last executing test programs:

2m36.135002755s ago: executing program 0 (id=429):
r0 = syz_open_dev$sg(&(0x7f00000000c0), 0xfffffffffffffffa, 0x101102)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000140)=0x80000401)

2m36.07384546s ago: executing program 0 (id=430):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m35.97924423s ago: executing program 0 (id=432):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m35.891997573s ago: executing program 0 (id=434):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {}, {@uni_xlate}, {@fat=@showexec}, {@fat=@usefree}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@fat=@showexec}, {@numtail}]}, 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

2m35.813424214s ago: executing program 0 (id=437):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "36a6434088fea58f", "111ed631702ca6fb3f5c4725ca7b6844", "3cbd0155", "559cd81cd03b2248"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, ' \x00', "ae460d2d26cb2c92eb9da9b99ff762f0", "96a73145", "7018682274a5df86"}, 0xc51c)

2m35.422184931s ago: executing program 0 (id=445):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

2m35.304608304s ago: executing program 32 (id=445):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

48.729175877s ago: executing program 3 (id=1518):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xfffffffc, 0x10, "ba00"})
r1 = syz_open_pts(r0, 0x20800)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000200)={0x24d, 0x3, 0x1, 0x5, 0xf3, "3b2e4acfb6c0991c7a4706da15a6c3a488faeb", 0x8, 0x7ff})
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)

47.752231624s ago: executing program 3 (id=1528):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a00"/12, @ANYRES32=0x0, @ANYBLOB="10"], 0x20)

47.657914707s ago: executing program 3 (id=1530):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb}, 0xc)

47.498614986s ago: executing program 3 (id=1531):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00')

47.36690491s ago: executing program 3 (id=1532):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trm\nD'], 0xa)

46.79392017s ago: executing program 3 (id=1535):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000100)='./file5\x00', 0x800000, &(0x7f00000001c0)={[{@prjjquota}, {@discard}, {@jqfmt_vfsv0}, {@noextent_cache}, {@checkpoint_enable}, {@disable_roll_forward}, {@usrjquota={'usrjquota', 0x3d, 'memory=low'}}, {@extent_cache}, {@two_active_logs}, {@disable_ext_identify}, {@memory_low}, {@grpjquota={'grpjquota', 0x3d, 'x#\xb8IX667@\xc5\xe3\x15\x9f\xb5\xa2\xec:D\x1a\xe2\xa2\x8f&\xe1\xa1\xeeo\x9f4|`\xf3W\x97\xe7\x80\xb8\xd7\xed\xb3\x9c\xeff\xf2twC\x02P@:RS\xd1?\x16\x11\xe8E\n\a\x98\aF\x92\xf2\r\xe2\x13\xeb@\x00'}}, {@noheap}, {@extent_cache}, {@fastboot}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")

46.526703573s ago: executing program 33 (id=1535):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000100)='./file5\x00', 0x800000, &(0x7f00000001c0)={[{@prjjquota}, {@discard}, {@jqfmt_vfsv0}, {@noextent_cache}, {@checkpoint_enable}, {@disable_roll_forward}, {@usrjquota={'usrjquota', 0x3d, 'memory=low'}}, {@extent_cache}, {@two_active_logs}, {@disable_ext_identify}, {@memory_low}, {@grpjquota={'grpjquota', 0x3d, 'x#\xb8IX667@\xc5\xe3\x15\x9f\xb5\xa2\xec:D\x1a\xe2\xa2\x8f&\xe1\xa1\xeeo\x9f4|`\xf3W\x97\xe7\x80\xb8\xd7\xed\xb3\x9c\xeff\xf2twC\x02P@:RS\xd1?\x16\x11\xe8E\n\a\x98\aF\x92\xf2\r\xe2\x13\xeb@\x00'}}, {@noheap}, {@extent_cache}, {@fastboot}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")

10.26362842s ago: executing program 4 (id=1898):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

10.049964993s ago: executing program 4 (id=1899):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x6}]]}}}]}, 0x40}}, 0x0)

9.850930895s ago: executing program 4 (id=1903):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.191790075s ago: executing program 4 (id=1921):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000840)={[{@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0xffd}}, {@nolazytime}, {@jqfmt_vfsold}, {@errors_remount}, {@minixdf}, {@errors_remount}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
truncate(&(0x7f0000000180)='./file0/file1\x00', 0x73d)

6.939696263s ago: executing program 4 (id=1928):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20)

5.693428753s ago: executing program 4 (id=1941):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)

5.392124534s ago: executing program 34 (id=1941):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)

2.86343029s ago: executing program 1 (id=1964):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)

2.673502107s ago: executing program 1 (id=1965):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=")

1.897671426s ago: executing program 1 (id=1969):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x20040)
close_range(r0, 0xffffffffffffffff, 0x0)

1.793221758s ago: executing program 2 (id=1970):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x7fc, "030000040000000033000000040000000000000000000700001800", <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000001})
r3 = epoll_create(0x5d6bbf67)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x2004})

1.72087594s ago: executing program 2 (id=1971):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000040)={'wlan0\x00'})

1.72050013s ago: executing program 1 (id=1972):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x16, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0], 0x1, 0x5af1, &(0x7f0000005fc0)="$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")

1.250519862s ago: executing program 1 (id=1973):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x6, 0x2, 0xffffffff}})

1.250145686s ago: executing program 1 (id=1974):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000140)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)

392.3633ms ago: executing program 2 (id=1975):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x1)

223.509815ms ago: executing program 2 (id=1976):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e", 0x1}], 0x1)

118.987382ms ago: executing program 2 (id=1977):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
dup3(r1, r0, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0)

0s ago: executing program 2 (id=1978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

