last executing test programs:

2m19.289594793s ago: executing program 4 (id=176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x5, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m19.210926683s ago: executing program 4 (id=178):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x508, 0x418, 0xf0, 0x418, 0x418, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x2b, 0x22, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xff], 'veth1\x00', 'ip6gretap0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}})

2m19.101057212s ago: executing program 4 (id=182):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

2m18.834471871s ago: executing program 4 (id=185):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x104000, &(0x7f0000000600), 0xc, 0x5d8, &(0x7f0000000c00)="$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")

2m18.564297001s ago: executing program 4 (id=191):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000400)={0x1d, r2, 0x2, {0x1}}, 0x18)

2m18.038440579s ago: executing program 4 (id=197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0)

2m17.851184688s ago: executing program 32 (id=197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0)

50.261898447s ago: executing program 3 (id=1013):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff)

49.868067145s ago: executing program 3 (id=1018):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa08004f"], 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

49.505951614s ago: executing program 3 (id=1023):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0xfd, 0x7, @vifc_lcl_ifindex, @dev}, 0x10)

49.172579913s ago: executing program 3 (id=1025):
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0)

48.716424992s ago: executing program 3 (id=1028):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)="0683db4291743247", 0x8}, {&(0x7f0000000540)="3a7df4271d810bbfe75ff3c934b36ea9bbdaf502b38bd77110c02d4e8f49a80754d2fe7eb408faf818cf7118e019d680b341fe9e31783db61ad45b153e768f935fe50fc844af0b", 0x47}], 0x2}, 0x20004000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

48.34593458s ago: executing program 3 (id=1031):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@noinit_itable}, {@max_batch_time}, {@dioread_nolock}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000180), 0x0, 0x0, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)

48.10682244s ago: executing program 33 (id=1031):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@test_dummy_encryption}, {@dioread_lock}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@noinit_itable}, {@max_batch_time}, {@dioread_nolock}]}, 0xd, 0x5e9, &(0x7f0000001340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000180), 0x0, 0x0, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)

6.15109476s ago: executing program 6 (id=1429):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

5.505486818s ago: executing program 6 (id=1432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x3c}}, 0x0)

5.380602598s ago: executing program 6 (id=1433):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00218000"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.25385242s ago: executing program 6 (id=1453):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0)

3.20304542s ago: executing program 6 (id=1454):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0x6, 0x4, "eb541175"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.150085127s ago: executing program 0 (id=1468):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})

2.119361507s ago: executing program 1 (id=1470):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0xffffffff, 0x4)
connect$unix(r0, &(0x7f0000000e40)=@file={0x1, './file1\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e)

1.997386677s ago: executing program 1 (id=1472):
r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
ptrace(0x8, r0)
ptrace(0x4207, r0)

1.864310496s ago: executing program 1 (id=1473):
syz_mount_image$minix(&(0x7f0000002580), &(0x7f0000000040)='./bus\x00', 0x2a14c5e, &(0x7f00000025c0)=ANY=[], 0x2, 0x229, &(0x7f00000005c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
truncate(&(0x7f0000000080)='./file2\x00', 0x2000)

1.863593696s ago: executing program 0 (id=1483):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="498a79ecdf9b63616d6f14ecc57d4c2609ab3be5c1d268145958db3566b0d7134a9282f858", 0x25, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='J', 0x1, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="a02dbd6a2fa03615460d6a4c2f9126e58bf3e021de6650ecc3b0ba2f03c8677c859b82baa07c031d88dd6cb2d92ffbb0cbd890f4f0f5070567e6f0feed3df0dd63", 0x41, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r0, r1, r2}, &(0x7f00000003c0)=""/2, 0x2, 0x0)

1.772415736s ago: executing program 0 (id=1475):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc03a6000000000000000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.587133025s ago: executing program 0 (id=1477):
syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x51, 0x5fbc, &(0x7f0000003100)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIi4RUQD4Alm1UkCIVq+hy7ptzjHseeru45v580rvr6dE1/5f/UdPdUVVcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPG97/74ZC8iLv463XAw4jMxiOhHrNb1kahnzuf7DyPiUGwNx3MRMViOqJff+ueZiDMR8dGBiDt3b6zXN5/aZR9nT1y/+sn3v/OP3/3p1qGfvvmTD9rjP/rs6Q9/fzPi4A9f+/CTm09m3QEAAKAUVVVVvfQ2/3B6f9/vuikAYCby83+V5NvVarVa/UTrP/bnq5/d1ysxX/2oH6tuqia72SwiYrO5TP2awe54AFgwm/Fx1y3QIfkXbRgRT3XdBDDXel03wJ64c/fGei/l22s+HxwZj+e/U27Lf7N37/yOnabTtI8xmdXP160YxLM79LM6ox7mSc6/387/4nh8lO631/nPyk75j8anPhUn5z9o59+yLf8/R8TC5t+fmH+pcv7DR8l/c7DA27/8AQAAAADY//Lf/w92vP93+fFXZVcetv/3yIx6AAAAAAAAAIAn7XGv/3eP6/8BAADA3Krfq9f+cuD+bc1j/dvzF3oRT7fuDxQmnSyz1nUfAAAAAAAAAAAAAFCS4fgY3gu9iKWIeHptraqq+qupXT+qx11+0ZW+/lCyrn/JAwDA2EcHWufy9yJWIuJC+qy/pbW1tapaWV2r1qrV5fx6drS8Uq023tfmaX3b8mgXL4iHo6r+ZiuN5ZqmvV+eNt7+fvVjjarBLhqbjQ4DB4CIGD8b3fGMtM9U1TPR9ascFoPtf/+x/bMbXf+cAgAAAHuvqqqqlz7O+3Da59/vuikAYBZW8vN/e7+AWq1Wq9Xq/Vc3VZPdbBYRsdlcpn7N4HL8ALBgNuPjrlugQ/Iv2jAiDnXdBDDXel03wJ64c/fGei/l22s+H6Tru+djQbblv9nbWi4vP2k6TfsYk1n9fN2KQTy7Qz/PzaiHeZLz77fzvzgeH6X77XX+s7JT/vV6Huygn67l/Aft/Fv2T/79ifmXKuc/fKT8B/IHAAAAAIA5lv/+f9D+37zKAAAAAAAAALBw7ty9sZ7Pe837/z8/4X695pzzP/eNnH9v1/k7/3c/yfn32/m3DsgZNOZvv3E//3/fvbH+wfV/fS5P5z7/pcGofuylXn8wTMf8VEtvxeW4Ehtx4oH7D7eNn3xgfGnb+Kkp46cfGB/V46t5/Fisxy/iSrx5b3x5yoFRK1PGqynjOf+B7b9IOf9h46vOfy2N91rT2u33+w9s983ppMc5/7f/vvjg1jV7t2Jwb92a6vU72kE/W/8nT43iV9c2rh77zaXr16+ejDTZduupSJMnLOe/lL5y/i+9MB7Pv/eb2+vt90ePnP+8uBXDHfN/oTFfr+/LM+6tCzn/UfrK+ednoMnb/yLnv/P2/0oH/QAAAAAAAAAAAAAAAMDDVFW1dYro+Yg4l87/6ercTABgpv7wgzRTJaEe172Yr37UarVarX4CdVM12evNIla2L3MuIn476ZsBAPPsfxHxz66boDPyL1j+vL96+oWumwFm6tq77/3s0pUrG1evdd0JAAAAAAAAAPBp5et/Hmlc/3nrOKDWdaO3Xf/1jTiysNf/7I8GW9c6Tyv0fDz8+t9H4+HX/x5OebylKeOjKePLU8ZXpoxPPNGjIef/fMo45384rVhJ1399qYN+upbzP5qu9Zzz/1Lrfs38q78ucv79bfkfv/7OL49fe/e9Vy+/c+ntjbc3fn7yxLkzp8+eOX327PG3Ll/ZODH+t8OO91bOP1/72nGgZcn558zlX5ac/xdTLf+y5PxfTLX8y5Lzz6/35F+WnH9+7yP/suT8X061/MuS8/9yquVflpz/K6mWf1ly/l9JtfzLkvN/NdXyL0vO/1iq5V+WnP/xVMu/LDn/vIdL/mXJ+ecjG+Rflpz/qVTLvyw5/9Opln9Zcv5nUi3/suT8z6Za/mXJ+Z9LtfzLkvP/aqrlX5ac/9dSLf+y5PxfS7X8y5Lz/3qq5V+WnP83Ui3/suT8v5lq+Zcl5/+tVMu/LDn/b6da/mXJ+b+eavmX5f7n/5uZ8cx//h4xB22YMTNppuvfTAAAAAAAAAAAAABA2ywOJ+56HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/swMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1djFxnfT/ws69eO4H4T0IIwZC14wRDNt5dvyUmGMzrPw0tTQOhpYU6xl6/gN/qXUOCULM0aRtEpEZtL9KLUkAUIbVVIoRUKqUoUpHau+YKlBvUSpFqqUllIqhES7LVmfM8z87Mzs7s2t74zDmfTxT/vDtnZp45c2Z2vmt9ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLb5AzN/PJBlWf5/44+NWXZ1/vf12f78y/k9V3qFAAAAwKV6pfHn316TvrF/BWdq2uaf3/av31tYWFjIPvPy+Vf/bGEhnTCeZUPrsqxxWvQvv/j5QvM2wSPZ2MBg09eDPa5+qMfpwz1OH+lx+miP09f1OH2sx+lLdsAS64vfxzQubGvjrxuLXZpdl400Ttva4VyPDKwbHIy/y2kYaJxnYeRIdjw7kc1kU0vOM9D4L8ue2Zxf191ZvK7BpuvalGXZhZ9+6VBcw0DYx1uzlitraL7vXnpfNv7yT7906NtzL7650+y5G5asNMu2bcnX+WiWLf66KhvI1qV9Etc52LTOTR3WOdSyzoHG+fK/t6/zwgrXGW/3WFjnc13WuSl878Gbsyybz5bdpt0j2WC2oe1a0/4eK46I/DLyu/IN2fCqjpPNKzhO8vO8cHPrcdJ+TMb9vznsk+Fl1tB8d7z05dEl+/1ij5P8VpfhWM0v+978SsfGmn+12nKs5tt86Zblj4GO912HYyAdy03HwJZex8Dg6FDjGBhcXPOWlmNgesl5BrOBxnWdv6X7MTA5d/LM5OxDX7z9+MmDR2eOzpyantqza+fuXTt37548cvzEzFTx5+p2aR/ZkA2mY3BLeK6Jx+Db27ZtPiQXvnH5HgdjJXkc5Lf947fmC7p6MFvmGM+3eXTbpT8O0s/9psfBcNPjoONzaofHwfAKHgf5Nhe2rexn5nDT/53WsFbPhRubjoEr+fMwv85PvWP558JNYV2PvXO1Pw+HlhwD8WYNhMde/p30em/szrBflh4XN+YnXDXaeG23/cGDc3Nnp7MwXhPXNt1X7cfLhqbblC05XgZXfbzs/5tf3npjh+9vDPtq7Lbu91W+za6J7vdV49n9qtHs3OzM2bA/R7Nif7Z8d0cWxmX2Wu/PTj/N8v2ZskSX/Zlv8+jtl/5aMOWSpue/kV7Pf0Mjw8Xz31DaGyMtz39L75qhxsqy7MLtK3v+Gwn/v9bPf9eV5Pkv31ef2t79GMi3eWxytcfAcNfnv5vDHAjreUdIDGNNuf/VxunzxWHadF/2PG6Gh0fCcTMcr7H1uNm55Dz5peXXvW3q4o6bbTe33lctr1tWftz0+vVBaY6bfF/9+VT34ybf5tnpS3/uWB//2vTcMdrrGBgZGs3XO5IOguL5bmF9PAa2Z4ey09mJ7HA6T34v59c1sWNlx8Bo+P+1fu64oSTHQL6vntzR/RjIt/nhzsv72mlb+E7apum1U/vvF5bL/DcOL15e+2673Jk/X+cHf/TR9L1OGSLf5sVdq80Z3ffTbeE7V3XYT+2Pn+WO6cPZa7OfbgjrPLG7+++m8m2u27PC42l/lmXPTz/f+H1X+P3ud8/96Hstv/ft9Dvl56efv2fyvh+vZv0AAFy8Vxt/zo8WrzWb/sV6Jf/+DwAAAPSFmPsHw0zkfwAAAKiMmPuHwkzkfwAAAKiMmPuHw0xqkv+P3bn3qVceztK7AS4E8fS4G+59T7Fd7HjPh6/HFxbl33//t0ae+srDK7vuwSzLfnnPWzpuf+w9cV2FM3Gd72r9/hI33LSi63/g/sXtmt8/4cLe4vLj7VnpYRC7ys9M7mhc7vhD04357D1ZY943/9gjxeUXX8ftz+8stv/L8KYl+48MtJx/W1jP1jDHw3vK3Lt/cT/kM57vqU1v+6drP7F4ffF8A1te37iZT/5+cbnxPaKeuLbYPt7u5db/j1/9zlP59g/e0nn9Dw92Xv/5cLkvhPmLfcX2zfv8K03r/8Ow/nh98Xzbv/mDjut/+k3F9k+H4+LrYbav/31/8tZXOt1f8Xr231WcL17/1H/vapwvXl68/Pb1jz083bI/2i//2ZeLy9n3+Z8NNW8fvx+vJ3rgrtbjeyDcvy098izLvvNHWct+zt5dnO8f2tYfL+/MXZ3Xf1vbOs8M3NQ4/+Lt2dhyu7721zs63t64nv1/t7Hl9jzxobD/Xp78YX655+8Lx2M4/X+eKy6v/c1Inv5Q6/NN3P7rG4vHbby8ybb1P9G2/vmb8n3Xe/13v1ys/+n3rmtZ//4Ph+Pp7mL2Wv/Rv7qm5fzf+HZxf5z9wsSp07Pnjh9u2qvNj+N1Y+s3XHX1615/TXgubf/6wOm5YzNnx6fGp7JsvA/fMnCt1//NMP+rGPOX/xoKP/5Zcdw9/pHi59bbf158/UT4/gPh/ow/H7/2FyMtx2v7/T7/3mJe6vrfGdaxUm/66r/ftKINz3/6mXN//wcvtr8uiLfnzBvHGrfvyc3XN04beLY4vf35qpd/e2Pr4/onw1ON+f2wXxfCOzNvub64vvbLj+9N8vjHisdvfCUXz5+1vZ/IxqHW23Gp6/9JeB3zgxtan//i8fH9h9vezXljNpAvYT48P2Tzxelxq7i/H79wfcfri+/Dk82/eTXLXNbsQ7OTJ46fOvfg5NzM7Nzk7ENfPHDy9LlTcwca71164LO9zr/4+N7QeHwfntmzK2s82k8XY41d6fWfuf/Q4Tumbj08c+TguSNz95+ZOXv00OzsoZnDs7cePHJk5gu9zn/88L7pHXt33rFj4ujxw/vu3Lt3596J46dO58soFtXDnqnPTZw6e6Bxltl9u/ZO7969a2ri5OnDM/vumJqaONfr/I2fTRP5uT8/cXbmxMG54ydnJmaPf3Fm3/TePXt29Hz3x5NnjsyOT549d2ry3OzM2cnitozPNb6d/+zrdX7qYfZ0eL5rMxBenX/ytj3p/XFz3/ryshdVbNL68jR7KbwXVPz51uvrmPtHwkxqkv8BAACgDmLuD2/8v3iC/A8AAACVEXP/ujAT+R8AAAAqI+b+IvmPpY9/r0v+v1z9/y/r/zfo/+v/Z/r/if6//n+m/6//34P+fyn6/8f0//X/9f9ZK2Xr/4fcn63PMv/+DwAAABUVc/+GMBP5HwAAACoj5v6rwkzkfwAAAKiMmPuvDjOpSf73+f/6//r/3fr/cVv9/0z/vwz9/63/qf+/hP6//n+m/3/RrnR/vt/XX8L+/3r9f8qmbP3/mPtfF2ZSk/wPAAAAdRBz/+vDTOR/AAAAKLV1q9g25v5rwkzkfwAAAKiMmPs3hpnUJP9fuf7/qP6//n9Dufv/Pv+/mf7/Fe//+/z/DvT/9f+z2vT/ixcL+v/lWf/a9///tOv5ff4//aBs/f+Y+/9fmElN8j8AAADUQcz9bwgzkf8BAACgMmLuvzbMRP4HAACAyoi5/7owk5rk/3p+/v8LWZbp/2f6//r/bevU/9f/Xwv6//r/3VzZ/n/+2qef+v8+/79s6y/h5//r/1M6Zev/x9z/xjCTmuR/AAAAqIOY+68PM5H/AQAAoDJi7n9TmIn8DwAAAJURc/8NYSY1yf/17P/7/H/9/8Ia9P8HhvX/E/1//f9M/1//vwef/6//38/r1//X/6e3svX/Y+5/c5hJTfI/AAAA1EHM/TeGmcj/AAAAUBkx978lzET+BwAAgMqIuX9TmElN8r/+v/6//r/P/9f/1/9fS/3V/x9c9hT9/4L+f6vL1/+fX1yA/n/frF//X/+f3srW/4+5/61hJjXJ/wAAAFAHMfe/LcxE/gcAAIDKiLn/pjAT+R8AAAAqI+b+8TCTmuR//X/9f/1//X/9f/3/tdRf/f/l6f8X9P9b+fx//X/9f/1/uitb/z/m/s1hJjXJ/wAAAFAHMfdvCTOR/wEAAKAyYu6/OcxE/gcAAIDKiLl/a5hJTfK//r/+v/6//r/+v/7/WtL/1//vRv9f/7+f16//r/9Pb2Xr/8fcf0uYSU3yPwAAANRBzP23hpnI/wAAAFAZMfe/PcxE/gcAAIDKiLl/W5hJTfK//r/+v/5/H/f/h/T/M/3/0uux/v9t+7Gzavr/+v+Z/v9Fu9L9+X5fv/6//j+9la3/H3P/O8JMapL/AQAAoA5i7n9nmIn8DwAAAJURc/9tYSbyPwAAAFRGzP0TYSY1yf8V7/+/+B/LbKb/X9D/7/P+v8//b1m//n85+fx//f9u9P/1//t5/fr/+v/0Vrb+f8z9t4eZ1CT/AwAAQB3E3L89zET+BwAAgMqIuX8yzET+BwAAgMqIuX8qzKQm+b/i/f9l6f8X9P/1/zP9f/3/Nab/r//fjf6//n8/r1//X/+f3srW/4+5fzrMpCb5HwAAAOog5v4dYSbyPwAAAFRGzP07w0zkfwAAAKiMmPt3hZnUJP/3Sf9/eypA6f/r/+v/6//r//cV/f+K9v/zJxL9f/3/03NpB+v/6//r/zPY4Xtl6//H3L87zKQm+R8AAADqIOb+PWEm8j8AAABURsz9d4SZyP8AAABQGTH33xlmUpP83yf9f5//r/+v/99E/1//v5/o/1e0/+/z/xv0/33+v/6//j/dla3/H3P/3jCTmuR/AAAAqIOY+98VZiL/AwAAQGXE3H9XmIn8DwAAAH2l0+cQRjH3vzvMpCb5X/+/6v3/hXX6//r/+v/d16//v7b0//X/u9H/1//v5/Xr/+v/01vZ+v8x9+8LM6lJ/gcAAIA6iLn/PWEm8j8AAABURsz97w0zkf8BAACgMmLu3x9mUpP8r/9f9f6/z//X/9f/77V+/f+1pf+v/99NJfv/66rf/w8vW/T/S9T/z48h/X/KqGz9/5j73xdmUpP8DwAAAHUQc//7w0zkfwAAAKiMmPs/EGYi/wMAAEBlxNz/wTCTmuR//X/9f/1//X/9f/3/taT/v2b9/8ZTof5/oVT9f5//r//v8//1/0nK1v+Puf9DYSY1yf8AAABQBzH3fzjMRP4HAACAyoi5//+Hmcj/AAAAUBkx998dZlKT/K//r/+v/6//r/+v/7+W9P99/n83+v/6//28fv1//X96K1v/P+b+XwkzqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6PhJnI/wAAANBnRpc9Jeb+Xw0zqUn+77/+/3hf9v8H0+Xr/+v/6//r/+v/X076//r/mf7/RbvS/fl+X7/+v/4/vZWt/x9z/6+FmdQk/wMAAEAdxNz/0TAT+R8AAAAqI+b+Xw8zkf8BAACgMmLuvzfMpCb5/3L3/9vP343P/9f/z/T/9f/1//X/L5H+v/5/pv9/0a50f77f16//r/9Pb2Xr/8fc/xthJjXJ/wAAAFAHMfffF2Yi/wMAAEBJHVv1OWLu/1iYifwPAAAAlRFz/8fDTGqS//vv8//1//X/9f/1//X/+4n+v/5/N/r/+v/9vH79f/1/eitb/z/m/vvDTGqS/wEAAKAOYu7/RJiJ/A8AAACVEXP/b4aZyP8AAABQGTH3/1aYSU3yv/6//r/+v/6//r/+/1rS/1/a/8+fw/T/C/r/+v/9vH79f/1/eitb/z/m/k+GmdQk/wMAAEAdxNz/22Em8j8AAABURsz9vxNmIv8DAABAZcTc/6kwk5rkf/1//X/9f/1//X/9/7Wk/+/z/7vR/9f/7+f16//r/9Nb2fr/Mfd/OsykJvkfAAAA6iDm/t8NM5H/AQAAoDJi7j8QZiL/AwAAQGXE3P9AmElN8r/+v/6//r/+v/6//v9a0v/X/+9G/1//v5/Xr/+v/09vZev/x9x/MMxkf+vVAAAAAP0r5v7PhJnU5N//AQAAoA5i7j8UZiL/AwAAQGXE3H84zKQm+V//X/9f/1//X/9f/38t6f/r/3ej/6//38/r1//X/6e3svX/Y+6fCTOpSf4HAACAOoi5/0iYifwPAAAAlRFz/9EwE/kfAAAAKiPm/mNhJjXJ//r/+v/6/7Xt/z/33bZ16v/r/68F/X/9/270//X/+3n9+v/6//RWtv5/zP3Hw0xqkv8BAACgDmLu/2yYifwPAAAAlRFz/+fCTOR/AAAAqIyY+0+EmdQk/+v/6//r/9e2/7+yz/9fv3i9+v/6/xdD/1//vxv9f/3/fl6//r/+P72Vrf8fc//JMJOa5H8AAACog5j7T4WZyP8AAABQGTH3nw4zkf8BAACgMmLuPxNmUpP8r/+/uv7/wDLdQP3/zuvX/69A/7+J/r/+/8XQ/9f/70b/X/+/n9ev/6//T29l6//H3P97YSY1yf8AAABQBzH3nw0zkf8BAACgMmLunw0zkf8BAACgMmLun/s/9u47WbOy2uP4e5vbfZu65RyYgiNwCI7BKqdgTmAEs2LOCXPCrJhzzjnnjGKOVVp0r7WgD332Pk2ft8+zn/X5/MGSAxYPgmX9Cr+145Ym+1//7/v/+n/9v/5f/79P+n/9/xL9v/5/y+/X/+v/WTda/5+7/35xS5P9DwAAAB3k7r9/3GL/AwAAwDRy9z8gbrH/AQAAYBq5+x8YtzTZ//p//b/+X/+v/9f/75P+f6P9/26n/z8C/b/+X/+v/2fZaP1/7v4HxS1N9j8AAAB0kLv/wXGL/Q8AAADTyN3/kLjF/gcAAIBp5O5/aNzSZP/r//X/+n/9v/5f/79P+v+N9v++/38k+n/9v/5f/8+y0fr/3P0Pi1ua7H8AAADoIHf/w+MW+x8AAACmkbv/EXGL/Q8AAADTyN1/bdzSZP/r//X/+v8N9v//q//X/2+H/l//v0T/r//f8vv1//p/1o3W/+fuvy5uabL/AQAAoIPc/Y+MW+x/AAAAmEbu/kfFLfY/AAAATCN3/6Pjlib7X/+v/9f/b7D/9/1//f+G6P/1/0v0//r/Lb9f/6//Z91o/X/u/sfELU32PwAAAHSQu/+xcYv9DwAAANPI3f+4uMX+BwAAgGnk7r8+bmmy//X/+n/9v/5f/6//3yf9v/5/if5f/7/l9+v/9f+s23v/f+8bzt2j9v+5+2+IW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6//v6P//8z/6f/2//v+On+v/j4f+X/+/RP+v/9/y+/X/+n/W7b3/X+n9D/567v4nxS1N9j8AAAB0kLv/yXGL/Q8AAADTyN3/lLjF/gcAAIDhnT3i75e7/6kH/11N9r/+X//v+//6f/2//n+f9P/D9v8H/6t3of31/2fu/Cv6f/3/lt+/1P/f6wjv1//TwWj9f+7+p8UtTfY/AAAAdJC7/+lxi/0PAAAA08jdf2PcYv8DAADANHL3PyNuabL/9f/6f/2//v/C/v9Uy/7/9p/p//dD/z9s/7/M9/+PRP+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6/v/V83R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Urnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/8vq/yf5/r/+f3/0//r/JUft/3f6//pzOdn+//QFv6b/1//r/1kzWv+fu/+FcUuT/Q8AAADzuf4uP8nd/6K4xf4HAACAaeTuf3HcYv8DAADANHL3vyRuabL/9f/6f/2//l//r//fJ/2//n+J7/9vrf+/kP5f/6//Z81o/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAANPI3f/yuMX+BwAAgGnk7n9F3HJw/5+6kq+6ck60/892Q/+v/9f/n6P/j7+u+n/9/yXQ/+v/dxP2/2cP+ePp/8d6v/5f/8+60fr/3P03xS3++T8AAABMI3f/K+MW+x8AAACmkbv/VXGL/Q8AAADTyN3/6rilyf4/rP+/7f/P/3bf/z8a/f/F36//1//r//X/+v/j6/8v9j9v+v/zZuv/ff9/G+/X/+v/WTda/5+7/zVxS5P9DwAAAB3k7n9t3GL/AwAAwDRy978ubrH/AQAAYBq5+18ftzTZ/8f//f9rTqL/vyOu0//r//X/+v/4+WH9/0H6//3S//v+/xL9v/5/y+/X/+v/WTda/5+7/w1xS5P9DwAAAB3k7n9j3GL/AwAAwDRy978pbrH/AQAAYBq5+98ctzTZ/8ff//v+v/7/Evv/U/r/pP+Pv66+/6//vwT6f/3/Tv9/t510P7/19+v/9f+sG63/z91/87mp12//AwAAQAc3n/vl2d1b4hb7HwAAAKaRu/+tcYv9DwAAANPI3f+2uKXJ/tf/6/9PvP/3/f+i/4+/rvp//f8l0P/r/3f6/7vtpPv5rb9f/6//Z91o/X/u/rfHLU32PwAAAHSQu/8dcYv9DwAAANOI3X/+//xu/wMAAMCU3nnul2d374pbmuz/xv3/NZfb/199p3+t/7/4+/X/x9L/33zw7z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Vv/PeEbr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAmEbu/lviFvsfAAAAppG7/71xS5P937j/n+T7//e5NV6g/5+3//f9/7j6f/3/xej/9f87/f/ddtL9/NbfP07/7/v/jGu0/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy//X/W+//ff9f/6//1/+PTf+v/1+i/9f/b/n9+n/9P+tG6/9z938obmmy/wEAAKCD3P0fjlvsfwAAAJhG7v6PxC32PwAAAEwjd/9H45Ym+1//r//fV/9/+x9E/9+k/79O/7/T/x9K/6//X6L/1/9v+f36f/0/60br/3P3fyxuabL/AQAAoIPc/R+PW+x/AAAAmEbu/k/ELfY/AAAATCN3/yfjhnve4+SedLxOH/Lz6M31//p/3//X//v+v/5/n/T/+v8l+n/9/5bfr//X/7NutP4/d/+n4hb//B8AAACmkbv/03GL/Q8AAADTyN3/mbjF/gcAAIBp5O7/bNzSZP/r//X/+v/N9v9X6/8vfL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/c3FLk/0PAAAAHeTu/3zcYv8DAADANHL3fyFusf8BAABgGrn7vxi3NNn/+n/9v/5/s/2/7/8feL/+f0z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/S3FLk/0PAAAAHeTu/3LcYv8DAADANHL3fyVusf8BAABgGrn7vxq3NNn/+n/9v/5f/6//1//v0xXv/08d/x9jp//X/x9C/6//1//r/1k2Wv+fu/9rcUuT/Q8AAAAd5O7/etxi/wMAAMA0cvd/I26x/wEAAGAaufu/Gbc02f8z9/9Lv5v+/zz9v/5/p/8/2P+fyZ/r/4+H7//r/5fo/yfu/88cyxNP7v36f/0/x2K0/j93/7filib7HwAAADrI3f/tuMX+BwAAgGnk7v9O3GL/AwAAwDRy9383bmmy/2fu/5fo/8/T/+v/d/p/3//fM/2//n+J/n/i/t/3//X/cHL9/+ndIf1/7v7vxS1N9j8AAAB0kLv/+3GL/Q8AAADTyN3/g7jF/gcAAIBp5O7/Ydwyz/6/7y0Lv1H/f+z9/7m/ifT/+v+d/l//r/8/R/+v/1+i/9f/b/n9+n/9P+tG+/5/7v4fxS3z7H8AAABoL3f/j+MW+x8AAACmkbv/J3GL/Q8AAADTyN3/07ilyf7X//v+v/6/Vf9/1e5I/X/+J6z/1/9fPv2//n+J/l//v+X36//1/6wbrf/P3f+zuKXJ/gcAAIAOcvf/PG6x/wEAAGAauft/EbfY/wAAADCN3P2/jFua7H/9v/5f/9+q//f9f/3/Faf/1/8v0f/r/7f8/uz/8+87/b/+n7sarf/P3f+ruKXJ/gcAAIAOcvf/Om6x/wEAAGAauft/E7fY/wAAADCN3P2/jVua7H/9v/5f/6//1//r//dJ/6//X6L/1/9v+f2+/6//Z91o/X/u/lvjlib7HwAAADrI3f+7uMX+BwAAgGnk7v993GL/AwAAwDRy998WtzTZ//p//f+U/f//6f/1//r/Uej/9f9L9P/6/y2/X/+v/2fdaP1/7v4/xC1N9j8AAAB0kLv/j3GL/Q8AAADTyN3/p7jF/gcAAIBp5O7/c9zSZP/r//X/l97/n64/72H7f9//1//r/4cxb/9/Rv+v/7/s/v/Gm87/WP+/zffr//X/rBut/8/d/5e4pcn+BwAAgA5y9/81brH/AQAAYBq5+/8Wt9j/AAAAMI3c/X+PW5rsf/2//n/K7//r//X/+v9hzNv/+/6//t/3//X/+n/9P2tG6/9z9/8jbmmy/wEAAKCD3P3/jFvsfwAAAJhG7v5/xS32PwAAAEwjd/+/45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9/w0AAP//pQEwbw==")
unlink(0x0)
open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x28)
creat(&(0x7f0000000000)='./file0\x00', 0x113)

