last executing test programs:

3m33.60816707s ago: executing program 1 (id=178):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6)

3m33.497821342s ago: executing program 1 (id=180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x10, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000)

3m33.308353545s ago: executing program 1 (id=183):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0x1, 0x4)

3m33.020440629s ago: executing program 1 (id=188):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@errors_remount}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0)

3m32.615113995s ago: executing program 1 (id=193):
unshare(0x20400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1000000, 0x2, 0x0}}, 0x10)

3m30.424014057s ago: executing program 1 (id=218):
r0 = socket(0x10, 0x80002, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x94, 0x13, 0x53b, 0x0, 0x0, {}, [{0x80, 0x1, [@m_sample={0x50, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff81, 0x1, 0xffffffffffffffe0, 0x6, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x800)

3m30.26172589s ago: executing program 32 (id=218):
r0 = socket(0x10, 0x80002, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtaction={0x94, 0x13, 0x53b, 0x0, 0x0, {}, [{0x80, 0x1, [@m_sample={0x50, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff81, 0x1, 0xffffffffffffffe0, 0x6, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x800)

2m59.314723263s ago: executing program 2 (id=551):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x48, 0x13600, 0x6, 0x2, 0x8f87, 0x7a, 0x3, 0x80008, 0x800, 0x2, 0x3, 0xa, 0x7fd, 0x3, 0xfd, 0x9, 0x80000000, 0x3, 0x7fffffff, 0xb740, 0xca9e, 0x9, 0x20001e58, 0x8, 0xf39e, 0x739e, 0x1539b804, 0x9, 0x1, 0x2]})

2m58.723422041s ago: executing program 2 (id=570):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x4e20, @my=0x1}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)

2m58.619993233s ago: executing program 2 (id=560):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="0503", 0x2, 0x4000800, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14)

2m58.437225536s ago: executing program 2 (id=567):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@errors_remount}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0)

2m58.14791767s ago: executing program 2 (id=571):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

2m56.508027613s ago: executing program 2 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2m56.367018535s ago: executing program 33 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.4030084s ago: executing program 6 (id=3171):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x2)
recvmsg(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000000)

3.275430532s ago: executing program 6 (id=3174):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2})
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0x20000004})

2.934528007s ago: executing program 5 (id=3177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x2c}}, 0x0)

2.933938547s ago: executing program 6 (id=3178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x10, &(0x7f0000000400)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

2.832111368s ago: executing program 5 (id=3180):
r0 = epoll_create1(0x80000)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xc0002009})
epoll_pwait(r0, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0)

2.796940759s ago: executing program 6 (id=3181):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x554d, &(0x7f00000002c0)="$eJzs3M1rI+UfAPAnfdntvvz2V8SDtx1YhBY2YdOXRW9Vd/EFu5RVD540TaYhu0mmNGlae/LgUTz4n4jCnjz6N3jw7EEQD4o3Qck8U211BaVpY5vPB6bfme88+c7zzCHwnSkJwMSaT37+sRRuhCshhOkQwvUQ8v1SseXWYnguhHAzhDB1ZCsV+d8Tl0IIV0MIN4bFY81ScerT24Nbqz+88dOXX1+eufbZk2+KNDCBhl8rne24v9eJMWvG+KjI1watPHZWBkWMJ9pz8Xwni/m9dDOvsFc7HFfL43Izjs+2d3vDuNWu1Yex2drK89vdeMHeoHlYJ//Ao9pOftxIN/PY6mV5bB7E6+4fxO+2g14/1mkU9T7Iy4d+/zDGfLqfxvVsP85jvdsv8rFu1kj3h3FQxOJyoZ61G/k8No/euZl/f7P/w95sdXf3k0G602tl3WS1Un2hUr1bru5kjbSfrpRrncbdlWSh2R4OK/fTWmetmWXNdlqpZ53FZKFZr5er1WThXrrZqnWTarWyXLlTXl0s9m4nrz54J2k3koVhfLnV3e232r1kK9tJ4icWk6XK8ouLya1q8tb6RrLx8P799Y2337v37oOX1l9/pRj0l2klC0t3lpbK1TvlperiiZb/3ZPztP6PilmPbv1wMqVxTwDg/Blz/w9MqOdP0P93HhfHT+3/dx6GcPr9fxhb/3+xTHj/P/HrhxPR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATKxvZz9/Ld+Zj8fXivz/itQzxXEphDAVQvj1KabDpWM1p4s6s38zfvZPc/iqFPIKw2tcLrarIYS1Yvvl/6d9FwAAAODi+uLDm5/Ebj3+mR/3hDhL8aHN1PX3R1RvLoQwO//9iKpNDf88O6JiYSbf9kdULX+ANTeiYvGR28yoqv0j08fC3JFQimHqTKcDAACcieOdwNl2IQAAAJylj8c9AcajFA5fZR6+C87/8/6PF4JXjh0BAAAA51Bp3BMAAAAATl3e//v9PwAAALjY4u//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/sXM/uUoDcRzAf6VUUGMkxr1XYQfHcenScAAvwQFccAYvwBlw5xEMNXRGBGTxXpjSPPL5JGWYpnyZ4c9ipu0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ9+Npsmvn76dmvOvr1Nmd4AAAAA1+yazbJ7Mkv1t3n/u7zrQ65XETGKiGtj9zpenWXWOaf5d/z30+Obizb8iOgSDu8xydubiJjn7ff7vj8FAAAAeBjV5Y7tar1Io/X0MHtq0rhwyxhCmrSpi+Udfl/N7FehtNEh72OhsK6X4/hSKK2bwJoWCktTbvf9S6Uv/e+s3fSkqFIxuvqyYyOL9R0AALij+ljUF6OQ+VBNAgAAoBefh24Aw+iuB8jX4udTgZNU5NN7r89qAAAAwAv03/0AAAAAwMPpxv93Wv+v7Wn9v7bc7esAAADwmNL6fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRp12yW29V6cWvOvn2mKiJOqmV6AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/Yn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLn/n3jpuIAgD/b5ystIEJANwQhkBjoQtNraemAhBhAEQN/AlKUXkvolR9tBlpViCxsKHMXBGwIIYHC1ol/oHMrdSlbhwxFQoxG9tmJ20b0UsB2c5+P9O59bVnvfZ9PivL1cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBl6+2dOMk/5iZxXJ67cffKSt7fvK/PXdu4tZC3PI72OO+Bf5t4971YP4gG7SUCAADA7Eiq+j6EcDvdXMr7eK6o/9Pqmrzm//bpSVzV8/fX/VVf1f55+/WXO89vTzQ3mScf9MzqeHT0wVR6/98qu+2Zh17RK+588ewlKb6Q+L3157bS4n5GX1+//k6/CGfg4QkAPK6OVH0ZVL8P5f2wzcQAmBm9WuFd1f/JXLs5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADRhaz08WcVRCGGhtxPnbt69srJbf23j1kLVTl69uhG+3BkzHyINIZxZHY+ONrqabrt46fK55fF4dGGK4M3Dv32fZVk21cUPD14KIfwX4zxK8Fa5/HMfTHFxCC1k+CjBX91Io2tBXH7ZXcnn8Qha/KEEAMC+lJYtr+tvp5tL+bloPoTsu3vr/1drcZiy/r/z4ckb9bnq9f+wsRV23+La+U8XL166/Nrq+eWzo7Ojj18/NnxjePzUiROnFotnJYuemAAAALBnWZZl2wf9stXr/3j+wf3/Q7U4TFn/f/bN8Iv6xIn6f1c7m35tZwIAADDbnn35zz+iXc5H/X74fHlt7cJw8rl9fGzy2UKqe3agbPX6P5lvOysAAACgCVvr0T37/6drcZhy//+pH174qT5mEkI4WO7/H1n5ZHy6ueV0WhN/Ttz2GgEAAGjXwbLV9//T4v3/ePuVhziEcPiVSVz+G8B/rP/Tsv5P3v3qx/pc9ff/jze3xE6KB5P7EQ/ikAxC6A3azggAAID97Imy5cX+7+nm0kc/H3q/7/1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9HQAA//9Dv0E1")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffffc)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})

2.71309682s ago: executing program 5 (id=3184):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14)

2.586934042s ago: executing program 5 (id=3188):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x4, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}}]}, 0x8c}}, 0x0)

2.452727984s ago: executing program 5 (id=3191):
r0 = socket(0xa, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={<r1=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6, 0x2a}, 0x90)

2.452095253s ago: executing program 4 (id=3192):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$eJzs3T9sFNkdAOA3YyfYBIhNKIgUKSsFJVESWTYViZFijMHY4BCRQJFmWdsLOFl7kb2OUlA4SoOUKlKKKAW6k65zhdxdxTUnXXnNlVyNdFdcc9JJiD3t7qy9M+vFe9wuPtD3SXh23n/8m3n7phi/OFG5t7KRW9nIFdZy5aU7G2dzfy+XNleLIc76sC2lJ7run0PVjziJ/eG5fvHyn26dDeGD5U+eVavVaqgZDPuaaPn85RcPllqPTXHryb8a7e7fWq/8JYRwqm1cNQMhhKHk84XkOJ0ch0MIJ0IIUQjh1oN/3871aDSPnxbP558vPNyZPDO//Win8/89CuH/pR//5u7qZz8bmPz0Vz3qHgAAAAAAAAAAAAAAAACAN9zsjes3/zg+EZ5EYXA7an9fdzY5dno/ttozP+04xl69mwsAAAAAAAAAAAAAAAAAAADfVXvv/+eik/u8/z+THKc61K/+vrt+fv4tx0l/zP3h+syl8Ylk//eoLf9ckvT5hYEw2txf/aPO+79fyNTff//39n5eVXN8zX5HQhSPpc7jeGwshHeTjd9PR0fjUnmj8us75c215Z4N442Vjn9j9/5UdJIN/VPxf8n+/9OZ9vu///+P2q6m2vnt3l1ib7V0/Ac6lnvvn9FL4v/93XIXM/VeR/x5den4D9bThlsLTDUmgFr8/zN48P0/k2m/X/E/EULIRbWx5lIzQG0NU0vvtF4hLR3/79XTUlNn8ovsdP9/lYn/pUz7hzX/b2W/iNhXOv6NeXwoVWLv/h+ND77/L2faP4z418a/5fu/K+n4H2kkDqaK1H+T3c7/s5n2s/F/Ua1WezHum3EyzhNR6grYjhrp/mZcd9LxH2rL33v+i7ta/1/J1H9dz3/NfpvPf83p/5dR4/mP/e3Gfyc8q1aHO5br9v6fy9Tr9/w/VV//tTl3qp+dvkXS9//Relp67TxS/9kp/tVM/Ocz7b9C/N/v/BS6p74qGWrGf28+eXGkkf6O9V9X0vH/QSMxbi2xVf9ZX/9FB6//r2baP4z1X238W3F/e31bpON/rGO5Wvw/7uL7/1qmXv/jH8J48wJoX75wgHT8j3csV7//hw6O/0KmXr/j/4t+Ng4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwBphOjiMhisdS53E8NhbCxeT8dDgaLRaW84ul8tLfNkKYSdJz4WR0t1ReLJTyK2vl5WK+UCqVl0K4lOSfCkPRRqlcya8W7l/ebWs4ulcsrFcWi4VKCGE2Sf9JON5sa3Glslq4H0K4spv3w7i8fv9eYS2/vLL+u/Hx8fEwtzuG0aj4j0pxrdLovZEbwvxu3ZGoZXD17Ku7YzkW/bW8ub5WKNXTr7XUKZWXCqWWOgtJ3n/DaFRZ31xbKlSK+VL5brO/wzSVHGfmbvz5xrWJtvzbUeM4/XqHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA39GTyt/8LIQw2zuIQQi5KPkTJv5THT4vn888XHu5MnpnffrTzbL8yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXTpGiRiIwgD8ZlJo6TGsQtLZRhTRwojgCfQYHkaP4iW8g4WFrcWysDuBkGwgzW71fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsN7dc//y1LQRKc43ZxFfb98/4/yh1I/rw/erE8zI8dw/9je3TVv+Pc3yq3L02+Vd+v/3/lqVGqM6+JzsyXSf9uZ9ppb2bWm+oe9FpFxHRFfyy5RzXa97CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//4VrJTc=")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x14da42, 0xca)

2.335530556s ago: executing program 5 (id=3194):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e0103000047"], 0x0, 0x0, 0x0, 0x0})

1.795940053s ago: executing program 0 (id=3200):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100cc04, &(0x7f0000002300)=ANY=[@ANYBLOB="71756965742c75736500723f54b2b069643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,uid=', @ANYRESHEX, @ANYBLOB=',nfs,nodots,dots,dots,nodots,nodots,dots,dots,nodots,usefree,errors=remount-ro,dots,flush,dots,dots,dots,showexec,sys_immutable,nodots,discard,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")

1.705699515s ago: executing program 0 (id=3201):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
ftruncate(r0, 0x100)

1.37755838s ago: executing program 3 (id=3203):
socket$igmp(0x2, 0x3, 0x2)
socket$inet(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000)

1.35738594s ago: executing program 4 (id=3204):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)

1.32513168s ago: executing program 3 (id=3205):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10)
bind$tipc(r0, 0x0, 0x0)

1.293698361s ago: executing program 6 (id=3206):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000540)="922c61816e8c5c3c9eac46f8fbc68746146264df7ff761a1b86a214c63dca9c315cef0a0d950a20712b2980de54c5926be2db6ec5691f62c03394193e6e31c9c40ea2590", 0x44}], 0x1}}], 0x1, 0x200880d8)

1.207027932s ago: executing program 3 (id=3207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)

1.190673002s ago: executing program 0 (id=3208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0)

1.167773502s ago: executing program 4 (id=3209):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000240)={@broadcast, @random="9e4338bf2d14", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @empty, [], "38cecdacd0873515"}}}}}}}, 0x0)

1.117553413s ago: executing program 4 (id=3210):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000100)={&(0x7f00000000c0)=[{0xd, 0x7}, {0x7, 0x25, 0x1}], 0x2, 0x10, 0x5, 0x1})

1.095973103s ago: executing program 3 (id=3211):
r0 = socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, r2})

1.082815444s ago: executing program 0 (id=3212):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x9)
sendto$inet(r0, &(0x7f00000000c0)="ab", 0x1, 0x400c805, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)

955.876306ms ago: executing program 3 (id=3213):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB='quota,iocharset=macgreek,discard,iocharset=iso8859-4,discard,integrity,quota,iocharset=default,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c001f1d02192b82c1d77d5275a9dd011c79b65ddfeffff26d30b4e45e4ff5d2a3c8f687494e2782c60db0fe3c08f1fd0244f2b3988f6a3c9f05e62bd27131d2e1354fc8865886482d784608f35db7a23eefc1665bb78934469d2a73d3fb7bf425ada37085aa46365837765a72f50552ce8f69886588138e3b027f009c59356fac135f289d895427a12d3f87b72351c22f0b418fba3067e7363e488de8e5c39f01bbb7e7b106977504e87fc87a886769f8eba6de3294c2076360fcb9ee4058f16c292335f4ea4af20729aff7de5cbcf16e575540ffb2ac590551ecdecf048219491837307887a332528baad28ae02a33b060"], 0x24, 0x61b6, &(0x7f00000075c0)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40441, 0x0)

750.398609ms ago: executing program 4 (id=3214):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000002d80)={'raw\x00'}, &(0x7f0000003240)=0x54)

693.19979ms ago: executing program 4 (id=3215):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000000)={0x20, 0x8, 0x2, "c470"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x40, 0x7, 0x4, "f2011158"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

687.052319ms ago: executing program 6 (id=3216):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x14da42, 0xca)

242.614496ms ago: executing program 3 (id=3217):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

