspca_cpia1: usb_control_msg 01, error -71
[   83.851911][ T5859] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[   84.997637][ T5859] usb 4-1: USB disconnect, device number 2
[   85.300462][ T6328] loop3: detected capacity change from 0 to 512
[   85.306604][ T6328] EXT4-fs: Ignoring removed nobh option
[   85.308875][ T6328] EXT4-fs (loop3): Test dummy encryption mode enabled
[   85.319532][ T6328] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.141: iget: bad i_size value: 38620345925642
[   85.331014][ T6328] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.141: couldn't read orphan inode 15 (err -117)
[   85.337811][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.374828][ T6089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.456687][ T6334] loop3: detected capacity change from 0 to 4096
[   85.469540][ T6334] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[   85.528425][ T6334] ntfs3(loop3): ino=1c, mi_enum_attr
[   85.530958][ T6334] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   85.562257][ T6340] loop0: detected capacity change from 0 to 512
[   85.603353][ T6340] EXT4-fs: Ignoring removed oldalloc option
[   85.662098][ T6340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.662357][ T6344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.147'.
[   85.667749][ T6340] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   85.733697][ T6348] loop3: detected capacity change from 0 to 512
[   85.733971][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.736293][ T6348] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.754960][ T6348] EXT4-fs: Ignoring removed nomblk_io_submit option
[   85.770211][ T6348] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   85.784108][ T6348] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   85.786644][ T6348] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   85.797374][ T6348] EXT4-fs (loop3): 1 truncate cleaned up
[   85.805506][ T6348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.838893][ T6348] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   85.866558][ T6089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.957138][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'.
[   85.964503][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'.
[   85.967261][ T6357] netlink: 332 bytes leftover after parsing attributes in process `syz.3.152'.
[   86.086653][ T6363] loop2: detected capacity change from 0 to 64
[   86.439103][ T6381] trusted_key: syz.0.163 sent an empty control message without MSG_MORE.
[   86.730008][ T6376] loop3: detected capacity change from 0 to 32768
[   86.781106][ T6376] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   86.781116][ T1271] cfg80211: failed to load regulatory.db
[   86.838366][ T6376] XFS (loop3): Ending clean mount
[   86.908008][ T6089] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.161854][ T6393] loop2: detected capacity change from 0 to 32768
[   87.272293][ T1089] read_mapping_page failed!
[   87.282721][ T1089] ERROR: (device loop2): txCommit: 
[   87.282721][ T1089] 
[   87.288203][ T1089] ERROR: (device loop2): remounting filesystem as read-only
[   87.293950][ T1089] jfs_write_inode: jfs_commit_inode failed!
[   87.340991][ T6409] loop0: detected capacity change from 0 to 32768
[   87.382442][ T6409] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   87.460419][ T5847] ocfs2: Unmounting device (7,0) on (node local)
[   87.547990][ T6425] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.178'.
[   87.696557][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'.
[   87.904034][ T1271] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   88.102128][ T1271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   88.105681][ T1271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.108772][ T1271] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   88.113160][ T1271] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[   88.116059][ T1271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.164841][ T1271] usb 3-1: config 0 descriptor??
[   88.593602][ T6453] loop3: detected capacity change from 0 to 1024
[   88.597737][ T6453] EXT4-fs: Ignoring removed nomblk_io_submit option
[   88.608113][ T1271] waltop 0003:172F:0500.0003: unknown main item tag 0x0
[   88.611043][ T1271] waltop 0003:172F:0500.0003: item fetching failed at offset 3/5
[   88.623693][ T1271] waltop 0003:172F:0500.0003: probe with driver waltop failed with error -22
[   88.649496][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.664442][ T6453] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   88.691027][ T6089] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[   88.823369][ T1271] usb 3-1: USB disconnect, device number 8
[   89.093406][ T6462] loop3: detected capacity change from 0 to 32768
[   89.123811][ T6462] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.385862][ T6462] XFS (loop3): Ending clean mount
[   89.393712][ T6462] XFS (loop3): Quotacheck needed: Please wait.
[   89.428607][ T6462] XFS (loop3): Quotacheck: Done.
[   89.447413][   T33] audit: type=1800 audit(1756260866.895:8): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name="file1" dev="loop3" ino=6150 res=0 errno=0
[   89.464204][   T33] audit: type=1800 audit(1756260866.905:9): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name="file1" dev="loop3" ino=6150 res=0 errno=0
[   89.638284][   T33] audit: type=1326 audit(1756260867.075:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.2.199" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c46d8ebe9 code=0x7ffc0000
[   89.659488][   T33] audit: type=1326 audit(1756260867.085:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.2.199" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c46d8ebe9 code=0x7ffc0000
[   89.693295][   T33] audit: type=1326 audit(1756260867.085:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.2.199" exe="/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f4c46d8ebe9 code=0x7ffc0000
[   89.701587][   T33] audit: type=1326 audit(1756260867.085:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.2.199" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c46d8ebe9 code=0x7ffc0000
[   89.717991][   T33] audit: type=1326 audit(1756260867.085:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.2.199" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c46d8ebe9 code=0x7ffc0000
[   89.972484][ T6089] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.982660][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   90.017458][ T6501] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   90.168468][    T9] usb 3-1: Using ep0 maxpacket: 8
[   90.176857][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   90.190529][    T9] usb 3-1: config 5 has an invalid interface number: 128 but max is 0
[   90.203101][    T9] usb 3-1: config 5 has no interface number 0
[   90.206390][    T9] usb 3-1: config 5 interface 128 has no altsetting 0
[   90.215342][    T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=5f.dc
[   90.218184][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.220702][    T9] usb 3-1: Product: syz
[   90.222215][    T9] usb 3-1: Manufacturer: syz
[   90.226578][    T9] usb 3-1: SerialNumber: syz
[   90.340400][   T33] audit: type=1326 audit(1756260867.785:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.3.208" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x0
[   90.464020][    T9] iowarrior 3-1:5.128: no interrupt-out endpoint found
[   90.517053][    T9] usb 3-1: USB disconnect, device number 9
[   90.539710][ T6529] loop0: detected capacity change from 0 to 4096
[   90.553385][ T6531] loop3: detected capacity change from 0 to 64
[   90.663734][ T6534] netlink: 'syz.3.213': attribute type 9 has an invalid length.