1.448686445s ago: executing program 1 (id=1480):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltclass={0xf4, 0x29, 0x100, 0x200, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff9, 0x1}, {0x2, 0xf}, {0xffe0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0xb7}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x54d}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffffff00}, @TCA_QFQ_WEIGHT={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_LMAX={0x8}]}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x54, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x2, 0x100}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x2}}, @TCA_HFSC_USC={0x10, 0x3, {0x79, 0x8001, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x400, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x5, 0x4}}]}}, @tclass_kind_options=@c_mq={0x7}]}, 0xf4}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.275851604s ago: executing program 5 (id=1482):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xda0, 0x0, 0x40}]})

1.134948674s ago: executing program 1 (id=1484):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4)
splice(r1, 0x0, r0, 0x0, 0x80001, 0x0)

1.116860973s ago: executing program 5 (id=1485):
r0 = socket$kcm(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000b80)="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", 0xd9d}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002940)=""/4096, 0x1000}], 0x1}, 0x0)

1.098571803s ago: executing program 2 (id=1486):
getdents(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000700cff8000008000a0000efffff080014003f000000080013000000000005000b0001000000080010"], 0x5c}}, 0x0)

1.033760493s ago: executing program 2 (id=1487):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000440)=0x1, 0x4)
readv(r0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/4, 0x4}], 0x1)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000080)="00000095ad00", 0x6}], 0x2}, 0x0)

953.826563ms ago: executing program 5 (id=1488):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed0040, &(0x7f00000005c0)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@lazytime}]}, 0xde, 0x472, &(0x7f0000000dc0)="$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")
mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c9002e3ff0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

901.386023ms ago: executing program 2 (id=1489):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x9}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

843.326073ms ago: executing program 6 (id=1490):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)

765.934163ms ago: executing program 2 (id=1491):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000e0720500"])

649.063652ms ago: executing program 2 (id=1492):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
open(&(0x7f0000001500)='./file2\x00', 0xe080, 0x0)

514.954752ms ago: executing program 1 (id=1493):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000fff00004e2200e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

482.016871ms ago: executing program 0 (id=1494):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0)
clock_settime(0x0, &(0x7f0000000100)={0x77359400})
read(r0, &(0x7f00000002c0)=""/114, 0x72)

362.023061ms ago: executing program 5 (id=1495):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0x3, 0x0, [{0x1, 0x9, 0x5, 0x2, 0x100, 0x3, 0x80000000}, {0x1, 0xa, 0x40003900, 0x6, 0x20000eaf, 0x7fff, 0x1}, {0xa, 0x401, 0x0, 0x3, 0xb, 0x6, 0x80}]})

298.249751ms ago: executing program 2 (id=1496):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r0, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x962}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x8084)

116.67163ms ago: executing program 5 (id=1497):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x1, 0xfa00, {0xfffffffffffffffa, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118)

23.78392ms ago: executing program 0 (id=1498):
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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")
rename(&(0x7f0000000140)='./file3\x00', &(0x7f00000009c0)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000005600)={{r0}, 0x0, 0x0, @unused=[0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x91], @subvolid=0x3})