189.133307ms ago: executing program 0 (id=3218):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x8000}}}}}}}, 0x0)

0s ago: executing program 0 (id=3219):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b031400e2ff020002004788a04fa13bb1000011000088ca1a00", 0xa059, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @link_local}, 0x14)

kernel console output (not intermixed with test programs):

medi: valid board names for labpc_pci driver are:
[  200.550129][ T9442]  labpc_pci
[  200.556203][ T9442] comedi: valid board names for adl_pci9118 driver are:
[  200.570594][ T9442]  pci9118dg
[  200.573917][ T9442]  pci9118hg
[  200.577114][ T9442]  pci9118hr
[  200.588003][ T9442] comedi: valid board names for 8255_pci driver are:
[  200.595013][ T9442]  8255_pci
[  200.617843][ T9442] comedi: valid board names for s526 driver are:
[  200.624225][ T9442]  s526
[  200.626980][ T9442] comedi: valid board names for multiq3 driver are:
[  200.657786][ T9442]  multiq3
[  200.661407][ T9442] comedi: valid board names for pcmuio driver are:
[  200.679014][ T9442]  pcmuio48
[  200.682240][ T9442]  pcmuio96
[  200.697802][ T9442] comedi: valid board names for pcmmio driver are:
[  200.712144][ T9448] PM: Enabling pm_trace changes system date and time during resume.
[  200.712144][ T9448] PM: Correct system time has to be restored manually after resume.
[  200.733793][ T9442]  pcmmio
[  200.737580][ T9442] comedi: valid board names for pcmda12 driver are:
[  200.745542][ T9442]  pcmda12
[  200.748865][ T9442] comedi: valid board names for pcmad driver are:
[  200.755461][ T9442]  pcmad12
[  200.759350][ T9442]  pcmad16
[  200.762419][ T9442] comedi: valid board names for ni_labpc driver are:
[  200.769973][ T9442]  lab-pc-1200
[  200.773354][ T9442]  lab-pc-1200ai
[  200.776886][ T9442]  lab-pc+
[  200.780350][ T9442] comedi: valid board names for atmio16 driver are:
[  200.786924][ T9442]  atmio16
[  200.787920][ T5143] usb 6-1: Using ep0 maxpacket: 16
[  200.793018][ T9442]  atmio16d
[  200.798517][ T9442] comedi: valid board names for ni_at_ao driver are:
[  200.805421][ T9442]  at-ao-6
[  200.810570][ T9442]  at-ao-10
[  200.813708][ T9442] comedi: valid board names for ni_at_a2150 driver are:
[  200.834995][ T9442]  ni_at_a2150
[  200.839106][ T9442] comedi: valid board names for adq12b driver are:
[  200.846615][ T9442]  adq12b
[  200.850150][ T9442] comedi: valid board names for mpc624 driver are:
[  200.868215][ T9442]  mpc624
[  200.871177][ T9442] comedi: valid board names for c6xdigio driver are:
[  200.905056][ T9442]  c6xdigio
[  200.908566][ T9442] comedi: valid board names for aio_iiro_16 driver are:
[  200.915510][ T9442]  aio_iiro_16
[  200.927033][ T9442] comedi: valid board names for aio_aio12_8 driver are:
[  200.939924][ T9442]  aio_aio12_8
[  200.943322][ T9442]  aio_ai12_8
[  200.947648][ T9442]  aio_ao12_4
[  200.954549][ T9442] comedi: valid board names for fl512 driver are:
[  200.961215][ T9442]  fl512
[  200.964158][ T9442] comedi: valid board names for dmm32at driver are:
[  200.984391][ T9442]  dmm32at
[  200.987454][ T9442] comedi: valid board names for dt282x driver are:
[  200.998981][ T9442]  dt2821
[  201.034630][ T9442]  dt2821-f
[  201.037882][ T9442]  dt2821-g
[  201.040991][ T9442]  dt2823
[  201.044838][ T9442]  dt2824-pgh
[  201.054198][ T9442]  dt2824-pgl
[  201.057502][ T9442]  dt2825
[  201.061218][ T9442]  dt2827
[  201.064164][ T9442]  dt2828
[  201.067193][ T9442]  dt2829
[  201.070740][ T9442]  dt21-ez
[  201.073766][ T9442]  dt23-ez
[  201.076782][ T9442]  dt24-ez
[  201.080020][ T9442]  dt24-ez-pgl
[  201.083412][ T9442] comedi: valid board names for dt2817 driver are:
[  201.090098][ T9442]  dt2817
[  201.093125][ T9442] comedi: valid board names for dt2815 driver are:
[  201.099847][ T9442]  dt2815
[  201.103056][ T9442] comedi: valid board names for dt2814 driver are:
[  201.109835][ T9442]  dt2814
[  201.112895][ T9442] comedi: valid board names for dt2811 driver are:
[  201.122367][ T9442]  dt2811-pgh
[  201.125671][ T9442]  dt2811-pgl
[  201.134820][ T9442] comedi: valid board names for dt2801 driver are:
[  201.139286][ T5143] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  201.141675][ T9442]  dt2801
[  201.159154][ T9442] comedi: valid board names for das6402 driver are:
[  201.165838][ T9442]  das6402-12
[  201.168483][ T5143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.173950][ T9442]  das6402-16
[  201.185702][ T9442] comedi: valid board names for das1800 driver are:
[  201.187905][ T5143] usb 6-1: Product: syz
[  201.194535][ T9442]  das-1701st
[  201.203079][ T5143] usb 6-1: Manufacturer: syz
[  201.205264][ T9442]  das-1701st-da
[  201.213148][ T9442]  das-1702st
[  201.213611][ T5143] usb 6-1: SerialNumber: syz
[  201.216697][ T9442]  das-1702st-da
[  201.233890][ T9442]  das-1702hr
[  201.235818][ T5143] usb 6-1: config 0 descriptor??
[  201.242962][ T9442]  das-1702hr-da
[  201.242995][ T9442]  das-1701ao
[  201.243002][ T9442]  das-1702ao
[  201.243008][ T9442]  das-1801st
[  201.265888][ T9442]  das-1801st-da
[  201.269915][ T9442]  das-1802st
[  201.273207][ T9442]  das-1802st-da
[  201.276744][ T9442]  das-1802hr
[  201.285648][ T9442]  das-1802hr-da
[  201.289511][ T9442]  das-1801hc
[  201.292883][ T9442]  das-1802hc
[  201.296182][ T9442]  das-1801ao
[  201.305120][ T9442]  das-1802ao
[  201.308676][ T9442] comedi: valid board names for das800 driver are:
[  201.308748][ T5143] hub 6-1:0.0: bad descriptor, ignoring hub
[  201.315272][ T9442]  das-800
[  201.329057][ T5143] hub: probe of 6-1:0.0 failed with error -5
[  201.333150][ T9442]  cio-das800
[  201.352098][ T9442]  das-801
[  201.356752][ T5143] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  201.364550][ T9442]  cio-das801
[  201.372121][ T9442]  das-802
[  201.374457][ T9458] loop3: detected capacity change from 0 to 32768
[  201.375281][ T9442]  cio-das802
[  201.393166][ T9442]  cio-das802/16
[  201.396733][ T9442] comedi: valid board names for isa-das08 driver are:
[  201.406545][ T1313] usb 6-1: Failed to submit usb control message: -71
[  201.407884][ T9442]  isa-das08
[  201.416254][ T1313] usb 6-1: unable to send the bmi data to the device: -71
[  201.417201][ T9442]  das08-pgm
[  201.435000][ T9442]  das08-pgh
[  201.437464][ T9458] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1960 (9458)
[  201.438664][ T1313] usb 6-1: unable to get target info from device
[  201.454165][ T9442]  das08-pgl
[  201.461359][ T1313] usb 6-1: could not get target info (-71)
[  201.461422][ T1313] usb 6-1: could not probe fw (-71)
[  201.474991][ T9442]  das08-aoh
[  201.478737][ T9442]  das08-aol
[  201.482556][ T9442]  das08-aom
[  201.485762][ T9442]  das08/jr-ao
[  201.489942][ T9442]  das08jr-16-ao
[  201.496334][ T9442]  pc104-das08
[  201.500688][ T9458] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  201.518528][ T9442]  das08jr/16
[  201.524338][ T9458] BTRFS info (device loop3): using free space tree
[  201.531696][ T9458] BTRFS info (device loop3): has skinny extents
[  201.538702][ T9442] comedi: valid board names for das16m1 driver are:
[  201.545472][ T9442]  das16m1
[  201.549471][ T9442] comedi: valid board names for dac02 driver are:
[  201.557068][ T9442]  dac02
[  201.560421][ T9442] comedi: valid board names for rti802 driver are:
[  201.570681][ T9442]  rti802
[  201.573746][ T9442] comedi: valid board names for rti800 driver are:
[  201.582992][ T9442]  rti800
[  201.585939][ T9442]  rti815
[  201.589515][ T9442] comedi: valid board names for pcm3724 driver are:
[  201.596742][ T9442]  pcm3724
[  201.600372][ T9442] comedi: valid board names for pcl818 driver are:
[  201.607238][ T9442]  pcl818l
[  201.612116][ T9442]  pcl818h
[  201.615244][ T9442]  pcl818hd
[  201.619004][ T9442]  pcl818hg
[  201.625355][ T9442]  pcl818
[  201.628435][ T9442]  pcl718
[  201.631556][ T9442]  pcm3718
[  201.645286][ T9442] comedi: valid board names for pcl816 driver are:
[  201.657432][ T6252] usb 6-1: USB disconnect, device number 12
[  201.701208][ T9442]  pcl816
[  201.705140][ T9442]  pcl814b
[  201.708435][ T9442] comedi: valid board names for pcl812 driver are:
[  201.715146][ T9442]  pcl812
[  201.718598][ T9442]  pcl812pg
[  201.721856][ T9442]  acl8112pg
[  201.725059][ T9442]  acl8112dg
[  201.729014][ T9442]  acl8112hg
[  201.732240][ T9442]  a821pgl
[  201.735257][ T9442]  a821pglnda
[  201.738610][ T9442]  a821pgh
[  201.741893][ T9442]  a822pgl
[  201.745378][ T9442]  a822pgh
[  201.749313][ T9442]  a823pgl
[  201.758454][ T9442]  a823pgh
[  201.761853][ T9442]  pcl813
[  201.764879][ T9442]  pcl813b
[  201.789877][ T9442]  acl8113
[  201.792966][ T9442]  iso813
[  201.796519][ T9442]  acl8216
[  201.806375][ T9442]  a826pg
[  201.809602][ T9442] comedi: valid board names for pcl730 driver are:
[  201.810490][ T4796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.816105][ T9442]  pcl730
[  201.816115][ T9442]  iso730
[  201.816121][ T9442]  acl7130
[  201.816126][ T9442]  pcm3730
[  201.816131][ T9442]  pcl725
[  201.816136][ T9442]  p8r8dio
[  201.816143][ T9442]  acl7225b
[  201.816148][ T9442]  p16r16dio
[  201.846327][ T9458] BTRFS info (device loop3): enabling ssd optimizations
[  201.849006][ T9442]  pcl733
[  201.849017][ T9442]  pcl734
[  201.849023][ T9442]  opmm-1616-xt
[  201.849029][ T9442]  pearl-mm-p
[  201.849035][ T9442]  ir104-pbf
[  201.849042][ T9442] comedi: valid board names for pcl726 driver are:
[  201.903241][ T9442]  pcl726
[  201.906221][ T9442]  pcl727
[  201.909299][   T26] audit: type=1800 audit(1782491939.046:14): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1960" name="file2" dev="loop3" ino=261 res=0 errno=0
[  201.918023][ T9442]  pcl728
[  201.965679][ T9442]  acl6126
[  201.968804][ T9442]  acl6128
[  201.972717][ T9442] comedi: valid board names for pcl724 driver are:
[  201.990268][ T9442]  pcl724
[  201.994353][ T9442]  pcl722
[  201.999278][ T9442]  pcl731
[  202.006040][ T9442]  acl7122
[  202.019354][ T9442]  acl7124
[  202.022410][ T9442]  pet48dio
[  202.096678][ T9442]  pcmio48
[  202.106809][ T9442]  onyx-mm-dio
[  202.141213][ T9442] comedi: valid board names for pcl711 driver are:
[  202.157879][ T9442]  pcl711
[  202.173650][ T9442]  pcl711b
[  202.177149][ T9442]  acl8112hg
[  202.200688][ T9442]  acl8112dg
[  202.214279][ T9442] comedi: valid board names for amplc_pc263 driver are:
[  202.253259][ T9442]  pc263
[  202.256544][ T9442] comedi: valid board names for amplc_pc236 driver are:
[  202.276608][ T9442]  pc36at
[  202.286146][ T9442] comedi: valid board names for amplc_dio200 driver are:
[  202.308963][ T9442]  pc212e
[  202.311941][ T9442]  pc214e
[  202.318606][ T4390] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop3 scanned by udevd (4390)
[  202.325288][ T9442]  pc215e
[  202.348989][ T9442]  pc218e
[  202.353156][ T9442]  pc272e
[  202.356132][ T9442] comedi: valid board names for comedi_parport driver are:
[  202.411110][ T9442]  comedi_parport
[  202.423119][ T9442] comedi: valid board names for comedi_test driver are:
[  202.449102][ T9442]  comedi_test
[  202.452992][ T9442] comedi: valid board names for comedi_bond driver are:
[  202.464221][ T9488] team0: Cannot enslave team device to itself
[  202.483827][ T9442]  comedi_bond
[  202.487596][ T9488] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  202.639687][ T9488] syz.4.1965 (9488) used greatest stack depth: 19856 bytes left
[  203.226086][ T9534] sp0: Synchronizing with TNC
[  203.288502][ T9533] [U] è`
[  203.724212][ T4796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  203.814959][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1996'.
[  204.380626][ T7843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  204.391766][ T7902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  204.428615][ T6252] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  204.620996][ T9601] loop4: detected capacity change from 0 to 4096
[  204.671266][ T6252] usb 6-1: Using ep0 maxpacket: 32
[  204.688890][ T9601] ntfs3: Invalid value for gid.
[  204.788051][ T6252] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  204.799505][ T6252] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.848394][ T6252] usb 6-1: config 0 has no interface number 0
[  204.855135][ T6252] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  205.047292][ T9629] loop6: detected capacity change from 0 to 64
[  205.099228][ T6252] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  205.130549][ T6252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.153804][ T6252] usb 6-1: Product: syz
[  205.170643][ T6252] usb 6-1: Manufacturer: syz
[  205.182875][ T9632] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424)
[  205.195994][ T6252] usb 6-1: SerialNumber: syz
[  205.215688][ T6252] usb 6-1: config 0 descriptor??
[  205.260591][ T9632] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  205.276878][ T6252] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  205.301409][ T6252] radio-si470x: probe of 6-1:0.35 failed with error -5
[  205.478185][ T6252] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[  205.485686][ T6252] usbhid 6-1:0.35: couldn't find an input interrupt endpoint
[  205.706599][ T7843] usb 6-1: USB disconnect, device number 13
[  205.982431][ T5143] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  206.183320][ T9664] loop6: detected capacity change from 0 to 32768
[  206.426454][   T26] audit: type=1326 audit(1782491943.566:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9680 comm="syz.5.2048" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bb71e9e59 code=0x0
[  206.462540][ T4233] Bluetooth: hci1: command 0x0406 tx timeout
[  206.468754][ T9685] tipc: Started in network mode
[  206.474212][ T9685] tipc: Node identity fe80000000000000000000000000001, cluster identity 127
[  206.483983][ T5143] usb 4-1: config index 0 descriptor too short (expected 63186, got 210)
[  206.496860][ T9685] tipc: Enabled bearer <udp:syz0>, priority 10
[  206.503378][ T5143] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  206.511913][ T5143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.522484][ T5143] usb 4-1: config 0 has no interface number 0
[  206.529545][ T5143] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  206.554042][ T5143] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  206.567878][ T5143] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  206.577131][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.605461][ T5143] usb 4-1: config 0 descriptor??
[  206.713977][ T5143] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  206.936958][ T5143] usb 4-1: USB disconnect, device number 18
[  206.947960][  T154] usb 4-1: Failed to submit usb control message: -71
[  206.965406][  T154] usb 4-1: unable to send the bmi data to the device: -71
[  206.986075][  T154] usb 4-1: unable to get target info from device
[  207.001930][  T154] usb 4-1: could not get target info (-71)
[  207.013517][  T154] usb 4-1: could not probe fw (-71)
[  207.128904][ T9688] loop4: detected capacity change from 0 to 32768
[  207.288611][ T9688] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  207.288611][ T9688] 
[  207.328006][ T9688] ERROR: (device loop4): remounting filesystem as read-only
[  207.511405][ T4234] tipc: Node number set to 4269801488
[  207.565552][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.695982][ T9697] loop6: detected capacity change from 0 to 32768
[  207.736077][ T9717] syz.3.2063 uses obsolete (PF_INET,SOCK_PACKET)
[  208.307666][ T9748] loop4: detected capacity change from 0 to 256
[  208.374690][ T9750] netlink: 'syz.3.2079': attribute type 1 has an invalid length.
[  208.400707][ T9748] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  208.512250][ T9748] exFAT-fs (loop4): error, broken FAT chain.
[  208.546792][ T9748] exFAT-fs (loop4): Filesystem has been set read-only
[  208.574494][ T9748] exFAT-fs (loop4): error, failed to bmap (inode : ffff88807434a860 iblock : 0, err : -5)
[  208.783289][ T9746] loop6: detected capacity change from 0 to 32768
[  208.887431][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'.
[  208.921877][ T9746] (syz.6.2076,9746,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.929742][ T9764] netlink: 'syz.4.2086': attribute type 22 has an invalid length.
[  208.960685][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2088'.
[  208.976821][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2086'.
[  208.999158][ T9746] (syz.6.2076,9746,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.016371][ T9767] netlink: del zone limit has 4 unknown bytes
[  209.104967][ T9746] JBD2: Ignoring recovery information on journal
[  209.262723][ T9785] loop4: detected capacity change from 0 to 164
[  209.293905][ T9746] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  209.429551][ T9785] rock: directory entry would overflow storage
[  209.452989][ T9785] rock: sig=0x4f50, size=4, remaining=3
[  209.474863][ T9785] iso9660: Corrupted directory entry in block 5 of inode 1792
[  209.491478][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  209.534378][ T5993] ocfs2: Unmounting device (7,6) on (node local)
[  209.932700][ T9809] sch_fq: defrate 4294967295 ignored.
[  210.018990][ T5137] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  210.036332][ T9796] loop5: detected capacity change from 0 to 32768
[  210.144354][ T9796] XFS (loop5): Mounting V5 Filesystem
[  210.278196][ T5137] usb 4-1: Using ep0 maxpacket: 8
[  210.338645][ T9796] XFS (loop5): Starting recovery (logdev: internal)
[  210.398075][ T5137] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.407082][ T9796] XFS (loop5): Ending recovery (logdev: internal)
[  210.427856][ T5137] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  210.450985][ T5137] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  210.477875][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.511122][ T5137] usb 4-1: config 0 descriptor??