[   90.895093][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'.
[   90.898069][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'.
[   90.934640][ T6546] loop3: detected capacity change from 0 to 4096
[   91.311688][ T6576] netlink: 88 bytes leftover after parsing attributes in process `syz.2.234'.
[   91.316263][ T6576] netlink: 88 bytes leftover after parsing attributes in process `syz.2.234'.
[   91.722712][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   91.797833][ T6603] fuse: Unknown parameter 'mGN8oad'
[   91.889294][    T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   91.901098][    T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   91.905402][    T9] usb 3-1: config 220 has an invalid descriptor of length 184, skipping remainder of the config
[   91.911324][    T9] usb 3-1: config 220 has no interface number 2
[   91.915034][    T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   91.919582][    T9] usb 3-1: config 220 interface 0 has no altsetting 0
[   91.922445][    T9] usb 3-1: config 220 interface 76 has no altsetting 0
[   91.925667][    T9] usb 3-1: config 220 interface 1 has no altsetting 0
[   91.932770][    T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   91.936035][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.938644][    T9] usb 3-1: Product: syz
[   91.940159][    T9] usb 3-1: Manufacturer: syz
[   91.941720][    T9] usb 3-1: SerialNumber: syz
[   92.062070][   T10] IPVS: starting estimator thread 0...
[   92.195220][    T9] usb 3-1: selecting invalid altsetting 0
[   92.208628][    T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   92.213690][    T9] usb 3-1: No valid video chain found.
[   92.245172][    T9] usb 3-1: selecting invalid altsetting 0
[   92.247692][    T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[   92.264597][    T9] usb 3-1: USB disconnect, device number 10
[   92.439891][ T6606] IPVS: using max 63 ests per chain, 151200 per kthread
[   93.491145][ T6610] loop2: detected capacity change from 0 to 32768
[   93.819195][   T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   93.829190][   T10] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   93.872805][   T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   94.025884][   T47] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   94.029638][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.047437][   T47] usb 3-1: config 0 descriptor??
[   94.055236][   T47] cp210x 3-1:0.0: cp210x converter detected
[   94.314121][ T6642] loop3: detected capacity change from 0 to 1024
[   94.460184][   T47] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[   94.549064][ T6646] loop3: detected capacity change from 0 to 4096
[   94.554974][ T6646] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   94.581525][ T6640] loop0: detected capacity change from 0 to 40427
[   94.588411][ T6640] F2FS-fs (loop0): build fault injection rate: 14
[   94.589105][ T6646] ntfs3(loop3): ino=9, mi_enum_attr
[   94.592310][ T6640] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   94.599494][ T6646] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   94.612413][ T6640] F2FS-fs (loop0): invalid crc value
[   94.620934][ T6646] ntfs3(loop3): ino=9, mi_enum_attr
[   94.623977][ T6646] ntfs3(loop3): $Secure::$SII is corrupted.
[   94.627041][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   94.630335][ T6646] ntfs3(loop3): Failed to initialize $Secure (-22).
[   94.640715][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   94.685828][   T47] usb 3-1: cp210x converter now attached to ttyUSB0
[   94.712239][ T6640] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.716986][ T6640] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   94.724111][ T6640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   94.744566][ T6640] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   94.752328][ T6640] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[   94.785845][ T5847] syz-executor: attempt to access beyond end of device
[   94.785845][ T5847] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   94.792030][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   94.792049][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.792058][ T5847] Call Trace:
[   94.792065][ T5847]  <TASK>
[   94.792071][ T5847]  dump_stack_lvl+0x189/0x250
[   94.792098][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.792114][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[   94.792128][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   94.792148][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   94.792176][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[   94.792206][ T5847]  f2fs_write_end_io+0x886/0xb60
[   94.792235][ T5847]  __submit_merged_bio+0x27a/0x6a0
[   94.792260][ T5847]  __submit_merged_write_cond+0x255/0x530
[   94.792285][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[   94.792335][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   94.792446][ T5847]  ? __lock_acquire+0xab9/0xd20
[   94.792475][ T5847]  ? do_raw_spin_lock+0x121/0x290
[   94.792519][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   94.792536][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   94.792557][ T5847]  do_writepages+0x32e/0x550
[   94.792584][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   94.792604][ T5847]  filemap_fdatawrite+0x199/0x240
[   94.792623][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   94.792682][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   94.792702][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[   94.792730][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[   94.792765][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   94.792821][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[   94.792841][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[   94.792860][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[   94.792871][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[   94.792896][ T5847]  ? shrinker_free+0x2ce/0x3e0
[   94.792919][ T5847]  deactivate_locked_super+0xbc/0x130
[   94.792938][ T5847]  cleanup_mnt+0x425/0x4c0
[   94.792954][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.792975][ T5847]  task_work_run+0x1d4/0x260
[   94.792997][ T5847]  ? __pfx_task_work_run+0x10/0x10
[   94.793012][ T5847]  ? __x64_sys_umount+0x122/0x160
[   94.793033][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[   94.793054][ T5847]  exit_to_user_mode_loop+0xec/0x110
[   94.793073][ T5847]  do_syscall_64+0x2bd/0x3b0
[   94.793088][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.793103][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.793117][ T5847]  ? exc_page_fault+0x9f/0xf0
[   94.793136][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.793149][ T5847] RIP: 0033:0x7fdd5118ff17
[   94.793163][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   94.793174][ T5847] RSP: 002b:00007ffc5f4bc208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   94.793189][ T5847] RAX: 0000000000000000 RBX: 00007fdd51211c05 RCX: 00007fdd5118ff17
[   94.793198][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5f4bc2c0
[   94.793206][ T5847] RBP: 00007ffc5f4bc2c0 R08: 0000000000000000 R09: 0000000000000000
[   94.793214][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5f4bd350
[   94.793222][ T5847] R13: 00007fdd51211c05 R14: 00000000000171ad R15: 00007ffc5f4bd390
[   94.793247][ T5847]  </TASK>
[   94.849934][ T6655] 9pnet_fd: Insufficient options for proto=fd
[   94.850673][    C0] vkms_vblank_simulate: vblank timer overrun
[   94.924241][    C0] vkms_vblank_simulate: vblank timer overrun
[   94.934582][   T47] usb 3-1: USB disconnect, device number 11
[   94.938168][ T6655] 9pnet_fd: Insufficient options for proto=fd
[   94.944337][   T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   94.970583][ T5847] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   94.976968][   T47] cp210x 3-1:0.0: device disconnected
[   95.155607][ T6664] loop3: detected capacity change from 0 to 64
[   95.211285][ T6664] overlayfs: upper fs needs to support d_type.