0s ago: executing program 5 (id=1499):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000000)=0x2, 0x4)
sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)

kernel console output (not intermixed with test programs):

d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.691 (6526)
[  139.954981][ T6405] XFS (loop2): Unmount and run xfs_repair
[  139.967245][ T6519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  139.981799][ T6524] (syz.5.688,6524,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  140.002354][ T6405] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  140.021615][ T6405] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  140.026927][ T6519] attempt to access beyond end of device
[  140.026927][ T6519] loop0: rw=2049, want=45112, limit=40427
[  140.031517][ T6405] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  140.051938][ T6405] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  140.061588][ T6405] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  140.071718][ T6405] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  140.081719][ T6405] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  140.092052][ T6405] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  140.101375][ T6405] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  140.109752][ T6524] JBD2: Ignoring recovery information on journal
[  140.113547][ T6486] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x6 len 2 error 74
[  140.128524][ T4170] attempt to access beyond end of device
[  140.128524][ T4170] loop0: rw=2049, want=45120, limit=40427
[  140.132980][ T6486] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  140.172980][ T6526] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  140.182392][ T6486] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  140.211885][ T6526] BTRFS info (device loop3): force zlib compression, level 3
[  140.219979][ T6526] BTRFS info (device loop3): force clearing of disk cache
[  140.227606][ T6526] BTRFS info (device loop3): setting nodatasum
[  140.237376][ T6526] BTRFS info (device loop3): allowing degraded mounts
[  140.244432][ T6526] BTRFS info (device loop3): enabling disk space caching
[  140.251642][ T6526] BTRFS info (device loop3): disk space caching is enabled
[  140.259272][ T6526] BTRFS info (device loop3): has skinny extents
[  140.259681][ T6524] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  140.302685][ T4172] XFS (loop2): Unmounting Filesystem
[  140.528443][ T4760] ocfs2: Unmounting device (7,5) on (node local)
[  140.650580][ T6526] BTRFS info (device loop3): clearing free space tree
[  140.687958][ T6526] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  140.752558][ T6526] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  140.835121][ T6526] BTRFS info (device loop3): balance: start -d -m -s
[  140.855140][ T6526] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  140.940942][ T6526] BTRFS info (device loop3): balance: canceled
[  141.042386][ T6572] loop1: detected capacity change from 0 to 4096
[  141.062515][ T4824] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  141.356562][ T4824] usb 6-1: Using ep0 maxpacket: 32
[  141.492954][ T4824] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  141.501283][ T4824] usb 6-1: config 0 has no interface number 0
[  141.649564][ T6590] loop3: detected capacity change from 0 to 1024
[  141.715151][ T4824] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  141.729616][ T4824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.738373][ T4824] usb 6-1: Product: syz
[  141.742452][ T6405] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  141.744455][ T4824] usb 6-1: Manufacturer: syz
[  141.778545][ T4824] usb 6-1: SerialNumber: syz
[  141.793432][ T6590] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.825367][ T4824] usb 6-1: config 0 descriptor??
[  141.883247][ T4824] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  141.982438][ T6494] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.080612][ T6570] udc-core: couldn't find an available UDC or it's busy
[  142.090771][ T6570] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  142.122773][ T6405] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  142.128572][ T4824] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  142.146456][ T6405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.170834][ T4824] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  142.174535][ T6405] usb 3-1: config 0 descriptor??
[  142.248038][ T6494] usb 1-1: Using ep0 maxpacket: 32
[  142.257519][ T6405] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  142.362418][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  142.452590][ T6405] gp8psk: usb in 128 operation failed.
[  142.472753][ T6494] usb 1-1: unable to get BOS descriptor or descriptor too short
[  142.492650][ T6405] gp8psk: usb in 137 operation failed.
[  142.505415][ T6405] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  142.546761][ T4835] usb 6-1: USB disconnect, device number 4
[  142.549914][ T6405] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  142.562902][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -108
[  142.563569][ T6405] usb 3-1: media controller created
[  142.578798][ T6494] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  142.599624][ T6405] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  142.602591][ T4835] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  142.619782][ T6494] usb 1-1: config 7 has no interface number 0
[  142.631709][ T6494] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  142.643102][ T6494] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  142.660892][ T6494] usb 1-1: config 7 interface 187 has no altsetting 0
[  142.689386][ T4835] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  142.703994][ T6405] gp8psk_fe: Frontend attached
[  142.708426][ T4835] quatech2 6-1:0.51: device disconnected
[  142.717985][ T6405] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  142.728302][ T6405] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  142.848159][ T6625] sctp: [Deprecated]: syz.1.722 (pid 6625) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.848159][ T6625] Use struct sctp_sack_info instead
[  142.866390][ T6494] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  142.879214][ T6494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.892597][ T6405] gp8psk: usb in 138 operation failed.
[  142.898653][ T6405] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  142.899165][ T6494] usb 1-1: Product: syz
[  142.916248][ T6405] gp8psk: found Genpix USB device pID = 203 (hex)
[  142.928477][ T6405] usb 3-1: USB disconnect, device number 4
[  142.973111][ T6494] usb 1-1: Manufacturer: syz
[  142.978484][ T6494] usb 1-1: SerialNumber: syz
[  143.013778][ T6592] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  143.020975][ T6592] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  143.066627][ T6405] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  143.282051][ T6629] loop1: detected capacity change from 0 to 32768
[  143.332517][ T6494] usb 1-1: Limiting number of CPorts to U8_MAX
[  143.339197][ T6494] usb 1-1: Unknown endpoint type found, address 0x07
[  143.346526][ T6494] usb 1-1: Unused bulk OUT endpoint found: 0x03
[  143.348874][ T6633] loop3: detected capacity change from 0 to 512
[  143.352852][ T6494] usb 1-1: Not enough endpoints found in device, aborting!
[  143.413424][ T6629] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  143.430345][ T6629] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  143.446179][ T6629] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  143.456089][ T6629] OCFS2: File system is now read-only.
[  143.461569][ T6629] (syz.1.724,6629,1):ocfs2_search_chain:1785 ERROR: status = -30
[  143.469372][ T6629] (syz.1.724,6629,1):ocfs2_search_chain:1871 ERROR: status = -30
[  143.477712][ T6629] (syz.1.724,6629,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  143.486771][ T6629] (syz.1.724,6629,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  143.495477][ T6629] (syz.1.724,6629,1):__ocfs2_claim_clusters:2355 ERROR: status = -30
[  143.504598][ T6629] (syz.1.724,6629,1):__ocfs2_claim_clusters:2363 ERROR: status = -30
[  143.512792][ T6629] (syz.1.724,6629,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  143.521420][ T6629] (syz.1.724,6629,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  143.530411][ T6629] (syz.1.724,6629,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  143.539894][ T6629] (syz.1.724,6629,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  143.548860][ T6629] (syz.1.724,6629,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  143.557626][ T6629] (syz.1.724,6629,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  143.567018][ T6629] (syz.1.724,6629,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  143.576152][ T6629] (syz.1.724,6629,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  143.586122][ T6629] (syz.1.724,6629,1):ocfs2_symlink:1911 ERROR: status = -30
[  143.594119][ T6629] (syz.1.724,6629,1):ocfs2_symlink:2065 ERROR: status = -30
[  143.621823][ T6637] netlink: 1 bytes leftover after parsing attributes in process `syz.5.727'.
[  143.652900][ T6405] usb 1-1: USB disconnect, device number 8
[  143.689467][ T6633] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.726: corrupted inode contents
[  143.716127][ T6633] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.726: mark_inode_dirty error
[  143.752966][ T6633] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.726: corrupted inode contents
[  143.769695][ T6633] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.726: mark_inode_dirty error
[  143.784429][ T6633] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.726: corrupted inode contents
[  143.787784][ T4169] (syz-executor,4169,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  143.811528][ T6633] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  143.821158][ T6633] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.726: corrupted inode contents
[  143.835385][ T6633] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.726: mark_inode_dirty error
[  143.847152][ T6633] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  143.859354][ T6633] EXT4-fs (loop3): 1 truncate cleaned up
[  143.865894][ T6633] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  143.894519][ T6645] loop2: detected capacity change from 0 to 128
[  143.901030][ T6633] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.911014][ T4169] ocfs2: Unmounting device (7,1) on (node local)
[  143.954501][ T6645] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  144.002578][ T6645] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.320732][ T6655] loop3: detected capacity change from 0 to 512
[  144.336096][ T6663] loop0: detected capacity change from 0 to 64
[  144.384746][ T6655] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  144.402521][ T6655] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  144.558721][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'.
[  145.015764][ T6682] loop5: detected capacity change from 0 to 32768
[  145.108023][ T6682] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  145.149345][ T6682] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  145.165617][ T6682] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  145.175506][ T6682] OCFS2: File system is now read-only.
[  145.180988][ T6682] (syz.5.741,6682,1):ocfs2_search_chain:1785 ERROR: status = -30
[  145.188789][ T6682] (syz.5.741,6682,1):ocfs2_search_chain:1871 ERROR: status = -30
[  145.197103][ T6682] (syz.5.741,6682,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  145.205620][ T6682] (syz.5.741,6682,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  145.214018][ T6682] (syz.5.741,6682,1):__ocfs2_claim_clusters:2355 ERROR: status = -30
[  145.222129][ T6682] (syz.5.741,6682,1):__ocfs2_claim_clusters:2363 ERROR: status = -30
[  145.231501][ T6682] (syz.5.741,6682,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  145.240181][ T6682] (syz.5.741,6682,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  145.248869][ T6682] (syz.5.741,6682,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  145.258342][ T6682] (syz.5.741,6682,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  145.267189][ T6682] (syz.5.741,6682,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  145.276046][ T6682] (syz.5.741,6682,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  145.285372][ T6682] (syz.5.741,6682,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  145.294486][ T6682] (syz.5.741,6682,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  145.303567][ T6682] (syz.5.741,6682,1):ocfs2_symlink:1911 ERROR: status = -30
[  145.310973][ T6682] (syz.5.741,6682,1):ocfs2_symlink:2065 ERROR: status = -30
[  145.424105][ T4760] (syz-executor,4760,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  145.484200][ T4760] ocfs2: Unmounting device (7,5) on (node local)
[  145.719664][ T6700] loop3: detected capacity change from 0 to 8192
[  145.827953][ T6700] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  145.838985][ T6700] REISERFS (device loop3): using ordered data mode
[  145.846127][ T6700] reiserfs: using flush barriers
[  145.853320][ T6700] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  145.876285][ T6665] loop1: detected capacity change from 0 to 40427
[  145.909688][ T6700] REISERFS (device loop3): checking transaction log (loop3)
[  145.937243][ T6665] F2FS-fs (loop1): invalid crc value
[  145.976043][ T6700] REISERFS (device loop3): Using r5 hash to sort names
[  145.999234][ T6665] F2FS-fs (loop1): Found nat_bits in checkpoint
[  146.012142][ T6700] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  146.031071][ T6695] loop2: detected capacity change from 0 to 32768
[  146.064185][   T26] audit: type=1800 audit(1738772180.703:19): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.748" name="bus" dev="loop3" ino=2 res=0 errno=0
[  146.158802][ T6149] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.179574][ T6149] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  146.186152][ T6697] loop0: detected capacity change from 0 to 32768
[  146.202656][ T6665] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  146.271734][ T6697] (syz.0.745,6697,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  146.343843][ T6697] (syz.0.745,6697,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  146.400493][ T6697] JBD2: Ignoring recovery information on journal
[  146.412919][ T4169] attempt to access beyond end of device
[  146.412919][ T4169] loop1: rw=2049, want=45104, limit=40427
[  146.501730][ T6697] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  146.757022][ T4170] ocfs2: Unmounting device (7,0) on (node local)
[  147.228511][ T6149] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  147.602798][ T6149] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  147.630125][ T6149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.671460][ T6149] usb 6-1: config 0 descriptor??
[  147.734468][ T6149] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  148.088304][ T6741] loop0: detected capacity change from 0 to 40427
[  148.137407][ T6741] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  148.155958][ T6741] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  148.198782][ T6741] F2FS-fs (loop0): Found nat_bits in checkpoint
[  148.225662][ T6757] loop2: detected capacity change from 0 to 32768
[  148.297008][ T6741] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  148.330170][ T6741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  148.348069][ T6757] XFS (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  148.360722][ T6757] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  148.380654][ T6757] XFS (loop2): Mounting V5 Filesystem
[  148.396736][ T6149] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  148.425825][ T6149] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  148.443205][ T6770] loop3: detected capacity change from 0 to 40427
[  148.503717][ T6757] XFS (loop2): Ending clean mount
[  148.519845][ T6757] XFS (loop2): Quotacheck needed: Please wait.
[  148.543430][ T6770] F2FS-fs (loop3): invalid crc value
[  148.613846][ T6770] F2FS-fs (loop3): Found nat_bits in checkpoint
[  148.630148][ T6149] usb 6-1: USB disconnect, device number 5
[  148.729542][ T6757] XFS (loop2): Quotacheck: Done.
[  148.791900][ T6770] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  148.821826][ T6741] attempt to access beyond end of device
[  148.821826][ T6741] loop0: rw=2049, want=80672, limit=40427
[  148.869550][ T6741] attempt to access beyond end of device
[  148.869550][ T6741] loop0: rw=2049, want=81920, limit=40427
[  148.899265][ T6789] loop1: detected capacity change from 0 to 2048
[  148.899795][ T4172] XFS (loop2): Unmounting Filesystem
[  148.950057][ T6741] attempt to access beyond end of device
[  148.950057][ T6741] loop0: rw=2049, want=53248, limit=40427
[  148.968035][ T4171] attempt to access beyond end of device
[  148.968035][ T4171] loop3: rw=2049, want=45104, limit=40427
[  149.029280][ T6789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.265764][ T6741] attempt to access beyond end of device
[  149.265764][ T6741] loop0: rw=2049, want=72936, limit=40427
[  149.466629][ T6796] netlink: 'syz.5.784': attribute type 22 has an invalid length.
[  149.476584][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.5.784'.
[  149.589962][ T4170] attempt to access beyond end of device
[  149.589962][ T4170] loop0: rw=2051, want=53248, limit=40427
[  149.611264][ T4170] attempt to access beyond end of device
[  149.611264][ T4170] loop0: rw=2051, want=69632, limit=40427
[  149.632964][ T4170] attempt to access beyond end of device
[  149.632964][ T4170] loop0: rw=2051, want=81920, limit=40427
[  149.656899][ T4170] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5
[  149.656950][ T4170] F2FS-fs (loop0): Issue discard(7168, 7168, 1536) failed, ret: -5
[  149.683663][ T4170] F2FS-fs (loop0): Issue discard(9728, 9728, 512) failed, ret: -5
[  149.955917][ T6801] loop3: detected capacity change from 0 to 32768
[  150.312814][ T6810] loop1: detected capacity change from 0 to 512
[  150.460643][ T6810] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.791: corrupted inode contents
[  150.521296][ T6810] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.791: mark_inode_dirty error
[  150.609740][ T6810] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.791: corrupted inode contents
[  150.616499][ T6805] loop5: detected capacity change from 0 to 32768
[  150.634529][ T6810] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.791: mark_inode_dirty error
[  150.678108][ T6810] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.791: corrupted inode contents
[  150.727664][ T6805] XFS (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  150.742357][ T6805] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  150.779002][ T6810] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  150.794783][ T6810] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.791: corrupted inode contents
[  150.807971][ T6805] XFS (loop5): Mounting V5 Filesystem
[  150.820423][ T6810] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.791: mark_inode_dirty error
[  150.872094][ T6805] XFS (loop5): Ending clean mount
[  150.879837][ T6810] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  150.890692][ T6805] XFS (loop5): Quotacheck needed: Please wait.
[  150.903730][ T6810] EXT4-fs (loop1): 1 truncate cleaned up
[  150.909409][ T6810] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  150.933609][ T6810] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.942884][ T6836] loop2: detected capacity change from 0 to 2048
[  151.018924][ T6836] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3424, location=3424
[  151.028307][ T6805] XFS (loop5): Quotacheck: Done.
[  151.088052][ T6836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.138338][ T4760] XFS (loop5): Unmounting Filesystem
[  151.269256][ T6842] loop0: detected capacity change from 0 to 4096
[  151.607468][ T6858] loop1: detected capacity change from 0 to 512