[  210.551592][ T4773] XFS (loop5): Unmounting Filesystem
[  210.826558][ T9836] loop4: detected capacity change from 0 to 32768
[  210.889238][   T26] audit: type=1800 audit(1782491948.036:16): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2113" name="file1" dev="loop4" ino=4 res=0 errno=0
[  210.980387][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.010500][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.030740][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.050975][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.061355][ T9837] loop6: detected capacity change from 0 to 32768
[  211.068838][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.098419][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.106460][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.125860][ T9837] 
[  211.125860][ T9837]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.125860][ T9837] 
[  211.147980][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.157431][ T5137] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0
[  211.174964][ T9837] ERROR: (device loop6): dbReAlloc: the block is outside the filesystem
[  211.174964][ T9837] 
[  211.231498][ T9837] ERROR: (device loop6): remounting filesystem as read-only
[  211.246160][ T9837] jfs_create: dtInsert returned -EIO
[  211.260631][ T9837] ERROR: (device loop6): jfs_create: 
[  211.260631][ T9837] 
[  211.268330][ T7843] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  211.278046][ T5137] hid-picolcd 0003:04D8:C002.001E: No report with id 0x11 found
[  211.311286][ T5137] usb 4-1: USB disconnect, device number 19
[  211.627992][ T7843] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  211.637460][ T7843] usb 5-1: config 1 has no interface number 0
[  211.647617][ T7843] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  211.661310][ T7843] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.816411][   T26] audit: type=1326 audit(1782491948.956:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.5.2116" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb71e9e59 code=0x7fc00000
[  211.842632][ T7843] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  211.851882][ T7843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.863010][ T7843] usb 5-1: Product: syz
[  211.879571][ T7843] usb 5-1: Manufacturer: syz
[  211.895725][ T7843] usb 5-1: SerialNumber: syz
[  211.928163][ T9849] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  211.951751][ T7843] usb 5-1: Expected 3 endpoints, found: 2
[  212.170080][ T9871] loop3: detected capacity change from 0 to 32768
[  212.241601][ T9873] loop5: detected capacity change from 0 to 32768
[  212.269970][ T9871] XFS (loop3): Mounting V5 Filesystem
[  212.363597][ T9871] XFS (loop3): Ending clean mount
[  212.404623][ T9871] XFS (loop3): Quotacheck needed: Please wait.
[  212.452509][ T9873] XFS (loop5): Mounting V5 Filesystem
[  212.519190][ T9871] XFS (loop3): Quotacheck: Done.
[  212.593333][ T9873] XFS (loop5): Ending clean mount
[  212.647027][ T4773] XFS (loop5): Unmounting Filesystem
[  212.746795][ T4188] XFS (loop3): Unmounting Filesystem
[  212.772792][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'.
[  212.782550][ T9896] bond0: Unable to set up delay as MII monitoring is disabled
[  213.318479][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  213.986957][ T5137] usb 5-1: USB disconnect, device number 21
[  214.438184][ T9925] loop4: detected capacity change from 0 to 32768
[  214.503845][ T9925] JBD2: Ignoring recovery information on journal
[  214.599429][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  214.746806][ T9925] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  215.194629][ T4199] ocfs2: Unmounting device (7,4) on (node local)
[  215.637752][    C1] sched: RT throttling activated
[  215.662991][ T9944] loop6: detected capacity change from 0 to 32768
[  215.776341][ T9963] netlink: 'syz.3.2165': attribute type 1 has an invalid length.
[  215.790835][ T9963] netlink: 'syz.3.2165': attribute type 2 has an invalid length.
[  215.808195][ T9944] JBD2: Ignoring recovery information on journal
[  215.817386][ T9963] netlink: 'syz.3.2165': attribute type 1 has an invalid length.
[  215.867690][ T9963] netlink: 'syz.3.2165': attribute type 2 has an invalid length.
[  215.900954][ T9944] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  216.067710][ T5993] ocfs2: Unmounting device (7,6) on (node local)
[  216.265293][ T9983] syzkaller1: tun_chr_ioctl cmd 1074025677
[  216.286111][ T9984] loop3: detected capacity change from 0 to 512
[  216.298169][ T9983] syzkaller1: linktype set to 785
[  216.341020][ T9989] ubi31: attaching mtd0
[  216.345572][ T9989] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216)
[  216.361891][ T9984] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  216.377510][ T9984] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  216.389140][ T9984] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  216.404885][ T9984] EXT4-fs (loop3): orphan cleanup on readonly fs
[  216.412192][ T9984] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  216.422673][ T9984] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  216.441764][ T9984] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  216.458115][ T9984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2172: bg 0: block 40: padding at end of block bitmap is not set
[  216.482658][ T9984] EXT4-fs (loop3): Remounting filesystem read-only
[  216.497979][ T9984] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  216.529824][ T9992] loop5: detected capacity change from 0 to 64
[  216.565829][ T9984] EXT4-fs (loop3): Remounting filesystem read-only
[  216.593335][ T9984] EXT4-fs (loop3): 1 truncate cleaned up
[  216.608196][ T9984] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback.
[  216.733998][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'.
[  216.754748][ T4773] hfs: node 4:3 still has 1 user(s)!
[  216.784287][ T9984] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  216.808454][ T9984] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  216.874909][T10009] loop4: detected capacity change from 0 to 1024
[  216.943896][   T26] audit: type=1800 audit(1782491954.086:18): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2184" name="file1" dev="loop4" ino=2 res=0 errno=0
[  217.001530][T10009] hfsplus: catalog searching failed
[  217.042178][ T4796] hfsplus: bad catalog file entry
[  217.048630][ T4796] hfsplus: b-tree write err: -5, ino 3
[  217.068164][ T7843] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  217.198072][ T4233] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  217.307860][ T7843] usb 6-1: Using ep0 maxpacket: 32
[  217.314508][T10031] loop3: detected capacity change from 0 to 64
[  217.428087][ T7843] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  217.445422][ T7843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.470915][ T7843] usb 6-1: config 0 descriptor??
[  217.679267][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short
[  217.728004][ T7843] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  217.753466][ T7843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  217.788738][ T7843] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  217.797491][ T7843] usb 6-1: media controller created
[  217.798035][ T4233] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  217.818228][T10041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.824341][ T7843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  217.828753][ T4233] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  217.861745][ T4233] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7
[  217.876354][ T4233] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024
[  217.947968][ T7843] az6027: usb out operation failed. (-71)
[  217.970923][ T7843] az6027: usb out operation failed. (-71)
[  217.979173][ T7843] stb0899_attach: Driver disabled by Kconfig
[  217.985625][ T7843] az6027: no front-end attached
[  217.985625][ T7843] 
[  218.008029][ T7843] az6027: usb out operation failed. (-71)
[  218.016510][ T7843] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  218.027075][ T7843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19
[  218.046857][ T7843] dvb-usb: schedule remote query interval to 400 msecs.
[  218.069212][ T7843] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  218.098294][ T4233] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  218.099153][ T7843] usb 6-1: USB disconnect, device number 14
[  218.121872][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.132338][ T4233] usb 1-1: Product: syz
[  218.136824][ T4233] usb 1-1: Manufacturer: syz
[  218.149102][ T7843] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  218.154691][ T4233] usb 1-1: SerialNumber: syz
[  218.582255][T10074] loop5: detected capacity change from 0 to 2048
[  218.600955][ T4233] usb 1-1: USB disconnect, device number 16
[  218.678057][ T4234] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  218.723151][T10074] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  218.743951][T10074] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.912454][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.078226][  T154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.092440][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.168677][T10103] input: syz0 as /devices/virtual/input/input20
[  219.310606][ T4234] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  219.321298][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.342929][ T4234] usb 4-1: Product: syz
[  219.348307][ T4234] usb 4-1: Manufacturer: syz
[  219.352773][T10116] loop5: detected capacity change from 0 to 512
[  219.353155][ T4234] usb 4-1: SerialNumber: syz
[  219.373335][ T4234] usb 4-1: config 0 descriptor??
[  219.386266][T10116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  219.419375][T10116] EXT4-fs (loop5): 1 truncate cleaned up
[  219.425162][T10116] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,. Quota mode: none.
[  219.442309][ T4234] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  219.719095][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.844305][T10143] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2244'.
[  220.073248][T10162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2253'.
[  220.297987][ T4234] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  220.311509][ T4234] gspca_pac7302: probe of 4-1:0.0 failed with error -71
[  220.353878][ T4234] usb 4-1: USB disconnect, device number 20
[  220.414954][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2259'.
[  220.425206][T10174] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2259'.
[  220.525266][T10178] sp0: Synchronizing with TNC
[  220.795260][T10192] bond0: option downdelay: invalid value (18446744073709551607)
[  220.821519][T10192] bond0: option downdelay: allowed values 0 - 2147483647
[  220.968721][T10202] PM: Enabling pm_trace changes system date and time during resume.
[  220.968721][T10202] PM: Correct system time has to be restored manually after resume.
[  221.006628][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2273'.
[  221.039133][T10210] loop3: detected capacity change from 0 to 16
[  221.061192][T10212] netlink: 'syz.5.2276': attribute type 5 has an invalid length.
[  221.095175][T10210] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  221.112882][ T4390] udevd[4390]: incorrect cramfs checksum on /dev/loop3
[  221.161897][ T4390] udevd[4390]: incorrect cramfs checksum on /dev/loop3
[  221.261981][T10222] 9pnet: Insufficient options for proto=fd
[  221.278155][ T5137] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  221.457971][ T7902] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  221.597957][ T4234] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  221.748068][ T5137] usb 5-1: unable to get BOS descriptor or descriptor too short
[  221.788110][ T5137] usb 5-1: not running at top speed; connect to a high speed hub
[  221.817976][ T7902] usb 1-1: config 127 has an invalid interface number: 57 but max is 0
[  221.826289][ T7902] usb 1-1: config 127 has no interface number 0
[  221.833428][ T7902] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  221.890692][ T5137] usb 5-1: config 5 has an invalid interface number: 51 but max is 0
[  221.898959][ T5137] usb 5-1: config 5 has no interface number 0
[  221.905135][ T5137] usb 5-1: config 5 interface 51 has no altsetting 0
[  221.998043][ T7902] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  222.007323][ T7902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.015690][ T7902] usb 1-1: Product: syz
[  222.020599][ T7902] usb 1-1: Manufacturer: syz
[  222.022800][ T4234] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  222.025227][ T7902] usb 1-1: SerialNumber: syz
[  222.041978][T10216] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  222.051314][ T4234] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  222.059643][ T4234] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  222.068714][ T4234] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  222.079643][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  222.090076][ T5137] usb 5-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=49.7c
[  222.099222][ T4234] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  222.112331][ T5137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.120448][ T5137] usb 5-1: Product: syz
[  222.124612][ T5137] usb 5-1: Manufacturer: syz
[  222.129425][ T5137] usb 5-1: SerialNumber: syz
[  222.358191][ T7902] asix: probe of 1-1:127.57 failed with error -71
[  222.374242][ T7902] usb 1-1: USB disconnect, device number 17
[  222.408656][ T4234] usb 6-1: string descriptor 0 read error: -22
[  222.414945][ T4234] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  222.424695][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.436427][ T4234] usb 6-1: config 0 descriptor??
[  222.448883][ T5137] safe_serial 5-1:5.51: safe_serial converter detected
[  222.458732][T10224] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  222.462574][ T5137] usb 5-1: safe_serial converter now attached to ttyUSB0
[  222.479159][ T5137] usb 5-1: USB disconnect, device number 22
[  222.488562][ T4234] hub 6-1:0.0: bad descriptor, ignoring hub
[  222.494493][ T4234] hub: probe of 6-1:0.0 failed with error -5
[  222.513546][ T5137] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  222.529319][ T4234] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21
[  222.541986][ T5137] safe_serial 5-1:5.51: device disconnected
[  222.731910][ T7902] usb 6-1: USB disconnect, device number 15
[  222.883389][T10233] program syz.3.2286 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.920802][T10237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  222.936701][ T5137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  222.978591][T10236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  223.145250][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2296'.
[  223.559438][ T4234] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  223.763989][T10295] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2316'.
[  223.836402][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.910726][T10301] loop3: detected capacity change from 0 to 512
[  223.941860][T10301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  223.953206][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.973914][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.987671][ T4234] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  224.002404][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.011502][T10301] EXT4-fs (loop3): 1 truncate cleaned up
[  224.017191][T10301] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  224.038043][ T4234] usb 5-1: config 0 descriptor??
[  224.143609][T10312] loop5: detected capacity change from 0 to 4096
[  224.197391][T10312] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  224.485538][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'.
[  224.520146][ T4234] hkems 0003:2006:0118.001F: item fetching failed at offset 5/7
[  224.546225][ T4234] hkems 0003:2006:0118.001F: parse failed
[  224.559603][ T4234] hkems: probe of 0003:2006:0118.001F failed with error -22
[  224.727896][ T4234] usb 5-1: USB disconnect, device number 23
[  224.762823][ T4269] ntfs3: loop5: ino=1b, Internal error
[  224.783083][ T4269] ntfs3: loop5: ntfs3_write_inode r=1b failed, -22.
[  224.800391][T10327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.849218][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  225.016939][T10346] loop3: detected capacity change from 0 to 4096
[  225.074532][T10346] NILFS (loop3): invalid segment: Checksum error in segment payload
[  225.111064][T10346] NILFS (loop3): trying rollback from an earlier position
[  225.152937][T10346] NILFS (loop3): recovery complete
[  225.181572][T10359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.193642][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 239 already freed