[   95.220207][ T6664] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   95.223533][ T6664] overlayfs: failed to set xattr on upper
[   95.226434][ T6664] overlayfs: ...falling back to redirect_dir=nofollow.
[   95.229149][ T6664] overlayfs: ...falling back to index=off.
[   95.231475][ T6664] overlayfs: ...falling back to uuid=null.
[   95.407033][ T6089] Trying to free block not in datazone
[   95.410862][ T6089] Trying to free block not in datazone
[   95.418657][ T6089] Trying to free block not in datazone
[   95.487859][ T6670] loop3: detected capacity change from 0 to 512
[   95.535093][ T6670] EXT4-fs (loop3): orphan cleanup on readonly fs
[   95.537205][ T6670] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   95.548191][ T6668] loop0: detected capacity change from 0 to 32768
[   95.567715][ T6670] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   95.576237][ T6670] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.267: attempt to clear invalid blocks 2 len 1
[   95.581138][ T6670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.267: invalid indirect mapped block 1819239214 (level 0)
[   95.586371][ T6670] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.267: invalid indirect mapped block 1819239214 (level 1)
[   95.597840][ T6670] EXT4-fs (loop3): 1 truncate cleaned up
[   95.601619][ T6670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   95.614820][ T6668] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   95.649698][ T6089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.658011][ T6668] XFS (loop0): Ending clean mount
[   95.700270][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   95.862688][   T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   96.053138][   T47] usb 3-1: Using ep0 maxpacket: 32
[   96.058122][   T47] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[   96.061349][   T47] usb 3-1: config 0 has no interface number 0
[   96.079187][   T47] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   96.092950][   T47] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   96.110617][   T47] usb 3-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   96.130460][   T47] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   96.134751][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.137821][   T47] usb 3-1: Product: syz
[   96.149908][   T47] usb 3-1: Manufacturer: syz
[   96.151431][   T47] usb 3-1: SerialNumber: syz
[   96.163512][   T47] usb 3-1: config 0 descriptor??
[   96.176371][ T6677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   96.181392][   T47] ums-sddr09 3-1:0.20: USB Mass Storage device detected
[   96.248495][   T47] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22
[   96.301118][ T6691] loop0: detected capacity change from 0 to 40427
[   96.313568][ T6691] F2FS-fs (loop0): build fault injection rate: 14
[   96.315882][ T6691] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   96.320643][ T6691] F2FS-fs (loop0): invalid crc value
[   96.329640][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   96.346048][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   96.392683][   T47] usb 3-1: USB disconnect, device number 12
[   96.417407][ T6691] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   96.421312][ T6691] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   96.427630][ T6691] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   96.434896][ T6691] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   96.440037][ T6691] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[   96.455048][ T5847] syz-executor: attempt to access beyond end of device
[   96.455048][ T5847] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   96.461008][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   96.461028][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.461036][ T5847] Call Trace:
[   96.461044][ T5847]  <TASK>
[   96.461050][ T5847]  dump_stack_lvl+0x189/0x250
[   96.461077][ T5847]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.461093][ T5847]  ? __pfx_queue_work_on+0x10/0x10
[   96.461106][ T5847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   96.461125][ T5847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   96.461148][ T5847]  f2fs_handle_critical_error+0x37c/0x540
[   96.461176][ T5847]  f2fs_write_end_io+0x886/0xb60
[   96.461206][ T5847]  __submit_merged_bio+0x27a/0x6a0
[   96.461231][ T5847]  __submit_merged_write_cond+0x255/0x530
[   96.461286][ T5847]  f2fs_write_data_pages+0x261d/0x3000
[   96.461306][ T5847]  ? __lock_acquire+0xab9/0xd20
[   96.461353][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.461408][ T5847]  ? __mod_zone_page_state+0xd7/0x140
[   96.461434][ T5847]  ? folios_put_refs+0x571/0x650
[   96.461461][ T5847]  ? __lock_acquire+0xab9/0xd20
[   96.461496][ T5847]  ? do_raw_spin_lock+0x121/0x290
[   96.461522][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   96.461538][ T5847]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.461560][ T5847]  do_writepages+0x32e/0x550
[   96.461588][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   96.461608][ T5847]  filemap_fdatawrite+0x199/0x240
[   96.461627][ T5847]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   96.461684][ T5847]  ? do_raw_spin_unlock+0x4d/0x240
[   96.461706][ T5847]  f2fs_sync_dirty_inodes+0x31f/0x830
[   96.461733][ T5847]  f2fs_write_checkpoint+0x95a/0x1df0
[   96.461767][ T5847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   96.461820][ T5847]  ? kill_f2fs_super+0x298/0x6c0
[   96.461839][ T5847]  kill_f2fs_super+0x2c3/0x6c0
[   96.461858][ T5847]  ? __pfx_kill_f2fs_super+0x10/0x10
[   96.461869][ T5847]  ? radix_tree_delete_item+0x2b6/0x400
[   96.461896][ T5847]  ? shrinker_free+0x2ce/0x3e0
[   96.461914][ T5847]  deactivate_locked_super+0xbc/0x130
[   96.461933][ T5847]  cleanup_mnt+0x425/0x4c0
[   96.461949][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.461971][ T5847]  task_work_run+0x1d4/0x260
[   96.461992][ T5847]  ? __pfx_task_work_run+0x10/0x10
[   96.462008][ T5847]  ? __x64_sys_umount+0x122/0x160
[   96.462030][ T5847]  ? exit_to_user_mode_loop+0x40/0x110
[   96.462053][ T5847]  exit_to_user_mode_loop+0xec/0x110
[   96.462072][ T5847]  do_syscall_64+0x2bd/0x3b0
[   96.462091][ T5847]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.462107][ T5847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.462121][ T5847]  ? exc_page_fault+0x9f/0xf0
[   96.462140][ T5847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.462153][ T5847] RIP: 0033:0x7fdd5118ff17