[  151.726062][ T6858] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.811908][ T6864] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  151.823880][ T6864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.843847][ T6858] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.875260][ T6858] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  151.892227][ T6858] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  151.967824][ T6858] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.806: Failed to acquire dquot type 0
[  152.182050][ T6874] loop5: detected capacity change from 0 to 1024
[  152.356861][ T6874] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,noauto_da_alloc,jqfmt=vfsold,stripe=0x0000000000000003,noauto_da_alloc,auto_da_alloc=0x0000000000000400,resuid=0x0000000000000000,stripe=0x000000000000000d,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  152.647693][ T6877] loop1: detected capacity change from 0 to 32768
[  152.803671][   T26] audit: type=1800 audit(1738772187.443:20): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.814" name="file1" dev="loop1" ino=4 res=0 errno=0
[  152.986437][ T6881] loop5: detected capacity change from 0 to 8192
[  153.003828][ T6866] loop2: detected capacity change from 0 to 40427
[  153.003933][ T6875] loop0: detected capacity change from 0 to 32768
[  153.011163][ T6868] loop3: detected capacity change from 0 to 32768
[  153.088073][ T6866] F2FS-fs (loop2): invalid crc value
[  153.089534][ T6881] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  153.128783][ T6881] REISERFS (device loop5): using ordered data mode
[  153.140606][ T6881] reiserfs: using flush barriers
[  153.161580][ T6866] F2FS-fs (loop2): Found nat_bits in checkpoint
[  153.170859][ T6881] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  153.186922][ T6868] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  153.186947][ T6868] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  153.187630][ T6868] XFS (loop3): Mounting V5 Filesystem
[  153.210586][ T6875] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  153.213126][ T6881] REISERFS (device loop5): checking transaction log (loop5)
[  153.269792][ T6881] REISERFS (device loop5): Using r5 hash to sort names
[  153.279871][ T6881] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  153.306020][   T26] audit: type=1800 audit(1738772187.943:21): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.815" name="bus" dev="loop5" ino=2 res=0 errno=0
[  153.342130][ T6868] XFS (loop3): Ending clean mount
[  153.401879][ T6868] XFS (loop3): Quotacheck needed: Please wait.
[  153.404768][ T4170] (syz-executor,4170,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  153.423304][ T4170] ocfs2: Unmounting device (7,0) on (node local)
[  153.443507][ T6866] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  153.636337][ T6868] XFS (loop3): Quotacheck: Done.
[  153.739115][ T4172] attempt to access beyond end of device
[  153.739115][ T4172] loop2: rw=2049, want=45104, limit=40427
[  153.894433][ T4171] XFS (loop3): Unmounting Filesystem
[  154.211936][ T6900] loop1: detected capacity change from 0 to 32768
[  154.307838][ T6910] loop2: detected capacity change from 0 to 128
[  154.452036][ T6906] loop0: detected capacity change from 0 to 32768
[  154.538474][ T6906] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.818 (6906)
[  154.618869][ T6906] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  154.658119][ T6906] BTRFS info (device loop0): setting nodatacow, compression disabled
[  154.680687][ T6906] BTRFS info (device loop0): doing ref verification
[  154.707697][ T6906] BTRFS info (device loop0): turning off barriers
[  154.736201][ T6906] BTRFS info (device loop0): enabling ssd optimizations
[  154.768394][ T6906] BTRFS info (device loop0): using spread ssd allocation scheme
[  154.782430][ T6906] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  154.799000][ T6906] BTRFS info (device loop0): force lzo compression, level 0
[  154.807050][ T6906] BTRFS info (device loop0): turning on sync discard
[  154.814478][ T6906] BTRFS info (device loop0): using free space tree
[  154.821089][ T6906] BTRFS info (device loop0): has skinny extents
[  155.031446][ T6943] loop2: detected capacity change from 0 to 512
[  155.099392][ T6946] loop5: detected capacity change from 0 to 512
[  155.140642][ T6943] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  155.159020][ T6946] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  155.223768][ T6943] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.244576][   T26] audit: type=1800 audit(1738772189.883:22): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.828" name="file1" dev="loop2" ino=15 res=0 errno=0
[  155.310189][ T6946] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.829: corrupted in-inode xattr
[  155.345508][   T26] audit: type=1800 audit(1738772189.883:23): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.828" name="file2" dev="loop2" ino=16 res=0 errno=0
[  155.350758][ T6946] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.829: couldn't read orphan inode 15 (err -117)
[  155.396532][ T6946] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  155.799413][ T6956] loop2: detected capacity change from 0 to 2048
[  155.901319][ T6956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.398690][ T6980] loop0: detected capacity change from 0 to 1024
[  156.850260][ T7000] loop5: detected capacity change from 0 to 256
[  156.926045][ T7000] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  157.290933][ T6998] loop1: detected capacity change from 0 to 32768
[  157.378053][ T7006] tipc: Started in network mode
[  157.391428][ T7006] tipc: Node identity ac14140f, cluster identity 4711
[  157.411716][ T7006] tipc: New replicast peer: 255.255.255.255
[  157.427390][ T7006] tipc: Enabled bearer <udp:syz2>, priority 10
[  157.487758][ T6998] XFS (loop1): Mounting V5 Filesystem
[  157.551690][ T7021] netlink: 'syz.0.858': attribute type 3 has an invalid length.
[  157.562649][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'.
[  157.688616][ T6998] XFS (loop1): Ending clean mount
[  157.731715][ T6998] XFS (loop1): Quotacheck needed: Please wait.
[  157.846384][ T6998] XFS (loop1): Quotacheck: Done.
[  158.036067][ T4169] XFS (loop1): Unmounting Filesystem
[  158.436066][ T7038] loop3: detected capacity change from 0 to 512
[  158.523595][ T6494] tipc: Node number set to 2886997007
[  158.578360][ T7025] loop2: detected capacity change from 0 to 32768
[  158.578877][ T7038] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.604852][ T7017] loop5: detected capacity change from 0 to 32768
[  158.612505][ T7038] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.686009][   T26] audit: type=1800 audit(1738772193.323:24): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.865" name="file1" dev="loop3" ino=15 res=0 errno=0
[  158.768421][ T7025] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  158.842257][ T7046] loop1: detected capacity change from 0 to 4096
[  158.849263][   T26] audit: type=1800 audit(1738772193.323:25): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.865" name="file2" dev="loop3" ino=16 res=0 errno=0
[  158.921100][ T7046] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  159.036194][ T4172] (syz-executor,4172,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  159.099431][ T7046] ntfs3: loop1: failed to convert "c46c" to cp860
[  159.117563][ T4172] ocfs2: Unmounting device (7,2) on (node local)
[  159.605044][ T7063] loop2: detected capacity change from 0 to 128
[  159.680729][ T7063] EXT4-fs (loop2): Test dummy encryption mode enabled
[  159.750508][ T7063] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  159.773334][ T7063] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  159.949257][ T7075] loop3: detected capacity change from 0 to 4096
[  160.003020][ T7079] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  160.021225][ T7075] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  160.058821][ T7063] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  160.059014][ T7075] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  160.126515][ T7075] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  160.190761][ T7075] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  160.318307][ T7075] ntfs: volume version 3.1.
[  160.474943][ T7075] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp737.  You might want to try to use the mount option nls=utf8.
[  160.552502][ T7075] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  160.682889][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'.
[  160.975130][ T7067] loop5: detected capacity change from 0 to 32768
[  161.111630][ T7111] netlink: 'syz.3.893': attribute type 3 has an invalid length.
[  161.142545][ T6494] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  161.150158][ T4835] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  161.172409][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.893'.
[  161.182561][ T7067] XFS (loop5): Mounting V5 Filesystem
[  161.275782][ T7067] XFS (loop5): Ending clean mount
[  161.431273][ T7131] netlink: 108 bytes leftover after parsing attributes in process `syz.1.900'.
[  161.442326][ T4835] usb 1-1: Using ep0 maxpacket: 8
[  161.538235][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'.
[  161.551810][ T4760] XFS (loop5): Unmounting Filesystem
[  161.572712][ T4835] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  161.584652][ T6494] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.607821][ T6494] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.632374][ T4835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  161.643656][ T4835] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  161.659497][ T6494] usb 3-1: config 0 interface 0 has no altsetting 0
[  161.668115][ T6494] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  161.684080][ T4835] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  161.700954][ T6494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.719134][ T4835] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  161.729309][ T4835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.739114][ T6494] usb 3-1: config 0 descriptor??
[  161.914445][ T7134] loop1: detected capacity change from 0 to 40427
[  161.994596][ T7134] F2FS-fs (loop1): invalid crc value
[  162.026980][ T7134] F2FS-fs (loop1): Found nat_bits in checkpoint
[  162.043227][ T4835] usb 1-1: GET_CAPABILITIES returned 0
[  162.051191][ T4835] usbtmc 1-1:16.0: can't read capabilities
[  162.128408][ T7134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  162.193810][ T4169] attempt to access beyond end of device
[  162.193810][ T4169] loop1: rw=2049, want=45104, limit=40427
[  162.214966][ T6494] logitech 0003:046D:C293.0008: unbalanced delimiter at end of report description
[  162.241951][ T6494] logitech 0003:046D:C293.0008: parse failed
[  162.254872][ T6494] logitech: probe of 0003:046D:C293.0008 failed with error -22
[  162.329697][ T7100] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32
[  162.378157][ T6203] usb 1-1: USB disconnect, device number 9
[  162.429423][ T6494] usb 3-1: USB disconnect, device number 5
[  162.779364][ T7153] loop3: detected capacity change from 0 to 2048
[  162.871313][ T7153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.072410][ T6405] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  163.418211][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'.
[  163.432600][ T6405] usb 2-1: config index 0 descriptor too short (expected 37, got 36)
[  163.440772][ T6405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  163.507704][ T7188] tap0: tun_chr_ioctl cmd 1074025678
[  163.522755][ T6405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.549929][ T7188] tap0: group set to 0
[  163.563364][ T6405] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  163.596913][ T6405] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  163.619560][ T6405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.652004][ T6405] usb 2-1: config 0 descriptor??
[  163.669983][ T7194] loop5: detected capacity change from 0 to 164
[  163.751507][ T7194] attempt to access beyond end of device
[  163.751507][ T7194] loop5: rw=524288, want=5657666996, limit=164
[  163.826117][ T7194] attempt to access beyond end of device
[  163.826117][ T7194] loop5: rw=0, want=5657666972, limit=164
[  163.862033][   T26] audit: type=1800 audit(1738772198.493:26): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.927" name="/" dev="loop5" ino=2048 res=0 errno=0
[  164.154583][ T6405] microsoft 0003:045E:07DA.0009: unknown main item tag 0x4
[  164.194747][ T6405] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input10
[  164.301790][ T6405] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  164.362488][ T6405] usb 2-1: USB disconnect, device number 8
[  164.611805][ T7192] loop2: detected capacity change from 0 to 40427
[  164.680918][ T7197] loop3: detected capacity change from 0 to 32768
[  164.720012][ T7192] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  164.753035][ T7192] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  164.786230][ T7192] F2FS-fs (loop2): invalid crc_offset: 33558524
[  164.831506][ T7197] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  164.924166][ T7192] F2FS-fs (loop2): Found nat_bits in checkpoint
[  164.968787][ T7197] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  165.034014][ T7197] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  165.073787][ T7197] OCFS2: File system is now read-only.
[  165.099880][ T7197] (syz.3.928,7197,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  165.131797][ T7208] loop5: detected capacity change from 0 to 32768
[  165.166835][ T7197] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  165.193294][ T7206] loop0: detected capacity change from 0 to 32768
[  165.199820][ T7192] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  165.209486][ T7192] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  165.244786][ T7197] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  165.336399][ T7197] (syz.3.928,7197,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  165.374819][ T7208] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page
[  165.374819][ T7208] 
[  165.413060][ T7208] ERROR: (device loop5): remounting filesystem as read-only
[  165.438403][ T7208] jfs_create: dtInsert returned -EIO
[  165.486946][ T7208] ERROR: (device loop5): jfs_create: 
[  165.486946][ T7208] 
[  165.487815][ T7226] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page
[  165.487815][ T7226] 
[  165.510816][ T4171] ocfs2: Unmounting device (7,3) on (node local)
[  165.617675][ T7230] loop0: detected capacity change from 0 to 8
[  165.982753][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'.
[  166.264137][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.942'.
[  166.710310][ T7255] netlink: 'syz.1.951': attribute type 15 has an invalid length.
[  166.717557][ T7256] loop5: detected capacity change from 0 to 256
[  166.845817][ T7256] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  166.898496][ T7256] FAT-fs (loop5): Filesystem has been set read-only
[  166.946509][ T7256] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  166.982932][ T7256] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  167.148683][ T7266] loop2: detected capacity change from 0 to 4096
[  167.438663][ T7276] loop3: detected capacity change from 0 to 512
[  167.563249][ T7276] EXT4-fs (loop3): inline encryption not supported
[  167.650044][ T7276] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback.
[  167.702520][ T7276] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.767311][ T7276] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.960: corrupted inode contents
[  167.821453][ T7276] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.960: mark_inode_dirty error
[  167.834556][ T7276] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.960: corrupted inode contents
[  167.866325][ T7248] loop0: detected capacity change from 0 to 32768
[  167.894539][ T7288] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.960: corrupted inode contents
[  167.935447][ T7268] loop1: detected capacity change from 0 to 32768
[  167.956673][ T7288] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.960: mark_inode_dirty error
[  168.029870][ T7290] loop5: detected capacity change from 0 to 4096
[  168.032857][ T7268] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  168.063861][ T7248] XFS (loop0): Mounting V5 Filesystem
[  168.075765][ T7290] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  168.080274][ T7288] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.960: corrupted inode contents
[  168.130287][ T7268] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 263
[  168.156486][ T7268] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  168.169505][ T7268] OCFS2: File system is now read-only.
[  168.175812][ T7268] (syz.1.956,7268,1):ocfs2_find_leaf:1933 ERROR: status = -30
[  168.184118][ T7268] (syz.1.956,7268,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  168.192620][ T7268] (syz.1.956,7268,1):ocfs2_get_clusters:624 ERROR: status = -30
[  168.200508][ T7268] (syz.1.956,7268,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  168.209920][ T7268] (syz.1.956,7268,1):ocfs2_read_virt_blocks:981 ERROR: status = -30
[  168.218781][ T7268] (syz.1.956,7268,1):ocfs2_read_dir_block:511 ERROR: status = -30
[  168.226779][ T7268] (syz.1.956,7268,1):ocfs2_find_dir_space_el:3487 ERROR: status = -5
[  168.236508][ T7268] (syz.1.956,7268,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5
[  168.239929][ T7288] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.960: mark_inode_dirty error
[  168.245102][ T7268] (syz.1.956,7268,1):ocfs2_mknod:298 ERROR: status = -5
[  168.245318][ T7268] (syz.1.956,7268,1):ocfs2_mknod:502 ERROR: status = -5
[  168.275348][ T7268] (syz.1.956,7268,1):ocfs2_mkdir:659 ERROR: status = -5
[  168.308695][ T7248] XFS (loop0): Ending clean mount
[  168.324162][ T7288] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #2: comm syz.3.960: corrupted inode contents
[  168.356456][ T7288] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz.3.960: mark_inode_dirty error
[  168.379486][ T4169] ocfs2: Unmounting device (7,1) on (node local)
[  168.509580][ T7306] loop2: detected capacity change from 0 to 128
[  168.528049][ T4170] XFS (loop0): Unmounting Filesystem
[  168.632785][ T7306] VFS: Found a Xenix FS (block size = 512) on device loop2
[  168.736518][ T7306] sysv_free_block: trying to free block not in datazone
[  168.775959][ T7311] sysv_count_free_blocks: free block count was -2041545933, correcting to 5
[  168.805809][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'.
[  168.832417][ T7308] loop5: detected capacity change from 0 to 4096
[  168.889651][ T7308] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  168.891788][ T7311] sysv_count_free_inodes: unable to read inode table
[  169.053306][ T4172] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  169.675146][ T7313] loop1: detected capacity change from 0 to 40427
[  169.686935][ T7326] loop0: detected capacity change from 0 to 256
[  169.772653][ T7313] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  169.817800][ T7313] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  169.892346][ T7313] F2FS-fs (loop1): invalid crc value
[  169.934035][ T7313] F2FS-fs (loop1): Found nat_bits in checkpoint
[  170.010528][ T7324] loop5: detected capacity change from 0 to 32768
[  170.040033][ T7313] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  170.047217][ T7313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  170.123591][ T7324] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.975 (7324)
[  170.139348][ T7334] loop0: detected capacity change from 0 to 64
[  170.181345][ T7324] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  170.209042][ T7324] BTRFS info (device loop5): turning on flush-on-commit
[  170.226621][ T7324] BTRFS info (device loop5): enabling disk space caching
[  170.236286][ T7324] BTRFS info (device loop5): turning off barriers
[  170.247616][ T4822] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  170.250216][ T7324] BTRFS info (device loop5): doing ref verification
[  170.283218][ T7324] BTRFS info (device loop5): enabling auto defrag
[  170.289920][ T7324] BTRFS info (device loop5): force clearing of disk cache
[  170.308279][ T7324] BTRFS info (device loop5): turning on sync discard
[  170.332475][ T7324] BTRFS info (device loop5): using default commit interval 30s
[  170.348916][ T7324] BTRFS info (device loop5): disk space caching is enabled
[  170.368388][ T7324] BTRFS info (device loop5): has skinny extents