[  225.205568][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.236999][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.246346][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.260325][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.279535][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.300981][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.309838][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.350292][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.378033][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.387067][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.408481][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.417231][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.427026][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.436891][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.446638][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.457329][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.466789][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.475827][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.484746][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  225.495232][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.495350][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.518096][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.534253][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.562246][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.580649][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.589779][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.603103][ T7902] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  225.613396][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.623022][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.633424][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.648227][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.656913][T10346] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 0 already freed
[  225.673251][T10346] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  225.847941][ T7902] usb 6-1: Using ep0 maxpacket: 32
[  225.926807][T10374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.992614][T10385] loop4: detected capacity change from 0 to 2048
[  226.013867][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'.
[  226.026677][T10387] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2356'.
[  226.070682][T10385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  226.082002][T10385] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.141743][T10385] fs-verity: sha512 using implementation "sha512-avx2"
[  226.144207][ T7902] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  226.162726][ T7902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.174738][T10385] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters
[  226.192381][ T7902] usb 6-1: Product: syz
[  226.197186][ T7902] usb 6-1: Manufacturer: syz
[  226.204493][T10385] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -28
[  226.205185][ T7902] usb 6-1: SerialNumber: syz
[  226.227566][T10396] loop6: detected capacity change from 0 to 16
[  226.288843][T10396] erofs: (device loop6): mounted with root inode @ nid 36.
[  226.312589][ T7902] usb 6-1: config 0 descriptor??
[  226.356887][T10402] loop3: detected capacity change from 0 to 128
[  226.588835][ T7902] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 016
[  226.631191][T10402] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  226.657066][T10402] ext4 filesystem being mounted at /472/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  226.812498][T10366] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read)
[  226.915126][ T4234] usb 6-1: USB disconnect, device number 16
[  227.103841][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'.
[  227.121249][T10431] loop3: detected capacity change from 0 to 256
[  227.188613][T10431] FAT-fs (loop3): Directory bread(block 64) failed
[  227.195497][T10431] FAT-fs (loop3): Directory bread(block 65) failed
[  227.206487][T10431] FAT-fs (loop3): Directory bread(block 66) failed
[  227.219809][T10431] FAT-fs (loop3): Directory bread(block 67) failed
[  227.227705][T10431] FAT-fs (loop3): Directory bread(block 68) failed
[  227.241036][T10431] FAT-fs (loop3): Directory bread(block 69) failed
[  227.253473][T10431] FAT-fs (loop3): Directory bread(block 70) failed
[  227.261509][T10431] FAT-fs (loop3): Directory bread(block 71) failed
[  227.269575][T10431] FAT-fs (loop3): Directory bread(block 72) failed
[  227.276874][T10431] FAT-fs (loop3): Directory bread(block 73) failed
[  227.317093][T10431] attempt to access beyond end of device
[  227.317093][T10431] loop3: rw=524288, want=1164, limit=256
[  227.335819][T10431] attempt to access beyond end of device
[  227.335819][T10431] loop3: rw=0, want=1164, limit=256
[  227.354051][   T26] audit: type=1800 audit(1782491964.496:19): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2375" name="file0" dev="loop3" ino=1048731 res=0 errno=0
[  227.426893][T10417] loop4: detected capacity change from 0 to 32768
[  227.544838][T10439] loop3: detected capacity change from 0 to 128
[  227.565489][T10417] JBD2: Ignoring recovery information on journal
[  227.630864][T10417] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  227.704276][   T26] audit: type=1800 audit(1782491964.846:20): pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2370" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  227.828504][ T4199] ocfs2: Unmounting device (7,4) on (node local)
[  228.212659][T10465] loop6: detected capacity change from 0 to 256
[  228.409577][T10465] FAT-fs (loop6): Directory bread(block 64) failed
[  228.427323][T10465] FAT-fs (loop6): Directory bread(block 65) failed
[  228.460509][T10465] FAT-fs (loop6): Directory bread(block 66) failed
[  228.480665][T10465] FAT-fs (loop6): Directory bread(block 67) failed
[  228.498550][T10465] FAT-fs (loop6): Directory bread(block 68) failed
[  228.513491][T10465] FAT-fs (loop6): Directory bread(block 69) failed
[  228.526867][T10465] FAT-fs (loop6): Directory bread(block 70) failed
[  228.540586][T10465] FAT-fs (loop6): Directory bread(block 71) failed
[  228.555060][T10465] FAT-fs (loop6): Directory bread(block 72) failed
[  228.570553][T10465] FAT-fs (loop6): Directory bread(block 73) failed
[  228.661670][T10465] attempt to access beyond end of device
[  228.661670][T10465] loop6: rw=524288, want=1164, limit=256
[  228.689965][T10465] attempt to access beyond end of device
[  228.689965][T10465] loop6: rw=0, want=1164, limit=256
[  228.713579][   T26] audit: type=1800 audit(1782491965.856:21): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2388" name="file0" dev="loop6" ino=1048734 res=0 errno=0
[  228.774899][T10478] loop3: detected capacity change from 0 to 32768
[  228.804292][T10454] loop5: detected capacity change from 0 to 32768
[  228.834047][T10478] JBD2: Ignoring recovery information on journal
[  228.869238][T10478] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  229.011003][T10454] read_mapping_page failed!
[  229.016014][T10454] ERROR: (device loop5): txCommit: 
[  229.016014][T10454] 
[  229.055296][ T4188] ocfs2: Unmounting device (7,3) on (node local)
[  229.450191][   T26] audit: type=1326 audit(1782491966.596:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.5.2400" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bb71e9e59 code=0x0
[  229.474289][    C0] vkms_vblank_simulate: vblank timer overrun
[  229.685591][T10491] loop3: detected capacity change from 0 to 32768
[  229.820328][T10491] (syz.3.2395,10491,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  229.864658][T10491] (syz.3.2395,10491,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  229.935859][T10491] JBD2: Ignoring recovery information on journal
[  229.959996][ T4796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  229.989908][T10491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  230.174986][ T4188] ocfs2: Unmounting device (7,3) on (node local)
[  231.238276][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  232.051954][T10528] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  232.307467][T10547] loop3: detected capacity change from 0 to 128
[  232.337984][ T6252] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  232.439050][T10547] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  232.478077][T10547] hpfs: filesystem error: improperly stopped
[  232.480276][T10551] loop4: detected capacity change from 0 to 512
[  232.484224][T10547] hpfs: You really don't want any checks? You are crazy...
[  232.505805][T10547] hpfs: hpfs_map_sector(): read error
[  232.511593][T10547] hpfs: code page support is disabled
[  232.520529][T10547] hpfs: hpfs_map_4sectors(): unaligned read
[  232.526493][T10547] hpfs: hpfs_map_4sectors(): unaligned read
[  232.559370][T10547] hpfs: filesystem error: unable to find root dir
[  232.610973][T10557] loop5: detected capacity change from 0 to 128
[  232.665815][T10557] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: none.
[  232.697459][T10557] ext4 filesystem being mounted at /410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  232.698278][T10551] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2427: inode #1: comm syz.4.2427: iget: illegal inode #
[  232.729865][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.768098][ T6252] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  232.806063][T10551] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2427: error while reading EA inode 1 err=-117
[  232.814723][ T6252] usb 1-1: config 0 has no interface number 0
[  232.841257][ T6252] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  232.893422][ T6252] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.899929][T10551] EXT4-fs (loop4): 1 orphan inode deleted
[  232.909305][T10551] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,grpjquota=,debug_want_extra_isize=0x0000000000000006,noauto_da_alloc,grpjquota=,noblock_validity,noquota,,errors=continue. Quota mode: none.
[  232.911578][ T6252] usb 1-1: config 0 interface 1 has no altsetting 0
[  232.938507][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.960254][ T6252] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  232.973108][ T6252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.986367][ T6252] usb 1-1: config 0 descriptor??
[  232.992021][T10551] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.2427: corrupted inode contents
[  233.023142][T10551] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #13: comm syz.4.2427: mark_inode_dirty error
[  233.047345][T10551] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2427: invalid indirect mapped block 234881024 (level 0)
[  233.071193][T10551] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #13: comm syz.4.2427: corrupted inode contents
[  233.101571][T10551] EXT4-fs error (device loop4): ext4_truncate:4286: inode #13: comm syz.4.2427: mark_inode_dirty error
[  233.118409][T10551] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem
[  233.163600][T10576] loop6: detected capacity change from 0 to 64
[  233.226257][T10578] loop5: detected capacity change from 0 to 512
[  233.293543][T10580] loop4: detected capacity change from 0 to 512
[  233.332549][T10580] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  233.359181][T10580] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.2437: corrupted in-inode xattr
[  233.380496][T10578] EXT4-fs (loop5): Ignoring removed nobh option
[  233.425321][T10580] EXT4-fs (loop4): get orphan inode failed
[  233.432670][T10580] EXT4-fs (loop4): mount failed
[  233.502342][T10578] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2438: invalid indirect mapped block 256 (level 2)
[  233.587495][T10578] EXT4-fs (loop5): Remounting filesystem read-only
[  233.641786][T10578] EXT4-fs (loop5): 2 truncates cleaned up
[  233.659632][T10578] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[  233.708031][ T6252] uclogic 0003:2179:0053.0020: failed retrieving string descriptor #100: -71
[  233.736373][T10578] EXT4-fs error (device loop5) in ext4_setattr:5645: Readonly filesystem
[  233.742882][ T6252] uclogic 0003:2179:0053.0020: failed retrieving pen parameters: -71
[  233.771985][T10578] EXT4-fs (loop5): Remounting filesystem read-only
[  233.773929][ T6252] uclogic 0003:2179:0053.0020: pen probing failed: -71
[  233.815467][ T6252] uclogic 0003:2179:0053.0020: failed probing parameters: -71
[  233.833532][ T6252] uclogic: probe of 0003:2179:0053.0020 failed with error -71
[  233.884387][ T6252] usb 1-1: USB disconnect, device number 18
[  233.996499][T10588] team0: Cannot enslave team device to itself
[  234.068655][T10588] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  234.112670][T10598] program syz.5.2443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.139157][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2446'.
[  234.937883][ T4233] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  235.217780][ T4233] usb 6-1: Using ep0 maxpacket: 8
[  235.358055][ T4233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.384440][ T4233] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  235.439630][ T4233] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  235.441081][T10628] loop6: detected capacity change from 0 to 32768
[  235.477006][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.521309][ T4233] usb 6-1: config 0 descriptor??
[  235.584950][T10659] netlink: 'syz.3.2474': attribute type 4 has an invalid length.
[  235.662235][T10628] XFS (loop6): Mounting V5 Filesystem
[  235.718405][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  235.777688][T10628] XFS (loop6): Ending clean mount
[  235.797045][T10628] XFS (loop6): Quotacheck needed: Please wait.
[  235.878602][T10628] XFS (loop6): Quotacheck: Done.
[  235.948771][ T5993] XFS (loop6): Unmounting Filesystem
[  236.029735][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.045147][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.061409][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.084019][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.097136][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.105532][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.119358][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.127057][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.139350][ T4233] hid-picolcd 0003:04D8:C002.0021: unknown main item tag 0x0
[  236.227309][ T4233] hid-picolcd 0003:04D8:C002.0021: No report with id 0x11 found
[  236.252096][ T4233] usb 6-1: USB disconnect, device number 17
[  236.730913][T10684] tap0: tun_chr_ioctl cmd 2147767506
[  236.872845][T10693] loop6: detected capacity change from 0 to 16
[  236.996469][T10693] erofs: (device loop6): mounted with root inode @ nid 36.
[  237.005604][ T4796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  237.045212][T10705] tmpfs: Bad value for 'uid'
[  237.114022][T10707] loop3: detected capacity change from 0 to 512
[  237.244999][T10707] EXT4-fs (loop3): 1 truncate cleaned up
[  237.276640][T10707] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  237.433115][T10707] autofs4:pid:10707:autofs_fill_super: pipe file descriptor does not contain proper ops
[  237.712293][T10732] loop3: detected capacity change from 0 to 2048
[  237.835813][T10732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.847866][ T7905] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  237.943379][T10720] loop6: detected capacity change from 0 to 32768
[  237.978572][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'.
[  238.008430][T10720] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2498 (10720)
[  238.050631][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2509'.
[  238.066893][T10720] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  238.084126][T10720] BTRFS info (device loop6): setting nodatasum
[  238.099875][T10720] BTRFS info (device loop6): force zlib compression, level 3
[  238.107882][ T7905] usb 6-1: Using ep0 maxpacket: 32
[  238.140410][T10720] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  238.175892][T10720] BTRFS info (device loop6): use lzo compression, level 0
[  238.183215][T10720] BTRFS info (device loop6): turning on flush-on-commit
[  238.203507][T10720] BTRFS info (device loop6): enabling auto defrag
[  238.213677][T10720] BTRFS info (device loop6): max_inline at 4096
[  238.228057][ T7905] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  238.234160][T10720] BTRFS info (device loop6): using free space tree
[  238.246311][ T7905] usb 6-1: config 0 has no interface number 0
[  238.252765][T10720] BTRFS info (device loop6): has skinny extents
[  238.338198][ T7902] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  238.418041][ T7905] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  238.429995][ T7905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.473440][ T7905] usb 6-1: Product: syz
[  238.482693][ T7905] usb 6-1: Manufacturer: syz
[  238.487326][ T7905] usb 6-1: SerialNumber: syz
[  238.543369][ T7905] usb 6-1: config 0 descriptor??
[  238.547862][T10720] BTRFS info (device loop6): enabling ssd optimizations
[  238.609797][ T7905] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  238.648014][ T7905] usb 6-1: selecting invalid altsetting 1
[  238.653777][ T7905] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  238.738199][ T7902] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  238.747288][ T7902] usb 5-1: config 0 has no interface number 0
[  238.772353][ T7905] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  238.826554][ T7905] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  238.896261][ T7905] usb 6-1: media controller created
[  238.956203][ T7905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  238.977535][ T7902] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  238.997201][ T7902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.035974][ T7902] usb 5-1: Product: syz
[  239.050701][ T7902] usb 5-1: Manufacturer: syz
[  239.065939][ T7902] usb 5-1: SerialNumber: syz
[  239.085789][ T7902] usb 5-1: config 0 descriptor??
[  239.337971][ T7902] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  239.349595][T10796] 9pnet: Insufficient options for proto=fd
[  239.383300][ T7902] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  239.397464][ T7902] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  239.409591][ T7902] usb 5-1: media controller created
[  239.445130][ T7902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  239.568005][ T7902] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  239.642570][ T7902] usb 5-1: USB disconnect, device number 24