[   96.462167][ T5847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   96.462178][ T5847] RSP: 002b:00007ffc5f4bc208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   96.462193][ T5847] RAX: 0000000000000000 RBX: 00007fdd51211c05 RCX: 00007fdd5118ff17
[   96.462205][ T5847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5f4bc2c0
[   96.462213][ T5847] RBP: 00007ffc5f4bc2c0 R08: 0000000000000000 R09: 0000000000000000
[   96.462220][ T5847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5f4bd350
[   96.462229][ T5847] R13: 00007fdd51211c05 R14: 000000000001783c R15: 00007ffc5f4bd390
[   96.462282][ T5847]  </TASK>
[   96.462289][ T5847] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   96.597639][ T6705] loop3: detected capacity change from 0 to 32768
[   96.619739][ T6705] XFS (loop3): Invalid device [./file0], error=-15
[   97.006576][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.033696][ T6717] loop2: detected capacity change from 0 to 512
[   97.057162][ T6717] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   97.062703][ T6717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   97.079796][ T6717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082]
[   97.090122][ T6717] EXT4-fs (loop2): 1 truncate cleaned up
[   97.105984][ T6717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.190443][    T9] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[   97.205005][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.209571][    T9] usb 4-1: config 0 has no interface number 0
[   97.212274][    T9] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   97.217583][    T9] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   97.232617][    T9] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[   97.239202][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.243326][    T9] usb 4-1: Product: syz
[   97.245168][    T9] usb 4-1: Manufacturer: syz
[   97.252408][    T9] usb 4-1: SerialNumber: syz
[   97.264016][    T9] usb 4-1: config 0 descriptor??
[   97.387698][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.493395][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   97.525650][ T6721] loop2: detected capacity change from 0 to 2048
[   97.545223][ T6721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.673582][   T24] usb 1-1: Using ep0 maxpacket: 16
[   97.685554][   T24] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   97.689328][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   97.697874][   T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   97.708505][   T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[   97.718854][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   97.737418][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   97.750872][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   97.766811][   T24] usb 1-1: SerialNumber: syz
[   97.779157][ T6716] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   97.904098][   T10] usb 4-1: USB disconnect, device number 3
[   98.514723][ T6732] Illegal XDP return value 342187456 on prog  (id 21) dev N/A, expect packet loss!
[   98.526405][   T24] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[   98.530954][   T24] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[   98.560006][   T24] usb 1-1: USB disconnect, device number 7
[   98.729888][ T6734] loop3: detected capacity change from 0 to 32768
[   98.735704][ T6734] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[   98.735704][ T6734] 
[   98.739813][ T6734] ERROR: (device loop3): remounting filesystem as read-only
[   98.742880][ T6734] xtLookup: xtSearch returned -5
[   98.744748][ T6734] read_mapping_page failed!
[   98.746508][ T6734] jfs_mount: diMount(ipaimap2) failed, rc = -5
[   98.749340][ T6734] Mount JFS Failure: -5
[   98.750963][ T6734] jfs_mount failed w/return code = -5
[   98.917100][ T6738] loop2: detected capacity change from 0 to 1024
[   98.922205][ T6738] EXT4-fs: Ignoring removed bh option
[   98.934747][ T6738] EXT4-fs: inline encryption not supported
[   98.945569][ T6738] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   98.960521][ T6738] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   98.984693][ T6738] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.292: lblock 2 mapped to illegal pblock 2 (length 1)
[   98.999894][ T6738] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   99.005188][ T6738] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.292: lblock 0 mapped to illegal pblock 48 (length 1)
[   99.010716][ T6738] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   99.018540][ T6738] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.292: Failed to acquire dquot type 0
[   99.023213][ T6738] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   99.028914][ T6738] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.292: mark_inode_dirty error
[   99.036990][ T6738] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   99.040975][ T6738] EXT4-fs (loop2): 1 orphan inode deleted
[   99.054395][ T6738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.060075][   T36] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   99.081583][   T36] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   99.094567][   T36] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u10:1: Failed to release dquot type 0
[   99.110491][ T6738] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.292: lblock 0 mapped to illegal pblock 48 (length 1)
[   99.131512][ T6738] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[   99.162123][ T6740] mmap: syz.3.293 (6740) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   99.184123][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.682895][   T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[   99.963076][   T47] usb 3-1: Using ep0 maxpacket: 32
[   99.966829][   T47] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[   99.969964][   T47] usb 3-1: config 0 has no interface number 0
[   99.972304][   T47] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   99.982617][   T47] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   99.994442][   T47] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[   99.999086][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.002122][   T47] usb 3-1: Product: syz
[  100.012670][   T47] usb 3-1: Manufacturer: syz
[  100.014500][   T47] usb 3-1: SerialNumber: syz
[  100.035184][   T47] usb 3-1: config 0 descriptor??