d+0x60/0x210
[  142.089072][ T7854]  ? xa_load+0x60/0x210
[  142.089083][ T7854]  ? __pfx_xfs_qm_init_quotainfo+0x10/0x10
[  142.089104][ T7854]  ? xfs_group_rele+0xb4/0x220
[  142.089119][ T7854]  xfs_qm_mount_quotas+0xa6/0x670
[  142.089137][ T7854]  xfs_mountfs+0x1b6f/0x2330
[  142.089159][ T7854]  ? __pfx_xfs_mountfs+0x10/0x10
[  142.089177][ T7854]  ? xfs_setup_dax_always+0x20f/0x290
[  142.089190][ T7854]  xfs_fs_fill_super+0x11b3/0x1600
[  142.089206][ T7854]  get_tree_bdev_flags+0x40e/0x4d0
[  142.089223][ T7854]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  142.089235][ T7854]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  142.089259][ T7854]  vfs_get_tree+0x92/0x2b0
[  142.089274][ T7854]  do_new_mount+0x2a2/0x9e0
[  142.089291][ T7854]  ? ns_capable+0x8a/0xf0
[  142.089301][ T7854]  ? __pfx_do_new_mount+0x10/0x10
[  142.089315][ T7854]  ? path_mount+0x61c/0xfe0
[  142.089328][ T7854]  ? user_path_at+0x44/0x60
[  142.089347][ T7854]  __se_sys_mount+0x317/0x410
[  142.089366][ T7854]  ? __pfx___se_sys_mount+0x10/0x10
[  142.089385][ T7854]  ? do_syscall_64+0xbe/0x3b0
[  142.089395][ T7854]  ? __x64_sys_mount+0x20/0xc0
[  142.089412][ T7854]  do_syscall_64+0xfa/0x3b0
[  142.089422][ T7854]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.089432][ T7854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.089442][ T7854]  ? exc_page_fault+0x9f/0xf0
[  142.089480][ T7854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.089492][ T7854] RIP: 0033:0x7fbfba1903ca
[  142.089504][ T7854] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.089514][ T7854] RSP: 002b:00007fbfbafb3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  142.089528][ T7854] RAX: ffffffffffffffda RBX: 00007fbfbafb3ef0 RCX: 00007fbfba1903ca
[  142.089535][ T7854] RDX: 00002000000001c0 RSI: 0000200000009740 RDI: 00007fbfbafb3eb0
[  142.089544][ T7854] RBP: 00002000000001c0 R08: 00007fbfbafb3ef0 R09: 0000000004200000
[  142.089552][ T7854] R10: 0000000004200000 R11: 0000000000000246 R12: 0000200000009740
[  142.089559][ T7854] R13: 00007fbfbafb3eb0 R14: 0000000000009871 R15: 0000200000000280
[  142.089579][ T7854]  </TASK>
[  142.090106][ T7854] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e1/0x3f0 (fs/xfs/xfs_trans.c:976).  Shutting down filesystem.
[  142.220668][ T7854] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  142.224625][ T7854] XFS (loop2): Failed to initialize disk quotas, err -117.
[  142.227317][ T7854] XFS (loop2): Error -5 reserving per-AG metadata reserve pool.
[  142.242158][ T7871] loop1: detected capacity change from 0 to 256
[  142.297522][ T7871] FAT-fs (loop1): Directory bread(block 64) failed
[  142.300434][ T7871] FAT-fs (loop1): Directory bread(block 65) failed
[  142.322912][ T7871] FAT-fs (loop1): Directory bread(block 66) failed
[  142.326312][ T7871] FAT-fs (loop1): Directory bread(block 67) failed
[  142.348765][ T7871] FAT-fs (loop1): Directory bread(block 68) failed
[  142.351556][ T7871] FAT-fs (loop1): Directory bread(block 69) failed
[  142.363247][ T7871] FAT-fs (loop1): Directory bread(block 70) failed
[  142.367591][ T7871] FAT-fs (loop1): Directory bread(block 71) failed
[  142.370403][ T7871] FAT-fs (loop1): Directory bread(block 72) failed
[  142.380499][ T7871] FAT-fs (loop1): Directory bread(block 73) failed
[  142.524320][ T7878] loop3: detected capacity change from 0 to 128
[  142.774737][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  142.914114][ T6991] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  142.933155][    T9] usb 4-1: Using ep0 maxpacket: 16
[  142.937370][    T9] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  142.941600][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.947569][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.950749][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.953776][    T9] usb 4-1: Product: syz
[  142.955419][    T9] usb 4-1: Manufacturer: syz
[  142.957391][    T9] usb 4-1: SerialNumber: syz
[  143.073128][ T6991] usb 3-1: Using ep0 maxpacket: 32
[  143.077712][ T6991] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  143.081233][ T6991] usb 3-1: config 0 has no interface number 0
[  143.087982][ T6991] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  143.094124][ T6991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.097668][ T6991] usb 3-1: Product: syz
[  143.099603][ T6991] usb 3-1: Manufacturer: syz
[  143.101683][ T6991] usb 3-1: SerialNumber: syz
[  143.109186][ T6991] usb 3-1: config 0 descriptor??
[  143.174184][    T9] usb 4-1: 0:2 : does not exist
[  143.183235][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  143.213315][    T9] usb 4-1: USB disconnect, device number 5
[  143.250397][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.322277][ T6991] radio-si470x 3-1:0.35: this is not a si470x device.
[  143.524548][ T6991] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  143.540167][ T6991] usb 3-1: USB disconnect, device number 14
[  143.853140][ T6043] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  143.993163][ T6002] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  144.003332][ T6043] usb 2-1: Using ep0 maxpacket: 16
[  144.008449][ T6043] usb 2-1: unable to get BOS descriptor or descriptor too short
[  144.016708][ T6043] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[  144.020307][ T6043] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  144.025028][ T6043] usb 2-1: config 13 has no interface number 0
[  144.027669][ T6043] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  144.032138][ T6043] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.042262][ T6043] usb 2-1: config 13 interface 50 has no altsetting 0
[  144.048881][ T6043] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  144.052762][ T6043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.061320][ T6043] usb 2-1: Product: syz
[  144.062770][ T6043] usb 2-1: Manufacturer: syz
[  144.071579][ T6043] usb 2-1: SerialNumber: syz
[  144.078686][ T7896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  144.143902][ T6002] usb 4-1: Using ep0 maxpacket: 8
[  144.148413][ T6002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  144.152081][ T6002] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.156896][ T6002] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  144.160062][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.165331][ T6002] usb 4-1: config 0 descriptor??
[  144.296937][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'.
[  144.321921][ T6043] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  144.325097][ T6043] usb 2-1: MIDIStreaming interface descriptor not found
[  144.395978][ T6043] usb 2-1: USB disconnect, device number 6
[  144.402553][ T7909] loop2: detected capacity change from 0 to 512
[  144.409518][ T7909] EXT4-fs: Ignoring removed orlov option
[  144.433737][ T7909] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  144.467180][ T7909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  144.479494][ T7909] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.792: corrupted in-inode xattr: e_value size too large
[  144.500277][ T7909] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.792: couldn't read orphan inode 15 (err -117)
[  144.514334][ T7909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.551132][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.593463][ T6002] logitech 0003:046D:C298.0003: item fetching failed at offset 4/5
[  144.599640][ T6002] logitech 0003:046D:C298.0003: parse failed
[  144.608116][ T6002] logitech 0003:046D:C298.0003: probe with driver logitech failed with error -22
[  144.660127][ T7916] loop2: detected capacity change from 0 to 256
[  144.666409][ T7916] exFAT-fs (loop2): failed to read boot sector
[  144.668683][ T7916] exFAT-fs (loop2): failed to recognize exfat type
[  144.796704][ T6043] usb 4-1: USB disconnect, device number 6
[  145.290977][ T7952] vlan2: entered allmulticast mode
[  145.294470][ T7952] batadv0: entered allmulticast mode
[  145.550922][ T7959] loop2: detected capacity change from 0 to 32768
[  145.582528][ T7959] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  145.599921][   T33] audit: type=1800 audit(1758711044.847:16): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.813" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  145.637882][ T5947] ocfs2: Unmounting device (7,2) on (node local)
[  145.654187][    T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  145.678438][ T7970] loop1: detected capacity change from 0 to 16
[  145.682556][ T7970] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 142735)
[  145.778534][ T7974] loop2: detected capacity change from 0 to 256
[  145.787600][ T7974] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  145.805994][ T7974] fuse: Bad value for 'fd'
[  145.809381][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.827828][    T9] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  145.832261][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.840246][    T9] usb 4-1: Product: syz
[  145.841831][    T9] usb 4-1: Manufacturer: syz
[  145.853048][    T9] usb 4-1: SerialNumber: syz
[  145.864481][    T9] usb 4-1: config 0 descriptor??
[  145.875380][    T9] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  145.997870][ T7972] loop1: detected capacity change from 0 to 32768
[  146.032840][ T7972] __jfs_setxattr: xattr_size = 2175, new_size = 14921
[  146.105046][ T6002] usb 4-1: USB disconnect, device number 7
[  146.115734][ T7986] tipc: Started in network mode
[  146.118179][ T7986] tipc: Node identity , cluster identity 4711
[  146.120881][ T7986] tipc: Failed to set node id, please configure manually
[  146.135929][ T7986] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  146.506492][ T8005] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  146.510569][ T6991] kernel write not supported for file /466/clear_refs (pid: 6991 comm: kworker/0:5)
[  146.853268][ T8010] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'.
[  147.153887][ T8016] loop3: detected capacity change from 0 to 32768
[  147.157608][ T8016] XFS: ikeep mount option is deprecated.
[  147.238445][ T8016] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.282314][ T8016] XFS (loop3): Ending clean mount
[  147.293235][ T8016] XFS (loop3): Quotacheck needed: Please wait.
[  147.325642][ T8016] XFS (loop3): Quotacheck: Done.
[  147.515961][ T6002] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  147.683213][ T6002] usb 2-1: Using ep0 maxpacket: 8
[  147.692670][ T6002] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.696632][ T6002] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  147.700181][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.715548][ T6002] usb 2-1: config 0 descriptor??
[  147.724146][ T6002] iowarrior 2-1:0.0: no interrupt-in endpoint found
[  147.969923][ T6002] usb 2-1: USB disconnect, device number 7
[  148.658253][ T6897] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.168500][ T8060] netlink: 848 bytes leftover after parsing attributes in process `syz.3.853'.
[  149.313136][ T6991] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  149.801912][ T6991] usb 2-1: Using ep0 maxpacket: 8
[  149.806009][ T6991] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  149.810535][ T6991] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  149.815176][ T6991] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.818963][ T6991] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.824764][ T6991] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  149.828432][ T6991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.888171][ T8074] Driver unsupported XDP return value 0 on prog  (id 91) dev N/A, expect packet loss!
[  150.044599][ T6991] usb 2-1: GET_CAPABILITIES returned 0
[  150.046951][ T6991] usbtmc 2-1:16.0: can't read capabilities
[  150.281654][  T791] usb 2-1: USB disconnect, device number 8
[  150.350422][ T8086] pim6reg: entered allmulticast mode
[  150.373329][ T8086] pim6reg: left allmulticast mode
[  150.496754][ T8091] loop3: detected capacity change from 0 to 128
[  150.719866][ T8092] loop2: detected capacity change from 0 to 32768
[  151.201040][ T8098] loop1: detected capacity change from 0 to 2048
[  151.212836][ T8098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.240854][   T33] audit: type=1326 audit(1758711050.487:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8101 comm="syz.2.871" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x0
[  151.295583][ T8104] loop2: detected capacity change from 0 to 16
[  151.301696][ T8104] erofs (device loop2): mounted with root inode @ nid 36.
[  151.559926][ T8113] loop1: detected capacity change from 0 to 512
[  151.580907][ T8113] EXT4-fs (loop1): Test dummy encryption mode enabled
[  151.586851][ T8113] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  151.596906][ T8113] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  151.619203][ T8113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.680521][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.455266][ T8160] syz.3.894 uses obsolete (PF_INET,SOCK_PACKET)
[  153.571905][ T8162] loop3: detected capacity change from 0 to 512
[  153.578022][ T8162] EXT4-fs (loop3): Test dummy encryption mode enabled
[  153.598930][ T8162] EXT4-fs error (device loop3): __ext4_iget:5464: inode #11: block 1: comm syz.3.895: invalid block
[  153.605121][ T6991] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  153.618505][ T8162] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.895: couldn't read orphan inode 11 (err -117)
[  153.705042][ T8162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.769630][ T6991] usb 3-1: LPM exit latency is zeroed, disabling LPM.
[  153.782290][ T6991] usb 3-1: config 0 has no interfaces?
[  153.814537][ T6991] usb 3-1: string descriptor 0 read error: -22
[  153.817361][ T6991] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=9a.90
[  153.831529][ T6991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.859103][ T8162] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  153.864428][ T6991] usb 3-1: config 0 descriptor??
[  153.878751][ T8162] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  153.948270][ T6897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.099815][ T6002] usb 3-1: USB disconnect, device number 15
[  154.102538][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.896'.
[  154.138470][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.896'.
[  154.530103][ T8196] loop3: detected capacity change from 0 to 256
[  154.559719][ T8196] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  154.643556][ T8204] loop1: detected capacity change from 0 to 1024
[  154.651527][ T8204] EXT4-fs: Ignoring removed bh option
[  154.656169][ T8204] EXT4-fs: inline encryption not supported
[  154.669042][ T8204] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  154.680889][ T8204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0001]
[  154.688234][ T8204] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.913: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  154.695952][ T8204] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.913: couldn't read orphan inode 11 (err -117)
[  154.705526][ T8204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.731160][ T8204] System zones: 0-1, 3-12
[  154.733557][ T8204] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  154.756135][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.893114][ T6991] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  154.905606][ T8217] QAT: failed to copy from user cfg_data.
[  155.044864][ T6991] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.048764][ T6991] usb 3-1: config 0 interface 0 has no altsetting 0
[  155.051432][ T6991] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  155.056441][ T6991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.066701][ T6991] usb 3-1: config 0 descriptor??
[  155.175647][ T8221] loop1: detected capacity change from 0 to 32768
[  155.179682][ T8221] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  155.226476][ T8223] loop1: detected capacity change from 0 to 512
[  155.230286][ T8223] EXT4-fs: Ignoring removed oldalloc option
[  155.235373][ T8223] EXT4-fs: Ignoring removed orlov option