[  239.900962][T10728] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  239.958044][ T7905] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  239.966371][ T7905] zl10353_read_register: readreg error (reg=127, ret==-71)
[  239.987911][ T7905] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  240.011102][ T7905] usb 6-1: USB disconnect, device number 18
[  240.485030][T10804] loop4: detected capacity change from 0 to 256
[  240.558254][T10804] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  240.650931][T10815] input: syz1 as /devices/virtual/input/input22
[  240.691156][T10807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  240.838231][ T4796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  240.998013][ T5138] Bluetooth: hci4: command 0x0405 tx timeout
[  241.264465][T10846] loop3: detected capacity change from 0 to 256
[  241.315621][T10846] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe6190b0d, utbl_chksum : 0xe619d30d)
[  241.502529][T10853] program syz.3.2548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  241.525786][T10839] loop5: detected capacity change from 0 to 32768
[  241.708295][   T26] audit: type=1326 audit(1782491978.856:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.5.2550" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bb71e9e59 code=0x0
[  242.101682][T10874] sctp: [Deprecated]: syz.4.2557 (pid 10874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.101682][T10874] Use struct sctp_sack_info instead
[  242.327548][T10888] program syz.3.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.411954][T10895] loop6: detected capacity change from 0 to 128
[  242.466951][T10895] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  242.518919][T10895] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  242.535844][T10898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2568'.
[  242.606938][T10895] fscrypt (loop6, inode 12): Mutually exclusive encryption flags (0x0c)
[  242.649166][T10906] loop3: detected capacity change from 0 to 1764
[  242.758650][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.824759][T10912] loop5: detected capacity change from 0 to 1024
[  242.920599][T10912] hfsplus: invalid length 32517 has been corrected to 255
[  243.036177][   T26] audit: type=1800 audit(1782491980.176:24): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2575" name="file1" dev="loop5" ino=20 res=0 errno=0
[  243.192339][T10912] hfsplus: b-tree write err: -5, ino 20
[  243.227707][T10935] vivid-002: disconnect
[  243.246950][T10934] vivid-002: reconnect
[  243.439596][ T4796] hfsplus: b-tree write err: -5, ino 20
[  243.503803][   T26] audit: type=1326 audit(1782491980.646:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.6.2587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5694fb4e59 code=0x0
[  243.681473][T10932] loop3: detected capacity change from 0 to 32768
[  243.817378][T10932] XFS (loop3): Mounting V5 Filesystem
[  243.939101][T10932] XFS (loop3): Ending clean mount
[  244.142589][ T4188] XFS (loop3): Unmounting Filesystem
[  244.390956][T10963] netem: change failed
[  244.565373][T10957] loop4: detected capacity change from 0 to 32768
[  244.630136][T10957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2590 (10957)
[  244.681958][T10957] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  244.711282][T10957] BTRFS info (device loop4): using free space tree
[  244.736392][T10957] BTRFS info (device loop4): has skinny extents
[  244.850364][T10981] bridge0: port 3(syz_tun) entered blocking state
[  244.905420][T10981] bridge0: port 3(syz_tun) entered disabled state
[  245.040623][T10998] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4773] was attempted by "\x22"[10998]
[  245.137898][T10957] BTRFS info (device loop4): enabling ssd optimizations
[  245.268990][T11013] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2607'.
[  245.273528][T10985] loop3: detected capacity change from 0 to 32768
[  245.322174][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'.
[  245.529004][T10985] XFS (loop3): Mounting V5 Filesystem
[  245.541211][T11030] loop5: detected capacity change from 0 to 128
[  245.641702][T10985] XFS (loop3): Ending clean mount
[  245.680622][T10985] XFS (loop3): User initiated shutdown received.
[  245.687610][T10985] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  245.703948][T10985] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  245.741752][T11030] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  245.786095][T11030] FAT-fs (loop5): Filesystem has been set read-only
[  245.841688][T11030] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  245.988318][ T4188] XFS (loop3): Unmounting Filesystem
[  246.281940][T11046] loop4: detected capacity change from 0 to 256
[  246.444464][T11046] FAT-fs (loop4): Directory bread(block 64) failed
[  246.464727][T11046] FAT-fs (loop4): Directory bread(block 65) failed
[  246.484738][T11046] FAT-fs (loop4): Directory bread(block 66) failed
[  246.509872][T11046] FAT-fs (loop4): Directory bread(block 67) failed
[  246.543163][T11046] FAT-fs (loop4): Directory bread(block 68) failed
[  246.567511][T11046] FAT-fs (loop4): Directory bread(block 69) failed
[  246.594832][T11046] FAT-fs (loop4): Directory bread(block 70) failed
[  246.598531][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  246.636749][T11046] FAT-fs (loop4): Directory bread(block 71) failed
[  246.658005][T11046] FAT-fs (loop4): Directory bread(block 72) failed
[  246.686181][T11046] FAT-fs (loop4): Directory bread(block 73) failed
[  246.768677][T11065] netlink: 'syz.3.2626': attribute type 1 has an invalid length.
[  246.790154][T11065] nbd: error processing sock list
[  247.681839][T11115] loop6: detected capacity change from 0 to 256
[  247.705364][T11070] loop3: detected capacity change from 0 to 40427
[  247.741486][T11115] exfat: Deprecated parameter 'utf8'
[  247.748559][T11115] exfat: Deprecated parameter 'utf8'
[  247.754438][T11115] exfat: Deprecated parameter 'utf8'
[  247.770877][T11070] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  247.784822][T11070] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  247.826446][T11115] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d)
[  247.877413][T11070] F2FS-fs (loop3): invalid crc value
[  247.955308][T11070] F2FS-fs (loop3): Found nat_bits in checkpoint
[  248.160807][T11070] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  248.197229][T11070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  248.520252][  T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  248.988484][T11174] loop6: detected capacity change from 0 to 1024
[  248.997894][ T4234] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  249.237900][ T4234] usb 1-1: Using ep0 maxpacket: 32
[  249.352373][T11193] loop5: detected capacity change from 0 to 512
[  249.358022][ T4234] usb 1-1: unable to get BOS descriptor or descriptor too short
[  249.413439][T11193] EXT4-fs (loop5): Ignoring removed bh option
[  249.417915][ T4234] usb 1-1: unable to read config index 0 descriptor/start: -71
[  249.444655][ T4234] usb 1-1: can't read configurations, error -71
[  249.467362][T11200] bridge0: port 3(syz_tun) entered blocking state
[  249.476327][T11193] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.2685: corrupted in-inode xattr
[  249.490629][T11200] bridge0: port 3(syz_tun) entered disabled state
[  249.513111][T11200] device syz_tun entered promiscuous mode
[  249.519113][T11193] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.2685: couldn't read orphan inode 15 (err -117)
[  249.534736][T11200] bridge0: port 3(syz_tun) entered blocking state
[  249.538432][T11193] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  249.542129][T11200] bridge0: port 3(syz_tun) entered forwarding state
[  249.691820][T11205] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  249.997473][T11224] sp0: Synchronizing with TNC
[  250.004694][T11224] sp0: Found TNC
[  250.019146][T11228] loop5: detected capacity change from 0 to 512
[  250.065203][T11228] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2699: bg 0: block 5: invalid block bitmap
[  250.083952][T11228] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  250.094274][T11228] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2699: invalid indirect mapped block 3 (level 2)
[  250.110024][ T5148] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  250.125533][T11228] EXT4-fs (loop5): 2 truncates cleaned up
[  250.132171][T11228] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  250.317625][T11239] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  250.387658][T11243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.518104][ T5148] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  250.529295][ T5148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.548936][ T5148] usb 5-1: config 0 descriptor??
[  250.589875][ T5148] gspca_main: cpia1-2.14.0 probing 0813:0001
[  251.027912][ T5148] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  251.235366][T11258] loop3: detected capacity change from 0 to 64
[  251.281980][T11260] loop5: detected capacity change from 0 to 64
[  251.336073][ T4188] hfs: node 4:3 still has 1 user(s)!
[  251.448082][T11262] futex_wake_op: syz.0.2717 tries to shift op by -1; fix this program
[  251.466858][T11262] fuse: Unexpected value for 'default_permissions'
[  251.474097][ T5148] gspca_cpia1: usb_control_msg 02, error -71
[  251.484191][ T5148] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  251.503451][ T5148] usb 5-1: USB disconnect, device number 25
[  251.727963][   T21] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  251.861480][T11276] Bluetooth: hci1: too big key_count value 37575
[  251.894356][T11273] loop5: detected capacity change from 0 to 32768
[  251.965753][T11273] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  251.991485][   T21] usb 4-1: Using ep0 maxpacket: 8
[  252.088219][ T4773] ocfs2: Unmounting device (7,5) on (node local)
[  252.108049][   T21] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  252.127632][   T21] usb 4-1: config 179 has no interface number 0
[  252.147025][   T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  252.177696][   T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  252.197127][   T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  252.218989][T11286] loop5: detected capacity change from 0 to 2048
[  252.255877][   T21] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  252.278800][   T21] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  252.335495][T11294] loop4: detected capacity change from 0 to 256
[  252.344399][T11286] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  252.344409][   T21] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  252.344433][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.363472][T11296] program syz.0.2729 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  252.366726][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.428156][T11264] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  252.821885][   T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23
[  252.870947][T11315] loop5: detected capacity change from 0 to 1024
[  252.997232][ T7902] usb 4-1: USB disconnect, device number 21
[  253.007785][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  253.030580][ T7902] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  253.173978][T11315] EXT4-fs (loop5): Test dummy encryption mode enabled
[  253.198249][T11315] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,errors=continue,lazytime,acl,max_dir_size_kb=0x0000000000000000,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  253.494677][T11344] device bond0 entered promiscuous mode
[  253.528042][T11344] device bond_slave_0 entered promiscuous mode
[  253.547307][T11344] device bond_slave_1 entered promiscuous mode
[  253.637512][T11344] device bond0 left promiscuous mode
[  253.654733][T11344] device bond_slave_0 left promiscuous mode
[  253.664022][T11344] device bond_slave_1 left promiscuous mode
[  253.670549][T11354] loop5: detected capacity change from 0 to 256
[  253.698001][ T7905] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  253.977829][ T7905] usb 1-1: Using ep0 maxpacket: 16
[  254.098191][ T7905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.116151][ T7905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.132609][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2765'.
[  254.204915][T11380] loop5: detected capacity change from 0 to 1024
[  254.229638][ T7905] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  254.263432][ T7905] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  254.278189][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  254.303716][ T7905] usb 1-1: Manufacturer: syz
[  254.316853][ T7905] usb 1-1: config 0 descriptor??
[  254.476349][T11367] loop3: detected capacity change from 0 to 32768
[  254.548082][T11367] XFS (loop3): Mounting V5 Filesystem
[  254.664882][T11367] XFS (loop3): Ending clean mount
[  254.676979][T11367] XFS (loop3): Quotacheck needed: Please wait.
[  254.754426][T11367] XFS (loop3): Quotacheck: Done.
[  254.820160][ T7905] creative-sb0540 0003:041E:3100.0022: unknown main item tag 0x5
[  254.847986][ T7905] creative-sb0540 0003:041E:3100.0022: item fetching failed at offset 3/5
[  254.887453][ T7905] creative-sb0540 0003:041E:3100.0022: parse failed
[  254.903669][ T7905] creative-sb0540: probe of 0003:041E:3100.0022 failed with error -22
[  254.941368][ T4188] XFS (loop3): Unmounting Filesystem
[  255.024266][   T21] usb 1-1: USB disconnect, device number 21
[  255.033511][T11406] loop6: detected capacity change from 0 to 4096
[  255.176798][T11413] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.333745][T11416] loop4: detected capacity change from 0 to 1764
[  255.568046][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  255.574393][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  255.687845][   T21] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  255.927804][   T21] usb 6-1: Using ep0 maxpacket: 8
[  256.024101][T11443] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2802'.
[  256.030187][T11426] loop4: detected capacity change from 0 to 32768
[  256.048166][   T21] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11
[  256.070314][   T21] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  256.084767][T11426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2783 (11426)
[  256.099043][   T21] usb 6-1: config 0 interface 0 has no altsetting 0
[  256.106564][   T21] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  256.117124][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.141911][T11426] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  256.162246][   T21] usb 6-1: config 0 descriptor??
[  256.170045][T11426] BTRFS warning (device loop4): excessive commit interval 3581
[  256.179558][T11426] BTRFS info (device loop4): force zlib compression, level 3
[  256.188222][T11426] BTRFS info (device loop4): metadata ratio 107050
[  256.194752][T11426] BTRFS info (device loop4): turning on flush-on-commit
[  256.211631][T11426] BTRFS info (device loop4): max_inline at 4096
[  256.247832][T11426] BTRFS info (device loop4): using free space tree
[  256.254640][T11426] BTRFS info (device loop4): has skinny extents
[  256.444076][T11426] BTRFS info (device loop4): enabling ssd optimizations
[  256.487876][T11471] loop3: detected capacity change from 0 to 2048
[  256.639565][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x2
[  256.652506][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x0
[  256.654151][T11471] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  256.667812][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x0
[  256.738543][T11471] EXT4-fs (loop3): shut down requested (2)
[  256.753560][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x0
[  256.777889][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x0
[  256.785435][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x0
[  256.807834][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x0
[  256.815519][   T21] logitech 0003:046D:C24F.0023: unknown main item tag 0x0
[  256.855945][   T21] logitech 0003:046D:C24F.0023: hidraw0: USB HID v0.04 Device [HID 046d:c24f] on usb-dummy_hcd.5-1/input0
[  256.874024][   T21] logitech 0003:046D:C24F.0023: no inputs found
[  256.924983][   T21] usb 6-1: USB disconnect, device number 19
[  257.001085][T11480] fido_id[11480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  257.196137][T11483] input: syz0 as /devices/virtual/input/input24
[  257.438661][T11497] program syz.3.2806 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  257.566999][T11502] loop5: detected capacity change from 0 to 4096
[  257.651528][T11502] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0002]
[  257.668263][T11502] System zones: 0-5
[  257.713980][T11502] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug,,errors=continue. Quota mode: writeback.
[  257.736505][T11510] loop3: detected capacity change from 0 to 512
[  257.739105][T11502] EXT4-fs (loop5): shut down requested (1)
[  257.816875][T11515] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2814'.
[  257.871124][T11510] EXT4-fs (loop3): Ignoring removed bh option
[  257.924914][T11510] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[  257.955068][T11510] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.118578][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.349360][T11537] loop3: detected capacity change from 0 to 256
[  258.362451][T11535] netlink: 'syz.5.2822': attribute type 29 has an invalid length.
[  258.417386][T11535] netlink: 'syz.5.2822': attribute type 29 has an invalid length.
[  258.553095][T11546] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  258.609080][T11544] loop5: detected capacity change from 0 to 1024
[  259.201198][T11573] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  259.269614][T11573] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  259.291963][T11573] ntfs3: loop6: Failed to load $Extend.