[  100.042332][ T6752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  100.050963][ T6752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  100.057530][   T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  100.505733][    T9] usb 3-1: USB disconnect, device number 13
[  100.966659][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.132771][   T10] usb 4-1: Using ep0 maxpacket: 8
[  101.141134][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e
[  101.147763][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.150201][   T10] usb 4-1: Product: syz
[  101.151538][   T10] usb 4-1: Manufacturer: syz
[  101.155153][   T10] usb 4-1: SerialNumber: syz
[  101.168635][   T10] usb 4-1: config 0 descriptor??
[  101.234089][ T6768] loop0: detected capacity change from 0 to 32768
[  101.255749][ T6768] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.278669][ T6768] XFS (loop0): Ending clean mount
[  101.283253][ T6768] XFS (loop0): Quotacheck needed: Please wait.
[  101.312424][ T6770] loop2: detected capacity change from 0 to 32768
[  101.314135][ T6768] XFS (loop0): Quotacheck: Done.
[  101.315494][ T6770] XFS: ikeep mount option is deprecated.
[  101.359087][ T6770] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  101.365726][ T6770] XFS (loop2): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent.
[  101.376973][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.379890][   T47] usb 4-1: USB disconnect, device number 4
[  101.386974][ T6770] XFS (loop2): please mount without quota.
[  101.921224][ T6795] loop2: detected capacity change from 0 to 1024
[  102.985003][ T6816] loop0: detected capacity change from 0 to 32768
[  102.988400][ T6816] XFS: noikeep mount option is deprecated.
[  103.132178][ T6816] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.405809][ T6816] XFS (loop0): Ending clean mount
[  103.412823][ T6816] XFS (loop0): Quotacheck needed: Please wait.
[  103.440387][ T6816] XFS (loop0): Quotacheck: Done.
[  103.469524][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.590648][ T6838] loop0: detected capacity change from 0 to 256
[  103.594492][ T6838] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  103.599752][ T6838] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.607988][ T6835] loop2: detected capacity change from 0 to 32768
[  103.623808][ T6835] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.319 (6835)
[  103.636837][ T6835] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.640686][ T6835] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  103.675181][ T6835] BTRFS info (device loop2): rebuilding free space tree
[  103.685681][ T6835] BTRFS info (device loop2): enabling ssd optimizations
[  103.687910][ T6835] BTRFS info (device loop2): using spread ssd allocation scheme
[  103.690462][ T6835] BTRFS info (device loop2): enabling free space tree
[  103.694314][ T6835] BTRFS info (device loop2): force clearing of disk cache
[  103.862191][ T5716] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  103.900578][ T6859] loop0: detected capacity change from 0 to 1024
[  104.011161][   T33] audit: type=1800 audit(1756260881.455:16): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file1" dev="loop0" ino=26 res=0 errno=0
[  104.119718][ T6868] loop0: detected capacity change from 0 to 1024
[  104.125927][ T6868] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  104.142993][ T6868] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  104.160229][ T6868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.189849][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.266441][ T5855] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.466065][ T6877] loop2: detected capacity change from 0 to 256
[  104.597569][ T6883] loop0: detected capacity change from 0 to 128
[  104.622324][ T6883] FAT-fs (loop0): Directory bread(block 32) failed
[  104.625949][ T6883] FAT-fs (loop0): Directory bread(block 33) failed
[  104.631316][ T6883] FAT-fs (loop0): Directory bread(block 34) failed
[  104.636862][ T6883] FAT-fs (loop0): Directory bread(block 35) failed
[  104.642837][ T6883] FAT-fs (loop0): Directory bread(block 36) failed
[  104.647620][ T6883] FAT-fs (loop0): Directory bread(block 37) failed
[  104.652211][ T6883] FAT-fs (loop0): Directory bread(block 38) failed
[  104.660411][ T6883] FAT-fs (loop0): Directory bread(block 39) failed
[  104.663319][ T6883] FAT-fs (loop0): Directory bread(block 40) failed
[  104.666817][ T6883] FAT-fs (loop0): Directory bread(block 41) failed
[  104.804021][ T6894] loop0: detected capacity change from 0 to 128
[  104.906398][ T6897] loop3: detected capacity change from 0 to 1024
[  105.058985][ T6907] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  105.182979][ T6914] netlink: 'syz.3.347': attribute type 3 has an invalid length.