[  170.532431][ T4822] usb 4-1: Using ep0 maxpacket: 32
[  170.634238][ T7348] loop0: detected capacity change from 0 to 512
[  170.692727][ T4822] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  170.708744][ T4822] usb 4-1: config 0 has no interface number 0
[  170.735041][ T7324] BTRFS info (device loop5): enabling ssd optimizations
[  170.779562][ T7324] BTRFS info (device loop5): clearing free space tree
[  170.792416][ T7324] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  170.802104][ T7324] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.868789][ T7348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.893903][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.986'.
[  170.925187][ T4822] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  170.959543][ T4822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.990020][ T4822] usb 4-1: Product: syz
[  171.002364][ T4822] usb 4-1: Manufacturer: syz
[  171.020054][ T4822] usb 4-1: SerialNumber: syz
[  171.081485][ T4822] usb 4-1: config 0 descriptor??
[  171.164430][ T4822] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  171.177089][ T7348] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  171.196024][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'.
[  171.347514][ T7348] EXT4-fs (loop0): 1 truncate cleaned up
[  171.363938][ T7348] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback.
[  171.403324][ T4822] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  171.438504][ T4822] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  171.871460][ T4831] usb 4-1: USB disconnect, device number 5
[  171.892314][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108
[  171.901993][ T4831] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  171.938931][ T4831] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  171.992858][ T4831] quatech2 4-1:0.51: device disconnected
[  172.095098][ T7403] loop5: detected capacity change from 0 to 64
[  172.103214][ T7402] loop2: detected capacity change from 0 to 256
[  172.216511][ T7406] loop1: detected capacity change from 0 to 128
[  172.230482][ T4760] hfs: node 4:3 still has 1 user(s)!
[  172.334034][ T7406] FAT-fs (loop1): Directory bread(block 162) failed
[  172.340690][ T7406] FAT-fs (loop1): Directory bread(block 163) failed
[  172.373262][ T7406] FAT-fs (loop1): Directory bread(block 164) failed
[  172.390566][ T7406] FAT-fs (loop1): Directory bread(block 165) failed
[  172.433990][ T7406] FAT-fs (loop1): Directory bread(block 166) failed
[  172.461341][ T7406] FAT-fs (loop1): Directory bread(block 167) failed
[  172.483332][ T7406] FAT-fs (loop1): Directory bread(block 168) failed
[  172.521791][ T7406] FAT-fs (loop1): Directory bread(block 169) failed
[  172.530942][ T7414] kvm [7411]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x40000086 data 0x0
[  172.594673][ T7406] FAT-fs (loop1): Directory bread(block 162) failed
[  172.638840][ T7406] FAT-fs (loop1): Directory bread(block 163) failed
[  172.680462][ T7406] attempt to access beyond end of device
[  172.680462][ T7406] loop1: rw=3, want=232, limit=128
[  172.723021][ T7406] attempt to access beyond end of device
[  172.723021][ T7406] loop1: rw=2051, want=234, limit=128
[  172.755332][ T7422] loop5: detected capacity change from 0 to 128
[  173.032573][ T4614] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  173.164000][ T7435] loop3: detected capacity change from 0 to 2048
[  173.199573][ T7437] loop5: detected capacity change from 0 to 64
[  173.237100][ T7435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.392867][ T4614] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  173.437867][ T4614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.476023][ T4614] usb 3-1: config 0 descriptor??
[  173.541334][ T4614] gspca_main: cpia1-2.14.0 probing 0813:0001
[  173.620533][ T7447] loop1: detected capacity change from 0 to 2048
[  173.720711][ T7447] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.789629][ T7408] loop0: detected capacity change from 0 to 32768
[  173.823705][ T1092] block nbd5: Attempted send on invalid socket
[  173.831357][ T1092] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.862737][  T150] block nbd5: Attempted send on invalid socket
[  173.869013][  T150] blk_update_request: I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.894106][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  173.906066][  T150] block nbd5: Attempted send on invalid socket
[  173.912314][  T150] blk_update_request: I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.924870][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  173.934994][ T7453] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  173.943327][ T7453] UDF-fs: Scanning with blocksize 512 failed
[  173.950148][  T150] block nbd5: Attempted send on invalid socket
[  173.956979][  T150] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.962572][ T4614] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  173.971919][  T150] block nbd5: Attempted send on invalid socket
[  173.981204][  T150] blk_update_request: I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.984423][ T7408] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1002 (7408)
[  173.993600][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  174.019345][  T150] block nbd5: Attempted send on invalid socket
[  174.025972][  T150] blk_update_request: I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.038494][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  174.078783][ T7453] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  174.119315][ T7453] UDF-fs: Scanning with blocksize 1024 failed
[  174.173020][  T150] block nbd5: Attempted send on invalid socket
[  174.179231][  T150] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.197381][ T1092] block nbd5: Attempted send on invalid socket
[  174.204184][ T1092] blk_update_request: I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.207296][ T7458] loop3: detected capacity change from 0 to 16
[  174.222394][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  174.253107][ T7408] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  174.266994][  T150] block nbd5: Attempted send on invalid socket
[  174.267096][ T7458] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  174.274689][  T150] blk_update_request: I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.291742][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  174.308096][ T7453] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  174.316029][ T7408] BTRFS info (device loop0): using free space tree
[  174.358135][ T7408] BTRFS info (device loop0): has skinny extents
[  174.365719][ T7453] UDF-fs: Scanning with blocksize 2048 failed
[  174.402706][ T4614] gspca_cpia1: usb_control_msg 02, error -71
[  174.421202][ T7458] cramfs: Error -3 while decompressing!
[  174.422648][ T4614] gspca_cpia1: usb_control_msg 05, error -71
[  174.433968][ T1092] block nbd5: Attempted send on invalid socket
[  174.440191][ T1092] blk_update_request: I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  174.449967][ T7458] cramfs: ffffffff96bbb258(42)->ffff8880250d3000(4096)
[  174.451612][ T4614] cpia1 3-1:0.0: unexpected systemstate: 00
[  174.460360][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  174.466406][ T4614] usb 3-1: USB disconnect, device number 6
[  174.520476][ T7453] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  174.556411][ T7453] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found
[  174.565771][ T7453] UDF-fs: Scanning with blocksize 4096 failed
[  174.572421][ T7453] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  174.598989][ T7472] loop1: detected capacity change from 0 to 64
[  174.803859][ T7408] BTRFS info (device loop0): enabling ssd optimizations
[  174.931845][ T3081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.061847][ T7493] loop2: detected capacity change from 0 to 1024
[  175.085392][ T3081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.177557][ T7490] loop1: detected capacity change from 0 to 4096
[  175.219168][ T7493] EXT4-fs (loop2): Ignoring removed orlov option
[  175.245436][ T7493] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  175.257556][ T3081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.379424][ T7493] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  175.513528][ T7483] loop5: detected capacity change from 0 to 32768
[  175.560270][ T3081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.794066][ T7483] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  175.865959][ T7483] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 263
[  175.900234][ T7483] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  175.922000][ T7483] OCFS2: File system is now read-only.
[  175.929998][ T7506] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 263
[  175.960977][ T7483] (syz.5.1029,7483,0):ocfs2_find_leaf:1933 ERROR: status = -30
[  175.979938][ T7483] (syz.5.1029,7483,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  176.007245][ T7483] (syz.5.1029,7483,0):ocfs2_get_clusters:624 ERROR: status = -30
[  176.019911][ T7506] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  176.046359][ T7483] (syz.5.1029,7483,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  176.063811][ T7506] (syz.5.1029,7506,0):ocfs2_find_leaf:1933 ERROR: status = -30
[  176.080863][ T7483] (syz.5.1029,7483,0):ocfs2_read_virt_blocks:981 ERROR: status = -30
[  176.096535][ T7498] chnl_net:caif_netlink_parms(): no params data found
[  176.165528][ T7506] (syz.5.1029,7506,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  176.235856][ T7483] (syz.5.1029,7483,0):ocfs2_read_dir_block:511 ERROR: status = -30
[  176.265443][ T7512] loop1: detected capacity change from 0 to 8192
[  176.272491][ T7506] (syz.5.1029,7506,0):ocfs2_fiemap:776 ERROR: status = -30
[  176.287841][ T7483] (syz.5.1029,7483,0):ocfs2_find_dir_space_el:3487 ERROR: status = -5
[  176.325003][ T7483] (syz.5.1029,7483,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5
[  176.352343][ T7483] (syz.5.1029,7483,1):ocfs2_mknod:298 ERROR: status = -5
[  176.359420][ T7483] (syz.5.1029,7483,1):ocfs2_mknod:502 ERROR: status = -5
[  176.438373][ T7512] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  176.446332][ T7483] (syz.5.1029,7483,1):ocfs2_mkdir:659 ERROR: status = -5
[  176.448822][ T7512] REISERFS (device loop1): using ordered data mode
[  176.461693][ T7512] reiserfs: using flush barriers
[  176.469748][ T7514] loop2: detected capacity change from 0 to 4096
[  176.470420][ T7512] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.524271][ T3081] tipc: Disabling bearer <udp:syz2>
[  176.542446][ T3081] tipc: Left network mode
[  176.550134][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.575888][ T7514] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  176.622605][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.643914][ T7498] device bridge_slave_0 entered promiscuous mode
[  176.668781][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.692702][ T7512] REISERFS (device loop1): checking transaction log (loop1)
[  176.719528][ T4760] ocfs2: Unmounting device (7,5) on (node local)
[  176.732539][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.753626][ T7498] device bridge_slave_1 entered promiscuous mode
[  176.922967][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.028336][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.090036][ T7512] REISERFS (device loop1): Using tea hash to sort names
[  177.124737][ T7512] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  177.205059][ T7498] team0: Port device team_slave_0 added
[  177.215776][ T7512] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  177.250758][ T7498] team0: Port device team_slave_1 added
[  177.445285][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.462309][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.462774][ T6203] Bluetooth: hci2: command 0x0409 tx timeout
[  177.500224][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.565312][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.581665][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.690903][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.942180][ T7498] device hsr_slave_0 entered promiscuous mode
[  177.972165][ T7498] device hsr_slave_1 entered promiscuous mode
[  177.992109][ T7498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.021591][ T7498] Cannot create hsr debugfs directory
[  178.203027][ T7567] loop1: detected capacity change from 0 to 512
[  178.424560][ T7567] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  178.462343][ T7567] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  178.521952][ T7567] System zones: 0-2, 18-18, 34-35
[  178.545653][ T3081] device hsr_slave_0 left promiscuous mode
[  178.566964][ T7581] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1055'.
[  178.579784][ T7567] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback.
[  178.594284][ T3081] device hsr_slave_1 left promiscuous mode
[  178.603648][ T3081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.625311][ T7549] loop0: detected capacity change from 0 to 32768
[  178.626272][ T3081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.660190][ T7551] loop5: detected capacity change from 0 to 32768
[  178.668593][ T7567] EXT4-fs (loop1): shut down requested (0)
[  178.677426][ T3081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.696362][ T3081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.721932][ T3081] device bridge_slave_1 left promiscuous mode
[  178.738168][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.767673][ T7549] XFS (loop0): Mounting V5 Filesystem
[  178.781335][ T3081] device bridge_slave_0 left promiscuous mode
[  178.788206][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.819590][ T3081] device veth1_macvtap left promiscuous mode
[  178.826295][ T3081] device veth0_macvtap left promiscuous mode
[  178.832894][ T3081] device veth1_vlan left promiscuous mode
[  178.838717][ T3081] device veth0_vlan left promiscuous mode
[  178.994140][ T7549] XFS (loop0): Ending clean mount
[  179.017665][ T7597] input: syz0 as /devices/virtual/input/input11
[  179.025650][   T26] audit: type=1800 audit(1738772213.663:27): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1045" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  179.190056][ T7601] loop1: detected capacity change from 0 to 128
[  179.238498][ T7601] EXT4-fs (loop1): Ignoring removed nobh option
[  179.295153][ T4170] XFS (loop0): Unmounting Filesystem
[  179.297425][ T7601] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none.
[  179.313005][ T7601] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.351302][ T3081] team0 (unregistering): Port device team_slave_1 removed
[  179.393258][ T3081] team0 (unregistering): Port device team_slave_0 removed
[  179.407763][ T3081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.420533][ T7601] fscrypt (loop1, inode 12): Reserved bits set in encryption policy
[  179.452527][ T3081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.544648][ T4617] Bluetooth: hci2: command 0x041b tx timeout
[  179.630661][ T3081] bond0 (unregistering): Released all slaves
[  179.752564][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'.
[  179.914026][ T7498] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  179.963436][ T7498] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  180.004891][ T7498] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  180.045692][ T7498] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  180.073202][ T7603] loop5: detected capacity change from 0 to 32768
[  180.171646][ T7603] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿ7ˆÛïí«ÞÝ‘ #û»"AVò_N(í*E³r/V?­€œ³Æµ fÈRì7]âq"@ÅÙ÷²" or missing value
[  180.413847][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.476325][ T7498] 8021q: adding VLAN 0 to HW filter on device team0
[  180.512971][  T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.531727][  T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.669719][ T7607] loop1: detected capacity change from 0 to 32768
[  180.687525][  T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.713100][  T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.779676][  T460] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.786835][  T460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.893784][  T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.943587][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.953345][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.970666][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.977823][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.997792][ T7607] XFS (loop1): Mounting V5 Filesystem
[  181.007433][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.025389][ T7609] loop2: detected capacity change from 0 to 32768
[  181.147041][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.162726][ T7609] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1063 (7609)
[  181.234448][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.265313][ T7607] XFS (loop1): Ending clean mount
[  181.303075][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.322092][ T7609] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  181.331786][ T7607] XFS (loop1): Quotacheck needed: Please wait.
[  181.345172][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  181.357070][ T7609] BTRFS info (device loop2): turning on flush-on-commit
[  181.389354][ T7609] BTRFS info (device loop2): enabling disk space caching
[  181.416855][ T7609] BTRFS info (device loop2): turning off barriers
[  181.418470][ T7648] loop5: detected capacity change from 0 to 4096
[  181.441087][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.471960][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.473446][ T7609] BTRFS info (device loop2): doing ref verification
[  181.520593][ T7648] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  181.541881][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  181.568529][ T7607] XFS (loop1): Quotacheck: Done.
[  181.583463][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.595330][ T7609] BTRFS info (device loop2): enabling auto defrag
[  181.601791][ T7609] BTRFS info (device loop2): force clearing of disk cache
[  181.618769][ T7498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  181.633418][ T4179] Bluetooth: hci2: command 0x040f tx timeout
[  181.693381][ T7498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.722357][ T7609] BTRFS info (device loop2): turning on sync discard
[  181.729105][ T7609] BTRFS info (device loop2): using default commit interval 30s
[  181.760989][ T4169] XFS (loop1): Unmounting Filesystem
[  181.778518][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.792925][ T7609] BTRFS info (device loop2): disk space caching is enabled
[  181.800167][ T7609] BTRFS info (device loop2): has skinny extents
[  181.828153][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.129538][ T7631] loop0: detected capacity change from 0 to 32768
[  182.178534][ T7609] BTRFS info (device loop2): enabling ssd optimizations
[  182.215377][ T7609] BTRFS info (device loop2): clearing free space tree
[  182.222960][ T7609] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  182.252395][ T7609] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  182.321152][ T7631] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  182.359276][ T7631] (syz.0.1067,7631,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  182.414392][ T7631] (syz.0.1067,7631,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  182.469730][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.482433][ T7631] (syz.0.1067,7631,0):ocfs2_link:762 ERROR: status = -2
[  182.496777][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.512472][ T7631] (syz.0.1067,7631,0):ocfs2_link:839 ERROR: status = -2
[  182.546312][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.613662][ T4170] ocfs2: Unmounting device (7,0) on (node local)
[  183.209655][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.235716][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.330128][ T7498] device veth0_vlan entered promiscuous mode
[  183.404356][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.423623][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.513032][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.536455][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.546794][ T7713] loop0: detected capacity change from 0 to 256
[  183.606183][ T7498] device veth1_vlan entered promiscuous mode
[  183.627971][ T7683] loop5: detected capacity change from 0 to 32768
[  183.675635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  183.691400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  183.702985][ T4216] Bluetooth: hci2: command 0x0419 tx timeout
[  183.715779][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.728119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.760424][ T7498] device veth0_macvtap entered promiscuous mode
[  183.789642][ T7498] device veth1_macvtap entered promiscuous mode
[  183.849273][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.881611][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.909883][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.939176][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.971506][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.998507][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.036297][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.065041][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.090455][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.131951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  184.153281][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  184.173998][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  184.193432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  184.213342][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.237636][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.278017][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.298260][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.322373][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.352519][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.372502][ T7498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.392381][ T7498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.410907][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.438280][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  184.470176][ T7683] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1074 (7683)
[  184.482786][ T7713] FAT-fs (loop0): bogus number of FAT sectors
[  184.488890][ T7713] FAT-fs (loop0): Can't find a valid FAT filesystem
[  184.496698][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  184.521525][ T7498] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.531062][ T7498] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.540244][ T7498] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.556102][ T7498] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.581664][ T7683] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  184.612779][ T7683] BTRFS info (device loop5): enabling disk space caching
[  184.639767][ T7683] BTRFS info (device loop5): force clearing of disk cache
[  184.662891][ T7683] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  184.742084][ T7683] BTRFS info (device loop5): use lzo compression, level 0
[  184.796502][ T7683] BTRFS info (device loop5): disk space caching is enabled
[  184.825399][ T7683] BTRFS info (device loop5): has skinny extents
[  184.988026][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.023230][ T7505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.031825][ T7505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.052986][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.053016][ T7683] BTRFS info (device loop5): enabling ssd optimizations
[  185.073544][ T7683] BTRFS info (device loop5): clearing free space tree
[  185.082534][ T7683] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.092225][ T7683] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  185.111016][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  185.181328][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.534983][ T7777] loop6: detected capacity change from 0 to 1024
[  185.932903][ T7785] loop1: detected capacity change from 0 to 4096
[  185.998908][ T7785] NILFS (loop1): invalid segment: Checksum error in segment payload
[  186.045940][ T7785] NILFS (loop1): trying rollback from an earlier position
[  186.103535][ T4604] Bluetooth: hci3: command 0x0406 tx timeout
[  186.110132][ T4604] Bluetooth: hci1: command 0x0406 tx timeout
[  186.197038][ T7785] NILFS (loop1): recovery complete
[  186.215652][ T7505] hfsplus: b-tree write err: -5, ino 8
[  186.229043][ T7801] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.324541][ T7804] loop2: detected capacity change from 0 to 128
[  186.507220][ T7804] FAT-fs (loop2): bogus number of reserved sectors
[  186.551232][ T7804] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  186.602202][ T7804] FAT-fs (loop2): Can't find a valid FAT filesystem
[  186.676233][ T7820] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1097'.
[  187.044030][ T7840] netlink: 'syz.5.1108': attribute type 2 has an invalid length.
[  187.075839][ T7846] loop1: detected capacity change from 0 to 256
[  187.088292][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  187.139327][ T7850] loop2: detected capacity change from 0 to 1024
[  187.218535][ T7846] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  187.277410][ T7850] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.1106: Invalid inode table block 0 in block_group 0
[  187.327354][ T7850] EXT4-fs (loop2): get root inode failed
[  187.358494][ T7850] EXT4-fs (loop2): mount failed
[  187.618684][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'.
[  187.710519][ T7886] loop6: detected capacity change from 0 to 524287999
[  187.757582][    C1] print_req_error: 2 callbacks suppressed
[  187.757601][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.774474][    C1] buffer_io_error: 38 callbacks suppressed
[  187.774493][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.791480][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.802476][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.841027][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.852012][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.862865][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.873842][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.895315][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.906272][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.922405][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.933448][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.941629][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.952637][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  187.982356][ T6203] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  187.991842][    C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.002895][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.022712][ T3547] ldm_validate_partition_table(): Disk read failed.
[  188.042824][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.053782][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.075014][    C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.085977][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  188.127183][ T7905] loop1: detected capacity change from 0 to 512
[  188.148386][ T3547] Dev loop6: unable to read RDB block 0
[  188.158819][ T3547]  loop6: unable to read partition table
[  188.178443][ T7886] ldm_validate_partition_table(): Disk read failed.
[  188.208141][ T7886] Dev loop6: unable to read RDB block 0
[  188.217129][ T7905] EXT4-fs (loop1): Ignoring removed nobh option
[  188.223112][ T7886]  loop6: unable to read partition table
[  188.244587][ T7905] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  188.248818][ T7886] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  188.272504][ T6203] usb 1-1: Using ep0 maxpacket: 16
[  188.359754][ T7905] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback.
[  188.465019][ T7905] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.552629][ T6203] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  188.561721][ T6203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.638613][ T7883] loop5: detected capacity change from 0 to 32768
[  188.672939][ T6203] usb 1-1: Product: syz
[  188.677209][ T6203] usb 1-1: Manufacturer: syz
[  188.681828][ T6203] usb 1-1: SerialNumber: syz
[  188.738753][ T6203] usb 1-1: config 0 descriptor??
[  188.795758][ T7930] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  188.849068][ T7883] XFS (loop5): Mounting V5 Filesystem
[  188.960854][ T7930] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  189.086157][ T7883] XFS (loop5): Ending clean mount
[  189.100481][ T7883] XFS (loop5): Quotacheck needed: Please wait.
[  189.170877][ T7883] XFS (loop5): Quotacheck: Done.
[  189.252575][ T6203] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  189.342214][ T6203] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  189.388690][ T6203] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  189.419995][ T6203] usb 1-1: media controller created
[  189.487081][ T6203] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  189.496330][ T4760] XFS (loop5): Unmounting Filesystem
[  189.630760][ T7921] loop6: detected capacity change from 0 to 40427
[  189.665525][ T6203] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  189.693941][ T6203] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  189.849613][ T7921] F2FS-fs (loop6): Found nat_bits in checkpoint
[  189.890665][ T7932] loop2: detected capacity change from 0 to 32768
[  189.939637][ T6203] usb 1-1: USB disconnect, device number 10
[  190.012209][ T7921] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  190.021885][ T6203] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  190.053564][ T7932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1132 (7932)
[  190.128736][ T7932] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  190.157624][ T7932] BTRFS info (device loop2): using free space tree
[  190.199704][ T7932] BTRFS info (device loop2): has skinny extents
[  190.453184][ T7932] BTRFS info (device loop2): enabling ssd optimizations
[  190.460621][ T7941] loop1: detected capacity change from 0 to 32768
[  190.513024][ T7941] XFS: ikeep mount option is deprecated.
[  190.728042][ T7941] XFS (loop1): Mounting V5 Filesystem
[  190.841622][ T7941] XFS (loop1): Ending clean mount
[  190.916198][ T7993] loop6: detected capacity change from 0 to 16
[  190.923720][ T7941] XFS (loop1): Quotacheck needed: Please wait.
[  190.991039][ T7941] XFS (loop1): Quotacheck: Done.
[  191.003326][ T7993] erofs: (device loop6): mounted with root inode @ nid 36.
[  191.091140][ T4169] XFS (loop1): Unmounting Filesystem
[  191.410865][ T8005] loop0: detected capacity change from 0 to 2048
[  191.645680][ T8010] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.659113][ T8007] loop6: detected capacity change from 0 to 32768
[  191.720264][ T8007] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.1148 (8007)
[  191.971651][ T8007] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  191.981631][ T8007] BTRFS info (device loop6): force zlib compression, level 3
[  191.990244][ T8007] BTRFS info (device loop6): force clearing of disk cache
[  191.997494][ T8007] BTRFS info (device loop6): setting nodatasum
[  192.004064][ T8007] BTRFS info (device loop6): enabling disk space caching
[  192.011110][ T8007] BTRFS info (device loop6): disk space caching is enabled
[  192.019016][ T8007] BTRFS info (device loop6): has skinny extents
[  192.258428][ T8009] loop5: detected capacity change from 0 to 32768
[  192.357262][ T8033] loop0: detected capacity change from 0 to 128
[  192.378739][ T8007] BTRFS info (device loop6): enabling ssd optimizations
[  192.390330][ T8009] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1149 (8009)
[  192.403905][ T8007] BTRFS info (device loop6): clearing free space tree
[  192.410750][ T8007] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  192.422175][ T8007] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  192.539743][ T8007] BTRFS warning (device loop6): get dev_stats failed, device not found
[  192.550010][ T8009] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  192.600582][ T8009] BTRFS info (device loop5): enabling disk space caching
[  192.620829][ T8009] BTRFS info (device loop5): force clearing of disk cache
[  192.651274][ T8009] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  192.698607][ T8009] BTRFS info (device loop5): use lzo compression, level 0
[  192.736878][ T8009] BTRFS info (device loop5): disk space caching is enabled
[  192.782195][ T8009] BTRFS info (device loop5): has skinny extents
[  192.804094][ T8047] tipc: Started in network mode
[  192.809368][ T8047] tipc: Node identity ac1414aa, cluster identity 4711
[  192.913603][ T8047] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  193.247253][ T8009] BTRFS info (device loop5): enabling ssd optimizations
[  193.250344][ T8078] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  193.294002][ T8009] BTRFS info (device loop5): clearing free space tree
[  193.300962][ T8009] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  193.326875][ T8009] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  193.424537][ T8082] loop1: detected capacity change from 0 to 512
[  193.502581][ T8082] EXT4-fs (loop1): Ignoring removed bh option
[  193.539821][ T8082] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  193.670761][ T8082] EXT4-fs (loop1): 1 truncate cleaned up
[  193.706783][ T8082] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  193.946497][ T8082] EXT4-fs (loop1): shut down requested (2)
[  193.989972][ T8055] loop0: detected capacity change from 0 to 32768
[  194.197576][ T8055] XFS (loop0): Mounting V5 Filesystem
[  194.294167][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.300546][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.387810][ T8055] XFS (loop0): Ending clean mount
[  194.398869][ T8055] XFS (loop0): Quotacheck needed: Please wait.
[  194.429732][ T8114] tap0: tun_chr_ioctl cmd 1074025678
[  194.430328][ T8117] loop2: detected capacity change from 0 to 512
[  194.444710][ T8114] tap0: group set to 0
[  194.534268][ T8117] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  194.558984][ T8117] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.570827][ T8055] XFS (loop0): Quotacheck: Done.
[  194.621954][ T8117] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.1172: invalid size
[  194.789415][ T4170] XFS (loop0): Unmounting Filesystem
[  194.840224][ T8131] device wlan0 entered promiscuous mode
[  194.868071][ T8131] device macvtap1 entered promiscuous mode
[  195.421337][ T8151] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1186'.
[  195.473599][ T8151] netlink: 89 bytes leftover after parsing attributes in process `syz.1.1186'.
[  195.604500][ T8129] loop6: detected capacity change from 0 to 32768
[  195.649861][ T8129] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1175 (8129)
[  195.651301][ T8164] loop1: detected capacity change from 0 to 256
[  195.761269][ T8129] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  195.786856][ T8164] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18ba6, utbl_chksum : 0xe619d30d)
[  195.789056][ T8129] BTRFS info (device loop6): using free space tree
[  195.842717][ T8129] BTRFS info (device loop6): has skinny extents
[  195.875395][ T4831] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  196.132388][ T4831] usb 1-1: Using ep0 maxpacket: 16
[  196.222656][ T8129] BTRFS info (device loop6): enabling ssd optimizations
[  196.272433][ T4831] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  196.280842][ T4831] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  196.293018][ T4831] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  196.301245][ T4831] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  196.310138][ T4831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  196.320384][ T4831] usb 1-1: config 0 has no interface number 0
[  196.327224][ T4831] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  196.338883][ T4831] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  196.349750][ T4831] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  196.370068][ T4831] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  196.392309][ T4831] usb 1-1: config 0 interface 125 has no altsetting 0
[  196.402671][ T4831] usb 1-1: config 0 interface 125 has no altsetting 2
[  196.411626][   T26] audit: type=1800 audit(1738772231.043:28): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1175" name="file1" dev="loop6" ino=260 res=0 errno=0
[  196.592694][ T4831] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  196.612163][ T4831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.691330][ T4831] usb 1-1: Product: syz
[  196.734616][ T4831] usb 1-1: Manufacturer: syz
[  196.739381][ T4831] usb 1-1: SerialNumber: syz
[  196.792217][ T4831] usb 1-1: config 0 descriptor??
[  196.834727][ T4831] usb 1-1: selecting invalid altsetting 2
[  197.072895][    C1] usb 1-1: async_complete: urb error -71
[  197.078893][    C1] usb 1-1: async_complete: urb error -71
[  197.084649][    C1] usb 1-1: async_complete: urb error -71
[  197.091176][    C1] usb 1-1: async_complete: urb error -71
[  197.099483][ T4831] get_1284_register: usb error -71
[  197.104723][ T4831] uss720: probe of 1-1:0.125 failed with error -71
[  197.141696][ T4831] usb 1-1: USB disconnect, device number 11
[  197.768356][ T8272] loop5: detected capacity change from 0 to 128
[  197.899865][ T8272] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  197.946950][ T8272] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  198.074406][ T8283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1220'.
[  198.075232][ T8287] xt_NFQUEUE: number of total queues is 0
[  198.429015][ T8298] bridge0: port 3(vlan0) entered blocking state
[  198.472380][ T8298] bridge0: port 3(vlan0) entered disabled state
[  198.490294][ T8298] device vlan0 entered promiscuous mode
[  198.511461][ T8298] bridge0: port 3(vlan0) entered blocking state
[  198.517880][ T8298] bridge0: port 3(vlan0) entered forwarding state
[  198.541792][ T8250] loop2: detected capacity change from 0 to 32768
[  198.587514][ T8298] bridge0: mtu less than device minimum
[  198.593404][ T8250] XFS: ikeep mount option is deprecated.
[  198.633720][ T8298] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  198.664136][ T8250] XFS (loop2): Mounting V5 Filesystem
[  198.861915][ T8250] XFS (loop2): Ending clean mount
[  199.070045][ T8328] loop5: detected capacity change from 0 to 1024
[  199.083833][ T8292] loop0: detected capacity change from 0 to 40427
[  199.114250][ T8330] loop1: detected capacity change from 0 to 512
[  199.141445][ T4172] XFS (loop2): Unmounting Filesystem
[  199.202866][ T8330] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  199.226696][ T8292] F2FS-fs (loop0): invalid crc value
[  199.282850][ T8292] F2FS-fs (loop0): Found nat_bits in checkpoint
[  199.316101][ T4474] hfsplus: b-tree write err: -5, ino 4
[  199.525918][ T8292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  199.658361][   T26] audit: type=1800 audit(1738772234.293:29): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1225" name="bus" dev="loop0" ino=10 res=0 errno=0
[  199.724419][ T4170] attempt to access beyond end of device
[  199.724419][ T4170] loop0: rw=2049, want=45104, limit=40427
[  200.383165][ T8376] loop5: detected capacity change from 0 to 256
[  200.516318][ T8376] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  201.089362][ T8263] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  201.241858][ T8408] block nbd2: NBD_DISCONNECT
[  201.243019][ T8371] loop6: detected capacity change from 0 to 32768
[  201.322991][ T8371] XFS: ikeep mount option is deprecated.
[  201.334743][ T8371] XFS: noikeep mount option is deprecated.
[  201.359555][ T8416] loop0: detected capacity change from 0 to 1024
[  201.438536][ T8371] XFS (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  201.448539][ T8371] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  201.475952][ T8371] XFS (loop6): Mounting V5 Filesystem
[  201.506712][ T8416] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none.
[  201.532037][ T8263] usb 6-1: config 0 has no interfaces?
[  201.689656][ T8371] XFS (loop6): Ending clean mount
[  201.695198][ T8263] usb 6-1: New USB device found, idVendor=e74f, idProduct=7698, bcdDevice=38.cc
[  201.709458][ T8263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.727640][ T8263] usb 6-1: Product: syz