[  259.362834][ T7905] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  259.383195][T11575] set_capacity_and_notify: 3 callbacks suppressed
[  259.383210][T11575] loop3: detected capacity change from 0 to 1024
[  259.539666][T11582] hfsplus: b-tree write err: -5, ino 22
[  259.595560][T11575] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  259.626822][T11575] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  259.716941][ T4796] hfsplus: b-tree write err: -5, ino 25
[  259.728354][ T4796] hfsplus: b-tree write err: -5, ino 4
[  259.741695][ T4796] hfsplus: b-tree write err: -5, ino 2
[  259.761926][ T4796] hfsplus: b-tree write err: -5, ino 23
[  259.777559][ T4796] hfsplus: b-tree write err: -5, ino 22
[  259.787346][ T7905] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  259.807054][ T7905] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  259.838348][ T7905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  259.847392][ T7905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  259.867772][ T7905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  260.018290][ T7905] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  260.027638][ T7905] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  260.038427][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  260.066003][ T7905] usb 5-1: Product: syz
[  260.086528][ T7905] usb 5-1: Manufacturer: syz
[  260.148813][ T7905] cdc_wdm 5-1:1.0: skipping garbage
[  260.155162][ T7905] cdc_wdm 5-1:1.0: skipping garbage
[  260.188459][ T7905] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  260.213082][ T7905] cdc_wdm 5-1:1.0: Unknown control protocol
[  260.257398][T11607] loop6: detected capacity change from 0 to 128
[  260.392604][T11607] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  260.446989][T11607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.619506][T11621] loop6: detected capacity change from 0 to 256
[  260.636941][T11621] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  260.656158][T11621] exFAT-fs (loop6): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  260.674576][T11621] exFAT-fs (loop6): Filesystem has been set read-only
[  260.720703][ T7905] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  260.765872][T11623] loop6: detected capacity change from 0 to 256
[  260.773934][T11623] exfat: Deprecated parameter 'utf8'
[  260.790269][T11623] exfat: Deprecated parameter 'utf8'
[  260.795762][T11623] exfat: Bad value for 'errors'
[  260.817986][ T6252] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  260.898865][ T7902] usb 5-1: USB disconnect, device number 26
[  260.978128][ T7905] usb 6-1: Using ep0 maxpacket: 16
[  261.087820][T11481] Bluetooth: hci4: command 0x0405 tx timeout
[  261.118076][ T7905] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.154168][ T7905] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.195334][ T7905] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  261.240671][ T7905] usb 6-1: config 0 interface 0 has no altsetting 0
[  261.246379][T11642] loop3: detected capacity change from 0 to 512
[  261.253934][ T7905] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  261.253970][ T7905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.258238][ T6252] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  261.293976][ T7905] usb 6-1: config 0 descriptor??
[  261.294282][T11646] loop4: detected capacity change from 0 to 512
[  261.301585][ T6252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.321894][ T6252] usb 1-1: config 0 descriptor??
[  261.369709][ T6252] cp210x 1-1:0.0: cp210x converter detected
[  261.374302][T11646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  261.406873][T11642] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  261.452830][T11642] ext4 filesystem being mounted at /568/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.490654][T11646] System zones: 1-12
[  261.516057][T11646] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.2875: missing EA_INODE flag
[  261.614518][T11646] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2875: error while reading EA inode 12 err=-117
[  261.633722][T11646] EXT4-fs (loop4): 1 orphan inode deleted
[  261.641501][T11646] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback.
[  261.951160][T11668] loop4: detected capacity change from 0 to 256
[  261.981288][ T7843] usb 6-1: USB disconnect, device number 20
[  262.018020][ T6252] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  262.026362][ T6252] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  262.037554][T11668] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  262.046768][ T6252] usb 1-1: cp210x converter now attached to ttyUSB0
[  262.072989][ T6252] usb 1-1: USB disconnect, device number 22
[  262.125327][ T6252] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  262.169221][ T6252] cp210x 1-1:0.0: device disconnected
[  262.347299][T11679] loop3: detected capacity change from 0 to 512
[  262.394251][T11679] EXT4-fs (loop3): 1 truncate cleaned up
[  262.408727][T11660] loop6: detected capacity change from 0 to 40427
[  262.415421][T11679] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,quota,,errors=continue. Quota mode: writeback.
[  262.509937][T11682] loop4: detected capacity change from 0 to 512
[  262.530080][T11660] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  262.552727][T11660] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  262.591738][T11660] F2FS-fs (loop6): invalid crc value
[  262.649637][T11660] F2FS-fs (loop6): Found nat_bits in checkpoint
[  262.745620][T11660] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  262.753046][T11660] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  262.826885][T11688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.977940][ T6252] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  263.287910][ T6252] usb 1-1: Using ep0 maxpacket: 32
[  263.417962][ T6252] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  263.603042][ T6252] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  263.617634][ T6252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.632692][ T6252] usb 1-1: Product: syz
[  263.637077][ T6252] usb 1-1: Manufacturer: syz
[  263.648057][ T6252] usb 1-1: SerialNumber: syz
[  263.654427][ T6252] usb 1-1: config 0 descriptor??
[  263.701257][ T6252] usb 1-1: bad CDC descriptors
[  263.706440][ T6252] usb 1-1: unsupported MDLM descriptors
[  263.818202][T11706] read_mapping_page failed!
[  263.828358][T11706] ERROR: (device loop5): txCommit: 
[  263.828358][T11706] 
[  263.878876][ T4796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  263.911316][ T6252] usb 1-1: USB disconnect, device number 23
[  264.288598][T11730] exfat: Deprecated parameter 'utf8'
[  264.297853][T11730] exfat: Deprecated parameter 'namecase'
[  264.313369][T11730] exfat: Deprecated parameter 'namecase'
[  264.368085][T11730] exfat: Deprecated parameter 'utf8'
[  264.384958][T11725] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2908 (11725)
[  264.418115][T11732] FAT-fs (loop3): Directory bread(block 64) failed
[  264.440778][T11730] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  264.467851][T11725] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  264.472503][T11732] FAT-fs (loop3): Directory bread(block 65) failed
[  264.494426][T11725] BTRFS info (device loop4): using free space tree
[  264.520599][T11725] BTRFS info (device loop4): has skinny extents
[  264.530798][T11732] FAT-fs (loop3): Directory bread(block 66) failed
[  264.570863][T11732] FAT-fs (loop3): Directory bread(block 67) failed
[  264.581836][T11732] FAT-fs (loop3): Directory bread(block 68) failed
[  264.594848][T11732] FAT-fs (loop3): Directory bread(block 69) failed
[  264.607364][T11732] FAT-fs (loop3): Directory bread(block 70) failed
[  264.617398][T11732] FAT-fs (loop3): Directory bread(block 71) failed
[  264.652502][T11732] FAT-fs (loop3): Directory bread(block 72) failed
[  264.670652][T11732] FAT-fs (loop3): Directory bread(block 73) failed
[  264.987293][T11725] BTRFS info (device loop4): enabling ssd optimizations
[  265.003082][T11739] set_capacity_and_notify: 7 callbacks suppressed
[  265.003099][T11739] loop5: detected capacity change from 0 to 40427
[  265.114707][T11739] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  265.137945][T11739] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  265.261851][T11739] F2FS-fs (loop5): invalid crc value
[  265.268206][T10095] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (10095)
[  265.335847][T11739] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  265.596799][T11739] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  265.618425][T11739] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  265.800259][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.912496][T11739] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  266.424368][T11816] loop4: detected capacity change from 0 to 256
[  266.513450][T11816] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.562321][T11816] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  266.669629][T11816] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  266.716923][T11798] loop3: detected capacity change from 0 to 40427
[  266.829615][T11798] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  266.865725][T11798] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  266.940193][T11798] F2FS-fs (loop3): invalid crc value
[  267.022662][T11835] netlink: 'syz.4.2943': attribute type 10 has an invalid length.
[  267.029598][T11798] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  267.311391][T11835] team0 (unregistering): Port device team_slave_0 removed
[  267.333543][T11798] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  267.361432][T11835] team0 (unregistering): Port device team_slave_1 removed
[  267.377821][T11798] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  267.568219][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'.
[  267.605289][ T4188] attempt to access beyond end of device
[  267.605289][ T4188] loop3: rw=2049, want=45104, limit=40427
[  268.069348][T11871] kvm [11870]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0xfffffffffffffffe
[  268.314363][T11866] loop4: detected capacity change from 0 to 32768
[  268.339313][T11863] loop5: detected capacity change from 0 to 32768
[  268.374569][T11866] (syz.4.2957,11866,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  268.419841][T11866] (syz.4.2957,11866,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  268.526988][T11866] JBD2: Ignoring recovery information on journal
[  268.774528][T11866] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  268.882916][T11896] netem: change failed
[  269.018521][T11900] tap0: tun_chr_ioctl cmd 2147767520
[  269.162797][ T4199] ocfs2: Unmounting device (7,4) on (node local)
[  269.182515][T11908] loop3: detected capacity change from 0 to 64
[  269.192763][   T21] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  269.269908][T11908] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  269.324555][T11908] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop3:00000002
[  269.437897][   T21] usb 1-1: Using ep0 maxpacket: 8
[  269.463847][T11917] loop5: detected capacity change from 0 to 64
[  269.525213][T11917] hfs: request for non-existent node 131072 in B*Tree
[  269.547490][T11917] hfs: request for non-existent node 131072 in B*Tree
[  269.558076][   T21] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  269.567560][   T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.584123][   T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  269.605130][   T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  269.627580][   T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.648983][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.666063][   T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  269.679791][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.700915][ T7905] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  269.957956][ T7905] usb 5-1: Using ep0 maxpacket: 32
[  269.958206][   T21] usb 1-1: GET_CAPABILITIES returned 0
[  269.977828][   T21] usbtmc 1-1:16.0: can't read capabilities
[  270.078186][ T7905] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  270.097792][ T7905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.118665][ T7905] usb 5-1: config 0 descriptor??
[  270.171268][ T7905] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  270.205263][ T6252] usb 1-1: USB disconnect, device number 24
[  270.365939][T11940] loop5: detected capacity change from 0 to 40427
[  270.466780][T11940] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x1ffff
[  270.485313][T11940] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0xe4
[  270.523634][T11940] F2FS-fs (loop5): invalid crc value
[  270.549383][T11940] F2FS-fs (loop5): Found nat_bits in checkpoint
[  270.615668][T11940] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0
[  270.663625][T11940] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  270.728864][T11940] F2FS-fs (loop5) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0
[  270.729016][T11950] netlink: 'syz.6.2993': attribute type 10 has an invalid length.
[  270.813322][T11940] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8e0
[  270.881013][ T4773] attempt to access beyond end of device
[  270.881013][ T4773] loop5: rw=2049, want=45104, limit=40427
[  271.028212][ T7905] gspca_vc032x: reg_w err -71
[  271.034905][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.051808][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.064611][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.072831][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.078674][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.084513][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.098036][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.103670][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.115153][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.121390][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.127705][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.140930][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.154611][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.162999][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.173918][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.179840][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.214981][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.253265][ T7905] gspca_vc032x: I2c Bus Busy Wait 00
[  271.264742][ T7905] gspca_vc032x: Unknown sensor...
[  271.273713][ T7905] vc032x: probe of 5-1:0.0 failed with error -22
[  271.290609][ T7905] usb 5-1: USB disconnect, device number 27
[  271.568518][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  271.745328][T11985] device ipvlan2 entered promiscuous mode
[  271.770422][T11975] loop5: detected capacity change from 0 to 32768
[  271.770570][T11973] loop6: detected capacity change from 0 to 32768
[  271.793887][T11985] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  271.807507][T11987] block nbd3: NBD_DISCONNECT
[  271.946064][T11973] XFS (loop6): Mounting V5 Filesystem
[  272.058448][T11973] XFS (loop6): Ending clean mount
[  272.177909][ T7843] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  272.196783][ T5993] XFS (loop6): Unmounting Filesystem
[  272.420102][T11998] loop3: detected capacity change from 0 to 32768
[  272.467936][ T7843] usb 5-1: Using ep0 maxpacket: 16
[  272.468843][T11998] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  272.500916][T11998] JBD2: Ignoring recovery information on journal
[  272.558058][T11998] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  272.613466][ T7843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.653139][ T7843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.672102][ T7843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  272.692552][   T26] audit: type=1800 audit(1782492265.823:26): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3012" name="file0" dev="loop3" ino=17058 res=0 errno=0
[  272.699594][T12007] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3014'.
[  272.723576][ T7843] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  272.743829][ T7843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.755484][ T7843] usb 5-1: config 0 descriptor??
[  272.775616][ T4188] ocfs2: Unmounting device (7,3) on (node local)
[  272.789486][T12009] loop6: detected capacity change from 0 to 128
[  273.249699][ T7843] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max
[  273.282343][ T7843] microsoft 0003:045E:07DA.0025: unsupported Resolution Multiplier 0
[  273.306713][ T7843] microsoft 0003:045E:07DA.0025: implement() called with n (152) > 32! (kworker/0:13)
[  273.462012][ T7843] microsoft 0003:045E:07DA.0025: unsupported Resolution Multiplier 0
[  273.488378][ T7843] microsoft 0003:045E:07DA.0025: No inputs registered, leaving
[  273.521694][ T7843] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  273.552943][ T7843] microsoft 0003:045E:07DA.0025: no inputs found
[  273.570015][T12047] program syz.0.3032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  273.570089][ T7843] microsoft 0003:045E:07DA.0025: could not initialize ff, continuing anyway
[  273.686038][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3035'.
[  273.703561][T12053] netlink: 'syz.6.3034': attribute type 62 has an invalid length.
[  273.731790][T12053] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3034'.
[  273.754640][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3035'.
[  273.783092][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3035'.
[  273.801889][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3035'.
[  273.857426][ T7843] usb 5-1: USB disconnect, device number 28