[  155.238924][ T8223] EXT4-fs: Invalid want_extra_isize 8
[  155.302354][ T8225] loop1: detected capacity change from 0 to 128
[  155.405218][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.405218][ T1088] loop1: rw=1, sector=145, nr_sectors = 16 limit=128
[  155.411453][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.411453][ T1088] loop1: rw=1, sector=169, nr_sectors = 8 limit=128
[  155.418682][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.418682][ T1088] loop1: rw=1, sector=185, nr_sectors = 8 limit=128
[  155.425796][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.425796][ T1088] loop1: rw=1, sector=201, nr_sectors = 8 limit=128
[  155.432148][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.432148][ T1088] loop1: rw=1, sector=217, nr_sectors = 8 limit=128
[  155.437970][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.437970][ T1088] loop1: rw=1, sector=233, nr_sectors = 8 limit=128
[  155.445157][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.445157][ T1088] loop1: rw=1, sector=249, nr_sectors = 8 limit=128
[  155.450905][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.450905][ T1088] loop1: rw=1, sector=265, nr_sectors = 8 limit=128
[  155.456922][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.456922][ T1088] loop1: rw=1, sector=281, nr_sectors = 8 limit=128
[  155.462620][ T1088] kworker/u10:3: attempt to access beyond end of device
[  155.462620][ T1088] loop1: rw=1, sector=297, nr_sectors = 8 limit=128
[  155.479155][ T6991] wacom 0003:056A:00BA.0004: unbalanced delimiter at end of report description
[  155.487978][ T6991] wacom 0003:056A:00BA.0004: parse failed
[  155.489897][ T6991] wacom 0003:056A:00BA.0004: probe with driver wacom failed with error -22
[  155.681247][ T6991] usb 3-1: USB disconnect, device number 16
[  155.863913][ T6002] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  156.017951][ T6002] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.022699][ T6002] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.030561][ T6002] usb 2-1: config 0 interface 0 has no altsetting 0
[  156.033539][ T6002] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  156.037315][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.052435][ T6002] usb 2-1: config 0 descriptor??
[  156.322071][ T8252] binder: binder_mmap: 8251 200000000000-200000b36000 bad vm_flags failed -1
[  156.332836][ T8252] binder: 8251:8252 ioctl c00c620f 0 returned -14
[  156.932709][ T6002] usb 2-1: string descriptor 0 read error: -22
[  156.941492][ T6002] uclogic 0003:256C:006D.0005: interface is invalid, ignoring
[  157.150026][   T24] usb 2-1: USB disconnect, device number 9
[  157.738868][ T8265] loop1: detected capacity change from 0 to 64
[  157.879695][ T8268] loop2: detected capacity change from 0 to 1024
[  158.133167][ T1099] hfsplus: b-tree write err: -5, ino 4
[  158.400808][ T8277] netlink: 104 bytes leftover after parsing attributes in process `syz.3.943'.
[  158.573190][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  158.753149][   T10] usb 3-1: Using ep0 maxpacket: 32
[  158.761903][   T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  158.770345][   T10] usb 3-1: config 0 has no interface number 0
[  158.772688][   T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.781227][   T10] usb 3-1: config 0 interface 85 has no altsetting 0
[  158.789834][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  158.792713][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.797689][   T10] usb 3-1: Product: syz
[  158.803018][   T10] usb 3-1: Manufacturer: syz
[  158.804624][   T10] usb 3-1: SerialNumber: syz
[  158.827563][   T10] usb 3-1: config 0 descriptor??
[  159.443749][   T10] appletouch 3-1:0.85: Geyser mode initialized.
[  159.448138][   T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6
[  159.563089][   T24] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  159.649388][   T10] usb 3-1: USB disconnect, device number 17
[  159.687035][   T10] appletouch 3-1:0.85: input: appletouch disconnected
[  159.688096][ T8303] loop1: detected capacity change from 0 to 512
[  159.723360][   T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  159.725959][   T24] usb 4-1: config 0 has no interface number 0
[  159.729804][   T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  159.736413][ T8303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.741674][ T8303] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.745860][   T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  159.749509][   T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  159.759280][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.772122][   T24] usb 4-1: config 0 descriptor??
[  159.785843][ T8301] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  159.796572][   T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  159.989643][   T24] IPVS: starting estimator thread 0...
[  160.018141][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  160.023273][   T10] usb 4-1: USB disconnect, device number 8
[  160.085911][ T8309] IPVS: using max 77 ests per chain, 184800 per kthread
[  160.672335][ T8314] loop3: detected capacity change from 0 to 256
[  160.736123][ T8314] exfat: Deprecated parameter 'namecase'
[  160.739092][ T8314] exfat: Deprecated parameter 'utf8'
[  160.797090][ T8314] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  161.248439][ T5942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.417465][ T8325] input: syz1 as /devices/virtual/input/input7
[  162.610109][ T8349] syzkaller1: tun_chr_ioctl cmd 1074025677
[  162.612313][ T8349] syzkaller1: linktype set to 774
[  163.671696][ T8363] netlink: 'syz.2.978': attribute type 10 has an invalid length.
[  163.829649][ T8370] loop3: detected capacity change from 0 to 256
[  163.872501][ T8370] FAT-fs (loop3): Directory bread(block 64) failed
[  163.875030][ T8370] FAT-fs (loop3): Directory bread(block 65) failed
[  163.879399][ T8370] FAT-fs (loop3): Directory bread(block 66) failed
[  163.882903][ T8370] FAT-fs (loop3): Directory bread(block 67) failed
[  163.889294][ T8370] FAT-fs (loop3): Directory bread(block 68) failed
[  163.892067][ T8370] FAT-fs (loop3): Directory bread(block 69) failed
[  163.896664][ T8370] FAT-fs (loop3): Directory bread(block 70) failed
[  163.899674][ T8370] FAT-fs (loop3): Directory bread(block 71) failed
[  163.902630][ T8370] FAT-fs (loop3): Directory bread(block 72) failed
[  163.907664][ T8370] FAT-fs (loop3): Directory bread(block 73) failed
[  164.408621][ T8378] loop1: detected capacity change from 0 to 32768
[  164.417570][ T8378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.985 (8378)
[  164.422260][ T8393] loop3: detected capacity change from 0 to 2048
[  164.449529][ T8393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.463944][ T8378] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.468058][ T8378] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  164.537984][ T8399] loop2: detected capacity change from 0 to 1764
[  164.627501][ T8378] BTRFS info (device loop1): enabling ssd optimizations
[  164.629756][ T8378] BTRFS info (device loop1): turning on async discard
[  164.648441][ T8378] BTRFS info (device loop1): enabling free space tree
[  164.715101][ T5942] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.915855][   T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  165.084458][   T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  165.087385][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.091629][   T10] usb 3-1: config 0 descriptor??
[  165.096832][   T10] cp210x 3-1:0.0: cp210x converter detected
[  165.510677][   T10] usb 3-1: cp210x converter now attached to ttyUSB0
[  165.708581][   T24] usb 3-1: USB disconnect, device number 18
[  165.716939][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  165.728538][   T24] cp210x 3-1:0.0: device disconnected
[  165.992763][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  165.999735][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  167.193298][  T791] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  167.308493][ T8502] kAFS: unable to lookup cell '\/'
[  167.343442][  T791] usb 3-1: Using ep0 maxpacket: 8
[  167.355100][  T791] usb 3-1: config 0 interface 0 has no altsetting 0
[  167.357288][  T791] usb 3-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00
[  167.360891][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.368455][  T791] usb 3-1: config 0 descriptor??
[  167.443233][ T8512] loop3: detected capacity change from 0 to 512
[  167.457873][ T8512] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  168.064375][  T791] lenovo 0003:17EF:61AE.0006: hidraw0: USB HID vff.ff Device [HID 17ef:61ae] on usb-dummy_hcd.2-1/input0
[  168.159223][  T791] usb 3-1: USB disconnect, device number 19
[  169.170114][   T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  169.491307][ T8555] loop3: detected capacity change from 0 to 32768
[  169.523755][ T8555] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  169.642062][ T6897] ocfs2: Unmounting device (7,3) on (node local)
[  170.171236][   T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  170.177370][   T10] usb 3-1: config 0 has no interface number 0
[  170.192596][   T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  170.196881][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.205606][   T10] usb 3-1: Product: syz
[  170.209426][   T10] usb 3-1: Manufacturer: syz
[  170.216878][   T10] usb 3-1: SerialNumber: syz
[  170.289911][   T10] usb 3-1: config 0 descriptor??
[  170.663090][ T2324] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  170.856190][ T2324] usb 2-1: config index 0 descriptor too short (expected 69, got 36)
[  170.859861][ T2324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.869310][ T2324] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  170.876425][ T2324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.879637][ T2324] usb 2-1: Product: syz
[  170.881510][ T2324] usb 2-1: Manufacturer: syz
[  170.884483][ T2324] usb 2-1: SerialNumber: syz
[  170.890172][ T2324] usb 2-1: config 0 descriptor??
[  170.899541][ T2324] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  171.137676][   T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x48
[  171.346939][  T791] usb 3-1: USB disconnect, device number 20
[  171.706688][ T2324] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  171.709006][ T2324] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  171.715244][ T2324] usb 2-1: USB disconnect, device number 10
[  172.303075][ T6002] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  172.493187][ T6002] usb 3-1: Using ep0 maxpacket: 32
[  172.498925][ T6002] usb 3-1: unable to get BOS descriptor or descriptor too short
[  172.508237][ T6002] usb 3-1: config 120 has an invalid interface number: 86 but max is 0
[  172.511760][ T6002] usb 3-1: config 120 has no interface number 0
[  172.539920][ T6002] usb 3-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af
[  172.544362][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.605866][ T6002] usb 3-1: Product: syz
[  172.611290][ T6002] usb 3-1: Manufacturer: syz
[  172.621994][ T6002] usb 3-1: SerialNumber: syz
[  173.024411][ T6002] huawei_cdc_ncm 3-1:120.86: More than one union descriptor, skipping ...
[  173.027920][ T6002] huawei_cdc_ncm 3-1:120.86: CDC Union missing and no IAD found
[  173.031130][ T6002] huawei_cdc_ncm 3-1:120.86: bind() failure
[  173.042564][ T6002] usb 3-1: USB disconnect, device number 21
[  173.498032][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'.
[  173.718279][ T8668] loop3: detected capacity change from 0 to 1024
[  173.764899][ T8668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.810680][ T8668] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.848800][ T8668] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1104: bg 0: block 480: padding at end of block bitmap is not set
[  173.865052][ T8668] EXT4-fs (loop3): Remounting filesystem read-only
[  173.901524][ T6897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.159239][ T8701] loop3: detected capacity change from 0 to 2048
[  174.166389][ T8701] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.248139][ T8707] loop3: detected capacity change from 0 to 512
[  174.256125][ T8707] EXT4-fs: Ignoring removed nobh option
[  174.265872][ T8707] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1123: iget: bad i_size value: 38620345925642
[  174.270863][ T8707] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1123: couldn't read orphan inode 15 (err -117)
[  174.277737][ T8707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.370445][ T8707] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1123: bg 0: block 5: invalid block bitmap
[  174.377552][ T8707] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[  174.382550][ T8707] EXT4-fs (loop3): This should not happen!! Data will be lost
[  174.382550][ T8707] 
[  174.387581][ T8707] EXT4-fs (loop3): Total free blocks count 0
[  174.389842][ T8707] EXT4-fs (loop3): Free/Dirty block details
[  174.392010][ T8707] EXT4-fs (loop3): free_blocks=0
[  174.393825][ T8707] EXT4-fs (loop3): dirty_blocks=2100
[  174.395982][ T8707] EXT4-fs (loop3): Block reservation details
[  174.398486][ T8707] EXT4-fs (loop3): i_reserved_data_blocks=2100
[  174.406576][ T4930] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 2048 with error 28
[  174.494834][ T8713] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  174.503032][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  174.667435][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  174.671320][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.674941][   T10] usb 2-1: Product: syz
[  174.676767][   T10] usb 2-1: Manufacturer: syz
[  174.678785][   T10] usb 2-1: SerialNumber: syz
[  174.684180][   T10] usb 2-1: config 0 descriptor??
[  174.696406][   T10] gspca_main: kinect-2.14.0 probing 045e:02bf
[  174.896008][   T10] usb 2-1: USB disconnect, device number 11
[  175.431428][ T8735] loop2: detected capacity change from 0 to 32768
[  175.448529][   T33] audit: type=1800 audit(1758711074.697:18): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1134" name="bus" dev="loop2" ino=7 res=0 errno=0
[  175.543149][ T8739] loop3: detected capacity change from 0 to 8
[  175.735845][ T8745] netlink: 'syz.3.1139': attribute type 10 has an invalid length.
[  175.760693][ T8745] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  175.851893][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'.
[  176.070976][ T8751] loop2: detected capacity change from 0 to 32768
[  176.096798][ T8751] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1141 (8751)
[  176.269666][ T8751] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  176.284383][ T8751] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  176.338297][ T8751] BTRFS info (device loop2): enabling ssd optimizations
[  176.343808][ T8751] BTRFS info (device loop2): enabling free space tree
[  176.390646][ T5947] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  176.917098][ T8780] loop3: detected capacity change from 0 to 32768
[  176.920645][ T8780] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  176.935144][   T33] audit: type=1326 audit(1758711076.187:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  176.962549][   T33] audit: type=1326 audit(1758711076.207:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1154" exe="/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  176.980856][   T33] audit: type=1326 audit(1758711076.207:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  177.013227][   T33] audit: type=1326 audit(1758711076.207:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.2.1154" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  177.040564][   T33] audit: type=1804 audit(1758711076.287:23): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1156" name="/newroot/289/file0" dev="tmpfs" ino=1529 res=1 errno=0
[  177.236309][ T8806] kernel read not supported for file /   (pid: 8806 comm: syz.2.1160)
[  177.240409][   T33] audit: type=1800 audit(1758711076.487:24): pid=8806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1160" name=200120 dev="mqueue" ino=16730 res=0 errno=0
[  177.273142][ T6991] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  177.417784][ T8814] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1164'.
[  177.422029][ T8814] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  177.428949][ T8814] openvswitch: netlink: Duplicate key (type 0).
[  177.475463][ T6991] usb 4-1: unable to get BOS descriptor or descriptor too short
[  177.479482][ T6991] usb 4-1: config 1 interface 0 has no altsetting 0
[  177.485293][ T6991] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40
[  177.493825][ T6991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.497125][ T6991] usb 4-1: Product: syz
[  177.504072][ T6991] usb 4-1: Manufacturer: syz
[  177.506093][ T6991] usb 4-1: SerialNumber: syz
[  177.742144][ T6991] usbhid 4-1:1.0: can't add hid device: -71
[  177.747703][ T6991] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  177.759196][ T6991] usb 4-1: USB disconnect, device number 9
[  179.167179][ T8855] loop2: detected capacity change from 0 to 512
[  179.180462][ T8855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  179.259534][ T8855] EXT4-fs (loop2): 1 truncate cleaned up
[  179.267959][ T8855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.422167][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.578607][ T8872] loop2: detected capacity change from 0 to 2048
[  179.650064][ T8874] loop3: detected capacity change from 0 to 128
[  179.669520][ T8874] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  179.688294][ T8874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.853867][ T8872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.575109][   T33] audit: type=1326 audit(1758711079.827:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.585787][   T33] audit: type=1326 audit(1758711079.827:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.594582][   T33] audit: type=1326 audit(1758711079.837:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfba18d590 code=0x7ffc0000
[  180.610700][   T33] audit: type=1326 audit(1758711079.837:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfba18d590 code=0x7ffc0000
[  180.625759][   T33] audit: type=1326 audit(1758711079.837:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.635571][   T33] audit: type=1326 audit(1758711079.837:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.643956][   T33] audit: type=1326 audit(1758711079.847:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.652688][   T33] audit: type=1326 audit(1758711079.847:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.664834][ T8904] loop3: detected capacity change from 0 to 512
[  180.667969][   T33] audit: type=1326 audit(1758711079.847:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.670068][ T8906] loop2: detected capacity change from 0 to 1024
[  180.679843][ T8904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  180.694152][   T33] audit: type=1326 audit(1758711079.857:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8901 comm="syz.2.1197" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  180.707922][ T8904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.713233][ T8904] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.733570][   T28] hfsplus: b-tree write err: -5, ino 4
[  180.770417][ T8910] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  180.780754][ T6897] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.894802][ T8918] dlm: no locking on control device
[  180.986519][ T8922] loop2: detected capacity change from 0 to 256
[  181.001361][ T8922] FAT-fs (loop2): Directory bread(block 64) failed
[  181.006026][ T8922] FAT-fs (loop2): Directory bread(block 65) failed
[  181.008937][ T8922] FAT-fs (loop2): Directory bread(block 66) failed
[  181.011907][ T8922] FAT-fs (loop2): Directory bread(block 67) failed
[  181.022158][ T8922] FAT-fs (loop2): Directory bread(block 68) failed
[  181.033314][ T8922] FAT-fs (loop2): Directory bread(block 69) failed
[  181.036177][ T8922] FAT-fs (loop2): Directory bread(block 70) failed
[  181.039032][ T8922] FAT-fs (loop2): Directory bread(block 71) failed
[  181.055087][ T8922] FAT-fs (loop2): Directory bread(block 72) failed
[  181.057932][ T8922] FAT-fs (loop2): Directory bread(block 73) failed
[  181.097467][ T8922] FAT-fs (loop2): Filesystem has been set read-only
[  181.112564][ T8926] netlink: 'syz.1.1208': attribute type 8 has an invalid length.
[  181.143177][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  181.306967][   T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  181.311028][   T24] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  181.315499][   T24] usb 4-1: Product: syz
[  181.339204][   T24] usb 4-1: config 0 descriptor??
[  181.377232][   T24] cp210x 4-1:0.0: cp210x converter detected
[  181.380313][ T8939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  181.463343][ T6043] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  181.623322][ T6043] usb 3-1: Using ep0 maxpacket: 32
[  181.627399][ T6043] usb 3-1: too many configurations: 27, using maximum allowed: 8
[  181.673452][ T6043] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  181.677727][ T6043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.681483][ T6043] usb 3-1: Product: syz
[  181.683464][ T6043] usb 3-1: Manufacturer: syz
[  181.685565][ T6043] usb 3-1: SerialNumber: syz
[  181.695827][ T6043] usb 3-1: config 0 descriptor??
[  181.708258][ T6043] gspca_main: 05a9:1550 too many config
[  181.761959][   T24] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  181.788536][   T24] usb 4-1: cp210x converter now attached to ttyUSB0
[  181.958851][ T6991] usb 3-1: USB disconnect, device number 22
[  182.016166][ T2324] usb 4-1: USB disconnect, device number 10
[  182.041854][ T2324] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  182.064140][ T2324] cp210x 4-1:0.0: device disconnected
[  182.732003][ T8946] loop2: detected capacity change from 0 to 1024
[  183.832558][ T8969] loop2: detected capacity change from 0 to 256
[  183.878196][ T8971] input: syz0 as /devices/virtual/input/input8
[  183.936260][ T8975] loop3: detected capacity change from 0 to 128
[  183.940158][ T8973] loop2: detected capacity change from 0 to 128
[  183.951089][ T8973] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  183.977089][ T8973] hpfs: filesystem error: improperly stopped
[  183.979704][ T8973] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  183.990437][ T8973] hpfs: You really don't want any checks? You are crazy...
[  183.996249][ T8973] hpfs: hpfs_map_sector(): read error
[  183.998113][ T8973] hpfs: code page support is disabled
[  184.000137][ T8973] hpfs: hpfs_map_4sectors(): unaligned read
[  184.003148][ T8973] hpfs: hpfs_map_4sectors(): unaligned read
[  184.007817][ T8973] hpfs: filesystem error: unable to find root dir
[  184.017737][ T8973] hpfs: hpfs_map_4sectors(): unaligned read
[  184.189895][ T8991] loop2: detected capacity change from 0 to 512
[  184.215624][ T8987] loop3: detected capacity change from 0 to 4096
[  184.219865][ T8987] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  184.220058][ T8991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.241579][ T5943] Bluetooth: Frame is too long (len 16, expected len 4)
[  184.246896][ T8991] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  184.581346][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.263094][ T5943] Bluetooth: hci0: command 0x041b tx timeout
[  185.351933][ T9011] loop3: detected capacity change from 0 to 40427
[  185.356884][ T9011] F2FS-fs (loop3): build fault injection rate: 690
[  185.366232][ T9011] F2FS-fs (loop3): invalid crc value
[  185.432388][ T9011] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  185.441373][ T9011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  185.467573][ T6002] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  185.477103][ T9011] bio_check_eod: 59 callbacks suppressed
[  185.477125][ T9011] syz.3.1243: attempt to access beyond end of device
[  185.477125][ T9011] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  185.516724][ T6897] syz-executor: attempt to access beyond end of device
[  185.516724][ T6897] loop3: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[  185.531511][ T6897] CPU: 0 UID: 0 PID: 6897 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  185.531526][ T6897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.531531][ T6897] Call Trace:
[  185.531535][ T6897]  <TASK>
[  185.531539][ T6897]  dump_stack_lvl+0x189/0x250
[  185.531558][ T6897]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.531567][ T6897]  ? __pfx_queue_work_on+0x10/0x10
[  185.531576][ T6897]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  185.531590][ T6897]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.531605][ T6897]  f2fs_handle_critical_error+0x37c/0x540
[  185.531620][ T6897]  f2fs_write_end_io+0x886/0xb60
[  185.531635][ T6897]  __submit_merged_bio+0x27a/0x6a0
[  185.531648][ T6897]  __submit_merged_write_cond+0x255/0x530
[  185.531661][ T6897]  f2fs_write_data_pages+0x261d/0x3000
[  185.531681][ T6897]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.531706][ T6897]  ? check_path+0x21/0x40
[  185.531714][ T6897]  ? check_noncircular+0xe0/0x160
[  185.531740][ T6897]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.531749][ T6897]  do_writepages+0x32e/0x550
[  185.531771][ T6897]  ? do_raw_spin_unlock+0x4d/0x240
[  185.531786][ T6897]  filemap_fdatawrite+0x199/0x240
[  185.531801][ T6897]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  185.531845][ T6897]  ? do_raw_spin_unlock+0x4d/0x240
[  185.531858][ T6897]  f2fs_sync_dirty_inodes+0x31f/0x830
[  185.531873][ T6897]  f2fs_write_checkpoint+0x95a/0x1df0
[  185.531890][ T6897]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  185.531913][ T6897]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  185.531920][ T6897]  ? kfree+0x18e/0x440
[  185.531931][ T6897]  ? kill_f2fs_super+0x298/0x6c0
[  185.531971][ T6897]  kill_f2fs_super+0x2c3/0x6c0
[  185.531985][ T6897]  ? __pfx_kill_f2fs_super+0x10/0x10
[  185.531994][ T6897]  ? radix_tree_delete_item+0x2b6/0x400
[  185.532010][ T6897]  ? shrinker_free+0x2ce/0x3e0
[  185.532025][ T6897]  deactivate_locked_super+0xbc/0x130
[  185.532042][ T6897]  cleanup_mnt+0x425/0x4c0
[  185.532055][ T6897]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.532067][ T6897]  task_work_run+0x1d4/0x260
[  185.532085][ T6897]  ? __pfx_task_work_run+0x10/0x10
[  185.532096][ T6897]  ? __x64_sys_umount+0x122/0x160
[  185.532115][ T6897]  ? exit_to_user_mode_loop+0x40/0x110
[  185.532134][ T6897]  exit_to_user_mode_loop+0xec/0x110
[  185.532149][ T6897]  do_syscall_64+0x2bd/0x3b0
[  185.532157][ T6897]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.532163][ T6897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.532170][ T6897]  ? exc_page_fault+0x9f/0xf0
[  185.532178][ T6897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.532184][ T6897] RIP: 0033:0x7f27aaf8ff57
[  185.532193][ T6897] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  185.532199][ T6897] RSP: 002b:00007ffde29b40f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  185.532209][ T6897] RAX: 0000000000000000 RBX: 00007f27ab011c2d RCX: 00007f27aaf8ff57
[  185.532214][ T6897] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde29b41b0
[  185.532218][ T6897] RBP: 00007ffde29b41b0 R08: 0000000000000000 R09: 0000000000000000
[  185.532222][ T6897] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde29b5240
[  185.532227][ T6897] R13: 00007f27ab011c2d R14: 000000000002d421 R15: 00007ffde29b5280
[  185.532239][ T6897]  </TASK>
[  185.532242][ T6897] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  185.693630][ T6002] usb 2-1: Using ep0 maxpacket: 8
[  185.719402][ T6002] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  185.723501][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.726404][ T6002] usb 2-1: Product: syz
[  185.728060][ T6002] usb 2-1: Manufacturer: syz
[  185.729603][ T6002] usb 2-1: SerialNumber: syz
[  185.740225][ T6002] usb 2-1: config 0 descriptor??
[  185.750285][ T6002] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  185.753744][ T6002] dvb-usb: bulk message failed: -22 (2/0)
[  185.762079][ T6002] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  185.767370][ T6002] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  185.771936][ T6002] usb 2-1: media controller created
[  185.785059][ T6002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  185.954621][ T6002] cxusb: set interface failed
[  185.958692][ T6002] dvb-usb: bulk message failed: -22 (1/0)
[  185.985067][ T6002] DVB: Unable to find symbol mt352_attach()
[  185.987317][ T6002] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  185.990513][ T9033] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  186.004316][ T9033] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  186.034863][ T6002] rc_core: IR keymap rc-dvico-portable not found
[  186.037591][ T6002] Registered IR keymap rc-empty
[  186.050881][ T6002] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  186.068677][ T6002] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9
[  186.092075][ T6002] dvb-usb: schedule remote query interval to 100 msecs.
[  186.095671][ T6002] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  186.107226][ T6002] usb 2-1: USB disconnect, device number 12
[  186.211167][ T6002] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  187.043124][ T6991] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  187.063792][ T6002] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  187.193055][ T6991] usb 3-1: Using ep0 maxpacket: 8
[  187.196430][ T6991] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  187.199132][ T6991] usb 3-1: config 0 has no interface number 0
[  187.201251][ T6991] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  187.205475][ T6991] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  187.208669][ T6991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.213840][ T6991] usb 3-1: config 0 descriptor??
[  187.215794][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.240788][ T6991] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  187.244947][ T6002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.249241][ T6002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  187.256053][ T6002] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  187.259884][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.268416][ T6002] usb 2-1: config 0 descriptor??
[  187.371079][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  187.371103][   T33] audit: type=1800 audit(1758711086.617:37): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1264" name="bus" dev="tmpfs" ino=1508 res=0 errno=0
[  187.610813][ T9069] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  187.616116][ T9069] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  187.705847][ T6002] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  187.891079][ T6002] usb 2-1: USB disconnect, device number 13
[  188.073054][ T6043] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  188.227878][ T6043] usb 4-1: unable to get BOS descriptor or descriptor too short
[  188.231582][ T6043] usb 4-1: not running at top speed; connect to a high speed hub
[  188.236443][ T6043] usb 4-1: config 1 has an invalid interface number: 130 but max is 0
[  188.239825][ T6043] usb 4-1: config 1 has no interface number 0
[  188.242512][ T6043] usb 4-1: config 1 interface 130 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  188.247632][ T6043] usb 4-1: config 1 interface 130 has no altsetting 0
[  188.253504][ T6043] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=84.ac
[  188.257295][ T6043] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.260595][ T6043] usb 4-1: Product: syz
[  188.262348][ T6043] usb 4-1: Manufacturer: syz
[  188.265816][ T6043] usb 4-1: SerialNumber: syz
[  188.271194][ T9077] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  188.469221][ T6991] usb 3-1: USB disconnect, device number 23
[  188.499372][ T6043] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware
[  188.518472][ T6043] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  188.525986][ T6043] dib0700: firmware download failed at 7 with -71
[  188.539685][ T6043] usb 4-1: USB disconnect, device number 11