[  201.737709][ T8263] usb 6-1: Manufacturer: syz
[  201.746971][ T8263] usb 6-1: SerialNumber: syz
[  201.772107][ T8371] XFS (loop6): Quotacheck needed: Please wait.
[  201.780793][ T8263] usb 6-1: config 0 descriptor??
[  201.960986][ T8371] XFS (loop6): Quotacheck: Done.
[  202.018210][ T8449] sctp: [Deprecated]: syz.1.1270 (pid 8449) Use of int in maxseg socket option.
[  202.018210][ T8449] Use struct sctp_assoc_value instead
[  202.077243][ T4615] usb 6-1: USB disconnect, device number 6
[  202.233569][ T7498] XFS (loop6): Unmounting Filesystem
[  202.375731][ T8462] loop0: detected capacity change from 0 to 1024
[  202.468014][ T8429] loop2: detected capacity change from 0 to 32768
[  202.537452][ T8429] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1267 (8429)
[  202.667760][ T8429] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  202.710717][ T8429] BTRFS info (device loop2): enabling disk space caching
[  202.763324][ T8429] BTRFS info (device loop2): force clearing of disk cache
[  202.807740][ T8429] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  202.860721][ T4227] hfsplus: b-tree write err: -5, ino 8
[  202.862472][ T8429] BTRFS info (device loop2): use zstd compression, level 3
[  202.894950][ T8429] BTRFS info (device loop2): disk space caching is enabled
[  202.984147][ T8429] BTRFS info (device loop2): has skinny extents
[  202.990334][ T8486] loop1: detected capacity change from 0 to 16
[  203.064035][ T8486] erofs: (device loop1): mounted with root inode @ nid 36.
[  203.152465][ T6202] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  203.340583][ T8520] loop6: detected capacity change from 0 to 1024
[  203.368816][ T8429] BTRFS info (device loop2): enabling ssd optimizations
[  203.378169][ T8522] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  203.404955][ T6202] usb 6-1: Using ep0 maxpacket: 8
[  203.410534][ T8429] BTRFS info (device loop2): clearing free space tree
[  203.422629][ T8429] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  203.457852][ T8429] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  203.526036][ T6202] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  203.543532][ T6202] usb 6-1: config 179 has no interface number 0
[  203.571263][ T6202] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  203.622186][ T6202] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  203.658570][ T6202] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  203.720998][ T6202] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  203.762739][ T6202] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  203.838939][ T6202] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  203.880957][ T6202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.953072][ T8482] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  204.484685][ T6151] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  204.522968][ T6152] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input13
[  204.660702][ T6152] usb 6-1: USB disconnect, device number 7
[  204.672363][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  204.680708][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  204.697229][ T6152] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  204.737674][ T8543] loop0: detected capacity change from 0 to 32768
[  204.872575][ T6151] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  204.902104][ T6151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.944303][ T6151] usb 2-1: config 0 descriptor??
[  205.023654][ T6151] cp210x 2-1:0.0: cp210x converter detected
[  205.153460][ T8580] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1302'.
[  205.682519][ T6151] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  205.710640][ T6151] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  205.766275][ T6151] usb 2-1: cp210x converter now attached to ttyUSB0
[  205.823635][ T6151] usb 2-1: USB disconnect, device number 9
[  205.851913][ T6151] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  205.911965][ T6151] cp210x 2-1:0.0: device disconnected
[  206.388803][ T8625] netlink: 'syz.2.1314': attribute type 2 has an invalid length.
[  206.588800][ T6151] Bluetooth: hci4: command 0x0406 tx timeout
[  206.680911][ T8636] loop2: detected capacity change from 0 to 512
[  206.730376][ T8638] loop1: detected capacity change from 0 to 64
[  206.799806][ T8638] hfs: unable to locate alternate MDB
[  206.816115][ T8636] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000008,minixdf,,errors=continue. Quota mode: writeback.
[  206.830115][ T8638] hfs: continuing without an alternate MDB
[  206.842819][ T8636] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  206.901793][ T8598] loop6: detected capacity change from 0 to 32768
[  207.009190][ T8598] gfs2: fsid=__Š°"_½z'²˱1Ä	¢ “I¡3ØÆÆåwÕøx9: Trying to join cluster "lock_nolock", "__Š°"_½z'²˱1Ä	¢ “I¡3ØÆÆåwÕøx9"
[  207.042405][ T8598] gfs2: fsid=__Š°"_½z'²˱1Ä	¢ “I¡3ØÆÆåwÕøx9: Now mounting FS (format 1801)...
[  207.182858][ T8602] loop5: detected capacity change from 0 to 40427
[  207.250561][ T8598] gfs2: fsid=__Š°"_½z'²˱1Ä	¢ “I¡3ØÆÆåwÕøx9.s: journal 0 mapped with 16 extents in 0ms
[  207.286314][ T8647] loop1: detected capacity change from 0 to 1024
[  207.306968][ T8602] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  207.352347][ T8602] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  207.459102][ T8602] F2FS-fs (loop5): Found nat_bits in checkpoint
[  207.510941][ T8630] loop0: detected capacity change from 0 to 32768
[  207.568102][ T8647] attempt to access beyond end of device
[  207.568102][ T8647] loop1: rw=2049, want=5780, limit=1024
[  207.599566][ T8657] loop2: detected capacity change from 0 to 2048
[  207.609221][ T8647] buffer_io_error: 24 callbacks suppressed
[  207.609239][ T8647] Buffer I/O error on dev loop1, logical block 2889, lost async page write
[  207.625657][ T8598] gfs2: fsid=__Š°"_½z'²˱1Ä	¢ “I¡3ØÆÆåwÕøx9.s: first mount done, others may mount
[  207.689665][ T8602] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  207.719202][ T8602] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  207.738827][ T8657] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none.
[  207.755557][ T8630] XFS (loop0): Mounting V5 Filesystem
[  207.835079][ T3081] hfsplus: b-tree write err: -5, ino 8
[  208.063867][ T8672] loop1: detected capacity change from 0 to 128
[  208.101966][ T8630] XFS (loop0): Ending clean mount
[  208.116237][ T8672] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  208.158229][ T8630] XFS (loop0): Quotacheck needed: Please wait.
[  208.277053][ T8630] XFS (loop0): Quotacheck: Done.
[  208.367899][ T8672] FAT-fs (loop1): FAT read failed (blocknr 128)
[  208.517448][ T4170] XFS (loop0): Unmounting Filesystem
[  209.004223][ T8698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'.
[  209.040741][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1342'.
[  209.101541][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.254906][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.842356][ T4825] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  210.054867][ T8720] loop0: detected capacity change from 0 to 32768
[  210.092486][ T6405] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  210.132911][ T4825] usb 6-1: Using ep0 maxpacket: 16
[  210.157467][ T8720] read_mapping_page failed!
[  210.199998][ T8727] loop2: detected capacity change from 0 to 32768
[  210.206748][ T8721] loop1: detected capacity change from 0 to 40427
[  210.219664][  T275] read_mapping_page failed!
[  210.230383][  T275] read_mapping_page failed!
[  210.253063][ T8727] XFS: ikeep mount option is deprecated.
[  210.257514][ T8721] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  210.269274][ T8721] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  210.279955][ T8721] F2FS-fs (loop1): invalid crc_offset: 5705724
[  210.286420][ T4825] usb 6-1: config index 0 descriptor too short (expected 65316, got 36)
[  210.288557][ T8721] F2FS-fs (loop1): Found nat_bits in checkpoint
[  210.316283][ T4825] usb 6-1: config 0 has too many interfaces: 255, using maximum allowed: 32
[  210.356961][ T4825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 255
[  210.368322][ T8721] F2FS-fs (loop1): recover fsync data on readonly fs
[  210.371698][ T4825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.387342][ T4825] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.396856][ T8721] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30
[  210.398291][ T4825] usb 6-1: config 0 interface 0 has no altsetting 0
[  210.404828][ T8721] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  210.416493][ T4825] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  210.435117][ T4825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.460214][ T8727] XFS (loop2): Mounting V5 Filesystem
[  210.462603][ T6405] usb 7-1: config 0 has an invalid interface number: 117 but max is 0
[  210.470697][ T4825] usb 6-1: config 0 descriptor??
[  210.479737][ T6405] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.490657][ T6405] usb 7-1: config 0 has no interface number 0
[  210.496909][ T6405] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  210.507740][ T6405] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.550206][ T8727] XFS (loop2): Ending clean mount
[  210.558559][ T8727] XFS (loop2): Quotacheck needed: Please wait.
[  210.645985][ T8727] XFS (loop2): Quotacheck: Done.
[  210.672450][ T6405] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  210.681537][ T6405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.734806][ T6405] usb 7-1: Product: syz
[  210.739019][ T6405] usb 7-1: Manufacturer: syz
[  210.787090][ T6405] usb 7-1: SerialNumber: syz
[  210.824432][ T6405] usb 7-1: config 0 descriptor??
[  210.868784][ T4172] XFS (loop2): Unmounting Filesystem
[  210.975105][ T4825] kye 0003:0458:0138.000A: unknown main item tag 0x0
[  210.983693][ T4825] kye 0003:0458:0138.000A: unknown main item tag 0x0
[  211.006177][ T4825] kye 0003:0458:0138.000A: unknown main item tag 0x0
[  211.014720][ T4825] kye 0003:0458:0138.000A: report_id 915 is invalid
[  211.021379][ T4825] kye 0003:0458:0138.000A: item 0 4 1 8 parsing failed
[  211.033602][ T4825] kye 0003:0458:0138.000A: parse failed
[  211.039207][ T4825] kye: probe of 0003:0458:0138.000A failed with error -22
[  211.051276][ T8751] loop0: detected capacity change from 0 to 64
[  211.250744][ T6152] usb 6-1: USB disconnect, device number 8
[  211.279377][ T8758] syz.0.1363 uses obsolete (PF_INET,SOCK_PACKET)
[  211.330803][ T6405] usb 7-1: USB disconnect, device number 2
[  211.848247][ T8773] program syz.2.1369 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.212553][ T6405] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  212.467903][ T6405] usb 7-1: Using ep0 maxpacket: 16
[  212.527760][   T26] audit: type=1326 audit(1738772247.153:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.5.1384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ac6c3de9 code=0x0
[  212.592525][ T6405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  212.610331][ T6405] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  212.629878][ T6405] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  212.640045][ T6405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.666230][ T6405] usb 7-1: config 0 descriptor??
[  212.821246][ T8803] loop2: detected capacity change from 0 to 32768
[  213.079758][ T8810] loop0: detected capacity change from 0 to 40427
[  213.162523][ T8810] F2FS-fs (loop0): invalid crc value
[  213.164469][ T6405] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[  213.182627][ T6405] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[  213.191734][ T6405] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0
[  213.208773][ T8810] F2FS-fs (loop0): Found nat_bits in checkpoint
[  213.271586][ T8810] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.278767][ T8817] netlink: 'syz.2.1388': attribute type 1 has an invalid length.
[  213.372972][ T8810] attempt to access beyond end of device
[  213.372972][ T8810] loop0: rw=2049, want=77960, limit=40427
[  213.483820][ T4170] attempt to access beyond end of device
[  213.483820][ T4170] loop0: rw=2049, want=45104, limit=40427
[  213.553846][ T8829] loop2: detected capacity change from 0 to 512
[  213.612657][ T6405] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device
[  213.628065][ T6405] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse
[  213.666230][ T6405] kovaplus: probe of 0003:1E7D:2D50.000B failed with error -71
[  213.686972][ T6405] usb 7-1: USB disconnect, device number 3
[  213.767156][ T8829] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  213.781638][ T8829] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.970543][ T8841] loop1: detected capacity change from 0 to 256
[  214.103532][ T8841] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d)
[  214.844655][ T8879] loop2: detected capacity change from 0 to 256
[  214.953396][ T8879] exfat: Deprecated parameter 'utf8'
[  214.958764][ T8883] sctp: [Deprecated]: syz.6.1417 (pid 8883) Use of int in maxseg socket option.
[  214.958764][ T8883] Use struct sctp_assoc_value instead
[  215.019402][ T8885] loop1: detected capacity change from 0 to 22
[  215.040574][ T8879] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  215.061148][ T8885] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  215.122488][ T8885] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  215.505160][ T8862] loop0: detected capacity change from 0 to 40427
[  215.586950][ T8862] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  215.610825][ T8862] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  215.675124][ T8862] F2FS-fs (loop0): Found nat_bits in checkpoint
[  215.779251][ T4828] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  215.788710][ T8873] loop5: detected capacity change from 0 to 32768
[  215.801623][ T8862] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  215.818287][ T8862] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  215.863289][ T8873] XFS: noikeep mount option is deprecated.
[  215.875361][ T8873] XFS: noikeep mount option is deprecated.
[  215.942226][ T8873] XFS (loop5): Mounting V5 Filesystem
[  216.072733][ T4828] usb 3-1: Using ep0 maxpacket: 8
[  216.082067][ T8873] XFS (loop5): Ending clean mount
[  216.123826][ T8896] loop6: detected capacity change from 0 to 32768
[  216.126696][ T8873] XFS (loop5): Quotacheck needed: Please wait.
[  216.151422][ T8890] loop1: detected capacity change from 0 to 40427
[  216.180591][ T8896] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1422 (8896)
[  216.214971][ T4828] usb 3-1: config 4 has an invalid interface number: 244 but max is 0
[  216.228779][ T8890] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1)
[  216.252715][ T4828] usb 3-1: config 4 has no interface number 0
[  216.264370][ T8890] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  216.275190][ T4828] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[  216.282757][ T8873] XFS (loop5): Quotacheck: Done.
[  216.326449][ T8890] F2FS-fs (loop1): invalid crc value
[  216.342550][ T4828] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 25397, setting to 1024
[  216.365683][ T4828] usb 3-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024
[  216.366189][ T8890] F2FS-fs (loop1): Found nat_bits in checkpoint
[  216.376609][ T4828] usb 3-1: config 4 interface 244 has no altsetting 0
[  216.405052][ T8896] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  216.428040][ T8896] BTRFS info (device loop6): turning off barriers
[  216.462357][ T8896] BTRFS info (device loop6): force clearing of disk cache
[  216.484650][ T8896] BTRFS info (device loop6): doing ref verification
[  216.514718][ T8896] BTRFS info (device loop6): using free space tree
[  216.521353][ T8896] BTRFS info (device loop6): has skinny extents
[  216.558367][ T8890] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  216.579536][ T4828] usb 3-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[  216.592923][ T4760] XFS (loop5): Unmounting Filesystem
[  216.620764][ T4828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.651680][ T8890] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  216.654057][ T4828] usb 3-1: Product: syz
[  216.671560][ T4828] usb 3-1: Manufacturer: syz
[  216.675321][ T8890] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  216.677940][ T4828] usb 3-1: SerialNumber: syz
[  216.755360][ T8894] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  216.803682][ T4169] attempt to access beyond end of device
[  216.803682][ T4169] loop1: rw=2049, want=40976, limit=40427
[  216.856951][ T8896] BTRFS info (device loop6): enabling ssd optimizations
[  216.858710][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1426'.
[  216.880947][ T8935] bond0: option ad_select: unable to set because the bond device is up
[  216.890937][ T8896] BTRFS info (device loop6): clearing free space tree
[  216.898063][ T8896] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.908616][ T8896] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  216.933979][ T8896] BTRFS info (device loop6): creating free space tree
[  216.954441][ T8896] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.964470][ T8896] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  216.989596][ T8896] BTRFS info (device loop6): checking UUID tree
[  217.070870][ T8939] loop0: detected capacity change from 0 to 2048
[  217.078320][ T4828] ipheth 3-1:4.244: Unable to find endpoints
[  217.114698][ T4828] usb 3-1: USB disconnect, device number 7
[  217.204588][ T8939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.865561][ T8950] loop2: detected capacity change from 0 to 1024
[  218.081907][ T8950] attempt to access beyond end of device
[  218.081907][ T8950] loop2: rw=2049, want=5780, limit=1024
[  218.096964][ T8950] Buffer I/O error on dev loop2, logical block 2889, lost async page write
[  218.202967][ T4832] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  218.243187][    T9] hfsplus: b-tree write err: -5, ino 8
[  218.467710][ T8965] loop2: detected capacity change from 0 to 512
[  218.602554][ T4832] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.622292][ T4832] usb 7-1: config 0 interface 0 has no altsetting 0
[  218.635112][ T4832] usb 7-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[  218.685394][ T4832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.733646][ T4832] usb 7-1: config 0 descriptor??
[  218.931164][ T8972] loop1: detected capacity change from 0 to 40427
[  218.972708][ T8972] F2FS-fs (loop1): invalid crc value
[  218.993695][ T8972] F2FS-fs (loop1): Found nat_bits in checkpoint
[  219.035356][ T8972] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  219.043286][ T8972] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  219.104805][ T4169] attempt to access beyond end of device
[  219.104805][ T4169] loop1: rw=2049, want=45104, limit=40427
[  219.122665][ T8263] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  219.223469][ T4832] wacom 0003:056A:0003.000C: unknown main item tag 0x0
[  219.230395][ T4832] wacom 0003:056A:0003.000C: unknown main item tag 0x0
[  219.248304][ T4832] wacom 0003:056A:0003.000C: unknown main item tag 0x0
[  219.269915][ T4832] wacom 0003:056A:0003.000C: unknown main item tag 0x0
[  219.285060][ T4832] wacom 0003:056A:0003.000C: unknown main item tag 0x0
[  219.291966][ T4832] wacom 0003:056A:0003.000C: unknown main item tag 0x0
[  219.299477][ T4832] wacom 0003:056A:0003.000C: unknown main item tag 0x0
[  219.310105][ T4832] wacom 0003:056A:0003.000C: Unknown device_type for 'HID 056a:0003'. Assuming pen.
[  219.341090][ T4832] wacom 0003:056A:0003.000C: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.6-1/input0
[  219.353893][ T4832] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0003.000C/input/input15
[  219.382480][ T8263] usb 3-1: Using ep0 maxpacket: 16
[  219.429215][ T8985] loop0: detected capacity change from 0 to 8192
[  219.448044][ T4832] usb 7-1: USB disconnect, device number 4
[  219.517037][ T8263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.555770][ T8263] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  219.584934][ T8263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.631018][ T8263] usb 3-1: config 0 descriptor??
[  219.704136][ T8995] loop5: detected capacity change from 0 to 64
[  219.781325][ T8995] hfs: unable to locate alternate MDB
[  219.813808][ T8995] hfs: continuing without an alternate MDB