[  105.259623][ T6924] loop2: detected capacity change from 0 to 8
[  105.450145][ T6936] loop2: detected capacity change from 0 to 4096
[  105.481265][ T6936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.605189][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.700559][ T6940] loop3: detected capacity change from 0 to 32768
[  105.726434][ T6953] loop2: detected capacity change from 0 to 136
[  105.735654][ T6953] Attempt to read inode for relocated directory
[  105.834802][ T1271] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  105.846906][ T6959] binder: 6958:6959 ioctl c0306201 200000000100 returned -22
[  105.997417][ T1271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.001785][ T1271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.009788][ T1271] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  106.023964][ T1271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  106.026487][ T1271] usb 1-1: SerialNumber: syz
[  106.092272][ T6973] loop3: detected capacity change from 0 to 512
[  106.095752][ T6973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  106.150828][ T6973] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  106.161206][ T6973] EXT4-fs (loop3): 1 truncate cleaned up
[  106.167233][ T6973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.443666][ T6089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.499867][ T1271] usb 1-1: 0:2 : does not exist
[  106.506959][ T1271] usb 1-1: USB disconnect, device number 8
[  106.544031][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.947891][ T6986] loop2: detected capacity change from 0 to 512
[  106.971145][ T6986] EXT4-fs: Ignoring removed nobh option
[  106.983487][ T6986] EXT4-fs (loop2): Test dummy encryption mode enabled
[  106.991078][ T6986] EXT4-fs error (device loop2): __ext4_iget:5464: inode #11: block 1: comm syz.2.377: invalid block
[  107.003477][ T6986] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.377: couldn't read orphan inode 11 (err -117)
[  107.009282][ T6986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.097597][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.537097][ T6990] loop0: detected capacity change from 0 to 40427
[  107.541686][ T6990] F2FS-fs (loop0): Invalid log blocks per segment (3279)
[  107.551834][ T6990] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  107.559454][ T6990] F2FS-fs (loop0): invalid crc value
[  107.562044][ T6990] F2FS-fs (loop0): invalid journal entries nats 0 sits 50950
[  107.565669][ T6990] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-22)
[  107.757227][ T6999] usb usb8: usbfs: process 6999 (syz.0.382) did not claim interface 0 before use
[  108.258788][ T7008] loop0: detected capacity change from 0 to 8192
[  108.406744][ T7015] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  108.480693][ T7020] loop3: detected capacity change from 0 to 512
[  108.496443][ T7020] EXT4-fs (loop3): Test dummy encryption mode enabled
[  108.502262][ T7020] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  108.506405][ T7020] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  108.511675][ T7020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.520792][ T7020] EXT4-fs (loop3): shut down requested (1)
[  108.537839][ T6089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.837492][ T7023] loop3: detected capacity change from 0 to 32768
[  108.857762][ T7023] (syz.3.391,7023,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  108.866964][ T7023] (syz.3.391,7023,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  108.885245][ T7023] JBD2: Ignoring recovery information on journal
[  108.916779][ T7023] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.015213][ T6089] ocfs2: Unmounting device (7,3) on (node local)
[  109.115750][ T7037] loop3: detected capacity change from 0 to 512
[  109.133617][ T7037] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  109.141227][ T7037] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 34)!
[  109.148120][ T7037] EXT4-fs (loop3): group descriptors corrupted!
[  109.511832][ T7045] warning: `syz.2.400' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.581827][   T33] audit: type=1326 audit(1756260887.025:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[  109.594188][   T33] audit: type=1326 audit(1756260887.025:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[  109.615571][   T33] audit: type=1326 audit(1756260887.025:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.401" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[  109.638082][   T33] audit: type=1326 audit(1756260887.025:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[  109.674866][   T33] audit: type=1326 audit(1756260887.025:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.3.401" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463ef8ebe9 code=0x7ffc0000
[  109.869019][ T7051] loop2: detected capacity change from 0 to 32768
[  109.903656][ T7051] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  109.936110][ T7051] 
[  109.937141][ T7051] ======================================================
[  109.939772][ T7051] WARNING: possible circular locking dependency detected
[  109.942437][ T7051] syzkaller #0 Not tainted
[  109.944214][ T7051] ------------------------------------------------------
[  109.948194][ T7051] syz.2.404/7051 is trying to acquire lock:
[  109.950533][ T7051] ffff88802aa5cf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  109.953966][ T7051] 
[  109.953966][ T7051] but task is already holding lock:
[  109.956428][ T7051] ffff88801f2b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  109.959491][ T7051] 
[  109.959491][ T7051] which lock already depends on the new lock.
[  109.959491][ T7051] 
[  109.962695][ T7051] 
[  109.962695][ T7051] the existing dependency chain (in reverse order) is:
[  109.965861][ T7051] 
[  109.965861][ T7051] -> #4 (jbd2_handle){++++}-{0:0}:
[  109.968744][ T7051]        lock_acquire+0x120/0x360
[  109.970473][ T7051]        start_this_handle+0x1fa7/0x21c0
[  109.972372][ T7051]        jbd2__journal_start+0x2c1/0x5b0
[  109.974577][ T7051]        jbd2_journal_start+0x2a/0x40
[  109.976611][ T7051]        ocfs2_start_trans+0x376/0x6d0
[  109.978478][ T7051]        ocfs2_mknod+0xe93/0x2050
[  109.980513][ T7051]        ocfs2_create+0x1a5/0x440
[  109.982472][ T7051]        path_openat+0x14f4/0x3830
[  109.984538][ T7051]        do_filp_open+0x1fa/0x410
[  109.986523][ T7051]        do_sys_openat2+0x121/0x1c0
[  109.988660][ T7051]        __x64_sys_open+0x11e/0x150
[  109.990793][ T7051]        do_syscall_64+0xfa/0x3b0
[  109.992799][ T7051]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.995480][ T7051] 
[  109.995480][ T7051] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  109.998359][ T7051]        lock_acquire+0x120/0x360
[  109.999854][ T7051]        down_read+0x46/0x2e0
[  110.001299][ T7051]        ocfs2_start_trans+0x36a/0x6d0
[  110.003387][ T7051]        ocfs2_mknod+0xe93/0x2050
[  110.005296][ T7051]        ocfs2_create+0x1a5/0x440
[  110.006802][ T7051]        path_openat+0x14f4/0x3830
[  110.008559][ T7051]        do_filp_open+0x1fa/0x410
[  110.010099][ T7051]        do_sys_openat2+0x121/0x1c0
[  110.011880][ T7051]        __x64_sys_open+0x11e/0x150
[  110.013588][ T7051]        do_syscall_64+0xfa/0x3b0
[  110.015315][ T7051]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.017845][ T7051] 
[  110.017845][ T7051] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  110.020772][ T7051]        lock_acquire+0x120/0x360
[  110.022740][ T7051]        ocfs2_start_trans+0x26b/0x6d0
[  110.024778][ T7051]        ocfs2_xattr_set+0xd69/0x11f0
[  110.026878][ T7051]        __vfs_setxattr+0x43c/0x480
[  110.028922][ T7051]        __vfs_setxattr_noperm+0x12d/0x660
[  110.031207][ T7051]        vfs_setxattr+0x16b/0x2f0
[  110.033192][ T7051]        filename_setxattr+0x274/0x600
[  110.035306][ T7051]        path_setxattrat+0x364/0x3a0
[  110.037390][ T7051]        __x64_sys_setxattr+0xbc/0xe0
[  110.039499][ T7051]        do_syscall_64+0xfa/0x3b0
[  110.041466][ T7051]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.043696][ T7051] 
[  110.043696][ T7051] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  110.047890][ T7051]        lock_acquire+0x120/0x360
[  110.049888][ T7051]        down_write+0x96/0x1f0
[  110.051770][ T7051]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  110.054293][ T7051]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  110.056962][ T7051]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  110.059538][ T7051]        ocfs2_xattr_set+0xb70/0x11f0
[  110.061628][ T7051]        __vfs_setxattr+0x43c/0x480
[  110.063651][ T7051]        __vfs_setxattr_noperm+0x12d/0x660
[  110.065889][ T7051]        vfs_setxattr+0x16b/0x2f0
[  110.067855][ T7051]        filename_setxattr+0x274/0x600
[  110.069917][ T7051]        path_setxattrat+0x364/0x3a0
[  110.071935][ T7051]        __x64_sys_setxattr+0xbc/0xe0
[  110.073968][ T7051]        do_syscall_64+0xfa/0x3b0
[  110.076053][ T7051]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.078463][ T7051] 
[  110.078463][ T7051] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  110.081592][ T7051]        validate_chain+0xb9b/0x2140
[  110.083705][ T7051]        __lock_acquire+0xab9/0xd20
[  110.085793][ T7051]        lock_acquire+0x120/0x360
[  110.087801][ T7051]        down_read+0x46/0x2e0
[  110.089706][ T7051]        ocfs2_init_acl+0x2f9/0x720
[  110.091801][ T7051]        ocfs2_mknod+0x1321/0x2050
[  110.093892][ T7051]        ocfs2_create+0x1a5/0x440
[  110.095913][ T7051]        path_openat+0x14f4/0x3830
[  110.097966][ T7051]        do_filp_open+0x1fa/0x410
[  110.100011][ T7051]        do_sys_openat2+0x121/0x1c0
[  110.102069][ T7051]        __x64_sys_openat+0x138/0x170
[  110.104099][ T7051]        do_syscall_64+0xfa/0x3b0
[  110.106063][ T7051]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.108541][ T7051] 
[  110.108541][ T7051] other info that might help us debug this:
[  110.108541][ T7051] 
[  110.112014][ T7051] Chain exists of:
[  110.112014][ T7051]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  110.112014][ T7051] 
[  110.116694][ T7051]  Possible unsafe locking scenario:
[  110.116694][ T7051] 
[  110.119064][ T7051]        CPU0                    CPU1
[  110.120829][ T7051]        ----                    ----
[  110.122472][ T7051]   rlock(jbd2_handle);
[  110.123745][ T7051]                                lock(&journal->j_trans_barrier);
[  110.126278][ T7051]                                lock(jbd2_handle);
[  110.128413][ T7051]   rlock(&oi->ip_xattr_sem);
[  110.129994][ T7051] 
[  110.129994][ T7051]  *** DEADLOCK ***
[  110.129994][ T7051] 
[  110.132742][ T7051] 8 locks held by syz.2.404/7051:
[  110.134360][ T7051]  #0: ffff88803c73e428 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  110.137195][ T7051]  #1: ffff88802aa5d240 (&type->i_mutex_dir_key#13){+.+.}-{4:4}, at: path_openat+0x8da/0x3830
[  110.140608][ T7051]  #2: ffff88802a9d89c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  110.144858][ T7051]  #3: ffff88802aa5c3c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  110.148937][ T7051]  #4: ffff88802a9da6c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  110.153936][ T7051]  #5: ffff88803c73e618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  110.156751][ T7051]  #6: ffff8880277064e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  110.160159][ T7051]  #7: ffff88801f2b4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  110.163096][ T7051] 
[  110.163096][ T7051] stack backtrace:
[  110.164895][ T7051] CPU: 0 UID: 0 PID: 7051 Comm: syz.2.404 Not tainted syzkaller #0 PREEMPT(full) 
[  110.164907][ T7051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.164914][ T7051] Call Trace:
[  110.164921][ T7051]  <TASK>
[  110.164926][ T7051]  dump_stack_lvl+0x189/0x250
[  110.164942][ T7051]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.164951][ T7051]  ? __pfx__printk+0x10/0x10
[  110.164963][ T7051]  ? stack_trace_save+0x9c/0xe0
[  110.164993][ T7051]  print_circular_bug+0x2ee/0x310
[  110.165003][ T7051]  check_noncircular+0x134/0x160