[  188.799332][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1275'.
[  189.458323][ T9105] loop3: detected capacity change from 0 to 1024
[  190.013582][   T24] kernel write not supported for file /uinput (pid: 24 comm: kworker/1:0)
[  190.106251][ T6002] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  190.324235][ T6002] usb 3-1: Using ep0 maxpacket: 16
[  190.368595][ T6002] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.373483][ T6002] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.377809][ T6002] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  190.383563][ T6002] usb 3-1: config 0 interface 0 has no altsetting 0
[  190.386755][ T6002] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  190.390791][ T6002] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.396780][ T6002] usb 3-1: config 0 descriptor??
[  190.832261][ T6002] kye 0003:0458:0087.0008: unknown main item tag 0x0
[  190.843093][ T6002] kye 0003:0458:0087.0008: unknown main item tag 0x0
[  190.845747][ T6002] kye 0003:0458:0087.0008: unknown main item tag 0x0
[  190.848453][ T6002] kye 0003:0458:0087.0008: unknown main item tag 0x0
[  190.851108][ T6002] kye 0003:0458:0087.0008: unknown main item tag 0x0
[  190.851699][ T9132] loop3: detected capacity change from 0 to 2048
[  190.862782][ T6002] kye 0003:0458:0087.0008: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0
[  190.877605][ T9132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.046773][   T24] usb 3-1: USB disconnect, device number 24
[  191.465509][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'.
[  191.652764][ T9169] loop3: detected capacity change from 0 to 512
[  191.674074][ T9169] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (340!=2687)
[  191.694308][ T9169] EXT4-fs (loop3): group descriptors corrupted!
[  193.902053][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.907535][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.910091][ T9209] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.982414][   T33] audit: type=1326 audit(1758711093.227:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.011816][   T33] audit: type=1326 audit(1758711093.227:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.029718][ T9220] loop2: detected capacity change from 0 to 4096
[  194.034222][   T33] audit: type=1326 audit(1758711093.257:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.041824][   T33] audit: type=1326 audit(1758711093.257:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.053319][ T9220] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  194.061924][   T33] audit: type=1326 audit(1758711093.257:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.074094][   T33] audit: type=1326 audit(1758711093.257:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.082694][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.121229][   T33] audit: type=1326 audit(1758711093.257:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.129052][   T33] audit: type=1326 audit(1758711093.257:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.1.1334" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  194.150668][ T9220] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  194.154468][ T9220] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  194.167980][ T9220] ntfs3(loop2): ino=5, "/" indx_read
[  194.182666][ T1099] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  194.284063][ T5947] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  194.293524][ T5947] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  194.308118][ T5947] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  194.328769][ T1099] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  195.301567][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'.
[  195.305078][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'.
[  196.290186][ T5943] Bluetooth: hci1: command 0x0406 tx timeout
[  197.423273][ T6991] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  197.583085][ T6991] usb 2-1: Using ep0 maxpacket: 16
[  197.591877][ T6991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.601944][ T6991] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  197.609532][ T6991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.632502][ T6991] usb 2-1: config 0 descriptor??
[  198.128302][ T6991] creative-sb0540 0003:041E:3100.0009: unbalanced delimiter at end of report description
[  198.138445][ T6991] creative-sb0540 0003:041E:3100.0009: parse failed
[  198.141573][ T6991] creative-sb0540 0003:041E:3100.0009: probe with driver creative-sb0540 failed with error -22
[  198.314709][ T6991] usb 2-1: USB disconnect, device number 14
[  198.553102][ T6043] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  198.705003][ T6043] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  198.708869][ T6043] usb 3-1: config 1 has no interface number 1
[  198.711572][ T6043] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  198.717411][ T6043] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  198.729890][ T6043] usb 3-1: string descriptor 0 read error: -22
[  198.732720][ T6043] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  198.736823][ T6043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.760156][ T6043] usb 3-1: found format II with max.bitrate = 2, frame size=62645
[  198.766096][ T6043] usb 3-1: found format II with max.bitrate = 2, frame size=62645
[  198.901716][ T9343] netlink: 'syz.3.1382': attribute type 4 has an invalid length.
[  198.914384][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1382'.
[  198.987132][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'.
[  198.990742][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1383'.
[  199.085933][ T6043] usb 3-1: USB disconnect, device number 25
[  199.336468][ T9358] loop3: detected capacity change from 0 to 512
[  199.635136][ T9360] loop3: detected capacity change from 0 to 32768
[  199.657534][ T9360] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  199.689841][   T33] audit: type=1800 audit(1758711098.937:46): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1389" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  200.317953][ T6897] ocfs2: Unmounting device (7,3) on (node local)
[  200.512409][ T9382] loop2: detected capacity change from 0 to 512
[  200.540551][ T9382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  200.558714][ T9382] EXT4-fs (loop2): 1 truncate cleaned up
[  200.562313][ T9382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.743394][ T6002] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  200.925728][ T6002] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.930539][ T6002] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  200.938408][ T6002] usb 4-1: config 1 has no interface number 0
[  200.941617][ T6002] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  200.976106][ T6002] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  200.988849][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.992350][ T6002] usb 4-1: Product: syz
[  200.995397][ T6002] usb 4-1: Manufacturer: syz
[  200.997503][ T6002] usb 4-1: SerialNumber: syz
[  201.056070][ T6002] usb 4-1: selecting invalid altsetting 1
[  201.273292][ T6002] cdc_ncm 4-1:1.1: bind() failure
[  201.304173][ T6002] usb 4-1: USB disconnect, device number 12
[  201.796386][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'.
[  202.028055][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.068094][ T9406] loop3: detected capacity change from 0 to 4096
[  202.137992][ T9409] loop2: detected capacity change from 0 to 4096
[  202.175627][ T9409] ntfs3(loop2): ino=b, mi_enum_attr
[  202.182727][ T9409] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  202.198120][ T9409] ntfs3(loop2): Failed to load $Extend (-22).
[  202.200383][ T9409] ntfs3(loop2): Failed to initialize $Extend.
[  202.236152][ T9415] tmpfs: Bad value for 'mpol'
[  203.176399][ T9436] loop2: detected capacity change from 0 to 131072
[  203.384941][ T9436] F2FS-fs (loop2): invalid crc value
[  203.446818][ T9436] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  203.455405][ T9436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  203.473504][ T9445] wg2: entered promiscuous mode
[  203.476389][ T9445] wg2: entered allmulticast mode
[  203.527055][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'.
[  203.656163][ T9449] veth2: entered promiscuous mode
[  203.658376][ T9449] veth2: entered allmulticast mode
[  204.023124][ T9458] netlink: 'syz.1.1426': attribute type 4 has an invalid length.
[  204.026581][ T9458] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1426'.
[  204.526769][ T9468] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  204.900634][ T9483] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  204.958888][ T9485] netlink: 'syz.2.1439': attribute type 2 has an invalid length.
[  204.963198][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  205.123687][    T9] usb 2-1: Using ep0 maxpacket: 8
[  205.176593][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  205.181098][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  205.186632][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  205.197290][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  205.203360][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  205.207135][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.238469][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'.
[  205.242229][ T9489] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1441'.
[  205.490560][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  205.498055][    T9] usbtmc 2-1:16.0: can't read capabilities
[  205.696745][    C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  205.701157][ T9478] usbtmc 2-1:16.0: Unable to send data, error -71
[  205.738016][  T791] usb 2-1: USB disconnect, device number 15
[  205.802214][ T9494] tc_dump_action: action bad kind
[  206.380016][ T9505] loop2: detected capacity change from 0 to 16
[  206.383289][ T5238] Bluetooth: hci2: command 0x0406 tx timeout
[  206.397371][ T9505] erofs (device loop2): mounted with root inode @ nid 36.
[  206.454225][ T9505] erofs (device loop2): readahead error at folio 2 @ nid 89
[  206.458579][ T9505] erofs (device loop2): readahead error at folio 1 @ nid 89
[  206.478138][ T9505] erofs (device loop2): readahead error at folio 0 @ nid 89
[  206.501141][ T9505] erofs (device loop2): read error -117 @ 0 of nid 89
[  206.511486][   T33] audit: type=1800 audit(1758711105.757:47): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1448" name="file3" dev="loop2" ino=89 res=0 errno=0
[  207.163251][ T6044] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  207.317091][ T6044] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.320963][ T6044] usb 2-1: config 0 has no interfaces?
[  207.325468][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'.
[  207.326158][ T6044] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  207.332114][ T6044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.339962][ T6044] usb 2-1: Product: syz
[  207.341389][ T6044] usb 2-1: Manufacturer: syz
[  207.343111][ T6044] usb 2-1: SerialNumber: syz
[  207.348821][ T6044] usb 2-1: config 0 descriptor??
[  207.947662][  T791] usb 2-1: USB disconnect, device number 16
[  208.093178][ T6044] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  208.283642][ T6044] usb 3-1: device descriptor read/64, error -71
[  208.345340][ T9542] loop3: detected capacity change from 0 to 2048
[  208.363733][ T9542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  208.499222][ T9546] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  208.519256][ T9546] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1244 with error 28
[  208.525905][ T6044] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  208.530215][ T9546] EXT4-fs (loop3): This should not happen!! Data will be lost
[  208.530215][ T9546] 
[  208.534993][ T9546] EXT4-fs (loop3): Total free blocks count 0
[  208.537471][ T9546] EXT4-fs (loop3): Free/Dirty block details
[  208.540047][ T9546] EXT4-fs (loop3): free_blocks=2415919104
[  208.542484][ T9546] EXT4-fs (loop3): dirty_blocks=1248
[  208.545568][ T9546] EXT4-fs (loop3): Block reservation details
[  208.548189][ T9546] EXT4-fs (loop3): i_reserved_data_blocks=78
[  208.660969][   T26] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  208.673246][ T6044] usb 3-1: device descriptor read/64, error -71
[  208.784028][ T6044] usb usb3-port1: attempt power cycle
[  208.941957][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'.
[  209.134538][ T6044] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  209.163844][ T6044] usb 3-1: device descriptor read/8, error -71
[  209.184923][ T5969] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  209.414403][ T6044] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  209.437614][ T6044] usb 3-1: device descriptor read/8, error -71
[  209.543605][ T6044] usb usb3-port1: unable to enumerate USB device
[  210.088701][ T9591] loop3: detected capacity change from 0 to 32768
[  210.968316][ T9595] loop2: detected capacity change from 0 to 32768
[  210.985532][ T9595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1484 (9595)
[  211.008759][ T9595] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.014558][ T9595] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  211.064488][  T791] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  211.088130][ T9595] BTRFS info (device loop2): enabling ssd optimizations
[  211.101422][ T9595] BTRFS info (device loop2): enabling free space tree
[  211.174134][ T9632] loop3: detected capacity change from 0 to 4096
[  211.178117][ T9632] ntfs3(loop3): Primary boot: invalid bytes per index 2(-1).
[  211.181166][ T9632] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  211.203328][ T5947] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.223155][  T791] usb 2-1: Using ep0 maxpacket: 8
[  211.229628][  T791] usb 2-1: config 0 has an invalid interface number: 130 but max is 0
[  211.243318][  T791] usb 2-1: config 0 has no interface number 0
[  211.251337][  T791] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[  211.257768][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.265535][  T791] usb 2-1: Product: syz
[  211.267388][  T791] usb 2-1: Manufacturer: syz
[  211.269328][  T791] usb 2-1: SerialNumber: syz
[  211.308493][  T791] usb 2-1: config 0 descriptor??
[  211.340777][  T791] as10x_usb: device has been detected
[  211.357458][  T791] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  211.389251][ T9638] loop3: detected capacity change from 0 to 164
[  211.413917][ T9638] isofs_fill_super: root inode is not a directory. Corrupted media?
[  211.447772][  T791] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  211.515989][  T791] as10x_usb: error during firmware upload part1
[  211.521797][  T791] Registered device PCTV Systems picoStick (74e)
[  211.544687][ T6044] usb 2-1: USB disconnect, device number 17
[  211.575555][ T6044] Unregistered device PCTV Systems picoStick (74e)
[  211.576970][ T6044] as10x_usb: device has been disconnected
[  211.710956][ T9645] loop2: detected capacity change from 0 to 4096
[  211.727610][ T9645] EXT4-fs: Ignoring removed bh option
[  211.731075][ T9645] EXT4-fs (loop2): Test dummy encryption mode enabled
[  211.738754][ T9645] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  211.742165][ T9645] System zones: 0-5
[  211.748223][ T9645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.821256][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.938248][    T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  213.046735][ T9684] loop2: detected capacity change from 0 to 1024
[  213.088035][ T9684] syz.2.1517: attempt to access beyond end of device
[  213.088035][ T9684] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  213.097764][ T9684] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  213.101439][ T9684] hfsplus: unable to mark blocks free: error -5
[  213.107289][ T9684] hfsplus: can't free extent
[  213.117445][    T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  213.120910][    T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  213.139900][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  213.155914][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  213.169094][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  213.188886][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  213.208540][    T9] usb 2-1: string descriptor 0 read error: -22
[  213.211278][    T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  213.228528][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.244155][    T9] usb 2-1: config 0 descriptor??
[  213.264190][    T9] hub 2-1:0.0: bad descriptor, ignoring hub
[  213.266879][    T9] hub 2-1:0.0: probe with driver hub failed with error -5
[  213.351606][ T9691] loop2: detected capacity change from 0 to 4096
[  213.593460][    T9] usb 2-1: USB disconnect, device number 18
[  214.126938][ T9708] cgroup: noprefix used incorrectly
[  215.253544][ T5969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.352333][ T5969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.491197][ T9728] loop2: detected capacity change from 0 to 512
[  215.504691][ T9728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  215.525023][ T5969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.529114][ T9728] EXT4-fs (loop2): 1 truncate cleaned up
[  215.540788][ T9728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.632427][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  215.637087][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.642543][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  215.648508][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  215.653357][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  215.679858][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  215.694978][ T5969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.777732][ T9737] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  215.808317][ T9742] loop2: detected capacity change from 0 to 8
[  215.834937][ T9742] SQUASHFS error: lzo decompression failed, data probably corrupt
[  215.838307][ T9742] SQUASHFS error: Failed to read block 0x91: -5
[  215.850664][ T9742] SQUASHFS error: Unable to read metadata cache entry [8f]
[  215.854938][ T9742] SQUASHFS error: Unable to read inode 0x11f
[  215.998730][ T5969] bridge_slave_1: left allmulticast mode
[  216.013087][ T5969] bridge_slave_1: left promiscuous mode
[  216.017524][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.033706][ T5969] bridge_slave_0: left allmulticast mode
[  216.035682][ T5969] bridge_slave_0: left promiscuous mode
[  216.037759][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.145320][    T9] psmouse serio2: Failed to reset mouse on : -5
[  216.473994][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.479669][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.487312][ T5969] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  216.502399][ T5969] bond0 (unregistering): Released all slaves
[  216.641994][ T9734] chnl_net:caif_netlink_parms(): no params data found
[  216.843198][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.846266][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.849617][ T9734] bridge_slave_0: entered allmulticast mode
[  216.854329][ T9734] bridge_slave_0: entered promiscuous mode
[  216.859092][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.862221][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.866022][ T9734] bridge_slave_1: entered allmulticast mode
[  216.870119][ T9734] bridge_slave_1: entered promiscuous mode
[  216.911426][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.926127][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.945212][ T5969] hsr_slave_0: left promiscuous mode
[  216.962207][ T5969] hsr_slave_1: left promiscuous mode
[  216.974068][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.976754][ T9773] netlink: 'syz.2.1548': attribute type 11 has an invalid length.
[  216.977238][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.983534][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'.
[  216.997672][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.999987][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.039394][ T9776] loop2: detected capacity change from 0 to 1024
[  217.042381][ T5969] veth1_macvtap: left promiscuous mode
[  217.048051][ T5969] veth0_macvtap: left promiscuous mode
[  217.050491][ T5969] veth1_vlan: left promiscuous mode
[  217.052679][ T5969] veth0_vlan: left promiscuous mode
[  217.090050][ T9776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.198948][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.743339][ T5238] Bluetooth: hci0: command tx timeout
[  217.750218][ T5969] team0 (unregistering): Port device team_slave_1 removed
[  217.794942][ T5969] team0 (unregistering): Port device team_slave_0 removed
[  218.318047][ T9734] team0: Port device team_slave_0 added
[  218.321886][ T9734] team0: Port device team_slave_1 added
[  218.386337][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.388658][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.401239][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.425470][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.428437][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.441796][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.555616][ T9734] hsr_slave_0: entered promiscuous mode
[  218.558986][ T9734] hsr_slave_1: entered promiscuous mode
[  218.711206][   T24] IPVS: starting estimator thread 0...
[  218.750730][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'.
[  218.756729][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1562'.
[  218.803118][ T9810] IPVS: using max 77 ests per chain, 184800 per kthread
[  219.015888][ T9734] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  219.036367][ T9734] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  219.045128][ T9734] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  219.052321][ T9734] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  219.251074][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.280108][ T9823] loop2: detected capacity change from 0 to 32768
[  219.332240][ T9734] 8021q: adding VLAN 0 to HW filter on device team0
[  219.341882][ T4930] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.345386][ T4930] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.365075][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.368263][ T8125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.572609][ T9734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.761767][ T9734] veth0_vlan: entered promiscuous mode
[  219.772371][ T9734] veth1_vlan: entered promiscuous mode
[  219.799327][ T9734] veth0_macvtap: entered promiscuous mode
[  219.804194][ T9734] veth1_macvtap: entered promiscuous mode
[  219.814454][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.821754][ T9734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.823337][ T5238] Bluetooth: hci0: command tx timeout
[  219.832488][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.839368][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.844663][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.851953][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.922500][ T8125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.927035][ T8125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.954071][    T9] misc userio: Buffer overflowed, userio client isn't keeping up
[  219.963723][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.966964][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.237848][ T9855] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  220.594348][ T9877] netlink: 'syz.4.1579': attribute type 3 has an invalid length.
[  220.597701][ T9877] netlink: 'syz.4.1579': attribute type 1 has an invalid length.
[  220.601089][ T9877] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1579'.
[  221.239445][    T9] input: PS/2 Generic Mouse as /devices/serio2/input/input10
[  221.377219][   T33] audit: type=1326 audit(1758711120.627:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9887 comm="syz.2.1583" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfba18ec29 code=0x0
[  221.483122][    T9] psmouse serio2: Failed to enable mouse on 
[  221.904879][ T5238] Bluetooth: hci0: command tx timeout
[  221.983789][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  222.178548][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.190098][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.204835][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.214391][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.235088][   T10] usb 5-1: Product: syz
[  222.237023][   T10] usb 5-1: Manufacturer: syz
[  222.239002][   T10] usb 5-1: SerialNumber: syz
[  222.290852][   T10] cdc_mbim 5-1:1.0: skipping garbage
[  222.478081][ T9910] loop2: detected capacity change from 0 to 16
[  222.526441][ T9910] erofs (device loop2): mounted with root inode @ nid 36.
[  223.317586][   T10] cdc_mbim 5-1:1.0: bind() failure
[  223.326465][   T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  223.328727][   T10] cdc_ncm 5-1:1.1: bind() failure
[  223.332975][   T10] usb 5-1: USB disconnect, device number 2
[  223.608260][ T9917] loop2: detected capacity change from 0 to 512
[  223.613103][ T9917] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  223.640990][ T9917] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #17: comm syz.2.1594: iget: bad i_size value: -6917529027641081756
[  223.647973][ T9917] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1594: couldn't read orphan inode 17 (err -117)
[  223.655483][ T9917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.699083][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.705490][  T791] libceph: connect (1)[c::]:6789 error -101
[  223.719964][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  223.762660][   T10] libceph: connect (1)[b::]:6789 error -101
[  223.775113][   T10] libceph: mon0 (1)[b::]:6789 connect error
[  223.785490][ T9929] loop2: detected capacity change from 0 to 4096
[  223.809485][ T9935] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.940404][ T9941] loop4: detected capacity change from 0 to 164
[  223.975370][  T791] libceph: connect (1)[c::]:6789 error -101
[  223.980645][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  223.993995][ T5238] Bluetooth: hci0: command tx timeout
[  224.033781][ T2324] libceph: connect (1)[b::]:6789 error -101
[  224.036548][ T2324] libceph: mon0 (1)[b::]:6789 connect error
[  224.140678][ T9953] netlink: 'syz.4.1608': attribute type 1 has an invalid length.
[  224.198695][ T9956] block nbd2: Attempted send on invalid socket
[  224.206177][ T9956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  224.291717][ T9958] loop4: detected capacity change from 0 to 16384
[  224.392820][ T9958] bcachefs (loop4): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=xxhash,erasure_code,grpquota,prjquota,norecovery,reconstruct_alloc,version_upgrade=none,nocow
[  224.392845][ T9958]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  224.411275][ T9958] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  224.416649][ T9958] bcachefs (loop4): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing
[  224.422587][ T9958] bcachefs (loop4): recovering from clean shutdown, journal seq 18
[  224.427929][ T9958] bcachefs (loop4): dropping and reconstructing all alloc info
[  224.447939][ T9958] bcachefs (loop4): accounting_read... done
[  224.454183][ T9958] bcachefs (loop4): alloc_read... done
[  224.456980][ T9958] bcachefs (loop4): snapshots_read... done
[  224.459937][ T9958] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  224.468674][ T9958] bcachefs (loop4): reading quotas
[  224.472693][ T9958] bcachefs (loop4): quotas done
[  224.475793][ T9958] bcachefs (loop4): done starting filesystem
[  224.483049][ T6043] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  224.493817][  T791] libceph: connect (1)[c::]:6789 error -101
[  224.504122][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  224.521234][ T9734] bcachefs (loop4): shutting down
[  224.526360][ T9930] ceph: No mds server is up or the cluster is laggy
[  224.532740][ T9925] ceph: No mds server is up or the cluster is laggy
[  224.550449][ T2324] libceph: connect (1)[b::]:6789 error -101
[  224.568609][ T2324] libceph: mon0 (1)[b::]:6789 connect error
[  224.595760][ T9734] bcachefs (loop4): shutdown complete
[  224.668445][ T6043] usb 3-1: Using ep0 maxpacket: 16
[  224.698557][ T6043] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  224.707261][ T6043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  224.729139][ T6043] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  224.733298][ T6043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.736521][ T6043] usb 3-1: Product: syz
[  224.738512][ T6043] usb 3-1: Manufacturer: syz
[  224.740420][ T6043] usb 3-1: SerialNumber: syz
[  224.774594][ T6043] usb 3-1: config 0 descriptor??
[  224.785583][ T6043] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  224.790302][ T6043] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  225.397746][ T6043] em28xx 3-1:0.0: chip ID is em2874
[  225.607774][   T10] usb 3-1: USB disconnect, device number 30
[  225.611239][   T10] em28xx 3-1:0.0: Disconnecting em28xx
[  225.630376][   T10] em28xx 3-1:0.0: Freeing device
[  226.063140][  T791] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  226.214949][  T791] usb 5-1: Using ep0 maxpacket: 16
[  226.226409][  T791] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  226.232225][  T791] usb 5-1: New USB device strings: Mfr=1, Product=121, SerialNumber=76
[  226.247156][  T791] usb 5-1: Product: syz
[  226.250275][  T791] usb 5-1: Manufacturer: syz
[  226.255869][  T791] usb 5-1: SerialNumber: syz
[  226.316101][ T9992] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1621'.
[  226.676904][  T791] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  226.734141][T10004] loop2: detected capacity change from 0 to 512
[  226.750950][T10004] EXT4-fs (loop2): orphan cleanup on readonly fs
[  226.760862][T10004] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1627: bg 0: block 248: padding at end of block bitmap is not set
[  226.770260][T10004] Quota error (device loop2): write_blk: dquota write failed
[  226.773348][T10004] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  226.777182][T10004] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1627: Failed to acquire dquot type 1
[  226.785943][T10004] EXT4-fs (loop2): 1 truncate cleaned up
[  226.814207][T10004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  226.826168][T10004] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  226.831746][T10004] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0
[  226.850757][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.939377][  T791] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2
[  226.981392][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  227.099009][   T10] usb 5-1: USB disconnect, device number 3
[  227.186247][T10013] binder: 10012:10013 ioctl c018620c 200000000240 returned -22
[  227.314160][ T6044] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  227.483830][ T6044] usb 3-1: Using ep0 maxpacket: 32
[  227.487035][ T6044] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  227.495965][ T6044] usb 3-1: language id specifier not provided by device, defaulting to English
[  227.500584][ T6044] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40
[  227.503631][ T6044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.506603][ T6044] usb 3-1: Product: syz
[  227.507980][ T6044] usb 3-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳
[  227.514142][ T6044] usb 3-1: SerialNumber: syz
[  227.522890][ T6044] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  227.794799][  T791] usb 3-1: USB disconnect, device number 31
[  227.990938][T10032] loop4: detected capacity change from 0 to 32768
[  228.030220][T10032] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  228.051584][T10032] XFS (loop4): Ending clean mount
[  228.804367][ T9734] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  229.194657][T10052] loop2: detected capacity change from 0 to 32768
[  229.206969][T10052] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1641 (10052)
[  229.259513][T10052] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  229.284880][T10052] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  229.333464][T10070] can0: slcan on ptm0.
[  229.392810][T10052] BTRFS info (device loop2): enabling ssd optimizations
[  229.398752][T10052] BTRFS info (device loop2): enabling free space tree
[  229.415211][T10067] can0 (unregistered): slcan off ptm0.
[  229.615983][ T5947] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  230.316843][ T5238] Bluetooth: hci2: failed to read key size for handle 201
[  230.321781][ T5238] Bluetooth: hci2: unexpected event for opcode 0x1408
[  230.373487][   T33] audit: type=1326 audit(1758711129.517:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  230.415677][   T33] audit: type=1326 audit(1758711129.517:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfba18d590 code=0x7ffc0000
[  230.475576][   T33] audit: type=1326 audit(1758711129.527:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  230.484940][   T33] audit: type=1326 audit(1758711129.527:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  230.494149][   T33] audit: type=1326 audit(1758711129.557:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  230.503538][   T33] audit: type=1326 audit(1758711129.557:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  230.512758][   T33] audit: type=1326 audit(1758711129.557:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  230.522187][   T33] audit: type=1326 audit(1758711129.557:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfba18ec29 code=0x7ffc0000
[  230.803100][  T791] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  230.965519][  T791] usb 5-1: Using ep0 maxpacket: 16
[  230.971550][  T791] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.975754][  T791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  230.981450][  T791] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  230.986899][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.989519][  T791] usb 5-1: Product: syz
[  230.990922][  T791] usb 5-1: Manufacturer: syz
[  230.992472][  T791] usb 5-1: SerialNumber: syz
[  231.224042][  T791] usb 5-1: 0:2 : does not exist
[  231.226244][  T791] usb 5-1: unit 9 not found!
[  231.232684][  T791] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4)
[  231.251164][  T791] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4)
[  231.267044][  T791] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4)
[  231.298567][  T791] usb 5-1: USB disconnect, device number 4
[  231.584675][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'.
[  231.844529][   T33] audit: type=1326 audit(1758711131.097:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.853067][   T33] audit: type=1326 audit(1758711131.097:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.860600][   T33] audit: type=1326 audit(1758711131.097:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.861236][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1677'.
[  231.869727][   T33] audit: type=1326 audit(1758711131.097:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.875228][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1677'.
[  231.881724][   T33] audit: type=1326 audit(1758711131.097:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.896596][   T33] audit: type=1326 audit(1758711131.107:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.905527][   T33] audit: type=1326 audit(1758711131.107:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.916319][   T33] audit: type=1326 audit(1758711131.107:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.925926][   T33] audit: type=1326 audit(1758711131.127:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  231.935435][   T33] audit: type=1326 audit(1758711131.127:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.1.1676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  232.182432][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'.
[  232.211995][T10205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1685'.
[  232.216929][T10205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1685'.
[  233.533208][ T6044] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  233.707806][ T6044] usb 2-1: config 11 has an invalid interface number: 62 but max is 0
[  233.711014][ T6044] usb 2-1: config 11 has no interface number 0
[  233.726570][ T6044] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=bf.dc
[  233.730476][ T6044] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.735627][ T6044] usb 2-1: Product: syz
[  233.737784][ T6044] usb 2-1: Manufacturer: syz
[  233.740109][ T6044] usb 2-1: SerialNumber: syz
[  234.000328][ T6044] hub 2-1:11.62: bad descriptor, ignoring hub
[  234.023824][ T6044] hub 2-1:11.62: probe with driver hub failed with error -5
[  234.064980][ T6044] usb 2-1: USB disconnect, device number 19
[  235.406073][T10269] loop2: detected capacity change from 0 to 16384
[  235.506950][T10269] bcachefs (loop2): error requesting encryption key: ENOKEY
[  235.518803][T10269] bcachefs (loop2): shutdown complete
[  235.754272][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'.
[  236.269077][T10269] bcachefs: bch2_fs_get_tree() error: ENOKEY
[  236.530278][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  236.533984][T10287] bridge_slave_1: left allmulticast mode
[  236.536523][T10287] bridge_slave_1: left promiscuous mode
[  236.540528][T10287] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.568447][T10287] bridge_slave_0: left allmulticast mode
[  236.570474][T10287] bridge_slave_0: left promiscuous mode
[  236.572424][T10287] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.911435][T10302] Bluetooth: MGMT ver 1.23
[  237.139062][T10306] dvmrp0: entered allmulticast mode
[  237.289673][T10319] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  237.355948][T10324] input: syz1 as /devices/virtual/input/input11
[  237.421868][T10327] loop2: detected capacity change from 0 to 1024
[  237.427589][T10327] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  237.434032][T10327] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  237.440550][T10327] EXT4-fs (loop2): orphan cleanup on readonly fs
[  237.442797][T10327] EXT4-fs error (device loop2): ext4_quota_enable:7128: inode #3: comm syz.2.1737: iget: bad i_size value: 1407374883559424
[  237.448516][T10327] EXT4-fs error (device loop2): ext4_quota_enable:7131: comm syz.2.1737: Bad quota inode: 3, type: 0
[  237.458958][T10327] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  237.468932][T10327] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  237.472247][T10327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  237.497750][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.702674][T10346] loop4: detected capacity change from 0 to 512
[  237.749615][T10346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.754890][T10346] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.800455][ T9734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.526354][T10383] loop4: detected capacity change from 0 to 40427
[  239.530934][T10383] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  239.535687][T10383] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  239.545772][T10383] F2FS-fs (loop4): invalid crc value
[  239.765216][T10419] trusted_key: syz.2.1775 sent an empty control message without MSG_MORE.
[  239.956540][T10383] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  239.984473][T10383] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  239.994708][T10383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  240.340741][T10427] loop4: detected capacity change from 0 to 16
[  240.376528][T10427] erofs (device loop4): mounted with root inode @ nid 36.
[  240.471557][T10429] loop2: detected capacity change from 0 to 64
[  240.493229][ T2324] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  240.583145][   T33] kauditd_printk_skb: 244 callbacks suppressed
[  240.583166][   T33] audit: type=1800 audit(1758711139.827:311): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1779" name="file1" dev="loop2" ino=5 res=0 errno=0
[  240.646416][ T2324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  240.650945][ T2324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 188, setting to 64
[  240.667366][T10435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.668985][ T2324] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47
[  240.679571][ T2324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.685259][ T2324] usb 2-1: Product: syz
[  240.687151][ T2324] usb 2-1: Manufacturer: syz
[  240.692745][ T2324] usb 2-1: SerialNumber: syz
[  240.700047][ T2324] usb 2-1: config 0 descriptor??
[  240.703186][T10425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  240.942394][   T33] audit: type=1326 audit(1758711140.187:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  240.969135][ T6002] usb 2-1: USB disconnect, device number 20
[  240.977848][   T33] audit: type=1326 audit(1758711140.187:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.004492][   T33] audit: type=1326 audit(1758711140.207:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.027791][   T33] audit: type=1326 audit(1758711140.207:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.039295][   T33] audit: type=1326 audit(1758711140.207:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.053732][   T33] audit: type=1326 audit(1758711140.207:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.071371][   T33] audit: type=1326 audit(1758711140.207:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.080952][T10441] loop4: detected capacity change from 0 to 32768
[  241.087152][   T33] audit: type=1326 audit(1758711140.207:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.106161][   T33] audit: type=1326 audit(1758711140.207:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.1.1778" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56e4f8ec29 code=0x7ffc0000
[  241.123942][T10441] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  241.276272][ T9734] ocfs2: Unmounting device (7,4) on (node local)
[  242.313088][ T6044] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  242.547080][ T6044] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.564954][ T6044] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  242.584913][ T6044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.044757][ T6044] usb 2-1: config 0 descriptor??
[  243.470233][ T6044] steelseries 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0
[  243.481126][T10491] loop4: detected capacity change from 0 to 1024
[  243.498566][T10491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.504965][T10491] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.529902][ T9734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.628844][T10498] loop4: detected capacity change from 0 to 512
[  243.639576][T10498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  243.651003][T10498] EXT4-fs (loop4): 1 truncate cleaned up
[  243.655568][   T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  243.660100][T10498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.670050][ T6044] steelseries 0003:1038:12B6.000A: hid_hw_raw_request() failed with -71
[  243.674231][T10498] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.4.1807: path /newroot/88/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0
[  243.686808][ T6044] usb 2-1: USB disconnect, device number 21
[  243.691594][T10498] EXT4-fs (loop4): Remounting filesystem read-only
[  243.715697][ T9734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.833323][   T24] usb 3-1: Using ep0 maxpacket: 32
[  243.839929][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  243.846738][   T24] usb 3-1: config 6 has an invalid interface number: 254 but max is 0
[  243.850379][   T24] usb 3-1: config 6 has no interface number 0
[  243.853940][   T24] usb 3-1: config 6 interface 254 has no altsetting 0
[  243.859057][   T24] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00
[  243.862792][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.866718][   T24] usb 3-1: Product: syz
[  243.868475][   T24] usb 3-1: Manufacturer: syz
[  243.870413][   T24] usb 3-1: SerialNumber: syz
[  244.023744][T10511] syz_tun: entered allmulticast mode
[  244.061042][T10510] syz_tun: left allmulticast mode
[  244.084401][   T24] ftdi_sio 3-1:6.254: FTDI USB Serial Device converter detected
[  244.099639][   T24] usb 3-1: Detected FT2232HP
[  244.101998][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  244.106762][   T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  244.112148][   T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  244.120855][   T24] usb 3-1: USB disconnect, device number 32
[  244.132851][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  244.141085][   T24] ftdi_sio 3-1:6.254: device disconnected
[  244.180484][T10515] loop4: detected capacity change from 0 to 2048
[  244.186673][T10515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.921977][T10548] loop2: detected capacity change from 0 to 40427
[  245.939780][T10548] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  245.946268][T10548] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  245.961012][T10548] F2FS-fs (loop2): SIT is corrupted data# 5 7 vs 11
[  245.976145][T10548] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  247.056439][T10611] loop4: detected capacity change from 0 to 32768
[  247.143572][T10611] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  247.189821][T10611] XFS (loop4): Ending clean mount
[  247.205383][T10611] XFS (loop4): Quotacheck needed: Please wait.
[  247.244936][T10649] loop2: detected capacity change from 0 to 1024
[  247.247149][T10611] XFS (loop4): Quotacheck: Done.
[  247.262515][T10649] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  247.271077][T10649] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  247.277564][T10649] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #32: comm syz.2.1839: iget: special inode unallocated
[  247.282908][T10649] EXT4-fs (loop2): Remounting filesystem read-only
[  247.285936][T10649] EXT4-fs (loop2): no journal found
[  247.287835][T10649] EXT4-fs (loop2): can't get journal size
[  247.305165][ T9734] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  247.306009][T10649] EXT4-fs (loop2): filesystem is read-only
[  247.310908][T10649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  247.387071][ T5947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.693556][T10669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1841'.
[  247.697480][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'.
[  247.701414][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'.
[  247.968761][T10672] ./file0: Can't open blockdev
[  248.039518][T10678] loop4: detected capacity change from 0 to 512
[  248.044149][T10678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  248.066296][T10678] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1850: invalid indirect mapped block 4294967295 (level 1)
[  248.081989][T10678] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1850: invalid indirect mapped block 4294967295 (level 1)
[  248.092681][T10678] EXT4-fs (loop4): 2 truncates cleaned up
[  248.098007][T10678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.110502][T10678] EXT4-fs error (device loop4): ext4_get_parent:1834: inode #11: comm syz.4.1850: bad parent inode number: 3
[  248.135349][T10686] tipc: Started in network mode
[  248.137770][T10686] tipc: Node identity 7, cluster identity 4711
[  248.139568][ T9734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.141056][T10686] tipc: Node number set to 7
[  248.409763][T10701] loop2: detected capacity change from 0 to 4096
[  248.916374][T10715] loop4: detected capacity change from 0 to 32768
[  248.951716][T10715] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.979696][T10715] XFS (loop4): Ending clean mount
[  248.987062][T10715] XFS (loop4): Quotacheck needed: Please wait.
[  249.019806][T10715] XFS (loop4): Quotacheck: Done.
[  249.029961][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  249.029970][   T33] audit: type=1800 audit(1758711148.277:332): pid=10715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1867" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  249.092396][T10730] XFS (loop4): User initiated shutdown received.
[  249.100644][T10730] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472).  Shutting down filesystem.
[  249.108721][T10730] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  249.151421][ T9734] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  249.653158][ T2324] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  249.712375][T10751] mkiss: ax0: crc mode is auto.
[  249.805340][ T2324] usb 5-1: Using ep0 maxpacket: 32
[  249.810310][ T2324] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  249.814278][ T2324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.820991][ T2324] usb 5-1: config 0 descriptor??
[  249.825310][ T2324] gspca_main: nw80x-2.14.0 probing 055f:d001
[  249.990175][T10753] loop2: detected capacity change from 0 to 32768
[  250.090884][T10753] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  250.178665][T10753] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  250.296012][ T2324] gspca_nw80x: reg_r err -71
[  250.298241][ T2324] nw80x 5-1:0.0: probe with driver nw80x failed with error -71
[  250.308535][ T2324] usb 5-1: USB disconnect, device number 5
[  250.358579][T10753] overlayfs: upper fs does not support tmpfile.
[  250.401298][T10753] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  250.407483][T10753] overlayfs: failed to set xattr on upper
[  250.410014][T10753] overlayfs: ...falling back to redirect_dir=nofollow.
[  250.413222][T10753] overlayfs: ...falling back to index=off.
[  250.416060][T10753] overlayfs: ...falling back to uuid=null.
[  250.420816][T10753] overlayfs: upper fs missing required features.
[  250.486070][ T5947] ocfs2: Unmounting device (7,2) on (node local)
[  251.727003][T10793] loop4: detected capacity change from 0 to 4096
[  251.759333][T10793] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  251.780046][T10793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.856308][ T9734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.980472][T10797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1900'.
[  252.006777][T10799] vti0: entered promiscuous mode
[  252.215432][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'.
[  252.218693][T10815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1907'.
[  252.302726][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'.
[  252.306751][ T2324] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  252.453281][ T2324] usb 5-1: Using ep0 maxpacket: 8
[  252.570104][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1912'.
[  253.050749][ T2324] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  253.055117][ T2324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.058433][ T2324] usb 5-1: Product: syz
[  253.060147][ T2324] usb 5-1: Manufacturer: syz
[  253.062075][ T2324] usb 5-1: SerialNumber: syz
[  253.067990][ T2324] usb 5-1: config 0 descriptor??
[  253.106056][ T2324] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  254.174244][ T2324] gspca_sonixj: reg_w1 err -71
[  254.213204][ T2324] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  254.221437][ T2324] usb 5-1: USB disconnect, device number 6
[  254.752380][T10856] loop4: detected capacity change from 0 to 512
[  254.767072][T10856] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.772064][T10856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  254.777964][T10856] EXT4-fs (loop4): 1 truncate cleaned up
[  254.781455][T10856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.865745][T10856] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  254.892304][T10856] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.1921: invalid fast symlink length 39
[  254.901572][T10866] trusted_key: encrypted_key: hex blob is missing
[  254.905474][T10856] EXT4-fs (loop4): Remounting filesystem read-only
[  255.507988][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.027477][ T9734] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.146534][ T5743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.273482][T10901] loop2: detected capacity change from 0 to 32768
[  256.277328][T10901] XFS: ikeep mount option is deprecated.
[  256.334118][T10901] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  256.366701][ T5743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.395773][T10901] XFS (loop2): Ending clean mount
[  256.399968][T10901] XFS (loop2): Quotacheck needed: Please wait.
[  256.458714][T10901] XFS (loop2): Quotacheck: Done.
[  256.461379][ T5743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.644957][ T5743] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.981845][ T5743] bridge_slave_1: left allmulticast mode
[  256.995984][ T5743] bridge_slave_1: left promiscuous mode
[  256.998004][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.057758][ T5743] bridge_slave_0: left allmulticast mode
[  257.060253][ T5743] bridge_slave_0: left promiscuous mode
[  257.085332][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.212626][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.239585][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.252538][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.266526][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.275073][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.392512][T10937] xt_l2tp: missing protocol rule (udp|l2tpip)
[  257.534438][ T5947] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  258.294342][ T5743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.300209][ T5743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.306599][ T5743] bond0 (unregistering): Released all slaves
[  258.322529][T10940] wg1: entered promiscuous mode
[  258.325073][T10940] wg1: entered allmulticast mode
[  258.964997][ T5743] hsr_slave_0: left promiscuous mode
[  258.968351][ T5743] hsr_slave_1: left promiscuous mode
[  258.971216][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.974966][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.004374][ T5743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.017543][ T5743] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.071061][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'.
[  259.088876][ T5743] veth1_macvtap: left promiscuous mode
[  259.102878][ T5743] veth0_macvtap: left promiscuous mode
[  259.121326][ T5743] veth1_vlan: left promiscuous mode
[  259.133188][ T5743] veth0_vlan: left promiscuous mode
[  259.346571][ T5238] Bluetooth: hci0: command tx timeout
[  260.605571][ T5743] team0 (unregistering): Port device team_slave_1 removed
[  260.692419][ T5743] team0 (unregistering): Port device team_slave_0 removed
[  260.924569][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  261.114165][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  261.117937][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.143433][   T10] usb 2-1: config 0 descriptor??
[  261.151598][   T10] gspca_main: spca508-2.14.0 probing 8086:0110
[  261.362844][   T10] gspca_spca508: reg_read err -32
[  261.423241][ T5238] Bluetooth: hci0: command tx timeout
[  261.482858][T10929] chnl_net:caif_netlink_parms(): no params data found
[  261.572017][   T10] gspca_spca508: reg_read err -71
[  261.581376][   T10] gspca_spca508: reg_read err -71
[  261.593098][   T10] gspca_spca508: reg_read err -71
[  261.595962][   T10] gspca_spca508: reg write: error -71
[  261.598736][   T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  261.622014][   T10] usb 2-1: USB disconnect, device number 22
[  261.808332][T10929] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.811318][T10929] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.826324][T10929] bridge_slave_0: entered allmulticast mode
[  261.829763][T10929] bridge_slave_0: entered promiscuous mode
[  261.840120][T10929] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.846328][T10929] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.849425][T10929] bridge_slave_1: entered allmulticast mode
[  261.871321][T10929] bridge_slave_1: entered promiscuous mode
[  261.920551][ T5743] ------------[ cut here ]------------
[  261.922838][ T5743] WARNING: CPU: 0 PID: 5743 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  261.926713][ T5743] Modules linked in:
[  261.929284][ T5743] CPU: 0 UID: 0 PID: 5743 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  261.933903][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
SYZFAIL: failed to recv rpc
[  261.937314][ T5743] Workqueue: netns cleanup_net
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  261.939407][ T5743] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  261.941690][ T5743] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b 4e 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 59 ff e0 f7 e8 a4 d0 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 d0 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  261.949094][ T5743] RSP: 0018:ffffc90002f57898 EFLAGS: 00010293
[  261.951416][ T5743] RAX: ffffffff8a22dcec RBX: ffff888108734880 RCX: ffff888022389cc0
[  261.954860][ T5743] RDX: 0000000000000000 RSI: ffffffff8dba996e RDI: ffff888022389cc0
[  261.957845][ T5743] RBP: ffffc90002f579b0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  261.961365][ T5743] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffffffff8f633000
[  261.964768][ T5743] R13: 1ffff920005eaf40 R14: ffff888108735d00 R15: dffffc0000000000
[  261.968090][ T5743] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  261.972090][ T5743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  261.975016][ T5743] CR2: 0000001b3031dff8 CR3: 000000010a90c000 CR4: 00000000000006f0
[  261.978755][ T5743] Call Trace:
[  261.980444][ T5743]  <TASK>
[  261.981823][ T5743]  xfrm_net_exit+0x2d/0x70
[  261.983982][ T5743]  ops_undo_list+0x49a/0x990
[  261.985999][ T5743]  ? __pfx_ops_undo_list+0x10/0x10
[  261.988279][ T5743]  ? do_raw_spin_unlock+0x4d/0x240
[  261.990550][ T5743]  cleanup_net+0x4c5/0x800
[  261.992546][ T5743]  ? __pfx_cleanup_net+0x10/0x10
[  261.994823][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  261.997094][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  261.999548][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  262.002015][ T5743]  process_scheduled_works+0xae1/0x17b0
[  262.004420][ T5743]  ? __pfx_process_scheduled_works+0x10/0x10
[  262.006961][ T5743]  worker_thread+0x8a0/0xda0
[  262.008905][ T5743]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.011491][ T5743]  ? __kthread_parkme+0x7b/0x200
[  262.013733][ T5743]  kthread+0x711/0x8a0
[  262.015491][ T5743]  ? __pfx_worker_thread+0x10/0x10
[  262.018037][ T5743]  ? __pfx_kthread+0x10/0x10
[  262.020113][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.022443][ T5743]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.024864][ T5743]  ? __pfx_kthread+0x10/0x10
[  262.026906][ T5743]  ret_from_fork+0x439/0x7d0
[  262.028871][ T5743]  ? __pfx_ret_from_fork+0x10/0x10
[  262.031077][ T5743]  ? __switch_to_asm+0x39/0x70
[  262.033264][ T5743]  ? __switch_to_asm+0x33/0x70
[  262.035315][ T5743]  ? __pfx_kthread+0x10/0x10
[  262.037349][ T5743]  ret_from_fork_asm+0x1a/0x30
[  262.039383][ T5743]  </TASK>
[  262.040686][ T5743] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  262.043808][ T5743] CPU: 0 UID: 0 PID: 5743 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  262.047600][ T5743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.051586][ T5743] Workqueue: netns cleanup_net
[  262.053564][ T5743] Call Trace:
[  262.054946][ T5743]  <TASK>
[  262.056192][ T5743]  dump_stack_lvl+0x99/0x250
[  262.058093][ T5743]  ? __asan_memcpy+0x40/0x70
[  262.059998][ T5743]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.061922][ T5743]  ? __pfx__printk+0x10/0x10
[  262.063596][ T5743]  vpanic+0x281/0x750
[  262.065255][ T5743]  ? __pfx__printk+0x10/0x10
[  262.066945][ T5743]  ? __pfx_vpanic+0x10/0x10
[  262.068926][ T5743]  ? is_bpf_text_address+0x292/0x2b0
[  262.070900][ T5743]  panic+0xb9/0xc0
[  262.072264][ T5743]  ? __pfx_panic+0x10/0x10
[  262.073925][ T5743]  __warn+0x31b/0x4b0
[  262.075317][ T5743]  ? xfrm_state_fini+0x26d/0x2f0
[  262.076999][ T5743]  ? xfrm_state_fini+0x26d/0x2f0
[  262.078930][ T5743]  report_bug+0x2be/0x4f0
[  262.080440][ T5743]  ? xfrm_state_fini+0x26d/0x2f0
[  262.082098][ T5743]  ? xfrm_state_fini+0x26d/0x2f0
[  262.083722][ T5743]  ? xfrm_state_fini+0x26f/0x2f0
[  262.085376][ T5743]  handle_bug+0x84/0x160
[  262.086832][ T5743]  exc_invalid_op+0x1a/0x50
[  262.088343][ T5743]  asm_exc_invalid_op+0x1a/0x20
[  262.089919][ T5743] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  262.091676][ T5743] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b 4e 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 59 ff e0 f7 e8 a4 d0 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 d0 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  262.097939][ T5743] RSP: 0018:ffffc90002f57898 EFLAGS: 00010293
[  262.100086][ T5743] RAX: ffffffff8a22dcec RBX: ffff888108734880 RCX: ffff888022389cc0
[  262.102925][ T5743] RDX: 0000000000000000 RSI: ffffffff8dba996e RDI: ffff888022389cc0
[  262.105796][ T5743] RBP: ffffc90002f579b0 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  262.108480][ T5743] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffffffff8f633000
[  262.111000][ T5743] R13: 1ffff920005eaf40 R14: ffff888108735d00 R15: dffffc0000000000
[  262.113548][ T5743]  ? xfrm_state_fini+0x26c/0x2f0
[  262.115163][ T5743]  ? xfrm_state_fini+0x26c/0x2f0
[  262.116772][ T5743]  xfrm_net_exit+0x2d/0x70
[  262.118240][ T5743]  ops_undo_list+0x49a/0x990
[  262.119710][ T5743]  ? __pfx_ops_undo_list+0x10/0x10
[  262.121343][ T5743]  ? do_raw_spin_unlock+0x4d/0x240
[  262.122968][ T5743]  cleanup_net+0x4c5/0x800
[  262.124665][ T5743]  ? __pfx_cleanup_net+0x10/0x10
[  262.126597][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.128633][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  262.130747][ T5743]  ? process_scheduled_works+0x9ef/0x17b0
[  262.132604][ T5743]  process_scheduled_works+0xae1/0x17b0
[  262.134437][ T5743]  ? __pfx_process_scheduled_works+0x10/0x10
[  262.136396][ T5743]  worker_thread+0x8a0/0xda0
[  262.137984][ T5743]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  262.140138][ T5743]  ? __kthread_parkme+0x7b/0x200
[  262.142119][ T5743]  kthread+0x711/0x8a0
[  262.143774][ T5743]  ? __pfx_worker_thread+0x10/0x10
[  262.145729][ T5743]  ? __pfx_kthread+0x10/0x10
[  262.147409][ T5743]  ? _raw_spin_unlock_irq+0x23/0x50
[  262.149359][ T5743]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.151578][ T5743]  ? __pfx_kthread+0x10/0x10
[  262.153160][ T5743]  ret_from_fork+0x439/0x7d0
[  262.154699][ T5743]  ? __pfx_ret_from_fork+0x10/0x10
[  262.156502][ T5743]  ? __switch_to_asm+0x39/0x70
[  262.158218][ T5743]  ? __switch_to_asm+0x33/0x70
[  262.160091][ T5743]  ? __pfx_kthread+0x10/0x10
[  262.161786][ T5743]  ret_from_fork_asm+0x1a/0x30
[  262.163506][ T5743]  </TASK>
[  262.165458][ T5743] Kernel Offset: disabled
[  262.166983][ T5743] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:52:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002f57030
R8 =ffff888107888237 R9 =1ffff11020f11046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b028d3 R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3031dff8 CR3=000000010a90c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81660eea ffffffff81660eea
XMM02=00000008000003b7 ffffffff81660eea XMM03=0000003300000085 00040000000004b7
XMM04=9500000033000000 8500040000000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=a6000000000000a2 bc00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbfba212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88812b0a01e0 RCX=ffff8880200a8000 RDX=0000000000000000
RSI=ffff88812b0a01e0 RDI=0000000011cc1696 RBP=0000000011cc1696 RSP=ffffc900031469f0
R8 =0000000000000000 R9 =ffffffff825d56fc R10=dffffc0000000000 R11=ffffed102001c025
R12=0000000011979e8c R13=dffffc0000000000 R14=ffff8880287c8000 R15=ffff8880268aec30
RIP=ffffffff825de180 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557000a500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005565cff047e8 CR3=00000001077f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f56e5012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