[  219.814070][ T8998] input: syz0 as /devices/virtual/input/input18
[  220.059424][ T9001] loop1: detected capacity change from 0 to 512
[  220.149135][ T8263] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  220.248380][ T9015] loop0: detected capacity change from 0 to 128
[  220.307513][ T9015] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  220.318904][ T9015] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.321487][ T9020] loop1: detected capacity change from 0 to 256
[  220.362728][ T8263] usb 3-1: USB disconnect, device number 8
[  220.368446][ T9020] exfat: Deprecated parameter 'namecase'
[  220.433685][ T3506] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  220.439117][ T9020] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  220.588879][ T9024] loop0: detected capacity change from 0 to 64
[  220.723190][ T9028] loop1: detected capacity change from 0 to 64
[  220.773467][ T9024] minix_free_block (loop0:21): bit already cleared
[  220.790903][ T9028] Trying to free block not in datazone
[  220.817275][ T9028] Trying to free block not in datazone
[  220.825272][ T9028] Trying to free block not in datazone
[  220.830896][ T9028] Trying to free block not in datazone
[  220.838802][ T9028] minix_free_block (loop1:6): bit already cleared
[  220.846564][ T9028] Trying to free block not in datazone
[  220.852142][ T9028] Trying to free block not in datazone
[  221.048183][ T3506] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  221.079246][ T3506] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.096400][ T3506] usb 7-1: Product: syz
[  221.100604][ T3506] usb 7-1: Manufacturer: syz
[  221.123342][ T3506] usb 7-1: SerialNumber: syz
[  221.128935][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1466'.
[  221.139385][ T3506] usb 7-1: config 0 descriptor??
[  221.150373][   T26] audit: type=1326 audit(1738772255.783:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.211410][ T9046] loop2: detected capacity change from 0 to 64
[  221.218625][   T26] audit: type=1326 audit(1738772255.833:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.267176][ T3506] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 005
[  221.281939][   T26] audit: type=1326 audit(1738772255.833:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.355750][   T26] audit: type=1326 audit(1738772255.843:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.471085][   T26] audit: type=1326 audit(1738772255.843:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.520506][ T9060] loop1: detected capacity change from 0 to 64
[  221.538592][   T26] audit: type=1326 audit(1738772255.843:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.597030][   T26] audit: type=1326 audit(1738772255.843:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.656071][   T26] audit: type=1326 audit(1738772255.843:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.683124][ T3506]  (null): failure reading functionality
[  221.733347][ T3506] i2c i2c-1: connected i2c-tiny-usb device
[  221.761358][ T9060] minix_free_block (loop1:21): bit already cleared
[  221.761633][   T26] audit: type=1326 audit(1738772255.893:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.827068][   T26] audit: type=1326 audit(1738772255.913:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9043 comm="syz.0.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0ae3e21de9 code=0x7ffc0000
[  221.928240][ T3506] usb 7-1: USB disconnect, device number 5
[  222.343511][ T9090] loop5: detected capacity change from 0 to 512
[  222.474675][ T9090] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1488: Invalid inode bitmap blk 4 in block_group 0
[  222.538147][ T9090] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,journal_ioprio=0x0000000000000005,lazytime,,errors=continue. Quota mode: none.
[  222.617319][ T9069] loop0: detected capacity change from 0 to 32768
[  222.683851][ T9102] loop2: detected capacity change from 0 to 512
[  222.722935][ T9090] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  222.749145][ T9102] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  222.758740][ T9102] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002]
[  222.782519][ T9102] System zones: 0-1, 15-15, 18-18, 34-34
[  222.789398][ T9102] EXT4-fs (loop2): orphan cleanup on readonly fs
[  222.819566][ T9102] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  222.864611][ T9102] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  222.871633][ T9102] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.1492: bad orphan inode 16
[  222.886694][ T9102] EXT4-fs (loop2): Remounting filesystem read-only
[  222.894329][ T9102] ext4_test_bit(bit=15, block=18) = 1
[  222.899973][ T9102] is_bad_inode(inode)=0
[  222.904858][ T9102] NEXT_ORPHAN(inode)=0
[  222.908944][ T9102] max_ino=32
[  222.912155][ T9102] i_nlink=2
[  222.916016][ T9102] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,. Quota mode: writeback.
[  222.960846][ T9102] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  223.074225][ T4172] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0)
[  223.113723][ T4172] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0)
[  328.232219][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  328.239306][    C0] rcu: 	1-...!: (0 ticks this GP) idle=a07/1/0x4000000000000000 softirq=26158/26158 fqs=7 
[  328.251236][    C0] 	(detected by 0, t=10502 jiffies, g=36141, q=313)
[  328.257846][    C0] Sending NMI from CPU 0 to CPUs 1:
[  328.263071][    C1] NMI backtrace for cpu 1
[  328.263082][    C1] CPU: 1 PID: 9097 Comm: syz.6.1490 Not tainted 5.15.178-syzkaller #0
[  328.263100][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  328.263118][    C1] RIP: 0010:enqueue_hrtimer+0x155/0x390
[  328.263153][    C1] Code: d3 10 00 48 83 fd 1f 0f 87 05 01 00 00 e8 a3 cf 10 00 bb 01 00 00 00 89 e9 d3 e3 43 80 3c 27 00 74 08 4c 89 ef e8 eb b7 5a 00 <49> 8b 6d 00 48 83 c5 44 48 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0
[  328.263168][    C1] RSP: 0018:ffffc90000dd0d28 EFLAGS: 00000046
[  328.263183][    C1] RAX: ffffffff816fb5ed RBX: 0000000000000008 RCX: 0000000000000003
[  328.263195][    C1] RDX: 0000000000010000 RSI: 0000000000000003 RDI: 0000000000000020
[  328.263206][    C1] RBP: 0000000000000003 R08: ffffffff816fb5de R09: fffffbfff1c150ee
[  328.263219][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  328.263231][    C1] R13: ffff8880b8f2a400 R14: ffff88801a1b6340 R15: 1ffff110171e5480
[  328.263245][    C1] FS:  00007f67075e56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  328.263261][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  328.263274][    C1] CR2: 00007f68ac8debac CR3: 000000007d6e7000 CR4: 00000000003506e0
[  328.263289][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  328.263299][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  328.263310][    C1] Call Trace:
[  328.263316][    C1]  <NMI>
[  328.263323][    C1]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  328.263342][    C1]  ? read_lock_is_recursive+0x10/0x10
[  328.263361][    C1]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  328.263380][    C1]  ? unknown_nmi_error+0xd0/0xd0
[  328.263406][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  328.263424][    C1]  ? nmi_handle+0xf7/0x370
[  328.263442][    C1]  ? enqueue_hrtimer+0x155/0x390
[  328.263459][    C1]  ? default_do_nmi+0x62/0x150
[  328.263477][    C1]  ? exc_nmi+0xa8/0x100
[  328.263494][    C1]  ? end_repeat_nmi+0x16/0x31
[  328.263513][    C1]  ? enqueue_hrtimer+0x12e/0x390
[  328.263529][    C1]  ? enqueue_hrtimer+0x13d/0x390
[  328.263546][    C1]  ? enqueue_hrtimer+0x155/0x390
[  328.263563][    C1]  ? enqueue_hrtimer+0x155/0x390
[  328.263580][    C1]  ? enqueue_hrtimer+0x155/0x390
[  328.263597][    C1]  </NMI>
[  328.263602][    C1]  <IRQ>
[  328.263609][    C1]  __hrtimer_run_queues+0x6b6/0xcf0
[  328.263636][    C1]  ? hrtimer_interrupt+0x980/0x980
[  328.263653][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  328.263676][    C1]  hrtimer_interrupt+0x392/0x980
[  328.263704][    C1]  __sysvec_apic_timer_interrupt+0x13b/0x4b0
[  328.263728][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  328.263748][    C1]  </IRQ>
[  328.263753][    C1]  <TASK>
[  328.263758][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  328.263776][    C1] RIP: 0010:unwind_next_frame+0xac4/0x1fa0
[  328.263796][    C1] Code: c1 e8 03 80 3c 10 00 74 0f e8 58 ba 91 00 48 ba 00 00 00 00 00 fc ff df 48 89 5c 24 58 49 8b 6f 10 48 8b 44 24 38 0f b6 04 10 <84> c0 0f 85 80 0f 00 00 48 8b 04 24 48 8d 58 f8 41 83 3f 00 74 18
[  328.263810][    C1] RSP: 0018:ffffc90002f2e928 EFLAGS: 00000246
[  328.263825][    C1] RAX: 0000000000000000 RBX: ffffffff8e8b4ff7 RCX: ffffffff8e1f48e0
[  328.263837][    C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc90002f2e9f0
[  328.263849][    C1] RBP: ffffc90002f30000 R08: 0000000000000001 R09: ffffc90002f2ead0
[  328.263862][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1d169fe
[  328.263880][    C1] R13: 1ffffffff1d169fe R14: ffffc90002f28000 R15: ffffc90002f2e9e0
[  328.263902][    C1]  ? unwind_next_frame+0xbb/0x1fa0
[  328.263923][    C1]  ? __alloc_pages+0x272/0x700
[  328.263943][    C1]  ? stack_trace_save+0x1c0/0x1c0
[  328.263961][    C1]  arch_stack_walk+0x10d/0x140
[  328.263983][    C1]  ? __alloc_pages+0x272/0x700
[  328.264002][    C1]  stack_trace_save+0x113/0x1c0
[  328.264021][    C1]  ? stack_trace_snprint+0xe0/0xe0
[  328.264037][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  328.264056][    C1]  ? print_irqtrace_events+0x210/0x210
[  328.264077][    C1]  save_stack+0xf6/0x1e0
[  328.264093][    C1]  ? seqcount_lockdep_reader_access+0x137/0x1e0
[  328.264112][    C1]  ? bad_range+0x77/0x2c0
[  328.264127][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  328.264146][    C1]  ? __reset_page_owner+0x180/0x180
[  328.264162][    C1]  ? get_page_from_freelist+0x3b78/0x3d40
[  328.264180][    C1]  ? __alloc_pages+0x272/0x700
[  328.264203][    C1]  ? print_irqtrace_events+0x210/0x210
[  328.264219][    C1]  ? preempt_count_add+0x8f/0x180
[  328.264240][    C1]  __set_page_owner+0x37/0x300
[  328.264257][    C1]  ? post_alloc_hook+0x104/0x220
[  328.264275][    C1]  get_page_from_freelist+0x3b78/0x3d40
[  328.264318][    C1]  ? __alloc_pages+0x700/0x700
[  328.264333][    C1]  ? __next_zones_zonelist+0xa4/0x130
[  328.264355][    C1]  ? prepare_alloc_pages+0x35d/0x5b0
[  328.264377][    C1]  __alloc_pages+0x272/0x700
[  328.264395][    C1]  ? __rmqueue_pcplist+0x23a0/0x23a0
[  328.264421][    C1]  ? mark_lock+0x98/0x340
[  328.264438][    C1]  alloc_pages_vma+0x39a/0x800
[  328.264456][    C1]  ? mpol_shared_policy_lookup+0x144/0x1e0
[  328.264474][    C1]  shmem_alloc_and_acct_page+0x4d1/0xd10
[  328.264498][    C1]  ? shmem_swapin_page+0x22f0/0x22f0
[  328.264526][    C1]  ? xas_descend+0x219/0x3a0
[  328.264548][    C1]  ? xas_load+0x128/0x140
[  328.264568][    C1]  ? pagecache_get_page+0xd23/0x1010
[  328.264591][    C1]  ? page_cache_prev_miss+0x500/0x500
[  328.264617][    C1]  shmem_getpage_gfp+0x17b1/0x3190
[  328.264652][    C1]  ? shmem_getpage+0xa0/0xa0
[  328.264673][    C1]  shmem_fault+0x1d7/0x700
[  328.264694][    C1]  ? shmem_fallocate+0xfb0/0xfb0
[  328.264711][    C1]  ? filemap_read_page+0x4b0/0x4b0
[  328.264728][    C1]  ? count_memcg_event_mm+0x385/0x3e0
[  328.264754][    C1]  __do_fault+0x139/0x340
[  328.264775][    C1]  handle_mm_fault+0x376f/0x5960
[  328.264809][    C1]  ? numa_migrate_prep+0x1a0/0x1a0
[  328.264833][    C1]  ? follow_page_mask+0xb59/0x13f0
[  328.264861][    C1]  __get_user_pages+0x4ed/0x11d0
[  328.264891][    C1]  ? populate_vma_page_range+0x2a0/0x2a0
[  328.264909][    C1]  ? vm_mmap_pgoff+0x1e5/0x2d0
[  328.264927][    C1]  ? __lock_acquire+0x1ff0/0x1ff0
[  328.264948][    C1]  populate_vma_page_range+0x215/0x2a0
[  328.264969][    C1]  __mm_populate+0x2a5/0x4a0
[  328.264989][    C1]  ? check_vma_flags+0x490/0x490
[  328.265011][    C1]  vm_mmap_pgoff+0x22b/0x2d0
[  328.265032][    C1]  ? account_locked_vm+0xe0/0xe0
[  328.265050][    C1]  ? __lock_acquire+0x1ff0/0x1ff0
[  328.265071][    C1]  ksys_mmap_pgoff+0x13e/0x780
[  328.265087][    C1]  ? print_irqtrace_events+0x210/0x210
[  328.265105][    C1]  ? mmap_region+0x1870/0x1870
[  328.265122][    C1]  ? syscall_enter_from_user_mode+0x2e/0x240
[  328.265141][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  328.265163][    C1]  do_syscall_64+0x3b/0xb0
[  328.265178][    C1]  ? clear_bhb_loop+0x15/0x70
[  328.265194][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  328.265214][    C1] RIP: 0033:0x7f670977bde9
[  328.265242][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.265256][    C1] RSP: 002b:00007f67075e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  328.265272][    C1] RAX: ffffffffffffffda RBX: 00007f6709994fa0 RCX: 00007f670977bde9
[  328.265285][    C1] RDX: b635773f07ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000
[  328.265297][    C1] RBP: 00007f67097fd2a0 R08: ffffffffffffffff R09: 0000000000000000
[  328.265308][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  328.265319][    C1] R13: 0000000000000001 R14: 00007f6709994fa0 R15: 00007fffaecbfca8
[  328.265339][    C1]  </TASK>
[  328.266056][    C0] rcu: rcu_preempt kthread starved for 10488 jiffies! g36141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  329.004228][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  329.014198][    C0] rcu: RCU grace-period kthread stack dump:
[  329.020085][    C0] task:rcu_preempt     state:R  running task     stack:26168 pid:   15 ppid:     2 flags:0x00004000
[  329.030872][    C0] Call Trace:
[  329.034153][    C0]  <TASK>
[  329.037089][    C0]  __schedule+0x12c4/0x45b0
[  329.041603][    C0]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  329.047509][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  329.053427][    C0]  ? __mod_timer+0xa8e/0xeb0
[  329.058030][    C0]  ? release_firmware_map_entry+0x190/0x190
[  329.063929][    C0]  ? mod_timer_pending+0x20/0x20
[  329.068880][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  329.074749][    C0]  schedule+0x11b/0x1f0
[  329.078928][    C0]  schedule_timeout+0x1b9/0x300
[  329.083918][    C0]  ? console_conditional_schedule+0x40/0x40
[  329.089833][    C0]  ? update_process_times+0x200/0x200
[  329.095229][    C0]  ? prepare_to_swait_event+0x321/0x340
[  329.100789][    C0]  rcu_gp_fqs_loop+0x2bf/0x1080
[  329.105656][    C0]  ? dyntick_save_progress_counter+0x230/0x230
[  329.112003][    C0]  ? rcu_gp_init+0x1140/0x1140
[  329.116787][    C0]  ? finish_swait+0xc5/0x1d0
[  329.121387][    C0]  rcu_gp_kthread+0xa4/0x360
[  329.125988][    C0]  ? _raw_spin_unlock+0x40/0x40
[  329.130854][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  329.135979][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  329.141897][    C0]  ? __kthread_parkme+0x15c/0x1c0
[  329.146938][    C0]  kthread+0x3f6/0x4f0
[  329.151022][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  329.156135][    C0]  ? kthread_blkcg+0xd0/0xd0
[  329.160730][    C0]  ret_from_fork+0x1f/0x30
[  329.165167][    C0]  </TASK>
[  329.168182][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  329.174498][    C0] NMI backtrace for cpu 0
[  329.178824][    C0] CPU: 0 PID: 8966 Comm: syz.2.1436 Not tainted 5.15.178-syzkaller #0
[  329.186979][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  329.197049][    C0] Call Trace:
[  329.200336][    C0]  <IRQ>
[  329.203196][    C0]  dump_stack_lvl+0x1e3/0x2d0
[  329.207890][    C0]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  329.213545][    C0]  ? panic+0x860/0x860
[  329.217635][    C0]  nmi_cpu_backtrace+0x46a/0x4a0
[  329.222577][    C0]  ? __wake_up_klogd+0xd5/0x100
[  329.227439][    C0]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  329.233597][    C0]  ? _printk+0xd1/0x120
[  329.237761][    C0]  ? cpu_online+0x1f/0x40
[  329.242094][    C0]  ? panic+0x860/0x860
[  329.246170][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  329.252241][    C0]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  329.258237][    C0]  rcu_check_gp_kthread_starvation+0x1d2/0x240
[  329.264409][    C0]  print_other_cpu_stall+0x137a/0x14d0
[  329.269905][    C0]  ? print_cpu_stall+0x600/0x600
[  329.274853][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[  329.279890][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  329.285106][    C0]  rcu_sched_clock_irq+0xa38/0x1150
[  329.290335][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  329.295206][    C0]  ? hrtimer_run_queues+0x163/0x450
[  329.300418][    C0]  ? account_process_tick+0x232/0x3a0
[  329.305802][    C0]  update_process_times+0x196/0x200
[  329.311029][    C0]  tick_sched_timer+0x386/0x550
[  329.315888][    C0]  ? tick_setup_sched_timer+0x2d0/0x2d0
[  329.321446][    C0]  __hrtimer_run_queues+0x55b/0xcf0
[  329.326672][    C0]  ? hrtimer_interrupt+0x980/0x980
[  329.331790][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  329.337869][    C0]  hrtimer_interrupt+0x392/0x980
[  329.342833][    C0]  __sysvec_apic_timer_interrupt+0x13b/0x4b0
[  329.348822][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  329.354464][    C0]  </IRQ>
[  329.357397][    C0]  <TASK>
[  329.360330][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  329.366442][    C0] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90
[  329.373061][    C0] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 3c d6 0b 00 41 83 e7 01 75 07 e8 d1 d2 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00
[  329.392668][    C0] RSP: 0000:ffffc90004a67720 EFLAGS: 00000293
[  329.398743][    C0] RAX: ffffffff8174b2e4 RBX: 1ffff110171e80b1 RCX: ffff88802bd6d940
[  329.406720][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  329.414693][    C0] RBP: ffffc90004a67850 R08: ffffffff8174b2b4 R09: fffffbfff2131836
[  329.422666][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  329.430642][    C0] R13: ffff8880b8f40588 R14: ffff8880b8e3b380 R15: 0000000000000001
[  329.438622][    C0]  ? smp_call_function_many_cond+0xa84/0xd90
[  329.444608][    C0]  ? smp_call_function_many_cond+0xab4/0xd90
[  329.450607][    C0]  ? invalidate_bh_lrus+0x30/0x30
[  329.455636][    C0]  ? __bread_gfp+0x390/0x390
[  329.460255][    C0]  ? smp_call_function_many+0x30/0x30
[  329.465628][    C0]  ? _raw_spin_lock_irq+0xdb/0x110
[  329.470750][    C0]  ? invalidate_bh_lrus+0x30/0x30
[  329.475775][    C0]  ? __bread_gfp+0x390/0x390
[  329.480371][    C0]  on_each_cpu_cond_mask+0x3b/0x80
[  329.485500][    C0]  invalidate_bdev+0x8a/0xb0
[  329.490098][    C0]  ext4_put_super+0x8e9/0x1060
[  329.494872][    C0]  ? ext4_drop_inode+0x250/0x250
[  329.499815][    C0]  generic_shutdown_super+0x130/0x310
[  329.505197][    C0]  kill_block_super+0x7a/0xe0
[  329.509892][    C0]  deactivate_locked_super+0xa0/0x110
[  329.515270][    C0]  cleanup_mnt+0x44e/0x500
[  329.519693][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  329.524903][    C0]  task_work_run+0x129/0x1a0
[  329.529507][    C0]  do_exit+0x6a3/0x2480
[  329.533683][    C0]  ? put_task_struct+0x80/0x80
[  329.538452][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  329.544452][    C0]  do_group_exit+0x144/0x310
[  329.549056][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  329.554289][    C0]  get_signal+0xc66/0x14e0
[  329.558732][    C0]  arch_do_signal_or_restart+0xc3/0x1890
[  329.564390][    C0]  ? read_lock_is_recursive+0x10/0x10
[  329.569773][    C0]  ? get_sigframe_size+0x10/0x10
[  329.574732][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  329.580723][    C0]  ? exit_to_user_mode_loop+0x39/0x130
[  329.586190][    C0]  exit_to_user_mode_loop+0x97/0x130
[  329.591489][    C0]  exit_to_user_mode_prepare+0xb1/0x140
[  329.597043][    C0]  syscall_exit_to_user_mode+0x5d/0x240
[  329.602599][    C0]  ret_from_fork+0x15/0x30
[  329.607023][    C0] RIP: 0033:0x7f5c5ee6bde9
[  329.611531][    C0] Code: Unable to access opcode bytes at RIP 0x7f5c5ee6bdbf.
[  329.618893][    C0] RSP: 002b:00007f5c5ccd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  329.627315][    C0] RAX: 0000000000000000 RBX: 00007f5c5f084fa0 RCX: 00007f5c5ee6bde9
[  329.635288][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  329.643259][    C0] RBP: 00007f5c5eeed2a0 R08: 0000000000000000 R09: 0000000000000000
[  329.651229][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  329.659201][    C0] R13: 0000000000000001 R14: 00007f5c5f084fa0 R15: 00007fffb42ee398
[  329.667192][    C0]  </TASK>