[  274.605248][T12086] loop4: detected capacity change from 0 to 512
[  274.670055][T12086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  274.712842][T12074] loop6: detected capacity change from 0 to 32768
[  274.772796][T12080] loop3: detected capacity change from 0 to 32768
[  274.778650][T12086] EXT4-fs (loop4): 1 truncate cleaned up
[  274.785530][T12086] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  274.796758][ T4796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  274.887214][T12082] loop5: detected capacity change from 0 to 32768
[  274.913000][T12080] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  274.927513][T12086] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.3050: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  274.948104][T12082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3048 (12082)
[  274.995904][T12074] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  275.007252][T12080] (syz.3.3047,12080,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  275.063964][T12082] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  275.132402][ T4188] ocfs2: Unmounting device (7,3) on (node local)
[  275.146792][T12074] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  275.166558][T12082] BTRFS info (device loop5): setting nodatasum
[  275.208295][T12082] BTRFS info (device loop5): force zlib compression, level 3
[  275.248737][T12082] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  275.267605][T12101] loop4: detected capacity change from 0 to 64
[  275.291131][T12082] BTRFS info (device loop5): use lzo compression, level 0
[  275.302288][T12082] BTRFS info (device loop5): turning on flush-on-commit
[  275.310072][T12082] BTRFS info (device loop5): enabling auto defrag
[  275.324954][T12101] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  275.352751][T12082] BTRFS info (device loop5): max_inline at 4096
[  275.381227][T12082] BTRFS info (device loop5): using free space tree
[  275.396806][ T5993] ocfs2: Unmounting device (7,6) on (node local)
[  275.404888][T12082] BTRFS info (device loop5): has skinny extents
[  275.673555][T12082] BTRFS info (device loop5): enabling ssd optimizations
[  275.833217][ T7842] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  275.846114][   T26] audit: type=1800 audit(1782492268.983:27): pid=12082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3048" name="file1" dev="loop5" ino=260 res=0 errno=0
[  276.056756][T12128] loop3: detected capacity change from 0 to 40427
[  276.081504][T12128] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  276.148306][ T7842] usb 5-1: Using ep0 maxpacket: 16
[  276.163519][T12128] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  276.233973][T12128] F2FS-fs (loop3): invalid crc value
[  276.278044][ T7842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.299004][ T7842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  276.346707][T12128] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  276.446267][T12128] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  276.459740][T12128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  276.498306][ T7842] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  276.519786][ T7842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.547090][ T7842] usb 5-1: Product: syz
[  276.560669][ T7842] usb 5-1: Manufacturer: syz
[  276.581361][ T7842] usb 5-1: SerialNumber: syz
[  276.684634][T12128] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  276.886541][T12146] loop6: detected capacity change from 0 to 1024
[  276.948065][T12146] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  276.968257][ T7842] usb 5-1: 0:2 : does not exist
[  277.028762][ T7842] usb 5-1: USB disconnect, device number 29
[  277.287553][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  277.318773][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  277.483485][T12156] loop6: detected capacity change from 0 to 8192
[  277.577864][ T7842] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  277.599276][T12156] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  277.612623][T12156] REISERFS (device loop6): using ordered data mode
[  277.621394][T12156] reiserfs: using flush barriers
[  277.632100][T12156] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  277.653363][T12156] REISERFS (device loop6): checking transaction log (loop6)
[  277.664606][T12156] REISERFS (device loop6): Using rupasov hash to sort names
[  277.673282][T12156] REISERFS (device loop6): using 3.5.x disk format
[  277.686032][T12156] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  277.716073][T12156] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  277.733298][T12156] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  277.748042][T12156] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  277.977907][ T7842] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  277.990828][ T7842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  278.011683][ T7842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  278.031295][ T7842] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.178229][ T7842] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  278.203620][ T7842] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  278.237542][ T7842] usb 4-1: Product: syz
[  278.245938][ T7842] usb 4-1: Manufacturer: syz
[  278.312425][ T7842] cdc_wdm 4-1:1.0: skipping garbage
[  278.317829][ T7842] cdc_wdm 4-1:1.0: skipping garbage
[  278.354245][ T7842] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  278.364751][ T7842] cdc_wdm 4-1:1.0: Unknown control protocol
[  278.477403][T12169] loop4: detected capacity change from 0 to 32768
[  278.553549][T12169] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3071 (12169)
[  278.559669][ T7842] usb 4-1: USB disconnect, device number 22
[  278.572549][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  278.572705][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  278.572724][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  278.710042][T12169] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  278.740318][T12169] BTRFS info (device loop4): setting nodatasum
[  278.755014][T12169] BTRFS info (device loop4): force zlib compression, level 3
[  278.770508][T12205] loop5: detected capacity change from 0 to 512
[  278.776980][T12169] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  278.800443][T12169] BTRFS info (device loop4): use lzo compression, level 0
[  278.826381][T12169] BTRFS info (device loop4): turning on flush-on-commit
[  278.844518][T12169] BTRFS info (device loop4): enabling auto defrag
[  278.849798][T12205] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.3088: iget: bad i_size value: 38620345925642
[  278.865775][T12169] BTRFS info (device loop4): max_inline at 4096
[  278.876797][T12169] BTRFS info (device loop4): using free space tree
[  278.885257][T12205] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.3088: couldn't read orphan inode 15 (err -117)
[  278.912740][T12169] BTRFS info (device loop4): has skinny extents
[  278.950846][T12205] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  279.004652][T12205] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3088: bg 0: block 5: invalid block bitmap
[  279.028671][T12205] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  279.042371][T12205] EXT4-fs (loop5): This should not happen!! Data will be lost
[  279.042371][T12205] 
[  279.054478][T12205] EXT4-fs (loop5): Total free blocks count 0
[  279.060600][T12205] EXT4-fs (loop5): Free/Dirty block details
[  279.066897][T12205] EXT4-fs (loop5): free_blocks=0
[  279.072289][T12205] EXT4-fs (loop5): dirty_blocks=1
[  279.090045][T12205] EXT4-fs (loop5): Block reservation details
[  279.104543][T12203] infiniband syz1: set active
[  279.110476][T12205] EXT4-fs (loop5): i_reserved_data_blocks=1
[  279.122015][T12203] infiniband syz1: added syz_tun
[  279.150919][T12169] BTRFS info (device loop4): enabling ssd optimizations
[  279.196059][T12203] RDS/IB: syz1: added
[  279.222090][T12203] smc: adding ib device syz1 with port count 1
[  279.229892][T12203] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  279.243313][   T26] audit: type=1800 audit(1782492272.383:28): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3071" name="file1" dev="loop4" ino=260 res=0 errno=0
[  280.288935][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'.
[  280.305420][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3100'.
[  280.310423][T12231] loop5: detected capacity change from 0 to 32768
[  280.495934][T12231] XFS (loop5): Mounting V5 Filesystem
[  280.541338][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  280.569321][T12250] loop4: detected capacity change from 0 to 40427
[  280.584411][T12268] loop3: detected capacity change from 0 to 128
[  280.657822][T12250] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  280.695624][T12250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  280.726240][T12231] XFS (loop5): Ending clean mount
[  280.775400][T12250] F2FS-fs (loop4): invalid crc value
[  280.788390][T12231] XFS (loop5): Quotacheck needed: Please wait.
[  280.840817][T12250] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  281.042967][T12231] XFS (loop5): Quotacheck: Done.
[  281.062552][T12250] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  281.101431][T12250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  281.307379][T12250] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  281.336338][ T4773] XFS (loop5): Unmounting Filesystem
[  281.515716][T12287] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  281.531161][T12287] netdevsim netdevsim0 netdevsim0: Failed to get key data for SA table
[  282.187972][ T7842] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  282.217994][T12314] syzkaller0: tun_chr_ioctl cmd 1074812117
[  282.417026][T12324] loop5: detected capacity change from 0 to 64
[  282.439016][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.508535][T12326] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.567165][T12312] loop4: detected capacity change from 0 to 32768
[  282.598089][ T7842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.615065][ T7842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.643114][ T7842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  282.657628][ T7842] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  282.669318][ T7842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.680002][ T7842] usb 4-1: config 0 descriptor??
[  282.742427][T12312] XFS (loop4): Mounting V5 Filesystem
[  282.896880][T12312] XFS (loop4): Ending clean mount
[  282.937265][T12347] loop5: detected capacity change from 0 to 1024
[  282.939581][T12312] XFS (loop4): Quotacheck needed: Please wait.
[  283.074012][T12312] XFS (loop4): Quotacheck: Done.
[  283.210128][ T7842] steelseries_srws1 0003:1038:1410.0026: item fetching failed at offset 5/7
[  283.230463][ T7842] steelseries_srws1 0003:1038:1410.0026: parse failed
[  283.250425][ T7842] steelseries_srws1: probe of 0003:1038:1410.0026 failed with error -22
[  283.334576][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3133'.
[  283.393965][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.414236][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.430265][ T4235] usb 4-1: USB disconnect, device number 23
[  283.436878][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.450196][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.461973][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.473980][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.484781][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.495647][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.506187][T12355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.516953][T12355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.535046][T12355] batman_adv: batadv0: Adding interface: ipvlan2
[  283.542066][ T4199] XFS (loop4): Unmounting Filesystem
[  283.548940][T12355] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.576789][    C0] vkms_vblank_simulate: vblank timer overrun
[  283.589936][T12355] batman_adv: batadv0: Interface activated: ipvlan2
[  283.744326][T12366] loop5: detected capacity change from 0 to 512
[  283.883543][T12370] netlink: 'syz.4.3136': attribute type 29 has an invalid length.
[  283.892381][T12366] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  283.892522][T12370] netlink: 'syz.4.3136': attribute type 29 has an invalid length.
[  283.921614][T12370] netlink: 'syz.4.3136': attribute type 29 has an invalid length.
[  283.931033][T12370] netlink: 'syz.4.3136': attribute type 29 has an invalid length.
[  283.932605][T12366] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.999346][ T4236] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  284.148684][T12375] loop3: detected capacity change from 0 to 4096
[  284.183501][T12375] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  284.247839][ T4236] usb 1-1: Using ep0 maxpacket: 32
[  284.326780][T12375] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  284.389524][T12375] ntfs3: loop3: mft corrupted
[  284.394501][T12375] ntfs3: loop3: Failed to load $Extend.
[  284.417883][ T4236] usb 1-1: unable to get BOS descriptor or descriptor too short
[  284.497994][ T4236] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  284.506763][ T4236] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  284.569454][ T4236] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  284.602185][T12399] device batadv_slave_1 entered promiscuous mode
[  284.615348][ T4236] usb 1-1: config 128 has no interface number 0
[  284.620949][T12397] program syz.3.3152 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  284.638415][T12398] device batadv_slave_1 left promiscuous mode
[  284.648545][ T4236] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  284.667989][ T4236] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  284.720178][ T4236] usb 1-1: config 128 interface 127 has no altsetting 0
[  284.850253][T12413] loop4: detected capacity change from 0 to 512
[  284.880038][ T4236] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  284.892550][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.900983][T12413] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  284.942410][T12413] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.3160: bad orphan inode 15
[  284.952217][ T4236] usb 1-1: Product: syz
[  284.957658][ T4236] usb 1-1: Manufacturer: syz
[  284.965796][T12413] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: writeback.
[  284.976057][ T4236] usb 1-1: SerialNumber: syz
[  284.995281][T12420] loop5: detected capacity change from 0 to 2048
[  285.019478][T12413] EXT4-fs error (device loop4): __ext4_new_inode:1082: comm syz.4.3160: reserved inode found cleared - inode=17
[  285.061976][T12420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.443105][T12424] loop4: detected capacity change from 0 to 32768
[  285.472182][T12416] loop3: detected capacity change from 0 to 32768
[  285.518700][T12416] gfs2: Unknown parameter ''
[  285.541023][T12424] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3162 (12424)
[  285.600051][T12424] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  285.609481][T12424] BTRFS info (device loop4): force zlib compression, level 3
[  285.616877][T12424] BTRFS info (device loop4): allowing degraded mounts
[  285.624111][T12424] BTRFS info (device loop4): setting nodatasum
[  285.631054][T12424] BTRFS info (device loop4): allowing degraded mounts
[  285.638964][T12424] BTRFS info (device loop4): using free space tree
[  285.646771][T12424] BTRFS info (device loop4): has skinny extents
[  285.703543][ T4236] usb 1-1: USB disconnect, device number 25
[  285.736941][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  285.801937][T12424] BTRFS error (device loop4): balance: invalid convert metadata profile raid10
[  286.241793][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3173'.
[  286.284617][ T1166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.583540][T12475] hpfs: Bad magic ... probably not HPFS
[  286.600959][T12475] FAT-fs (nullb0): bogus number of reserved sectors
[  286.609540][T12475] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  287.208609][T12513] loop3: detected capacity change from 0 to 1024
[  287.254661][T12513] EXT4-fs (loop3): Ignoring removed bh option
[  287.306203][T12513] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  287.377240][T12489] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64)
[  287.384896][T12489] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  287.395607][T12489] F2FS-fs (loop6): invalid crc value
[  287.478005][ T4240] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  287.487507][T12513] EXT4-fs (loop3): shut down requested (2)
[  287.497236][T12489] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  287.518793][T12513] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: none.
[  287.710862][T12510] set_capacity_and_notify: 1 callbacks suppressed
[  287.710877][T12510] loop4: detected capacity change from 0 to 32768
[  287.740082][T12489] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  287.748336][T12489] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  287.844290][T12510] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  287.873283][T12510] JBD2: Ignoring recovery information on journal
[  287.878381][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.946028][T12510] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  287.961179][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.021924][ T4240] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  288.034989][T12489] F2FS-fs (loop6): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  288.086145][   T26] audit: type=1800 audit(1782492281.223:29): pid=12510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3192" name="file0" dev="loop4" ino=17058 res=0 errno=0