[  110.165014][ T7051]  validate_chain+0xb9b/0x2140
[  110.165027][ T7051]  __lock_acquire+0xab9/0xd20
[  110.165041][ T7051]  ? ocfs2_init_acl+0x2f9/0x720
[  110.165050][ T7051]  lock_acquire+0x120/0x360
[  110.165061][ T7051]  ? ocfs2_init_acl+0x2f9/0x720
[  110.165070][ T7051]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  110.165082][ T7051]  down_read+0x46/0x2e0
[  110.165089][ T7051]  ? ocfs2_init_acl+0x2f9/0x720
[  110.165099][ T7051]  ocfs2_init_acl+0x2f9/0x720
[  110.165110][ T7051]  ? ocfs2_mknod_locked+0x148/0x250
[  110.165120][ T7051]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  110.165128][ T7051]  ? dquot_alloc_inode+0x216/0xa50
[  110.165137][ T7051]  ? ocfs2_block_signals+0x94/0xe0
[  110.165149][ T7051]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  110.165161][ T7051]  ? ocfs2_init_security_get+0x139/0x1a0
[  110.165172][ T7051]  ocfs2_mknod+0x1321/0x2050
[  110.165183][ T7051]  ? __pfx_ocfs2_mknod+0x10/0x10
[  110.165190][ T7051]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  110.165201][ T7051]  ? __lock_acquire+0xab9/0xd20
[  110.165215][ T7051]  ? look_up_lock_class+0x74/0x170
[  110.165226][ T7051]  ? register_lock_class+0x51/0x320
[  110.165237][ T7051]  ? __lock_acquire+0xab9/0xd20
[  110.165249][ T7051]  ? __lock_acquire+0xab9/0xd20
[  110.165260][ T7051]  ? do_raw_spin_lock+0x121/0x290
[  110.165271][ T7051]  ? do_raw_spin_unlock+0x4d/0x240
[  110.165280][ T7051]  ? rcu_is_watching+0x15/0xb0
[  110.165288][ T7051]  ? ocfs2_lookup+0x5b9/0x9b0
[  110.165295][ T7051]  ocfs2_create+0x1a5/0x440
[  110.165302][ T7051]  ? __pfx_ocfs2_lookup+0x10/0x10
[  110.165309][ T7051]  ? from_kgid+0x1b0/0x650
[  110.165319][ T7051]  ? __pfx_ocfs2_create+0x10/0x10
[  110.165325][ T7051]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  110.165334][ T7051]  ? inode_permission+0x149/0x470
[  110.165340][ T7051]  ? __pfx_ocfs2_permission+0x10/0x10
[  110.165351][ T7051]  ? bpf_lsm_inode_create+0x9/0x20
[  110.165360][ T7051]  ? __pfx_ocfs2_create+0x10/0x10
[  110.165366][ T7051]  path_openat+0x14f4/0x3830
[  110.165375][ T7051]  ? arch_stack_walk+0xfc/0x150
[  110.165389][ T7051]  ? __pfx_path_openat+0x10/0x10
[  110.165397][ T7051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.165408][ T7051]  do_filp_open+0x1fa/0x410
[  110.165417][ T7051]  ? __lock_acquire+0xab9/0xd20
[  110.165427][ T7051]  ? __pfx_do_filp_open+0x10/0x10
[  110.165439][ T7051]  ? _raw_spin_unlock+0x28/0x50
[  110.165448][ T7051]  ? alloc_fd+0x64c/0x6c0
[  110.165460][ T7051]  do_sys_openat2+0x121/0x1c0
[  110.165469][ T7051]  ? __se_sys_futex+0x36f/0x400
[  110.165478][ T7051]  ? __pfx_do_sys_openat2+0x10/0x10
[  110.165494][ T7051]  ? rcu_is_watching+0x15/0xb0
[  110.165501][ T7051]  __x64_sys_openat+0x138/0x170
[  110.165511][ T7051]  do_syscall_64+0xfa/0x3b0
[  110.165523][ T7051]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.165533][ T7051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.165541][ T7051]  ? exc_page_fault+0x9f/0xf0
[  110.165551][ T7051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.165559][ T7051] RIP: 0033:0x7f4c46d8ebe9
[  110.165569][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.165576][ T7051] RSP: 002b:00007f4c47b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  110.165584][ T7051] RAX: ffffffffffffffda RBX: 00007f4c46fb5fa0 RCX: 00007f4c46d8ebe9
[  110.165590][ T7051] RDX: 0000000000000042 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  110.165596][ T7051] RBP: 00007f4c46e11e19 R08: 0000000000000000 R09: 0000000000000000
[  110.165601][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.165606][ T7051] R13: 00007f4c46fb6038 R14: 00007f4c46fb5fa0 R15: 00007ffcdebcfe78
[  110.165614][ T7051]  </TASK>
[  110.168244][   T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  110.180917][   T33] audit: type=1800 audit(1756260887.625:22): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.404" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  110.336305][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  110.353261][   T47] usb 4-1: Using ep0 maxpacket: 8
[  110.356761][   T47] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  110.361872][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.372386][   T47] usb 4-1: config 0 descriptor??
[  110.386619][   T47] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  110.390640][   T47] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  110.589435][   T47] usb 4-1: USB disconnect, device number 5

VM DIAGNOSIS:
02:14:47  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000024ee RDI=00000000000024ef RBP=ffffffff99def6b0 RSP=ffffc9000652e890
R8 =ffff888108a48237 R9 =1ffff11021149046 R10=dffffc0000000000 R11=ffffffff854f3270
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f32e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 00007f4c47b866c0 ffffffff 00c00100
GS =0000 ffff8880b861b000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3281dff8 CR3=00000000266ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=622d383864342d63 6666352d63333536
XMM06=656431626632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00000000ffffffff 0000000000000000 XMM09=6265396261613434 322d623333622d38
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff823a0df9 RBX=ffffc90002bbef00 RCX=2ed261bb9933f600 RDX=ffffc90002bbee01
RSI=ffffffff823a0df9 RDI=ffffc90002bbef00 RBP=ffffc90002bbeed0 RSP=ffffc90002bbee40
R8 =ffffc90002bbf918 R9 =0000000000000000 R10=ffffc90002bbee98 R11=ffffffff81ac3820
R12=ffff8880208a1cc0 R13=1ffff92000577df4 R14=ffffffff81ac3820 R15=ffffc90002bbee48
RIP=ffffffff81ac3820 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4c3d172000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdd51387498 00007fdd51387470 XMM03=00007fdd513874a8 00007fdd513874a0
XMM04=00007fdd51eed100 00007fdd51387460 XMM05=00007fdd51387478 00007fdd513874c0
XMM06=00007fdd513874b8 00007fdd513874b0 XMM07=00007fdd513874a8 00007fdd513874a0
XMM08=8c6070020ca5008e a5359f63c48a581b XMM09=0000000000000000 00007fdd51212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