[  288.115785][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.149244][ T4199] ocfs2: Unmounting device (7,4) on (node local)
[  288.171838][ T4240] usb 6-1: config 0 descriptor??
[  288.206455][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  288.553622][T12560] loop4: detected capacity change from 0 to 4096
[  288.658449][T12564] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.669635][ T4240] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  288.677663][ T4240] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  288.738003][ T4240] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  288.766846][ T4240] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  288.779955][ T4240] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  288.815505][ T4240] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  288.857784][ T4240] hid-thrustmaster 0003:044F:B65D.0027: unknown main item tag 0x0
[  288.890010][ T4240] hid-thrustmaster 0003:044F:B65D.0027: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  288.923440][ T4240] hid-thrustmaster 0003:044F:B65D.0027: Wrong number of endpoints?
[  288.977806][    C1] hid-thrustmaster 0003:044F:B65D.0027: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[  289.115540][T12562] loop3: detected capacity change from 0 to 32768
[  289.127995][ T7841] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  289.194766][ T4240] usb 6-1: USB disconnect, device number 21
[  289.266123][T12570] loop6: detected capacity change from 0 to 32768
[  289.334898][T12570] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  289.351571][T12570] JBD2: Ignoring recovery information on journal
[  289.377921][ T7841] usb 5-1: Using ep0 maxpacket: 32
[  289.412155][T12570] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  289.519275][ T7841] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  289.541790][ T7841] usb 5-1: config 0 has no interface number 0
[  289.541988][T12570] 
[  289.549457][ T7841] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  289.551215][T12570] ======================================================
[  289.551223][T12570] WARNING: possible circular locking dependency detected
[  289.551239][T12570] syzkaller #0 Not tainted
[  289.551248][T12570] ------------------------------------------------------
[  289.551253][T12570] syz.6.3216/12570 is trying to acquire lock:
[  289.593468][T12570] ffff888073f30990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270
[  289.603017][T12570] 
[  289.603017][T12570] but task is already holding lock:
[  289.610359][T12570] ffff8880601218e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  289.620611][T12570] 
[  289.620611][T12570] which lock already depends on the new lock.
[  289.620611][T12570] 
[  289.632222][T12570] 
[  289.632222][T12570] the existing dependency chain (in reverse order) is:
[  289.641396][T12570] 
[  289.641396][T12570] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  289.650061][T12570]        down_read+0x44/0x2e0
[  289.654757][T12570]        ocfs2_start_trans+0x3a6/0x6f0
[  289.660394][T12570]        ocfs2_shutdown_local_alloc+0x1f3/0xac0
[  289.667216][T12570]        ocfs2_dismount_volume+0x1e1/0x890
[  289.673033][T12570]        generic_shutdown_super+0x130/0x300
[  289.678970][T12570]        kill_block_super+0x7c/0xe0
[  289.684151][T12570]        deactivate_locked_super+0x93/0xf0
[  289.689952][T12570]        cleanup_mnt+0x426/0x4d0
[  289.694988][T12570]        task_work_run+0x125/0x1a0
[  289.700091][T12570]        exit_to_user_mode_loop+0x10f/0x130
[  289.706164][T12570]        exit_to_user_mode_prepare+0xee/0x180
[  289.712388][T12570]        syscall_exit_to_user_mode+0x16/0x40
[  289.718648][T12570]        do_syscall_64+0x58/0xa0
[  289.723998][T12570]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  289.731299][T12570] 
[  289.731299][T12570] -> #4 (sb_internal#3){.+.+}-{0:0}:
[  289.739011][T12570]        ocfs2_start_trans+0x2a7/0x6f0
[  289.745173][T12570]        ocfs2_acquire_dquot+0x6c0/0xb30
[  289.750817][T12570]        dqget+0x713/0xbb0
[  289.755251][T12570]        dquot_set_dqblk+0x27/0xfb0
[  289.760473][T12570]        quota_setquota+0x4d6/0x590
[  289.765670][T12570]        __se_sys_quotactl+0x28b/0x6f0
[  289.771207][T12570]        do_syscall_64+0x4c/0xa0
[  289.776150][T12570]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  289.782663][T12570] 
[  289.782663][T12570] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  289.791632][T12570]        down_write+0x38/0x60
[  289.796372][T12570]        ocfs2_create_local_dquot+0x199/0x18d0
[  289.802646][T12570]        ocfs2_acquire_dquot+0x822/0xb30
[  289.808263][T12570]        dqget+0x713/0xbb0
[  289.812662][T12570]        dquot_set_dqblk+0x27/0xfb0
[  289.817839][T12570]        quota_setquota+0x4d6/0x590
[  289.824901][T12570]        __se_sys_quotactl+0x28b/0x6f0
[  289.831968][T12570]        do_syscall_64+0x4c/0xa0
[  289.836899][T12570]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  289.843597][T12570] 
[  289.843597][T12570] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  289.849633][ T4784] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  289.851601][T12570]        __mutex_lock_common+0x1e5/0x2400
[  289.865255][T12570]        mutex_lock_nested+0x17/0x20
[  289.871158][T12570]        dquot_commit+0x5a/0x410
[  289.876612][T12570]        ext4_write_dquot+0x1f0/0x360
[  289.882493][T12570]        mark_all_dquot_dirty+0xf9/0x400
[  289.888115][T12570]        __dquot_alloc_space+0x5cb/0xe10
[  289.893976][T12570]        ext4_mb_new_blocks+0xf80/0x47c0
[  289.899729][T12570]        ext4_ext_map_blocks+0x17d1/0x63d0
[  289.905838][T12570]        ext4_map_blocks+0x97f/0x1a50
[  289.911202][T12570]        ext4_getblk+0x176/0x670
[  289.916342][T12570]        ext4_bread+0x26/0x180
[  289.921095][T12570]        ext4_append+0x2bb/0x560
[  289.926460][T12570]        ext4_init_new_dir+0x2a7/0x910
[  289.931915][T12570]        ext4_mkdir+0x4c3/0xc90
[  289.936988][T12570]        vfs_mkdir+0x386/0x570
[  289.942942][T12570]        do_mkdirat+0x1dd/0x5c0
[  289.947879][T12570]        __x64_sys_mkdirat+0x85/0x90
[  289.948119][ T7841] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  289.953199][T12570]        do_syscall_64+0x4c/0xa0
[  289.953221][T12570]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  289.953237][T12570] 
[  289.953237][T12570] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  289.953262][T12570]        down_read+0x44/0x2e0
[  289.964174][ T7841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.967324][T12570]        ext4_map_blocks+0x350/0x1a50
[  289.975998][ T7841] usb 5-1: Product: syz
[  289.982122][T12570]        ext4_append+0x22d/0x560
[  289.982146][T12570]        ext4_init_new_dir+0x2a7/0x910
[  289.982158][T12570]        ext4_mkdir+0x4c3/0xc90
[  289.982170][T12570]        vfs_mkdir+0x386/0x570
[  289.987349][ T7841] usb 5-1: Manufacturer: syz
[  289.994781][T12570]        do_mkdirat+0x1dd/0x5c0
[  289.994804][T12570]        __x64_sys_mkdir+0x6a/0x80
[  289.994817][T12570]        do_syscall_64+0x4c/0xa0
[  290.002373][ T7841] usb 5-1: SerialNumber: syz
[  290.004319][T12570]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  290.011512][ T7841] usb 5-1: config 0 descriptor??
[  290.014775][T12570] 
[  290.014775][T12570] -> #0 (
[  290.049793][T12572] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  290.055633][T12570] jbd2_handle){++++}-{0:0}:
[  290.077205][T12570]        __lock_acquire+0x2c66/0x7b50
[  290.082576][T12570]        lock_acquire+0x19e/0x400
[  290.087768][T12570]        wait_transaction_locked+0x1bb/0x270
[  290.093729][T12570]        add_transaction_credits+0x104/0xcb0
[  290.099692][T12570]        start_this_handle+0x723/0x1560
[  290.105231][T12570]        jbd2__journal_start+0x2b7/0x5a0
[  290.110847][T12570]        jbd2_journal_start+0x26/0x30
[  290.116201][T12570]        ocfs2_start_trans+0x3b2/0x6f0
[  290.121639][T12570]        ocfs2_evict_inode+0x153a/0x4190
[  290.127253][T12570]        evict+0x4b6/0x8b0
[  290.131651][T12570]        vfs_rmdir+0x392/0x410
[  290.136599][T12570]        do_rmdir+0x27f/0x710
[  290.142431][T12570]        __x64_sys_unlinkat+0xc0/0xe0
[  290.148233][T12570]        do_syscall_64+0x4c/0xa0
[  290.153611][T12570]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  290.160638][T12570] 
[  290.160638][T12570] other info that might help us debug this:
[  290.160638][T12570] 
[  290.171393][T12570] Chain exists of:
[  290.171393][T12570]   jbd2_handle --> sb_internal#3 --> &journal->j_trans_barrier
[  290.171393][T12570] 
[  290.185309][T12570]  Possible unsafe locking scenario:
[  290.185309][T12570] 
[  290.192766][T12570]        CPU0                    CPU1
[  290.198275][T12570]        ----                    ----
[  290.203644][T12570]   lock(&journal->j_trans_barrier);
[  290.209086][T12570]                                lock(sb_internal#3);
[  290.215948][T12570]                                lock(&journal->j_trans_barrier);
[  290.223951][T12570]   lock(jbd2_handle);
[  290.228272][T12570] 
[  290.228272][T12570]  *** DEADLOCK ***
[  290.228272][T12570] 
[  290.236405][T12570] 7 locks held by syz.6.3216/12570:
[  290.241843][T12570]  #0: ffff888025f02460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  290.247976][ T4784] usb 4-1: Using ep0 maxpacket: 16
[  290.251064][T12570]  #1: ffff88807438b488 (&type->i_mutex_dir_key#22/1){+.+.}-{3:3}, at: do_rmdir+0x1b0/0x710
[  290.266621][T12570]  #2: ffff888051c10ab0 (&osb->nfs_sync_rwlock){.+.+}-{3:3}, at: ocfs2_nfs_sync_lock+0x103/0x270
[  290.277127][T12570]  #3: ffff88805eef1808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_evict_inode+0x2302/0x4190
[  290.289803][T12570]  #4: ffff88805ef6b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_evict_inode+0x1453/0x4190
[  290.302743][T12570]  #5: ffff888025f02650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_evict_inode+0x153a/0x4190
[  290.312685][T12570]  #6: ffff8880601218e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  290.313346][T12572] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  290.323928][T12570] 
[  290.323928][T12570] stack backtrace:
[  290.323938][T12570] CPU: 1 PID: 12570 Comm: syz.6.3216 Not tainted syzkaller #0
[  290.344466][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  290.354525][T12570] Call Trace:
[  290.357883][T12570]  <TASK>
[  290.360824][T12570]  dump_stack_lvl+0x188/0x250
[  290.365518][T12570]  ? load_image+0x410/0x410
[  290.370000][T12570]  ? show_regs_print_info+0x20/0x20
[  290.375184][T12570]  ? print_circular_bug+0x12b/0x1a0
[  290.380368][T12570]  check_noncircular+0x296/0x330
[  290.385321][T12570]  ? add_chain_block+0x9b0/0x9b0
[  290.390240][T12570]  ? lockdep_lock+0xf1/0x1f0
[  290.394821][T12570]  ? mark_lock+0x94/0x320
[  290.399132][T12570]  ? _find_first_zero_bit+0xd1/0xf0
[  290.404315][T12570]  __lock_acquire+0x2c66/0x7b50
[  290.409168][T12570]  ? verify_lock_unused+0x140/0x140
[  290.414494][T12570]  ? verify_lock_unused+0x140/0x140
[  290.419684][T12570]  ? verify_lock_unused+0x140/0x140
[  290.424877][T12570]  ? unwind_next_frame+0x11ec/0x1cf0
[  290.430159][T12570]  ? mark_lock+0x94/0x320
[  290.434556][T12570]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  290.440520][T12570]  lock_acquire+0x19e/0x400
[  290.445007][T12570]  ? wait_transaction_locked+0x19f/0x270
[  290.450624][T12570]  ? wait_transaction_locked+0x17c/0x270
[  290.456241][T12570]  ? __lock_acquire+0x7b50/0x7b50
[  290.461259][T12570]  ? read_lock_is_recursive+0x10/0x10
[  290.466660][T12570]  wait_transaction_locked+0x1bb/0x270
[  290.472106][T12570]  ? wait_transaction_locked+0x19f/0x270
[  290.477807][T12570]  ? add_transaction_credits+0xcb0/0xcb0
[  290.483427][T12570]  ? __kernel_text_address+0x9a/0x100
[  290.488813][T12570]  ? init_wait_entry+0xd0/0xd0
[  290.493574][T12570]  ? stack_trace_save+0xf0/0xf0
[  290.498405][T12570]  ? arch_stack_walk+0xf2/0x140
[  290.503238][T12570]  add_transaction_credits+0x104/0xcb0
[  290.508686][T12570]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  290.515364][T12570]  ? read_lock_is_recursive+0x10/0x10
[  290.520862][T12570]  ? __kasan_slab_alloc+0xa9/0xc0
[  290.525863][T12570]  ? __kasan_slab_alloc+0x92/0xc0
[  290.530867][T12570]  ? slab_post_alloc_hook+0x4c/0x380
[  290.536233][T12570]  ? jbd2__journal_start+0x13c/0x5a0
[  290.541519][T12570]  ? jbd2_journal_start+0x26/0x30
[  290.546561][T12570]  ? ocfs2_start_trans+0x3b2/0x6f0
[  290.551795][T12570]  ? evict+0x4b6/0x8b0
[  290.556042][T12570]  ? vfs_rmdir+0x392/0x410
[  290.560462][T12570]  ? do_rmdir+0x27f/0x710
[  290.561696][ T4784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  290.564790][T12570]  ? do_syscall_64+0x4c/0xa0
[  290.564813][T12570]  start_this_handle+0x723/0x1560
[  290.584551][T12570]  ? jbd2__journal_start+0x5a0/0x5a0
[  290.589853][T12570]  ? slab_post_alloc_hook+0x68/0x380
[  290.595143][T12570]  ? jbd2__journal_start+0x13c/0x5a0
[  290.600449][T12570]  ? rcu_is_watching+0x11/0xa0
[  290.605313][T12570]  ? jbd2__journal_start+0x13c/0x5a0
[  290.610602][T12570]  ? kmem_cache_alloc+0x189/0x280
[  290.615631][T12570]  jbd2__journal_start+0x2b7/0x5a0
[  290.620737][T12570]  jbd2_journal_start+0x26/0x30
[  290.625590][T12570]  ocfs2_start_trans+0x3b2/0x6f0
[  290.630531][T12570]  ? ocfs2_recovery_exit+0x50/0x50
[  290.635653][T12570]  ocfs2_evict_inode+0x153a/0x4190
[  290.640782][T12570]  ? ocfs2_sync_blockdev+0x40/0x40
[  290.646660][T12570]  ? mark_lock+0x94/0x320
[  290.650999][T12570]  ? is_dynamic_key+0x1f0/0x1f0
[  290.656048][T12570]  ? rcu_lock_release+0x5/0x20
[  290.660815][T12570]  ? mark_lock+0x94/0x320
[  290.665148][T12570]  ? __lock_acquire+0x13dc/0x7b50
[  290.670358][T12570]  ? mark_lock+0x94/0x320
[  290.674687][T12570]  ? __lock_acquire+0x13dc/0x7b50
[  290.679723][T12570]  ? verify_lock_unused+0x140/0x140
[  290.684927][T12570]  ? __lock_acquire+0x13dc/0x7b50
[  290.689956][T12570]  ? verify_lock_unused+0x140/0x140
[  290.695176][T12570]  ? __lock_acquire+0x13dc/0x7b50
[  290.700212][T12570]  ? writeback_single_inode+0x7ce/0x8e0
[  290.705763][T12570]  ? __rwlock_init+0x140/0x140
[  290.710518][T12570]  ? inode_wait_for_writeback+0x1df/0x220
[  290.716232][T12570]  ? __lock_acquire+0x7b50/0x7b50
[  290.722026][T12570]  ? do_raw_spin_lock+0x128/0x2f0
[  290.727043][T12570]  ? __rwlock_init+0x140/0x140
[  290.731793][T12570]  ? do_raw_spin_unlock+0x11d/0x230
[  290.737160][T12570]  ? _raw_spin_unlock+0x24/0x40
[  290.741995][T12570]  ? inode_wait_for_writeback+0x1df/0x220
[  290.747724][T12570]  ? sb_clear_inode_writeback+0x330/0x330
[  290.753424][T12570]  ? do_raw_spin_lock+0x128/0x2f0
[  290.758432][T12570]  ? bit_waitqueue+0x30/0x30
[  290.763005][T12570]  ? do_raw_spin_unlock+0x11d/0x230
[  290.768183][T12570]  ? ocfs2_sync_blockdev+0x40/0x40
[  290.773272][T12570]  evict+0x4b6/0x8b0
[  290.777158][T12570]  ? proc_nr_inodes+0x320/0x320
[  290.781986][T12570]  ? do_raw_spin_unlock+0x11d/0x230
[  290.787258][T12570]  ? _raw_spin_unlock+0x24/0x40
[  290.792093][T12570]  ? iput+0x6ea/0x880
[  290.796140][T12570]  vfs_rmdir+0x392/0x410
[  290.800633][T12570]  do_rmdir+0x27f/0x710
[  290.804772][T12570]  ? d_delete_notify+0x150/0x150
[  290.809690][T12570]  ? getname_flags+0x1f9/0x4f0
[  290.814432][T12570]  __x64_sys_unlinkat+0xc0/0xe0
[  290.819442][T12570]  do_syscall_64+0x4c/0xa0
[  290.824030][T12570]  ? clear_bhb_loop+0x30/0x80
[  290.828961][T12570]  ? clear_bhb_loop+0x30/0x80
[  290.834776][T12570]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  290.840677][T12570] RIP: 0033:0x7f5694fb4e59
[  290.845107][T12570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.864702][T12570] RSP: 002b:00007f569320e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  290.873104][T12570] RAX: ffffffffffffffda RBX: 00007f569522dfa0 RCX: 00007f5694fb4e59
[  290.881192][T12570] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  290.889152][T12570] RBP: 00007f569504ae6f R08: 0000000000000000 R09: 0000000000000000
[  290.897109][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.905063][T12570] R13: 00007f569522e038 R14: 00007f569522dfa0 R15: 00007ffcfb49d298
[  290.913033][T12570]  </TASK>
[  290.961065][ T5993] ocfs2: Unmounting device (7,6) on (node local)
[  291.027990][ T4784] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  291.037161][ T4784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.046322][ T4784] usb 4-1: Product: syz
[  291.050615][ T4784] usb 4-1: Manufacturer: syz
[  291.055287][ T4784] usb 4-1: SerialNumber: syz
[  291.067394][ T4784] usb 4-1: config 0 descriptor??
[  291.109720][ T4784] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  291.119006][ T4784] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  291.147974][ T7841] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  291.159378][ T7841] asix: probe of 5-1:0.188 failed with error -71
[  291.175576][ T7841] usb 5-1: USB disconnect, device number 30
[  291.399020][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  291.747933][ T4784] em28xx 4-1:0.0: chip ID is em2765
[  292.097848][ T4784] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  292.105872][ T4784] em28xx 4-1:0.0: board has no eeprom
[  292.218611][ T4784] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  292.227606][ T4784] em28xx 4-1:0.0: dvb set to bulk mode.
[  292.236091][ T4784] usb 4-1: USB disconnect, device number 24
[  292.245647][ T7841] em28xx 4-1:0.0: Binding DVB extension
[  292.259907][ T4784] em28xx 4-1:0.0: Disconnecting em28xx
[  292.272950][ T7841] em28xx 4-1:0.0: Registering input extension
[  292.279308][ T4784] em28xx 4-1:0.0: Closing input extension
[  292.289043][ T4784] em28xx 4-1:0.0: Freeing device
[  293.328482][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.158735][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  299.079577][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration