last executing test programs:

2m33.085840906s ago: executing program 1 (id=516):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0)
write$binfmt_misc(r0, &(0x7f0000000340)="55f7ee03ccaa274c40812d2c2c", 0xd)

2m32.945562893s ago: executing program 2 (id=519):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000680)={[{@stripe={'stripe', 0x3d, 0x992}}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@bsdgroups}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
creat(&(0x7f0000000180)='./file0\x00', 0x18a)

2m32.935183623s ago: executing program 1 (id=520):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000100905810300020500000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x4, 0xf, 0x9, 0x7ff, 0x7fff, 0xf44c, 0x101, 0xc, 0x8, 0xfffc, 0x200, 0x5}}, 0x0, 0x0, 0x0, 0x0})

2m32.515188453s ago: executing program 2 (id=522):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22)
rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0\x00')

2m32.233909066s ago: executing program 2 (id=532):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="4899b6c37864fcfa97bd7000fddbdf25021f00cb", @ANYRES32, @ANYBLOB="08000400"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0xfcff, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x4002}, 0x4000000)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a18, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2m32.055098985s ago: executing program 2 (id=525):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

2m31.407861725s ago: executing program 2 (id=530):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020)

2m30.6802214s ago: executing program 1 (id=536):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, <r1=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m30.614343383s ago: executing program 2 (id=537):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)="321f07b6037397805f59c19e5af3ef6f30", 0x11)

2m30.04566485s ago: executing program 32 (id=537):
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)="321f07b6037397805f59c19e5af3ef6f30", 0x11)

2m30.001736392s ago: executing program 1 (id=540):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

2m29.344754293s ago: executing program 1 (id=542):
r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r1 = dup(r0)
write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xfd, 0x78, 0xa3, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x362, 0x10000, 0x5, 0x38, 0x1, 0x9, 0xe, 0x400}, [{0x3, 0x281, 0xff, 0xff5, 0x5, 0x4, 0x7}]}, 0x78)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2m27.890037392s ago: executing program 1 (id=549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890)

2m27.284191051s ago: executing program 33 (id=549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890)

2m10.868507097s ago: executing program 5 (id=550):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$eJzs3e9rJGcdAPDvTLJ3yV1qUvVFLViLrdxVvc2l8drQF/4A8V1BafGVcA3JJoTbZI9k017CYVN8KwgiWvCNvvKN4B8gSN/4XoRCfS8qitQ7faHQdmRmZ++S7e5l6+1mJPl8YDLzzDM73++TMM8+szPZCeDMejIiLkfEREQ8ExGz5fq0nOKgM+Xb3b1zeyWfksiyl95NIinXdfd1vpxfLF82FdnAuDt7+zeWm83Gdlmeb28m72XZ/pWNzeX1xnpja3Fx4bml55euLV19+Ea+8nJn/vW//PgHv/jGl3/zxdf+eP1vl7+b5/+fLHs9etoxSknxsxZTh9ZNRsT2OIJVZLJoYce1IbafHnM+AAAMlo/3Px4Rny3G/7MxUYzmAAAAgNMk+8pMvJdEZAAAAMCplUbETCRpvbzfd6a8Y/ViRHwyLqTN1k77C2ut3a3VvC5iLmrp2kazcTWminsH5qKW5OWFYvl++dme8mJEPBoRP5qdLsr1lVZzteoPPwAAAOCMuNhz/v+v2TSt18vKg4qTAwAAAEZnruoEAAAAgLFz/g8AAACn31yWDLNZOv5MAAAAgDH45osv5lPWff716qt7uzdar15ZbezcqG/urtRXWts36+ut1nrxnX2bx+2v2Wrd/FJs7d6abzd22vM7e/vXN1u7W+3rG0cegQ0AAACcoEc/89Yfkog4eGF6Kl6YLtadK+tqEdnE4Y0nq8gQGJePdE/Pn8eXB3DyDr+/T1eYB3DyDOnh7KpVnQBQueP+AWjgzTu/G30uAADAeFz61L3r/8UUh67/v7tWaWrAmJXX/5OhvgAEOFUmqk4AqEzn+t8HWUfV2QAnqfagEYCTAjj10kOH+qD7gYa4/n/MrYSJDgUAACo2U0xJWi/PA2YiTev1iEeKxwLWkrWNZuNqRHwsIt6ZrZ3PywvFKxOjeQAAAAAAAAAAAAAAAAAAAAAAAAAYUpYlkQEAAACnWkT61+6TuS7NPj3T+/nAueTfs8U8Il776Us/ubXcbm8v5Ov/cW99+81y/bNVfIIBAAAA9Oqep3fP4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABglO7eub1yN8uy7M7tlZOM+/evRcRcGb+cOjWTMVXMp6IWERf+mcTkodclETExgvgHb0TEY/3iJ3laMVdmcST+uYg0IqZHFT8+YvzoxL84gvhwlr2V9z9f7Xf8pfFkMe9//E2W08Ma3P+l9/q/iQH93yODdlo7Wnz87V/ND4z/RsTjk/37n278JN9fn/hPDdnGV17e3x9Ul/084lK//i85Gmu+vXlzfmdv/8rG5vJ6Y72xtbi48NzS80vXlq7Or200G+XPvjF++Olff3C/9P6H2n/hAf1v0f4Bv/+nh2z/+2/fuvOJzmLPXyZq8bMsu/xU/7//Y/ns8x+O333v+1z5PpCX899h+ua3+8Z/4pe/f2JQbnn7Vwe0f6qn/ed72n95yPY/863v/WnITQGAE7Czt39judlsbFs4vBBz/xdpjHMhmYz431+ejzsrb0USSeQL7xypWq4+sc7C6+UxttzsHm0j2vNvy5OjcSZfUX8EAACMz/1Bf29NUk1CAAAAAAAAAAAAAAAAAAAAcAYd+zVgg6rSiLi/5jvff8C3kfXGPKimqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/TfAAAA//8axdTn")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)

2m9.946412771s ago: executing program 5 (id=629):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

2m8.650005983s ago: executing program 5 (id=639):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x1000595f, 0x10000, 0xfffffffe, 0x51}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0x1, 0x9, 0x0, 0x0)

2m8.318019129s ago: executing program 34 (id=639):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x1000595f, 0x10000, 0xfffffffe, 0x51}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0x1, 0x9, 0x0, 0x0)

4.348559824s ago: executing program 6 (id=1713):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb", 0xd7}], 0x1}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17)

4.275608788s ago: executing program 6 (id=1714):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mlockall(0x7)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
pread64(r0, &(0x7f0000001300)=""/4118, 0x1016, 0x0)

3.849056658s ago: executing program 6 (id=1720):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_connect$cdc_ncm(0x7, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x4b, &(0x7f0000000480)={0x5, 0xf, 0x4b, 0x1, [@generic={0x46, 0x10, 0x2, "e3410bfcd826b21dd939f0939de3b886c5e309aa7a1bced1255322b7e58daa63d568fc076d3cfbc534bee7cc9ab6d022b6d5da3253a559d10befb24bced63eb893e1df"}]}, 0x2, [{0x78, &(0x7f0000000080)=@string={0x78, 0x3, "2d4a82ac515a31f170ca081142d1f48d15849b7efd8f6bd553ae5ac27fb5fb330e3913af0fc9f6c1c2da1dd95ba17c1f59bff9233e044c49c2ed1748adfae11708356709284b3c8e875b6975b89d2908c80cf59ec0edcd76005f88f484fe9426cc2936a1990adb5a7ff8dd1842916d7b987186fa77d9"}}, {0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "cae19786eebf90a61b60e8469cf0b8cdf9d44ce26a3ea7bf8ff4b8d278e7355adef6e8bfd5c4b1bac83d5ed107ca1a1e1e00f8c48a6d913685eda3d7a307dc8247719a15a698ea4d3a3d943ead922011cbd150ae3c3a94e07d1c8275b3cb4b6676a3f9e6e72a844cdabc256dd54a602d52560f746362c6cae3fb48af8a4ec6f4952c83f83cf6ed7ac06840ec1f8027fca54a5fd20fdca41a2b039cbf4e1c642e151980c57f"}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

3.560478022s ago: executing program 0 (id=1724):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(0x3)
socket(0x28, 0x801, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x208080, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

3.38008363s ago: executing program 0 (id=1727):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x200040, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)="3b548c99760cdf41eaa056a5e06abfa5ac7926a4527f57afb69e01dd4a5555392c8b1d65c44b79e8784ac3d3dea7f237f9f252c787", 0x35)

3.226445748s ago: executing program 0 (id=1729):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)

2.998686588s ago: executing program 3 (id=1731):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mbind(&(0x7f0000195000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0xd, 0x0)

2.725888112s ago: executing program 4 (id=1732):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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")
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r0 = open(&(0x7f0000001b80)='.\x00', 0x8000, 0x112)
ioctl$FS_IOC_SETFLAGS(r0, 0xc080661a, &(0x7f00000001c0)=0x20000088)

2.052525813s ago: executing program 4 (id=1733):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.027021954s ago: executing program 0 (id=1734):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xe, 0x0, 0x2}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400), &(0x7f0000000100)=0x8)

1.761987897s ago: executing program 6 (id=1735):
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x82, &(0x7f0000000140)=ANY=[@ANYRES64=0x0], 0x1, 0x424, &(0x7f0000000180)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000080), 0x1, 0x7a2, &(0x7f00000007c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

1.761766507s ago: executing program 0 (id=1736):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x6349, &(0x7f00000007c0)="$eJzs3c1vHGcdB/DfvvqlNDU9VCVCyE3KSylN4qSEQIC2Bzhw6QHlihK5bhWRAkoCSiuLOPKFAyf+AhASR4Q4Ig78AT1w5QYXTkSykUA9MWjs50lmN7tZu7Z31p7PR3JmfvPMrp/xd2dfMjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3/vu91daEXH9Z2nBUsSnohPRjlgo6+WIWFheyut3I+LF2GmOFx5E9OYiytvv/PNcxOsR8dGpiK3t9dVy8cU99uM7f/jbb3/wzNt//X3v/H//eHf8evfu/fI/f7p/kC0GAACA5imKomilj/mn0+f7dt2dAgCmIr/+F0lefuLrX/3z7T/PUn/UarVarZ5CXVWMdr9aRMRG9TblewaH4wHgmNmIj+vuAjWSf6N1I+KZujsBzLRW3R3gSGxtr6+2Ur6t6uvB8m57PhdkIP+N1qPrO8ZNJxk+x2Raj6/N6MTzY/qzMKU+zJKcf3s4/+u77f203lHnPy3j8u/vXvrUODn/znD+Q05O/u2R+TdVzr+7r/w78gcAAAAAgBmW//9/qebjv3MH35Q9edrx3+Up9QEAAAAAAAAADtuBxv+r3tGhjv/XuTpuPeP/AQAAwP6Vn9VLvz71eNm472Irl19rRTw7tD7QMOlimcW6+wEAAAAAAAAAAAAATdLdPYf3WiuiFxHPLi4WRVH+VA3X+3XQ2x93Td9+aLK6n+QBAGDXR6eGruVvRcxHxLX0XX+9xcXFophfWCwWi4W5/H62PzdfLFQ+1+ZpuWyuv4c3xN1+Ud7ZfOV2VZM+L09qH76/8nf1i84eOnZIeumvOaa5prABINl9NdryinTCFMVz4958wAD7/wm0FEt1P66YfXU/TAEAAICjVxRF0Upf5306HfNv190pAGAq8uv/8HGBA9XtMe0Rh3P/arVarVarP1FdVYx2v1pExEb1NuV7BsPxA8AxsxEf190FaiT/RutGxIt1dwKYaa26O8CR2NpeX22lfFvV14M0vns+F2Qg/43Wzu3y7UdNJxk+x2Raj6/N6MTzY/rzwpT6MEty/u3h/K/vtvfTeked/7SMy7+/c8lc8+T8O8P5Dzk5+bdH5t9UOf/uvvLvyB8AAAAAAGZY/v//pUYf/3UFAwAAAAAAAADH29b2+mq+7jUf///siPVc/3ky5fxb+81/Ic3L/1jL+beH8v/S0HqdyvzDt8r9f/ecmX9vr6/+7u6/PpOne81/Ls+00iOrlR4RrfSbWt00PcDGjbDZ6/TL39RrtTvddJpT0Xs3bsatWIsLA+u209/jcfvKQHvZ095A+8WB9u4T7ZcG2nvpeweKhdx+Llbjx3Er3tlpL9vmJmz//IT2YkJ7zr/j+b+Rcv7dyk+Z/2Jqbw1NSw8ftJ/Y76vTUb/nzZuf+8WFo9+ciTaj82jbqsrtO1NDf3b+Js/046d31m6fu3fj7t3bK5EmA0svRpocspx/b+dn7vHz/9nd9vy8X91fHz7o7zv/WbEZ3bH5n63Ml9v7ypT7Voecfz/95PzfSe2j9//jmv/Vs//49Pj9/9UaegQAAAAAAAAAAAAAAABPUxTFziWib0bE5XT9T13XZgIA05Vf/4skL1erG13H0mz1pzF1Z8b6o1afvLqqGO2NahERf6neph0RPx91ZwDALPtfRPy97k5QG/k3WP6+v3L6ct2dAabqzgcf/vDGrVtrt+/U3RMAAAAAAAAA4JPK438uV8Z/fjkilobWGxj/9a1YPuj4n90882iA0UMe6HuMzXa/064MN/5S7IzPfW7c+N9n4snxv/OYuJ3qdozRm9Den9A+N6F9fuTSx2mNvNCjIuf/UmW88zL/00PDr5+M8V+fPv7z8Jj3TZDzP1N5PJf5f3FovWr+xW9mLv+Nva64Ge2B/M/fff8n5+988OFrN9+/8d7ae2s/urSycuHS5ctXrlw5/+7NW2sXdv89ml7PgJx/HvvaeaDNkvPPmcu/WXL+n0+1/Jsl5/+FVMu/WXL++f2e/Jsl558/+8i/WXL+r6Ra/s2S8/9yquXfLFvb63Nl/q+mWv7Nkvf/r6Ra/s2S838t1fJvlpz/uVTLv1ly/udTvYf8fT38CZLzz0e47P/NkvNfSbX8myXnfzHV8m+WnP+lVMu/WXL+r6da/s2S8/9qquXfLDn/y6mWf7Pk/L+Wavk3S87/Sqrl3yw5/6+nWv7NkvP/Rqrl3yw5/6upln+z5Py/mWr5N0vO/1upln+z5Py/nWr5N0vO/41Uy79ZHn//vxkzZszkmbqfmQAAAAAAAAAAAACAYdM4nbjubQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s8OHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3dzFyneUdwM/sh712vgwJwUkNbBITQrLJru3EH7QpJnw2QCmQ0NAPHNe7Nksd23jtEiiSTQMlEkZFFRXpRVtAqI1UVUQVF7SiNBdVP65Ke0FvKtpKSI2qgAIqEq1otppz3vfdmdnZmVnv7PrsOb+fZD87M+fMeefMO2fn2d3/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa3fLGuU83sixr/sv/25FlVze/3ja5I7/udVd6hAAAAMBa/V/+/wvXpSsOD7BSyzJ/98p//Nri4uJi9sjo741/fnEx3TCZZeNbsyy/LXrmP97faF0meCKbaIy0XB7ps/nRPreP9bl9vM/tW/rcvrXP7RN9bl+2A5bZVvw8Jr+z3fmXO4pdmt2Qjee37e6y1hONrSMj8Wc5uUa+zuL48Ww+O5nNZTNtyxfLNvLlv3FLc1tvy+K2Rlq2tas5Q37w8WNxDI2wj3e3bWvpPqPvvSGb/OEPPn7sj889f1O32nc3tN1fMc47bm2O85PhmmKsjWxr2idxnCMt49zV5TkZbRtnI1+v+XXnOF8YcJyjS8PcUJ3P+UQ2kn/9rXw/jbX+WC/tp13huh/flmXZxaVhdy6zbFvZSLa97ZqRpednopiRzftoTqWXZmOrmqe3DDBPm3V2d/s87XxNxOf/lrDe2ApjaH2avveJLcue99XO06j5qFd6rXTOwWG/VsoyB+O8+Fb+oJ/sOgd3h8f/8dtXnoNd506XOZged8scvLXfHBzZMpqPOT0JjXydpTm4p2350XxLjbw+d3vvOTh97rEz0wsf/djd848dPTF3Yu7Uvj17Zvbt33/w4MHp4/Mn52aK/y9zb5ff9mwkvQZuDfsuvgZe07Fs61Rd/NLwXocTPV6HOzqWHfbrcKzzwTU25gW5fE4Xr42Hmjt94tJItsJrLH9+7lz76zA97pbX4VjL67Dr95Qur8Ox9A5s5ddh837P3DnYe5axln/dxrBe3wt2tMzBzvcjnXNw2O9HyjIHJ8K8+Nc7V/5esCuM98mp1b4fGV02B9PDDcee5jXp/f7Ewbx0m5c3N2+4akt2fmHu7D2PHz137uyeLJQNcX3LXOmcr9tbHlO2bL6OrHq+Hp5/5ZM3d7l+R9hXE3c3/5tY8blqLnPvPb2fq/y7W/f92Xbt3iyUIdvo/dntu3lzf6Zessf+bC7zyem1vxdPfWnL8Xd8heNv7PtfLLaX7uqJ0fGx4vU7mvbOeNv7ovanaiw/djXybb8wPdjxeDz82+jj8Q09jsc7O5Yd9vF4vPPBxeNxo99PO9am8/mcCPPk5Ezv43FzmZ17Vzsnx3oej28LtRH2/2tDp5D6opa5s9K8TdsaGxsPj2ssbqF9nu5rW3489GbNbT299/Lm6R23Ffc1mh7dko2ap5Mdyw57nqbj1UrztNHvp2+Xp/P5nAjz4oZ9vedpc5ln7137sXNb/LLl2Lml3xwcH93SHPN4moTF8X5xW5yD92THstPZyWw2v3VLPp8a+bam7htsDm4J/zb6WLmzxxy8o2PZYc/B9H1spbnXGFv+4Ieg8/mcCPPiqft6z8HmMm86MNz3rneEa9IyLe9d85+vtfxgfaWfed3csZvW82dezXH+zYHeP5ttLnPy4Gr7zN776a5wzVVd9lPn63el19RstjH7aWcY5/MHV95PzfE0l/n8oQHn0+Esyy58+IH8573h9yt/fv7bX2v7vUu33+lc+PAD37/m+N+uZvwAbH4vFmV78b2u5TdTg/z+HwAAANgUYt8/Emqi/wcAAIDKiH1//KvwRP8PAAAAlRH7/rFQk5r0/zvf9Pz8ixeylMxfDOLtaTc8WCwXM64z4fLk4pLm9Q98Ze5Hf3lhsG2PZFn2kwd/s+vyOx+M4ypMhnE+8+b265eveGGg7T/68NJyrfn1L4b7j49n0GnQLYI7k2XZN677bL6dyfdfyuuzDz6a1/dcfPKJ5jIvHCoux/Wfu75Y/g9C+Pfw8aNt6z8X9sN3Q515e/f9Edf76qXX7jrwvqXtxfUat16bP+ynPlDcb/ycnM89USwf9/NK4/+rzzz91ebyj7+6+/gvjHQf/9Phfr8S6v+8oli+9TloXo7rfSqMP24vrnfPl7/ZdfzPfLpY/sxbiuUeDTVu/45wefdbnp9v3V+PN462Pa7srcVycfsz3/6d/PZ4f/H+O8c/ceRS2/7onB/P/nNxP9Mdy8fr43aiv+jYfvN+Wudn3P7Tv/1o237ut/1n3vPcK5r327n9uzqWG+1Yv/MTm/7wU5/tur04nsN/dqbt8Rx+d3gdh+0/9YEwH8Pt//vMZ9u2Gz367vbjT1z+izsutD2e6G0/LLb/zOtP5PU/J3/0+1ddfc21F1/V3HdZ9q33FvfXb/sn/uh02/i/dOOd+fMRb48Z/c7tryRu/+xHpk6dXjg/P9uyV/PPznlHMZ6tE9u2N8d7XTi2dl4+cvrcB+fOTs5MzmTZZHU/Qu+yfTnU7xfl4mrXv/Ph8Hze/IVvbL/9nz4Tr/+Xh4rrL729+L71mrDc58L1O4rnb7Gxxu0/dcuN+eu78WxxuS3HPgS7dv/XwYEWDI+/831BnO9nXvbBfD80b8u/b8TX9RrH/53Z4n6+HvbrYvhk5ltvXNpe6/LxsxEuvbd4va95/4XDXHxe/yQ83+/8bnH/cVzx8X4nvI/55s72412cH1+/MNJ5//mneFwMx5PsYnF7XCru70sv3Nh1ePFzSLKLN+WXfzfdz02repgrWfjowvTJ+VPnH58+N7dwbnrhox878tjp86fOHck/y/PIh/qtv3R82p4fn2bn9t+bzWzLsux0NrMBB6z1GX/zq8HGf+bhY7MHZm6fnTt+9Pzxcw+fmTt74tjCwrG52YXbjx4/PveRfuvPz96/Z++hfQf2Tp2Yn73/4KFD+w5NzZ863RxGMag+9s/8+tSps0fyVRbuv/fQnvvuu3dm6rHTs3P3H5iZmTrfb/38e9NUc+3fmDo7d/LoufnH5qYW5j82d/+eQ/v37+37aYCPnTm+MDl99vyp6fMLc2eni8cyeS6/uvm9r9/6VNPCvxXvZzs1ig/iy9511/70+axNX/nEindVLNLxAaLPh8+i+YeXnDk4yOXY94+HmtSk/wcAAIA6iH3/llAT/T8AAABURuz7t4aa6P8BAACgMmLfPxFqUpP+X/5f/n+w/H9xu/z/OuX/Xyxn/v/Mh4tc6WbP/8f8vPx/PVzh/P+aty//L/9fvfz/4Pn5zT5++X/5f5YrW/4/9v3bsqyW/T8AAADUQez7t4ea6P8BAACgMmLff1Woif4fAAAAKiP2/VeHmtSk/5f/Hyj/v7df4Kr6+X/n/6/j+f8rkf+PT478f22sOn//vofaLsr/B/L/8v/y//L/8v+s2fiKt1yp/H/s+68JNalJ/w8AAAB1EPv+a0NN9P8AAABQGbHvvy7URP8PAAAAlRH7/h2hJjXp/+X/nf9f/l/+v9L5/7We/79lMPL/m4Pz//cm/9/HZef/J+T/N2P+f3y449/I/P9i5zfLvvn/vsOX/2ddlO38/7Hvf0moSU36fwAAAKiD2Pe/NNRE/w8AAACVEfv+60NN9P8AAABQGbHvvyHUpCb9v/y//H+58v9fuLu55+X/C/L/hfXI/08M5fz/xVfy/+Ui/9+b/H8fzv9fr/z/kMdfr/P/j7+5c335f7opW/4/9v0vCzWpSf8PAAAAdRD7/htDTfT/AAAAUBmx7395qIn+HwAAACoj9v07Q01q0v/L/8v/ryL/v8X5/+X/W23m/P/A5//vmf8vyP+Xi/x/b/L/fcj/y//L/w+W/+/y5lf+n27Klv+Pff9NoSY16f8BAACgDmLff3Ooif4fAAAAKiP2/T8VaqL/BwAAgMqIff+uUJOa9P/y//L/5Tr/v/z/euf/79oi/y//X23y/73J//ch/y//L/9/erY5Cfue/3+51eT/t/a7MyqjbPn/2Pe/ItSkJv0/AAAA1EHs+18ZaqL/BwAAgMqIff+rQk30/wAAAFAZse+fDDWpSf8v/1+t/P+f/vVTr8rk/+X/+2y/ovn/OA3k/2tO/r83+f8+5P/l/+X/Bzv/fxfO/083Zcv/x77/llCTmvT/AAAAUAex77811ET/DwAAAJUR+/7bQk30/wAAAFAZse/fHWpSk/5f/r9a+f9I/l/+v9f2K5r/T+T/603+v4uWF6n8fx/y//L/tc//x3e/8v8MR9ny/7Hvf3WoSU36fwAAAKiD2PffHmqi/wcAAIDKiH3/a0JN9P8AAABQGbHvvyPUpCb9v/y//L/8v/y//H/37cv/b07y/72tNv+/Rf5f/l/+v2b5f+f/Z7iufP6/eOcWL8e+/7WhJjXp/wEAAKAOYt9/Z6iJ/h8AAAAqI/79ZvF3r/p/AAAAqKLY90+FmtSk/5f/l/+vU/6/If8v/y//X3ny/705/38f8v/y/13HPxGP1D3J/8v/s9yVz/+3X459/92hJjXp/wEAAKAOYt9/T6iJ/h8AAAAqI/b906Em+n8AAACojNj3z4Sa5P3/+BUa1cYpY/5/RP5f/t/5/3Py/wX5f/n/1ZD/703+vw/5f/n/qp3/P8vk/7miypb/j33/nlATv/8HAACAyoh9/95QE/0/AAAAVEbs+/eFmuj/AQAAoDJi339vqEn1+v+u+bcy5v8z+X/5f/n/nPx/Qf5f/n815P97k//vQ/5f/r9q+X/n/+cKK1v+P/b994WaVK//BwAAgNqKff/+UBP9PwAAAFRG7PsPhJqE/r/b33UDAAAAm0vs+w+GmtTk9//y/yXK/zfWkP//rb9v23bV8/8jmfx/dsXz/9vk/0OV/y+Xpfx9Pl+rkv/vfFlcNvn/PuT/5f/l/1eT/x9vvSD/Tzdly//Hvv9QqElN+n8AAACog9j3vy7UpG//v3DtOg4LAAAAGKLY9/90qInf/wMAAEBlxL7/Z0JNatL/y/+XKP/v/P855/9fWq/c+X/n/5f/Lyfn/++tUvn/Efl/+f9yjb+G+f828v90s/75//jVYPn/2PffH2pSk/4fAAAA6iD2/T8baqL/BwAAgMqIff/rQ030/wAAAFAZse8/HGpSk/5f/l/+X/5f/n998v+vzzqVMf/fnDzy/9Ui/99bpfL/zv8v/1+y8cv/y/+zXNnO/x/7/jeEmtSk/wcAAIA6iH3/A6Em+n8AAACojNj3vzHURP8PAAAAlRH7/jeFmtSk/5f/l/+X/5f/d/7/7tuX/9+chpn/b7TMbvn/gvy//H8v8v/y//L/dCpb/j/2/W8ONalJ/w8AAAB1EPv+t4Sa6P8BAACgMmLf/9ZQE/0/AAAAVEbs+98WalKT/l/+X/5f/l/+X/6/+/YHzf9n/y7/XyY1Pv//+CALyf/3If8v/y//L//PUJUt/x/7/p8LNalJ/w8AAAB1EPv+B0NN9P8AAABQGbHvf3uoSXv/3+j2990AAADA5hD7/neEmgzy+/9H1mtUG0f+X/6/bvn/Ufl/+X/n/6+0Guf/ByL/34f8v/y//L/8P0NVtvx/7PvfGWri7/8BAACgMmLf//OhJvp/AAAAqIzY978r1ET/DwAAAOW1yg/qi33/L4Sa1KT/l/+X/y9X/n/xQut6zv8v/58NK//fXEn+vxbk/3uT/++jS/5/a/nz/z/ueJou25XOz2/28cv/y/+zXNny/7Hvf3eoSU36fwAAAKiD2Pe/J9RE/w8AAACVEfv+94aa6P8BAACgMmLf/1CoSU36f/n/Wub/00MuX/5//c//L/9f0/y/8//Xhvx/b/L/fTj//5Dy81fL/8v/y/+TK1v+P/b9D4ea1KT/BwAAgDqIff/7Qk30/wAAAFAZse//xVAT/T8AAABURuz7H8nz7/Xr/+X/a5n/L/H5/6uW/x9rmx91yv9PtDyfaV7K/8v/bwD5/942S/5/h/x/1+Ftnvz/Bp//f6Ic41/3/H+YzdtWWF/+nzIqW/7/kXytiez9oSY16f8BAABgE7p+pZ+HrST2/b8UaqL/BwAAgMqIHf8vt13S/wMAAECVxL7/V0JNatL/y//L/8v/O/+/8/933778/+Yk/9/bZsn/O/+//P9mHL/z/8v/s1zZ8v+x7//VUJMVG7/v//cADxMAAAAokdj3fyDUpCa//wcAAIA6iH3/kVAT/T8AAABURuz7Hw01qUn/L//fmf+PZ5CQ/5f/l/+X/5f/34yGl/9/+TVZJv8v/y//L/8v/y//z1qULf8f+/6joSY16f8BAACgDmLf/2uhJvp/AAAAqIzY9x8LNdH/AwAAQGXEvn821KQm/f8VzP+PlzP/7/z/l5v//4n8f56nb84c+X/5/27k/zeG8//3Jv/fRzjM/WQ8y+T/5f/l/+X/Wbuy5f9j3z8XalKT/h8AAAAqLP04OPb9x0NN9P8AAABQGbHvPxFqov8HAACAyoh9/wdDTWrS/5f8/P/XxMvy/+XP/2fy/6s4//9Y2/Ly/wX5f/n/YZD/703+vw/n/5f/l/+X/2eoypb/j33/fKhJTfp/AAAAqIPY938o1ET/DwAA/8/efTTZdV13Hz6AkXpkTzzxyGOPOLQHLvIjeOqZq1zliU1HOgeAztmmcw40nXNSpkTlnHOmMqlIiYqkqqBC91oL3X1vn9uNPt33nL2fZ7JeogDhQmyS+r/wjxugGbn7vzdusf8BAACgGbn7vy9u6WT/z7z/L/p//f9wRv3/hWG4cf79/8Hvr//fo/8/Rv9/Wf+/if5/nP5/A/2//l//r/9nUnPr/3P33xu3dLL/AQAAoAe5+78/brH/AQAAoBm5+38gbrH/AQAAoBm5+38wbulk/+v/9f/r+v+LHfX/w1be/z/4/fX/e/T/3v+fwkp/f2n99zsqCj+y/7/rW+/7Lv2//n+a/v9q/bH+f1Lb/vz6f/0/q+bW/+fu/6G4pZP9DwAAAD3I3f/DcYv9DwAAAM3I3f8jcYv9DwAAAM3I3X9f3NLJ/u+j/1+NP3f7/2u3P0fS//f3/v+g/z/Y/z+i/9f/L9sM3v/f/w8d/b/+//B/vvf/z9C2P7/+X//Pqrn1/7n7fzRu6WT/AwAAQA9y9/9Y3GL/AwAAQDNy9/943GL/AwAAQDNy9/9E3NLJ/u+j/1/l/f+G+/+Lrfb/V7z/f+jXo//X/68zg/7/VD+//l//v/j+/9v1//p//T+3za3/z93/k3FLJ/sfAAAAepC7/6fiFvsfAAAAmpG7/6fjFvsfAAAAmpG7/2filk72v/5f/7+t/j//avP+/8ze/9f/6/8X7sHhwAP8+v9D9P8bbOj/h0H/P+bY/fz6X95yPv8R9P/6f1bNrf/P3f+zccs9w3DlTn+RAAAAwKzk7v+5uKWT3/8HAACAHuTuvx632P8AAADQjNz9N+KWTva//l//39z7//p//b/+v2ve/x93+v7/W77h3u9eZv9/rK7T+/9b7eeX/vmn7/9vfWXo/1m2ufX/ufvvj1s62f8AAADQg9z9Px+32P8AAADQjNz9vxC32P8AAADQjNz9vxi3dLL/9f+t9f9fd+DH7ev/d2sX/f9Y/3+X/v/Q99P/6/+XSP8/zvv/G+z+bW6n/lD/v9fP3/r7nf6/y/f/b33zvv5//N+iof9nnbn1/7n7fylu6WT/AwAAQA9y9/9y3GL/AwAAQDNy9/9K3GL/AwAAQDNy9/9q3NLJ/j+f/n99kK//9/7/vPp/7//r//X/Lei3/9851vfS/2/Qyvv/d/hvjdh2P39a2/78Dfb/3v/n1ObW/+fu/7W4pZP9DwAAAD3I3f/rcYv9DwAAAM3I3f8bcYv9DwAAAM3I3f+bcUsn+9/7//r/ZfT/+TPo//X/Z9//J/3/Mk3f/+99hcy//z8e/f8GrfT/d2jb/fzSP7/+X//Pqrn1/7n7fytu6WT/AwAAQA9y9/923GL/AwAAQDNy9/9O3GL/AwAAQDNy9/9u3NLJ/tf/6/+X0f97/1//7/1//f/x9Pv+//Ho/zfQ/+v/9f/6fyY1t/4/d/8DcUsn+x8AAAB6kLv/9+IW+x8AAACakbv/9+MW+x8AAACakbv/D+KWTva//l//r//X/+v/1//8+v9l0v+P0/9voP/X/+v/9f9Makb9/74fdW34w7ilk/0PAAAAPcjd/0dxi/0PAAAAzcjd/8dxi/0PAAAAzcjd/ydxSyf7X/8/m/5/N+drq//fGYZB/z902v/v7PvzWV+X+n/9/zk4r/4/svQO+v/HH9r7yt2j/9f/j9H/6//1/xw2o/5/949z9/9p3NLJ/gcAAIAe5O7/s7jF/gcAAIBm5O7/87jF/gcAAIBm5O7/i7ilk/2v/59N/7+rrf7f+/+Hvz566v+9/79K/38+vP8/zvv/G+j/9f/6f/0/k5q2/3/61P1/7v6/jJuuXD7FLxIAAACYldz9fxW3dPL7/wAAANCD3P1/HbfY/wAAALBQD6x8S+7+v4lbOtn/+v9p+/8r+75N/6//P/z1of/X/+v/z57+f5z+fwP9v/5f/6//Z1Jze/8/d//fxi2d7H8AAADoQe7+B+MW+x8AAACakbv/7+IW+x8AAACakbv/obilk/2v//f+v/5f/6//X//z6/+XSf8/Tv+/QVP9/6UT/dKHQ/38N+0Mg/7/3Pv/q7f/n/p/luDw/2pbdYL+/+bNm9fPvP/P3f/3cUsn+x8AAAB6kLv/H+IW+x8AAACakbv/H+MW+x8AAABmaOeOflTu/n+KWzrZ//r/Tvv//FJfVv9/Yxj0//p//b/+f5z+f5z+f4Om+v+T23Y/v/TP7/1//T+r5vb+f+7+f45bOtn/AAAA0IPc/f8St9j/AAAA0Izc/f8at9j/AAAA0Izc/f8Wt3Sy//X/nfb/3v/X/+v/z7v/f2rQ/5+LRfT/I//Korn3//fPtv+/qv+fwLb7+cV9/u/4tgN/qP/X/7Nqbv1/7v5/j1s62f8AAADQg9z9/xG32P8AAADQjNz9/xm32P8AAADQjNz9/xU3Xepk/+v/9f/6f/2//n/9z3/O7/9fGYZB/z+BRfT/I+be/0/z/v/hv8pv8/6//n/Jn1//r/9n1dz6/9z9/x23dLL/AQAAoAe5+/8nbrH/AQAAoBm5+/83brH/AQAAoBm5+/8vbulk/+v/9f/6/+n6/wtHfD3o/+PrYVv9//2L6P+9/z8R/f+4efT/R9P/6/+X/Pn1//p/jm9b/X/u/v+PWzrZ/wAAANCD3P3PiFvsfwAAAGhG7v5nxi32PwAAADQjd/+z4pZO9r/+X/9/kv4/P6f+v633/6/Orv+/duA/r5P3//X/E9H/j9P/b6D/1//r/x/Q/zOlub3/n7v/2XFLJ/sfAAAAepC7/zlx6//r1v4HAACAZuTuf27cYv8DAABAM3L3Py9u6WT/6//1/97/1/83//7/nff/B/5FBPr/ZTh9/7/3z0P9v/5f/z9VP3/rU+v/J+z/d4768d7/Z47m1v/n7n84bulk/wMAAEAPcvc/P26x/wEAAKAZuftfELfY/wAAANCM3P2PxC2d7H/9v/5f/6//1//v/Tn0/n8bvP8/7nz6/x39v/6/+vkL8VeB/n8x7//r/5nU3Pr/3P0vjFs62f8AAADQg9z9L4pb7H8AAABoRu7+F8ct9j8AAAAs0qU135a7/yVxSyf7X/+v/9f/6//1/+t/fv3/Mm2l/88vCv2/9/9DP/3/Nx/4o9P28+f9+Q//80v/r/9nenPr/3P3vzRu6WT/AwAAQA9y978sbrH/AQAAoBm5+18et9j/AAAA0Izc/a+IWzrZ//r/ZfT/+ZWp/9f/6//1//r/cd7/H6f/30D/v9X385f++fX/+n9Wza3/z93/yrilk/0PAAAAPcjd/6q4xf4HAACAZuTuf3XcYv8DAABAM3Z3f8ZlHe5//f8y+n/v/+v/9f/6f/3/8ej/x+n/N9D/6//1//p/JjW3/v81uz/q2vDauKWT/Q8AAAA9yN3/urjF/gcAAIBZOvr/VOBouftfH7fY/wAAANCM3P1viFs62f/6f/3/Mvr/mzdvXtf/6/8P/npu9/+P6v8p+v9x+v8N9P/6f/2//p9Jza3/z93/xrilk/0PAAAAPcjd/6a4xf4HAACAZuTuf3PcYv8DAABAM3L3vyVu6WT/6/9n0P9fm0H///ATuz9uvv2/9//1/0f3/9cOfX/9f9/0/+P0/xu02P8f/pvkiG3386e17c+v/9f/s+pg//+N9e3b6v9z9781bulk/wMAAEAPcve/LW6x/wEAAKAZufvfHrfY/wAAANCM3P3viFs62f/6//Pr/2/9d9fL+/87w/rPr//X/5/N+/+Pef+fov8fp//foMX+/wS23c8v/fPr//X/rDrW+/+Xb3/7Wff/ufvfGbccHH6XT/JrBAAAAOYld/+74pZOfv8fAAAAepC7/91xi/0PAAAAzcjd/564pZP9r/+fwfv/Dfb/3v9f//Wh/591/39R/98G/f84/f8G+n/9v/5/ov4/v5r1/707Vv+/73/fnXX/n7v/vXFLJ/sfAAAAepC7/31xi/0PAAAAzcjd//64xf4HAACAZuTufzRu2bf/17XdrdD/6//1//p//f/6n1//v0z6/3HH7f+vDqfr/5P+X/+v/++1//f+P3vm1v/n7v9A3OL3/wEAAGBxLh/x7bn7Pxi32P8AAADQjNz9H4pb7H8AAABoRu7+D8ctT17c1kc6V/p//X+r/f8V/f+RP7/+X//fMv3/OO//b6D/n6Kfv1v/30b/Pwz6f07giL/bzq3/z93/kbjF7/8DAABAM3L3fzRusf8BAACgGbn7Pxa32P8AAADQjNz9j8Utnez/C8NwQ/9/m/7/xP3/bpo5x/7f+/9H//z6f/1/y/T/4/T/G+j/vf+v//f+P5OaW/+fu//xuKWT/Q8AAAA9yN3/8bjF/gcAAIBm5O7/RNxi/wMAAEAzcvd/Mm7pZP9v7f3/+K96r/+/e/Vz6f933fM9V+be/8/2/f/z7v8v7/v8+n/9/zr6//Oh/x+n/99A/6//1//r/5nU3Pr/3P2fils62f8AAADQg9z9n45b7H8AAABoRu7+z8Qt9j8AAAA0I3f/E3FLJ/t/a/1/M+//7wUqHb//r//3/r/+X/8/K/r/cfr/9epPlP5f/6//1/8zqbn1/7n7Pxu3dLL/AQAAoAe5+z8Xt9j/AAAA0Izc/U/GLfY/AAAANCN3/+fjlk72v/5/7u//6//1//p//b/+/yT0/+O22f9/59dv/mm9/7/1/j8/gv5f/6//ZxJz6/9z938hbulk/wMAAEAPcvd/MW6x/wEAAKAZufu/FLfY/wAAANCM3P1fjls62f8b+v+r9R31/6P0/wc/v/5//deH/l//r/8/e/r/cd7/30D/7/1//f8U/f/1Qf9PmFv/n7v/K3FLJ/sfAAAAepC7/6m4xf4HAACAZuTufzpusf8BAACgGbn7vxq3dLL/vf+/pP7/bv2//l//r//X/2+g/x+n/99A/6//1/97/59Jza3/z93/tQAAAP//HTVAaA==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file0\x00', 0x4)

1.421182833s ago: executing program 3 (id=1737):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/mdstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x1775)
pread64(r0, &(0x7f00000001c0)=""/211, 0xd3, 0x8d35)
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

1.369861556s ago: executing program 6 (id=1738):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
truncate(&(0x7f0000000040)='./file1\x00', 0x8800000)
pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

1.251448871s ago: executing program 3 (id=1740):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x16f, @tick=0x7, 0x1, {0x81}, 0xff, 0x0, 0x80})

1.193985364s ago: executing program 4 (id=1741):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x61)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x1, 0x1}]}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000100), 0x6)

1.05395889s ago: executing program 3 (id=1742):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000))
mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0x8000000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.05301869s ago: executing program 4 (id=1743):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

761.966305ms ago: executing program 3 (id=1744):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000300)})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1b, 0xa, 0x2})
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x1, 0xa, 0x2})

553.117954ms ago: executing program 3 (id=1745):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x58, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da363")

450.874219ms ago: executing program 0 (id=1746):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r0], 0x18}, 0x2000c8d0)

205.935871ms ago: executing program 4 (id=1747):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='+=0', 0x3)

32.347879ms ago: executing program 6 (id=1748):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x54, 0x1e7a41)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}})

0s ago: executing program 4 (id=1749):
socket$kcm(0x1e, 0x4, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x0, 0xbed4, 0x8, 0x80000fe, 0x3, 0x0, 0x11000, 0x80000000, 0x2, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x8, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1003, 0x8, 0xffff, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x84, 0x800100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x7, 0x1, 0x0, 0xfffffffd, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
unshare(0x22020600)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

kernel console output (not intermixed with test programs):

unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.860164][ T3525] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.026824][ T7662] loop3: detected capacity change from 0 to 4096
[  164.141120][ T7662] ntfs: volume version 3.1.
[  164.788502][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  164.800384][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  164.810519][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  164.824217][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  164.843478][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  164.852093][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.387637][ T7705] loop4: detected capacity change from 0 to 2048
[  165.449327][ T7707] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances
[  165.477771][ T7705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.571908][ T7705] CacheFiles: Failed to register: -95
[  165.706526][ T7712] Failed to get privilege flags for destination (handle=0x2:0x0)
[  165.876728][ T7717] loop3: detected capacity change from 0 to 256
[  166.050734][ T7717] FAT-fs (loop3): Directory bread(block 64) failed
[  166.066755][ T7717] FAT-fs (loop3): Directory bread(block 65) failed
[  166.099204][ T7717] FAT-fs (loop3): Directory bread(block 66) failed
[  166.139082][ T7717] FAT-fs (loop3): Directory bread(block 67) failed
[  166.151803][ T7717] FAT-fs (loop3): Directory bread(block 68) failed
[  166.158993][ T7717] FAT-fs (loop3): Directory bread(block 69) failed
[  166.167126][ T7717] FAT-fs (loop3): Directory bread(block 70) failed
[  166.175211][ T7717] FAT-fs (loop3): Directory bread(block 71) failed
[  166.181323][ T7710] loop0: detected capacity change from 0 to 40427
[  166.182003][ T7717] FAT-fs (loop3): Directory bread(block 72) failed
[  166.209106][ T7717] FAT-fs (loop3): Directory bread(block 73) failed
[  166.245001][ T7710] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  166.270791][ T7710] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  166.320664][ T7710] F2FS-fs (loop0): invalid crc value
[  166.478207][ T7710] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  166.487135][ T7710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  166.598979][ T7710] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  166.662854][   T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  166.852908][   T27] usb 5-1: Using ep0 maxpacket: 16
[  166.864574][ T7683] chnl_net:caif_netlink_parms(): no params data found
[  166.866486][   T27] usb 5-1: unable to get BOS descriptor or descriptor too short
[  166.899764][   T27] usb 5-1: config 127 has an invalid interface number: 124 but max is 0
[  166.924053][ T5777] Bluetooth: hci2: command tx timeout
[  166.954056][   T27] usb 5-1: config 127 has no interface number 0
[  166.960446][   T27] usb 5-1: config 127 interface 124 has no altsetting 0
[  167.008196][   T27] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  167.033563][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.050704][   T27] usb 5-1: Product: syz
[  167.055570][   T27] usb 5-1: Manufacturer: syz
[  167.060246][   T27] usb 5-1: SerialNumber: syz
[  167.091030][ T7740] loop3: detected capacity change from 0 to 16
[  167.133827][ T7740] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  167.462534][ T3525] hsr_slave_0: left promiscuous mode
[  167.483640][ T3525] hsr_slave_1: left promiscuous mode
[  167.489930][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.502777][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.543555][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.551028][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.592466][ T3525] bridge_slave_1: left allmulticast mode
[  167.606437][ T3525] bridge_slave_1: left promiscuous mode
[  167.624864][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.638391][ T3525] bridge_slave_0: left allmulticast mode
[  167.649582][ T3525] bridge_slave_0: left promiscuous mode
[  167.659478][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.722530][ T3525] veth1_macvtap: left promiscuous mode
[  167.728590][ T3525] veth0_macvtap: left promiscuous mode
[  167.738968][ T3525] veth1_vlan: left promiscuous mode
[  167.749215][ T3525] veth0_vlan: left promiscuous mode
[  168.052755][   T27] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
[  168.287131][   T27] usb 5-1: unable to get BOS descriptor or descriptor too short
[  168.299642][   T27] usb 5-1: device firmware changed
[  168.395851][   T27] usb 5-1: USB disconnect, device number 2
[  168.662054][ T3525] team0 (unregistering): Port device team_slave_1 removed
[  168.718565][ T3525] team0 (unregistering): Port device team_slave_0 removed
[  168.776452][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.831329][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.008151][ T5777] Bluetooth: hci2: command tx timeout
[  169.202784][ T5810] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  169.259919][ T3525] bond0 (unregistering): Released all slaves
[  169.409259][ T5810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  169.433988][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.443916][ T5810] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  169.455658][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.489646][ T5810] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  169.503791][ T7683] bridge_slave_0: entered allmulticast mode
[  169.513675][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.521424][ T7683] bridge_slave_0: entered promiscuous mode
[  169.521746][ T5810] usb 5-1: Product: syz
[  169.539186][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.550658][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.558109][ T5810] usb 5-1: Manufacturer: syz
[  169.558826][ T7683] bridge_slave_1: entered allmulticast mode
[  169.567770][ T5810] usb 5-1: SerialNumber: syz
[  169.574637][ T7772] loop3: detected capacity change from 0 to 64
[  169.583062][ T7683] bridge_slave_1: entered promiscuous mode
[  169.609416][ T5810] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  169.675322][ T5810] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  169.675322][ T5810]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  169.683470][ T7772] hfs: walked past end of dir
[  169.776649][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.891064][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.025686][ T7683] team0: Port device team_slave_0 added
[  170.081680][ T7683] team0: Port device team_slave_1 added
[  170.182180][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.205378][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.238374][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.300206][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.335373][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.399101][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.475478][ T5810] scsi host1: usb-storage 5-1:1.0
[  170.523675][ T5810] usb 5-1: USB disconnect, device number 3
[  170.651691][ T7683] hsr_slave_0: entered promiscuous mode
[  170.693466][ T7683] hsr_slave_1: entered promiscuous mode
[  170.707492][ T7683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.736449][ T7683] Cannot create hsr debugfs directory
[  170.969197][ T7809] syz.0.683 (7809) used greatest stack depth: 19792 bytes left
[  171.087047][ T5777] Bluetooth: hci2: command tx timeout
[  171.187682][ T7683] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  171.216492][ T7683] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  171.239816][ T7683] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  171.292875][ T7683] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  171.599572][ T7825] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  171.632261][ T7825] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  171.750358][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.812804][ T7683] 8021q: adding VLAN 0 to HW filter on device team0
[  171.839034][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.846243][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.945591][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.952867][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.044919][ T7816] loop3: detected capacity change from 0 to 32768
[  172.133013][ T7841] loop7: detected capacity change from 0 to 7
[  172.166253][ T7841] Dev loop7: unable to read RDB block 7
[  172.171907][ T7841]  loop7: unable to read partition table
[  172.217735][ T7841] loop7: partition table beyond EOD, truncated
[  172.248775][ T7841] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  172.335966][ T7843] Dev loop7: unable to read RDB block 7
[  172.341622][ T7843]  loop7: unable to read partition table
[  172.364779][ T7843] loop7: partition table beyond EOD, truncated
[  172.425417][ T5141] Dev loop7: unable to read RDB block 7
[  172.431059][ T5141]  loop7: unable to read partition table
[  172.458206][ T5141] loop7: partition table beyond EOD, truncated
[  172.706752][ T7858] loop0: detected capacity change from 0 to 128
[  172.879634][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.113045][ T1197] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  173.163157][ T5777] Bluetooth: hci2: command tx timeout
[  173.384035][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  173.410437][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  173.440047][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  173.459157][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  173.486754][ T1197] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  173.502876][ T1197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.510951][ T1197] usb 4-1: Product: syz
[  173.523823][ T1197] usb 4-1: Manufacturer: syz
[  173.528483][ T1197] usb 4-1: SerialNumber: syz
[  173.560779][ T1197] usb 4-1: config 0 descriptor??
[  173.702445][ T7854] loop4: detected capacity change from 0 to 40427
[  173.782805][ T7854] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff
[  173.791223][ T7854] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x30e4
[  173.816379][ T7683] veth0_vlan: entered promiscuous mode
[  173.850351][ T1197] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  173.867874][ T7683] veth1_vlan: entered promiscuous mode
[  173.869475][ T7854] F2FS-fs (loop4): invalid crc value
[  173.890941][ T7854] F2FS-fs (loop4): Found nat_bits in checkpoint
[  173.962166][ T7854] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  174.011653][ T7683] veth0_macvtap: entered promiscuous mode
[  174.056699][ T7683] veth1_macvtap: entered promiscuous mode
[  174.110287][ T7897] loop0: detected capacity change from 0 to 128
[  174.115195][ T7860] usb 4-1: Couldn't submit interrupt_out_urb -90
[  174.119789][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.139786][ T7854] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  174.178323][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.202891][ T1197] usb 4-1: USB disconnect, device number 7
[  174.222790][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.272764][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.306757][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.319320][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.328273][ T7854] syz.4.696: attempt to access beyond end of device
[  174.328273][ T7854] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  174.346847][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.386600][ T7900] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910
[  174.414655][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.437435][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.480356][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.497152][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.507388][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.518215][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.535443][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.556891][ T7683] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.569849][ T7683] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.587678][ T7683] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.597828][ T7683] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.722764][ T5809] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  174.760408][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.786669][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.823840][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.845045][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.957207][ T5809] usb 1-1: config 0 interface 0 has no altsetting 0
[  174.973301][ T5809] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  175.012341][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.034980][ T5809] usb 1-1: config 0 descriptor??
[  175.162160][ T7914] overlay: filesystem on ./file0 is read-only
[  175.445935][ T7924] rt1711h 0-0004: check vid/pid fail
[  175.457811][ T7924] rt1711h: probe of 0-0004 failed with error -5
[  175.480090][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x1
[  175.488375][ T7924] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04
[  175.505303][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x5
[  175.512479][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x6
[  175.567412][ T7926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[  175.593235][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  175.612080][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  175.630251][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  175.638545][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  175.664389][ T7929] loop6: detected capacity change from 0 to 512
[  175.673733][ T7929] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  175.744181][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  175.751456][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  175.822110][ T5809] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  176.061894][ T5809] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71
[  176.105161][ T5809] usb 1-1: USB disconnect, device number 4
[  176.286686][ T7946] clocksource: Switched to clocksource acpi_pm
[  176.760219][ T7939] loop3: detected capacity change from 0 to 32768
[  176.784743][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.6.722'.
[  176.904991][ T7939] JBD2: Ignoring recovery information on journal
[  177.046742][ T7939] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  177.216586][ T7978] loop0: detected capacity change from 0 to 256
[  177.310192][ T7978] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  177.420180][ T7939] overlayfs: upper fs does not support tmpfile.
[  177.481807][ T7985] netlink: 27 bytes leftover after parsing attributes in process `syz.6.729'.
[  177.496422][ T7939] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  177.529955][ T7939] overlayfs: failed to set xattr on upper
[  177.550103][ T7939] overlayfs: ...falling back to redirect_dir=nofollow.
[  177.570686][ T7939] overlayfs: ...falling back to index=off.
[  177.613176][ T7939] overlayfs: ...falling back to uuid=null.
[  177.619017][ T7939] overlayfs: upper fs missing required features.
[  177.848558][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  177.990784][   T28] audit: type=1400 audit(1789672236.661:90): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=8002 comm="syz.6.737" name="//o" offset=55
[  178.707625][ T8024] loop3: detected capacity change from 0 to 128
[  178.755117][ T8024] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  178.865687][ T8024] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  178.913155][ T8024] FAT-fs (loop3): Filesystem has been set read-only
[  178.929230][ T7998] loop0: detected capacity change from 0 to 40427
[  178.953630][ T7998] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[  178.996390][ T7998] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  179.051407][ T7998] F2FS-fs (loop0): invalid crc value
[  179.070429][ T5773] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  179.106892][ T7998] F2FS-fs (loop0): Found nat_bits in checkpoint
[  179.286984][ T8040] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.748'.
[  179.313579][ T7998] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  179.320655][ T7998] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  179.339054][ T8040] netlink: zone id is out of range
[  179.382599][ T8040] netlink: zone id is out of range
[  179.406386][ T8040] netlink: zone id is out of range
[  179.437099][ T8040] netlink: zone id is out of range
[  179.457392][ T8040] netlink: zone id is out of range
[  179.483094][ T8040] netlink: zone id is out of range
[  179.512557][ T8040] netlink: zone id is out of range
[  179.532716][ T8040] netlink: zone id is out of range
[  179.562627][ T8040] netlink: zone id is out of range
[  179.574073][ T8049] netlink: 64 bytes leftover after parsing attributes in process `syz.6.751'.
[  179.579472][ T8040] netlink: zone id is out of range
[  179.587188][ T5769] syz-executor: attempt to access beyond end of device
[  179.587188][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.642159][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  180.432555][  T969] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  180.551071][ T8075] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  180.607126][ T8075] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  180.618595][   T28] audit: type=1326 audit(1789672239.291:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.3.763" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7ffec6389ac9 code=0x0
[  180.663230][  T969] usb 7-1: too many configurations: 102, using maximum allowed: 8
[  180.703929][  T969] usb 7-1: config index 0 descriptor too short (expected 76, got 45)
[  180.743940][  T969] usb 7-1: config index 1 descriptor too short (expected 76, got 45)
[  180.762655][  T969] usb 7-1: config index 2 descriptor too short (expected 76, got 45)
[  180.779908][  T969] usb 7-1: config index 3 descriptor too short (expected 76, got 45)
[  180.797370][  T969] usb 7-1: config index 4 descriptor too short (expected 76, got 45)
[  180.809697][  T969] usb 7-1: config index 5 descriptor too short (expected 76, got 45)
[  180.825077][  T969] usb 7-1: config index 6 descriptor too short (expected 76, got 45)
[  180.839727][  T969] usb 7-1: config index 7 descriptor too short (expected 76, got 45)
[  180.862709][  T969] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  180.872066][  T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.880752][  T969] usb 7-1: Product: syz
[  180.887557][  T969] usb 7-1: Manufacturer: syz
[  180.892448][  T969] usb 7-1: SerialNumber: syz
[  180.942626][ T8091] loop0: detected capacity change from 0 to 1024
[  180.993546][ T8091] hfsplus: bad catalog entry used to create inode
[  181.025071][ T8091] hfsplus: failed to load root directory
[  181.299048][  T969] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  181.339632][  T969] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  181.361599][  T969] lan78xx: probe of 7-1:1.0 failed with error -71
[  181.394864][  T969] usb 7-1: USB disconnect, device number 2
[  182.848006][ T8147] loop6: detected capacity change from 0 to 512
[  182.871072][ T8150] loop3: detected capacity change from 0 to 256
[  182.911760][ T8147] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  182.967791][ T8147] EXT4-fs (loop6): orphan cleanup on readonly fs
[  182.986968][ T8147] EXT4-fs error (device loop6): ext4_quota_enable:7140: comm syz.6.781: Bad quota inum: 458752, type: 0
[  183.030350][ T8147] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=458752). Please run e2fsck to fix.
[  183.107888][ T8147] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  183.195103][ T8147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 ro without journal. Quota mode: writeback.
[  183.314339][ T8147] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.781: bg 0: block 248: padding at end of block bitmap is not set
[  183.450738][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.789'.
[  183.555147][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  183.807970][ T8173] loop0: detected capacity change from 0 to 2048
[  183.849349][ T8179] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.968214][ T8173] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[  184.034714][ T8173] Remounting filesystem read-only
[  184.324034][ T8197] loop4: detected capacity change from 0 to 256
[  184.619341][ T8209] netlink: 'syz.4.803': attribute type 4 has an invalid length.
[  184.891947][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  185.103159][    T9] usb 1-1: Using ep0 maxpacket: 32
[  185.117352][    T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  185.131634][    T9] usb 1-1: config 0 has no interface number 0
[  185.151077][    T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.189705][    T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  185.226608][    T9] usb 1-1: config 0 interface 85 has no altsetting 0
[  185.264748][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  185.291865][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.299898][    T9] usb 1-1: Product: syz
[  185.315404][    T9] usb 1-1: Manufacturer: syz
[  185.320048][    T9] usb 1-1: SerialNumber: syz
[  185.358364][    T9] usb 1-1: config 0 descriptor??
[  185.451970][ T5809] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  185.643108][ T5809] usb 4-1: Using ep0 maxpacket: 8
[  185.650552][ T5809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  185.690091][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.751534][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400
[  185.770226][ T5809] pvrusb2: **********
[  185.780393][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  185.806445][    T9] appletouch 1-1:0.85: Geyser mode initialized.
[  185.811432][ T5809] pvrusb2: Important functionality might not be entirely working.
[  185.827887][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  185.833578][    T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input12
[  185.866477][ T5809] pvrusb2: **********
[  186.018876][ T2323] pvrusb2: Invalid write control endpoint
[  186.249456][    T9] usb 1-1: USB disconnect, device number 5
[  186.324506][ T2323] pvrusb2: Invalid write control endpoint
[  186.358776][    T9] appletouch 1-1:0.85: input: appletouch disconnected
[  186.370900][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  186.394206][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  186.409936][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  186.436137][ T2323] pvrusb2: Device being rendered inoperable
[  186.469411][ T8227] pvrusb2: Attempted to execute control transfer when device not ok
[  186.492088][ T5770] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  186.518686][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  186.519335][  T969] usb 4-1: USB disconnect, device number 8
[  186.543860][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  186.587786][ T2323] pvrusb2: Attached sub-driver cx25840
[  186.597804][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  186.648836][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  186.694691][ T5770] usb 5-1: Using ep0 maxpacket: 32
[  186.716383][ T5770] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8
[  186.751934][ T5770] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.787786][ T5770] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.806321][ T5770] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  186.816878][ T5770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.838860][ T5770] usb 5-1: config 0 descriptor??
[  187.298027][ T5770] uclogic 0003:5543:0781.0007: unknown main item tag 0x0
[  187.331918][ T5770] uclogic 0003:5543:0781.0007: item fetching failed at offset 3/24
[  187.354461][ T5770] uclogic 0003:5543:0781.0007: parse failed
[  187.360558][ T5770] uclogic: probe of 0003:5543:0781.0007 failed with error -22
[  187.592177][ T5770] usb 5-1: USB disconnect, device number 4
[  187.638516][ T8284] loop0: detected capacity change from 0 to 8192
[  187.683830][ T8284] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  187.773832][ T8284] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  187.808295][ T8284] REISERFS (device loop0): using ordered data mode
[  187.817279][ T8284] reiserfs: using flush barriers
[  187.825916][ T8284] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.849391][ T8284] REISERFS (device loop0): checking transaction log (loop0)
[  187.894933][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.830'.
[  188.101189][ T8303] tap0: tun_chr_ioctl cmd 1074025672
[  188.127068][ T8303] tap0: ignored: set checksum disabled
[  188.134872][ T8284] REISERFS (device loop0): Using tea hash to sort names
[  188.155595][ T8284] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  188.180369][ T8284] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  188.471222][ T8314] syzkaller1: tun_chr_ioctl cmd 2147767517
[  188.650653][ T8320] netlink: 71 bytes leftover after parsing attributes in process `syz.4.838'.
[  189.686684][ T8364] loop6: detected capacity change from 0 to 1024
[  190.792228][ T8402] netlink: 79 bytes leftover after parsing attributes in process `syz.0.866'.
[  191.085081][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  191.306607][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'.
[  191.369069][ T8423] loop6: detected capacity change from 0 to 128
[  191.391104][ T8421] netlink: 'syz.3.873': attribute type 30 has an invalid length.
[  191.433561][ T8421] netlink: 'syz.3.873': attribute type 29 has an invalid length.
[  191.447908][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'.
[  192.291271][ T5770] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  192.346003][    T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  192.491325][ T5770] usb 4-1: Using ep0 maxpacket: 32
[  192.504598][ T5770] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  192.514472][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.539640][ T5770] usb 4-1: config 0 descriptor??
[  192.558465][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  192.590357][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.642415][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  192.673564][    T9] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  192.687523][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.703862][    T9] usb 5-1: config 0 descriptor??
[  192.814324][ T5770] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  192.837282][ T5770] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  192.854303][ T5770] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  192.862958][ T5770] usb 4-1: media controller created
[  192.919635][ T5770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  193.021344][ T5770] az6027: usb out operation failed. (-71)
[  193.052635][ T5770] az6027: usb out operation failed. (-71)
[  193.081512][ T5770] stb0899_attach: Driver disabled by Kconfig
[  193.087613][ T5770] az6027: no front-end attached
[  193.087613][ T5770] 
[  193.122499][ T8471] loop0: detected capacity change from 0 to 256
[  193.132124][ T5770] az6027: usb out operation failed. (-71)
[  193.137945][ T5770] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  193.187841][ T5770] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13
[  193.195733][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.240341][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.247460][ T8471] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe69f4e8a, utbl_chksum : 0x7319d30d)
[  193.259062][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.270860][ T5770] dvb-usb: schedule remote query interval to 400 msecs.
[  193.278616][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.307021][ T5770] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  193.317179][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.363938][ T5770] usb 4-1: USB disconnect, device number 9
[  193.366175][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.392092][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.412040][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.431892][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.468320][    T9] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[  193.497297][    T9] hid-generic 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  193.525332][ T5770] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  193.567530][    T9] usb 5-1: USB disconnect, device number 5
[  193.760384][ T8477] fido_id[8477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  193.987392][ T8487] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  194.041960][ T8467] loop6: detected capacity change from 0 to 32768
[  194.144749][ T8467] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  194.182139][ T5770] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  194.377374][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.430418][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.455286][ T5770] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.462586][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.481907][ T5770] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  194.491061][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.528733][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.537891][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'.
[  194.580244][ T5770] usb 4-1: config 0 descriptor??
[  194.621365][ T8467] syz.6.886 (8467) used greatest stack depth: 18776 bytes left
[  194.766402][ T8514] loop4: detected capacity change from 0 to 8
[  194.777732][ T8512] loop0: detected capacity change from 0 to 512
[  194.790336][ T8514] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  194.800056][ T7683] ocfs2: Unmounting device (7,6) on (node local)
[  194.811193][ T8512] EXT4-fs: inline encryption not supported
[  194.853949][ T5764] udevd[5764]: incorrect cramfs checksum on /dev/loop4
[  194.874504][ T8512] EXT4-fs (loop0): Test dummy encryption mode enabled
[  194.892443][ T8512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  194.930011][ T5764] udevd[5764]: incorrect cramfs checksum on /dev/loop4
[  194.959449][ T8512] EXT4-fs (loop0): 1 truncate cleaned up
[  194.966631][ T8512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.022259][ T8512] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #12: comm syz.0.897: bad extra_isize 62 (inode size 256)
[  195.085677][ T5770] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  195.120746][ T8512] EXT4-fs (loop0): Remounting filesystem read-only
[  195.162130][ T5770] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  195.296683][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.395149][ T5809] usb 4-1: USB disconnect, device number 10
[  195.561181][ T5770] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  195.664687][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'.
[  195.756038][ T5770] usb 7-1: Using ep0 maxpacket: 32
[  195.774723][ T5770] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  195.790543][ T5770] usb 7-1: config 0 has no interface number 0
[  195.797989][ T5770] usb 7-1: config 0 interface 184 has no altsetting 0
[  195.807468][ T8520] loop4: detected capacity change from 0 to 40427
[  195.808904][ T5770] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.6e
[  195.829313][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.840936][ T8520] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  195.841281][ T5770] usb 7-1: Product: syz
[  195.855269][ T8520] F2FS-fs (loop4): invalid crc value
[  195.857068][ T5770] usb 7-1: Manufacturer: syz
[  195.879080][ T5770] usb 7-1: SerialNumber: syz
[  195.882251][ T8520] F2FS-fs (loop4): Found nat_bits in checkpoint
[  195.891613][ T5770] usb 7-1: config 0 descriptor??
[  195.914835][ T5770] smsc75xx v1.0.0
[  196.000850][ T8520] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  196.156446][ T7223] syz-executor: attempt to access beyond end of device
[  196.156446][ T7223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.234566][ T7223] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  196.266818][ T8545] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  196.510318][ T8550] jffs2: notice: (8550) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  196.756438][ T5770] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  196.775336][ T5770] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  196.796609][ T5770] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  196.829300][ T5770] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  196.855754][ T5770] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  196.896986][ T5770] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  196.920953][ T5770] smsc75xx: probe of 7-1:0.184 failed with error -71
[  196.991750][ T5770] usb 7-1: USB disconnect, device number 3
[  197.031055][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.913'.
[  197.361061][ T1197] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  197.561336][ T1197] usb 5-1: Using ep0 maxpacket: 32
[  197.582878][ T8579] loop6: detected capacity change from 0 to 16
[  197.597951][ T1197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.619646][ T1197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.631521][ T8580] overlayfs: upper fs does not support tmpfile.
[  197.668085][ T1197] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  197.700471][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.748524][ T1197] usb 5-1: config 0 descriptor??
[  197.761552][ T1197] hub 5-1:0.0: USB hub found
[  197.995457][ T1197] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  198.006062][   T28] audit: type=1400 audit(1789672256.681:92): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8590 comm="syz.0.922" name="unknown" offset=82
[  198.101707][ T8597] ieee802154 phy0 wpan0: encryption failed: -22
[  198.133534][ T5777] Bluetooth: hci2: command 0x0405 tx timeout
[  198.215067][ T1197] usbhid 5-1:0.0: can't add hid device: -71
[  198.225104][ T1197] usbhid: probe of 5-1:0.0 failed with error -71
[  198.302400][ T1197] usb 5-1: USB disconnect, device number 6
[  199.068511][ T8627] loop6: detected capacity change from 0 to 256
[  199.086841][ T8627] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  199.228310][ T8599] loop0: detected capacity change from 0 to 40427
[  199.302858][ T8599] F2FS-fs (loop0): invalid crc value
[  199.348434][ T8599] F2FS-fs (loop0): Found nat_bits in checkpoint
[  199.606039][ T8599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  199.816404][ T8654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'.
[  199.817133][ T5769] syz-executor: attempt to access beyond end of device
[  199.817133][ T5769] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  199.856970][ T8654] veth1: entered promiscuous mode
[  199.877826][ T8654] veth1: left promiscuous mode
[  199.892037][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  199.909093][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  199.920599][ T5864] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  199.932688][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  199.966432][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  200.167497][ T5864] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  200.209508][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.233108][ T5864] usb 5-1: config 0 descriptor??
[  200.247292][ T5864] cp210x 5-1:0.0: cp210x converter detected
[  200.909089][   T28] audit: type=1400 audit(1789672259.571:93): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=8690 comm="syz.3.949" name="p" offset=64
[  200.928465][ T5864] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  200.980420][ T5864] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  201.029699][ T5864] usb 5-1: cp210x converter now attached to ttyUSB0
[  201.084547][ T5864] usb 5-1: USB disconnect, device number 7
[  201.130741][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  201.139096][ T5864] cp210x 5-1:0.0: device disconnected
[  201.196653][ T8702] loop6: detected capacity change from 0 to 8
[  201.645619][ T5772] Bluetooth: hci0: command 0x0406 tx timeout
[  201.651896][ T5087] Bluetooth: hci1: command 0x0406 tx timeout
[  201.735965][ T8718] loop6: detected capacity change from 0 to 1024
[  201.793081][ T8722] loop3: detected capacity change from 0 to 16
[  201.808658][ T8718] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  201.821775][ T8722] erofs: (device loop3): mounted with root inode @ nid 36.
[  202.870817][ T5885] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  202.935622][ T8749] loop6: detected capacity change from 0 to 32768
[  203.057152][ T8764] loop6: detected capacity change from 0 to 512
[  203.080523][ T5864] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  203.091792][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.102571][ T1197] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  203.121548][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  203.136747][ T8764] EXT4-fs (loop6): 1 truncate cleaned up
[  203.143200][ T5885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  203.144565][ T8764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.160357][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  203.189902][ T5885] usb 4-1: SerialNumber: syz
[  203.270786][ T8764] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.980: bg 0: block 465: padding at end of block bitmap is not set
[  203.322443][ T8764] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  203.326057][ T5864] usb 1-1: Using ep0 maxpacket: 8
[  203.342732][ T1197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.360420][ T1197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  203.371404][ T1197] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  203.383662][ T1197] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.383936][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  203.389644][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.397383][ T5864] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  203.433488][ T1197] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  203.457014][ T5885] usb 4-1: 0:2 : does not exist
[  203.462106][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.494103][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.556108][ T5885] usb 4-1: USB disconnect, device number 11
[  203.571716][ T5864] usb 1-1: config 0 descriptor??
[  203.682239][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.936676][ T1197] gud: probe of 5-1:1.0 failed with error -121
[  204.220043][ T5864] usb 1-1: string descriptor 0 read error: -71
[  204.220581][ T5828] usb 5-1: USB disconnect, device number 8
[  204.240347][ T5864] uclogic 0003:5543:3031.000A: failed retrieving string descriptor #200: -71
[  204.279975][ T5864] uclogic 0003:5543:3031.000A: failed retrieving pen parameters: -71
[  204.290416][ T5864] uclogic 0003:5543:3031.000A: failed probing pen v2 parameters: -71
[  204.332811][ T5864] uclogic 0003:5543:3031.000A: failed probing parameters: -71
[  204.356215][ T5864] uclogic: probe of 0003:5543:3031.000A failed with error -71
[  204.388491][ T5864] usb 1-1: USB disconnect, device number 6
[  204.976978][ T8789] loop6: detected capacity change from 0 to 32768
[  205.118297][ T8789] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  205.338437][ T8789] XFS (loop6): Ending clean mount
[  205.690354][ T8793] loop3: detected capacity change from 0 to 32768
[  205.709631][ T7683] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  205.780490][ T8826] loop4: detected capacity change from 0 to 256
[  205.792378][ T8793] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.124322][ T8793] XFS (loop3): Ending clean mount
[  206.166151][ T8793] XFS (loop3): Quotacheck needed: Please wait.
[  206.343660][ T8793] XFS (loop3): Quotacheck: Done.
[  206.539448][ T8806] loop0: detected capacity change from 0 to 32768
[  206.583031][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.619293][ T8806] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.802989][ T8806] XFS (loop0): Ending clean mount
[  206.837315][ T8806] XFS (loop0): Quotacheck needed: Please wait.
[  206.908404][ T8806] XFS (loop0): Quotacheck: Done.
[  207.191621][ T5769] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.316382][ T8869] loop6: detected capacity change from 0 to 512
[  207.323609][ T8871] loop3: detected capacity change from 0 to 512
[  207.360934][ T8869] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  207.380898][ T8871] EXT4-fs: Ignoring removed nomblk_io_submit option
[  207.387590][ T8871] EXT4-fs: Ignoring removed mblk_io_submit option
[  207.448258][ T8871] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  207.460962][ T8871] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  207.486358][ T8869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.499415][ T8871] EXT4-fs (loop3): 1 truncate cleaned up
[  207.543734][ T8871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.569867][ T8869] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  207.690380][ T8871] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 4: comm syz.3.999: lblock 0 mapped to illegal pblock 4 (length 1)
[  207.770938][ T8871] EXT4-fs (loop3): Remounting filesystem read-only
[  207.970949][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.001078][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.535259][ T8907] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  208.576313][ T8907] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  208.745801][ T8915] loop6: detected capacity change from 0 to 1024
[  210.104897][ T8965] loop0: detected capacity change from 0 to 128
[  210.132686][ T8965] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  210.642782][ T8954] loop6: detected capacity change from 0 to 40427
[  210.683975][ T8954] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  210.707861][ T8954] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  210.745835][ T8954] F2FS-fs (loop6): invalid crc value
[  210.780064][ T8954] F2FS-fs (loop6): Found nat_bits in checkpoint
[  210.872546][ T8989] loop4: detected capacity change from 0 to 128
[  210.912145][   T11] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  210.949424][ T8989] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  211.065821][ T8954] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  211.109597][ T8954] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  211.235340][ T8954] syz.6.1022: attempt to access beyond end of device
[  211.235340][ T8954] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.267967][ T8954] syz.6.1022: attempt to access beyond end of device
[  211.267967][ T8954] loop6: rw=2049, sector=45104, nr_sectors = 48 limit=40427
[  211.462258][ T7683] syz-executor: attempt to access beyond end of device
[  211.462258][ T7683] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  211.529452][ T7683] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  211.582202][ T9004] loop4: detected capacity change from 0 to 256
[  211.678894][ T9004] FAT-fs (loop4): Directory bread(block 64) failed
[  211.705116][ T9004] FAT-fs (loop4): Directory bread(block 65) failed
[  211.726729][ T9004] FAT-fs (loop4): Directory bread(block 66) failed
[  211.748082][ T9004] FAT-fs (loop4): Directory bread(block 67) failed
[  211.761526][ T9004] FAT-fs (loop4): Directory bread(block 68) failed
[  211.768344][ T9004] FAT-fs (loop4): Directory bread(block 69) failed
[  211.775881][ T9004] FAT-fs (loop4): Directory bread(block 70) failed
[  211.785173][ T9004] FAT-fs (loop4): Directory bread(block 71) failed
[  211.799736][ T9004] FAT-fs (loop4): Directory bread(block 72) failed
[  211.819410][ T9004] FAT-fs (loop4): Directory bread(block 73) failed
[  212.369984][ T9020] sctp: [Deprecated]: syz.3.1038 (pid 9020) Use of int in max_burst socket option deprecated.
[  212.369984][ T9020] Use struct sctp_assoc_value instead
[  212.809203][   T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  213.000231][   T27] usb 7-1: Using ep0 maxpacket: 8
[  213.012638][   T27] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  213.021312][   T27] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  213.044780][   T27] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  213.055406][   T27] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  213.067023][   T27] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  213.077519][   T27] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.109190][   T27] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  213.135068][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.194569][   T28] audit: type=1400 audit(1789672271.871:94): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=9046 comm="syz.4.1043" name="foo" offset=76
[  213.213902][    C0] vkms_vblank_simulate: vblank timer overrun
[  213.389888][   T27] usb 7-1: GET_CAPABILITIES returned 0
[  213.395575][   T27] usbtmc 7-1:16.0: can't read capabilities
[  213.653632][ T9029] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32
[  213.679726][   T27] usb 7-1: USB disconnect, device number 4
[  214.004323][ T9080] loop0: detected capacity change from 0 to 1024
[  214.228802][ T1083] hfsplus: b-tree write err: -5, ino 8
[  214.745772][ T9105] loop4: detected capacity change from 0 to 256
[  214.766663][ T9105] exfat: Deprecated parameter 'utf8'
[  214.827364][ T9105] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d)
[  214.843022][ T9108] MTRR 2 not used
[  215.148116][ T9087] loop3: detected capacity change from 0 to 32768
[  215.476604][ T9118] loop4: detected capacity change from 0 to 4096
[  215.532809][ T9118] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  217.008335][ T9175] loop3: detected capacity change from 0 to 512
[  217.029894][ T9175] EXT4-fs: inline encryption not supported
[  217.089189][ T9175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  217.161532][ T9175] EXT4-fs (loop3): orphan cleanup on readonly fs
[  217.168005][ T9175] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1083: inode #15: comm syz.3.1083: iget: illegal inode #
[  217.324937][ T9175] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1083: couldn't read orphan inode 15 (err -117)
[  217.383040][ T9175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  217.523933][ T9175] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  217.592582][ T9175] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  217.802941][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.531702][ T1197] IPVS: starting estimator thread 0...
[  218.599092][ T9222] net_ratelimit: 12 callbacks suppressed
[  218.599120][ T9222] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  218.663400][ T9225] IPVS: using max 10 ests per chain, 24000 per kthread
[  218.978376][ T9245] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  220.312994][ T9294] usb3503 0-0008: unknown mode is requested
[  220.321812][ T9294] usb3503 0-0008: usb3503_probe: probed in standby mode
[  220.365240][ T9294] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08
[  221.155388][ T9300] loop4: detected capacity change from 0 to 32768
[  221.314502][ T9300] JBD2: Ignoring recovery information on journal
[  221.446518][ T9300] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  221.454504][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'.
[  221.971371][ T7223] ocfs2: Unmounting device (7,4) on (node local)
[  222.269619][ T9357] loop6: detected capacity change from 0 to 256
[  222.273285][ T9359] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  222.309487][ T9357] exfat: Deprecated parameter 'utf8'
[  222.320400][ T9357] exfat: Deprecated parameter 'namecase'
[  222.326168][ T9357] exfat: Deprecated parameter 'namecase'
[  222.378350][ T9357] exfat: Deprecated parameter 'utf8'
[  222.448414][ T9357] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  222.566928][ T9341] loop3: detected capacity change from 0 to 32768
[  222.592618][ T9366] loop4: detected capacity change from 0 to 256
[  222.639946][ T9366] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.666409][ T9341] JBD2: Ignoring recovery information on journal
[  222.734514][   T28] audit: type=1800 audit(1789672281.411:95): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1140" name="file1" dev="loop4" ino=1048701 res=0 errno=0
[  222.757851][ T9366] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264)
[  222.814573][ T9341] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  222.856452][ T9366] FAT-fs (loop4): Filesystem has been set read-only
[  222.915700][ T9370] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008)
[  222.946203][ T9375] loop0: detected capacity change from 0 to 1024
[  223.228143][ T5864] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  223.291987][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  223.428094][ T5864] usb 7-1: Using ep0 maxpacket: 32
[  223.435600][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.474533][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.508205][ T5864] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  223.548105][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.579072][ T5864] usb 7-1: config 0 descriptor??
[  224.012847][ T5864] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0
[  224.030945][ T5864] koneplus 0003:1E7D:2D51.000B: unknown main item tag 0x0
[  224.045224][ T5864] koneplus 0003:1E7D:2D51.000B: item fetching failed at offset 2/5
[  224.078553][ T5864] koneplus 0003:1E7D:2D51.000B: parse failed
[  224.084648][ T5864] koneplus: probe of 0003:1E7D:2D51.000B failed with error -22
[  224.216487][ T5864] usb 7-1: USB disconnect, device number 5
[  224.326677][ T9413] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1158'.
[  224.344711][ T9413] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1158'.
[  224.366934][ T9415] loop4: detected capacity change from 0 to 128
[  224.389541][ T9415] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  224.443853][ T9415] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  224.723215][ T9427] loop4: detected capacity change from 0 to 1024
[  224.946150][ T9433] loop3: detected capacity change from 0 to 512
[  225.026844][ T9433] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.1164: bg 0: block 5: invalid block bitmap
[  225.222093][ T9433] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  225.286291][ T9433] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1164: invalid indirect mapped block 3 (level 2)
[  225.350911][ T9433] EXT4-fs (loop3): 1 orphan inode deleted
[  225.357254][ T9433] EXT4-fs (loop3): 1 truncate cleaned up
[  225.387025][ T9433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.579885][ T9460] loop6: detected capacity change from 0 to 64
[  225.591839][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.594811][ T9458] netlink: 'syz.4.1171': attribute type 4 has an invalid length.
[  225.986401][ T9469] loop3: detected capacity change from 0 to 128
[  226.171678][ T9469] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  226.224486][ T9469] hpfs: filesystem error: improperly stopped
[  226.235536][ T9469] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  226.250071][ T9469] hpfs: You really don't want any checks? You are crazy...
[  226.258851][ T9473] loop4: detected capacity change from 0 to 4096
[  226.264721][ T9469] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  226.295243][ T9469] hpfs: code page support is disabled
[  226.341877][ T9469] hpfs: hpfs_map_4sectors(): unaligned read
[  226.382690][ T9469] hpfs: hpfs_map_4sectors(): unaligned read
[  226.397436][ T9473] ntfs3: loop4: ino=19, mi_enum_attr
[  226.417743][ T9469] hpfs: filesystem error: unable to find root dir
[  226.423589][ T9473] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  226.473008][ T9482] netlink: 'syz.6.1178': attribute type 1 has an invalid length.
[  226.518187][ T9482] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1178'.
[  226.565897][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'.
[  227.555909][ T9520] loop4: detected capacity change from 0 to 1024
[  227.585563][ T9520] EXT4-fs (loop4): invalid inodes per group: 150994976
[  227.585563][ T9520] 
[  227.590754][ T9522] loop0: detected capacity change from 0 to 128
[  227.650017][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  227.732042][ T9522] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  227.769668][ T9522] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  227.854869][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  227.885057][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  227.934429][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  227.980449][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  228.009286][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  228.054044][ T9522] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  228.077689][ T9522] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  228.267083][ T9540] loop3: detected capacity change from 0 to 1024
[  228.885163][ T9561] netlink: 'syz.3.1203': attribute type 2 has an invalid length.
[  228.904611][ T9561] netlink: 'syz.3.1203': attribute type 1 has an invalid length.
[  229.118523][ T9571] loop0: detected capacity change from 0 to 256
[  229.126776][ T9565] loop4: detected capacity change from 0 to 8192
[  229.252628][ T9565] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  229.733926][ T9594] loop6: detected capacity change from 0 to 512
[  229.784428][ T9594] EXT4-fs: Ignoring removed oldalloc option
[  229.868370][ T9594] EXT4-fs (loop6): Test dummy encryption mode enabled
[  229.945628][ T9594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.182701][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.371590][ T9618] loop6: detected capacity change from 0 to 512
[  230.408741][ T9618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.782711][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.358362][ T9650] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  231.403426][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1233'.
[  231.820085][ T9672] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  232.364378][ T9659] loop3: detected capacity change from 0 to 32768
[  232.551050][ T9688] batadv0: entered promiscuous mode
[  232.556199][ T9659] read_mapping_page failed!
[  232.556346][ T9659] ERROR: (device loop3): txCommit: 
[  232.556346][ T9659] 
[  232.609368][ T9694] loop4: detected capacity change from 0 to 256
[  232.629273][ T9659] read_mapping_page failed!
[  232.634434][ T9659] ERROR: (device loop3): txCommit: 
[  232.634434][ T9659] 
[  232.657280][ T9688] bond0: entered promiscuous mode
[  232.696182][ T9688] bond_slave_0: entered promiscuous mode
[  232.717643][ T9688] bond_slave_1: entered promiscuous mode
[  232.778861][ T9688] hsr1: entered allmulticast mode
[  232.794953][ T9688] batadv0: entered allmulticast mode
[  232.811240][ T9688] bond0: entered allmulticast mode
[  232.825306][ T9688] bond_slave_0: entered allmulticast mode
[  232.833754][ T9688] bond_slave_1: entered allmulticast mode
[  232.842404][ T9688] 8021q: adding VLAN 0 to HW filter on device hsr1
[  232.868161][ T9688] batadv0: left promiscuous mode
[  232.897758][ T9688] bond0: left promiscuous mode
[  232.902575][ T9688] bond_slave_0: left promiscuous mode
[  232.924631][ T9688] bond_slave_1: left promiscuous mode
[  233.320311][ T9713] loop4: detected capacity change from 0 to 8
[  233.847332][ T9733] bond0: option slaves: invalid value (-veth0)
[  233.981847][ T9737] loop0: detected capacity change from 0 to 256
[  234.042420][ T1098] wlan1: Trigger new scan to find an IBSS to join
[  234.313872][ T9746] loop6: detected capacity change from 0 to 1756
[  234.360885][ T9746] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  234.389189][ T9746] UDF-fs: Scanning with blocksize 512 failed
[  234.403734][ T9746] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  234.413153][ T9746] UDF-fs: Scanning with blocksize 1024 failed
[  234.452759][ T9752] netlink: 'syz.0.1269': attribute type 2 has an invalid length.
[  234.471131][ T9746] UDF-fs: warning (device loop6): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[  234.501331][ T9752] netlink: 'syz.0.1269': attribute type 2 has an invalid length.
[  234.767665][ T9758] loop4: detected capacity change from 0 to 1024
[  234.783199][ T9758] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.819772][ T9758] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  234.896103][ T9758] EXT4-fs (loop4): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  234.939233][ T9758] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.020881][ T9758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1273: bg 0: block 112: padding at end of block bitmap is not set
[  235.117661][ T9758] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  235.158047][ T9758] EXT4-fs (loop4): This should not happen!! Data will be lost
[  235.158047][ T9758] 
[  235.168096][ T9758] EXT4-fs (loop4): Total free blocks count 0
[  235.194551][ T9758] EXT4-fs (loop4): Free/Dirty block details
[  235.207529][ T9758] EXT4-fs (loop4): free_blocks=0
[  235.230436][ T9758] EXT4-fs (loop4): dirty_blocks=0
[  235.267021][ T9758] EXT4-fs (loop4): Block reservation details
[  235.273674][ T9758] EXT4-fs (loop4): i_reserved_data_blocks=0
[  235.350756][ T9773] loop6: detected capacity change from 0 to 4096
[  235.403956][ T9773] EXT4-fs (loop6): Test dummy encryption mode enabled
[  235.412725][ T7223] EXT4-fs (loop4): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[  235.455187][ T9773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.791188][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.133858][ T9787] loop6: detected capacity change from 0 to 8192
[  236.171156][ T9787] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  236.196959][ T9787] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  236.219116][ T9787] REISERFS (device loop6): using ordered data mode
[  236.226226][ T9787] reiserfs: using flush barriers
[  236.237083][ T9787] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  236.254051][ T9787] REISERFS (device loop6): checking transaction log (loop6)
[  236.269486][ T9787] REISERFS (device loop6): Using r5 hash to sort names
[  236.275550][ T5777] Bluetooth: hci2: link tx timeout
[  236.279214][ T9787] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  236.300466][ T5777] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  236.319332][ T5777] Bluetooth: hci2: link tx timeout
[  236.325317][ T5777] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  236.452892][ T9787] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2
[  236.489812][ T9787] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 528. Fsck?
[  236.528864][ T9787] REISERFS (device loop6): Remounting filesystem read-only
[  237.542753][ T9806] loop4: detected capacity change from 0 to 32768
[  237.728910][ T9806] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.762577][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1297'.
[  238.011259][ T9806] XFS (loop4): Ending clean mount
[  238.022218][ T9806] XFS (loop4): Quotacheck needed: Please wait.
[  238.130222][ T9806] XFS (loop4): Quotacheck: Done.
[  238.243456][ T9839] loop6: detected capacity change from 0 to 256
[  238.326191][ T7223] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.336263][ T9839] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1eaabb1a, utbl_chksum : 0xe619d30d)
[  238.361696][ T5777] Bluetooth: hci2: command 0x0405 tx timeout
[  239.087301][ T1098] wlan1: Trigger new scan to find an IBSS to join
[  239.711576][ T9871] loop4: detected capacity change from 0 to 32768
[  239.952270][ T9880] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1316'.
[  240.140908][ T9885] loop3: detected capacity change from 0 to 256
[  240.197363][ T3525] wlan1: Creating new IBSS network, BSSID f2:7d:bf:d1:12:8a
[  240.260045][ T9885] FAT-fs (loop3): Directory bread(block 64) failed
[  240.278470][ T9885] FAT-fs (loop3): Directory bread(block 65) failed
[  240.287667][ T9885] FAT-fs (loop3): Directory bread(block 66) failed
[  240.294299][ T9885] FAT-fs (loop3): Directory bread(block 67) failed
[  240.359998][ T9885] FAT-fs (loop3): Directory bread(block 68) failed
[  240.382752][ T9885] FAT-fs (loop3): Directory bread(block 69) failed
[  240.404552][ T9885] FAT-fs (loop3): Directory bread(block 70) failed
[  240.425898][ T9885] FAT-fs (loop3): Directory bread(block 71) failed
[  240.436527][ T5779] Bluetooth: hci2: command 0x0405 tx timeout
[  240.456871][ T9885] FAT-fs (loop3): Directory bread(block 72) failed
[  240.463506][ T9885] FAT-fs (loop3): Directory bread(block 73) failed
[  241.272659][ T9918] loop3: detected capacity change from 0 to 512
[  241.793042][ T9933] ima: Unable to open file: /e (-2)
[  241.793680][ T9932] ima: policy update failed
[  241.815311][   T28] audit: type=1802 audit(1789672300.491:96): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1338" res=0 errno=0
[  241.976409][   T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  242.173636][   T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  242.194027][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  242.206404][   T27] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  242.221399][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.242479][   T27] usb 4-1: config 0 descriptor??
[  242.250881][ T9930] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  242.272616][ T9943] loop0: detected capacity change from 0 to 512
[  242.336421][ T5828] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  242.340382][ T9943] EXT4-fs: Ignoring removed bh option
[  242.416457][ T9943] EXT4-fs (loop0): Test dummy encryption mode enabled
[  242.423272][ T9943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  242.505882][ T9943] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.1342: inode has both inline data and extents flags
[  242.554641][ T5828] usb 7-1: not running at top speed; connect to a high speed hub
[  242.592294][ T5828] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  242.619506][ T9943] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1342: couldn't read orphan inode 15 (err -117)
[  242.646289][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.648473][ T9943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.672358][ T5828] usb 7-1: Product: syz
[  242.688165][ T5828] usb 7-1: Manufacturer: syz
[  242.692892][ T5828] usb 7-1: SerialNumber: syz
[  242.717068][   T27] hid (null): unknown global tag 0xfd
[  242.768848][ T5828] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected
[  242.801299][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.805189][   T27] hid-generic 0003:1044:7A4D.000C: unexpected long global item
[  242.820935][ T5828] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  242.847951][   T27] hid-generic: probe of 0003:1044:7A4D.000C failed with error -22
[  242.860044][ T5828] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  242.919779][ T5828] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  242.937063][   T27] usb 4-1: USB disconnect, device number 12
[  242.971905][    C1] usb 7-1: malformed indat packet
[  242.977638][    C1] usb 7-1: malformed indat packet
[  242.983545][    C1] usb 7-1: malformed indat packet
[  242.989397][    C1] usb 7-1: malformed indat packet
[  242.994888][    C1] usb 7-1: malformed indat packet
[  243.000664][    C1] usb 7-1: malformed indat packet
[  243.059881][ T5828] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  243.239407][ T5828] usb 7-1: USB disconnect, device number 6
[  243.269433][ T5828] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  243.293480][ T5828] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  243.307151][ T9952] xt_hashlimit: size too large, truncated to 1048576
[  243.329426][ T5828] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  243.346449][ T5828] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  243.360407][ T5828] keyspan 7-1:1.0: device disconnected
[  243.374514][ T9953] xt_hashlimit: size too large, truncated to 1048576
[  243.916244][ T5828] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  244.103910][ T9963] zero sized request
[  244.116300][ T5828] usb 4-1: Using ep0 maxpacket: 8
[  244.128913][ T5828] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  244.166093][ T5828] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  244.186044][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  244.237369][ T5828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  244.258350][ T5828] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  244.286910][ T5828] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  244.297008][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.329902][ T5809] IPVS: starting estimator thread 0...
[  244.426177][ T9968] IPVS: using max 10 ests per chain, 24000 per kthread
[  244.556611][ T5828] usb 4-1: GET_CAPABILITIES returned 0
[  244.562203][ T5828] usbtmc 4-1:16.0: can't read capabilities
[  244.818246][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.829561][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.838677][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.847784][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.856881][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.877101][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.886268][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.895402][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.904472][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.932494][ T9965] loop6: detected capacity change from 0 to 32768
[  244.939255][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.948384][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.957507][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.966638][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  244.986503][ T9965] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1350 (9965)
[  245.009667][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  245.018802][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  245.027896][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  245.079787][ T5770] usb 4-1: USB disconnect, device number 13
[  245.126489][ T9965] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.142196][ T9965] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  245.151481][ T9965] BTRFS info (device loop6): max_inline at 9
[  245.158942][ T9965] BTRFS info (device loop6): using free space tree
[  245.232365][ T9965] BTRFS info (device loop6): enabling ssd optimizations
[  245.240117][ T9965] BTRFS info (device loop6): auto enabling async discard
[  245.386411][ T7683] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.960611][ T9997] ieee802154 phy0 wpan0: encryption failed: -22
[  246.637887][T10011] loop3: detected capacity change from 0 to 4096
[  246.737312][T10011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.943971][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.497626][ T5810] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  247.551992][T10013] loop4: detected capacity change from 0 to 40427
[  247.583908][T10013] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff
[  247.602884][T10013] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x30e4
[  247.616135][T10013] F2FS-fs (loop4): invalid crc value
[  247.624099][T10013] F2FS-fs (loop4): Found nat_bits in checkpoint
[  247.674763][T10013] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  247.698128][ T5810] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.730781][ T5810] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3
[  247.750944][ T5810] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  247.765106][T10013] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  247.773648][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.786674][ T5810] usb 7-1: config 0 descriptor??
[  247.885441][T10013] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  247.912410][T10013] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x10d/0x1030
[  248.013913][ T7223] syz-executor: attempt to access beyond end of device
[  248.013913][ T7223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.040115][ T7223] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.241954][ T5810] Bluetooth: Can't get state to change to load configuration err
[  248.249964][ T5810] Bluetooth: Loading sysconfig file failed
[  248.270264][ T5810] ath3k: probe of 7-1:0.0 failed with error -16
[  248.341165][T10046] loop3: detected capacity change from 0 to 1024
[  249.558861][T10073] program syz.3.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  249.915534][ T5809] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  249.999177][T10083] ip6gretap1: entered allmulticast mode
[  250.050082][T10071] loop4: detected capacity change from 0 to 40427
[  250.071310][T10071] F2FS-fs (loop4): invalid crc value
[  250.106299][T10071] F2FS-fs (loop4): Found nat_bits in checkpoint
[  250.128320][ T5809] usb 1-1: unable to get BOS descriptor or descriptor too short
[  250.161783][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.197213][ T5809] usb 1-1: string descriptor 0 read error: -22
[  250.215715][ T5809] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  250.246100][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.316102][ T5810] usb 7-1: USB disconnect, device number 7
[  250.329486][T10071] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  250.470951][ T1098] kworker/u4:6: attempt to access beyond end of device
[  250.470951][ T1098] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  250.508214][ T1098] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  250.751031][ T5770] wiimote 0005:057E:0306.000D: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  250.779863][ T5770] wiimote 0005:057E:0306.000D: New device registered
[  250.893225][T10088] loop3: detected capacity change from 0 to 32768
[  250.911891][ T5809] usb 1-1: current rate 2990353 is different from the runtime rate 48000
[  251.008655][T10088] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  251.028666][   T27] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  251.197876][T10088] XFS (loop3): Ending clean mount
[  251.248585][ T1197] usb 1-1: USB disconnect, device number 7
[  251.283701][   T27] usb 7-1: config 1 has an invalid interface number: 3 but max is 0
[  251.302796][   T27] usb 7-1: config 1 has no interface number 0
[  251.320955][   T27] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  251.344198][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.358798][T10106] loop4: detected capacity change from 0 to 256
[  251.380711][   T27] usb 7-1: Product: syz
[  251.384980][   T27] usb 7-1: Manufacturer: syz
[  251.407116][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  251.420543][   T27] usb 7-1: SerialNumber: syz
[  251.489517][T10106] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  251.657911][T10094] wiimote 0005:057E:0306.000D: Device removed
[  251.666881][   T27] usb 7-1: cannot find UAC_HEADER
[  251.708999][   T27] snd-usb-audio: probe of 7-1:1.3 failed with error -22
[  251.745829][   T27] usb 7-1: USB disconnect, device number 8
[  251.786165][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.877428][ T5828] wiimote 0005:057E:0306.000D: detected device: Nintendo Wii Remote (Gen 1)
[  251.998601][ T5828] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input15
[  252.050022][ T5828] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input16
[  252.111458][ T5828] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input14
[  252.269741][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'.
[  252.679116][T10137] netlink: 'syz.3.1410': attribute type 8 has an invalid length.
[  252.808968][T10141] loop0: detected capacity change from 0 to 64
[  253.193547][T10154] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  253.330251][T10160] syzkaller1: tun_chr_ioctl cmd 1074025677
[  253.350618][T10160] syzkaller1: linktype set to 768
[  253.539510][T10168] loop0: detected capacity change from 0 to 512
[  253.572272][T10168] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1425: corrupted in-inode xattr: e_value out of bounds
[  253.610022][T10168] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1425: couldn't read orphan inode 15 (err -117)
[  253.634882][T10168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.644697][T10174] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1427'.
[  253.849891][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.890765][T10178] ptp ptp0: delete virtual clock ptp5
[  253.926385][T10178] ptp ptp0: delete virtual clock ptp4
[  253.950165][T10178] ptp ptp0: delete virtual clock ptp3
[  253.987048][T10178] ptp ptp0: delete virtual clock ptp2
[  254.023877][T10180] loop0: detected capacity change from 0 to 512
[  254.033273][T10178] ptp ptp0: delete virtual clock ptp1
[  254.050773][T10178] ptp ptp0: only physical clock in use now
[  254.068868][T10180] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  254.127780][T10180] EXT4-fs (loop0): invalid journal inode
[  254.133590][T10180] EXT4-fs (loop0): can't get journal size
[  254.178196][T10180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  254.192808][T10180] System zones: 1-12, 13-13
[  254.212963][T10180] EXT4-fs (loop0): 1 truncate cleaned up
[  254.233106][T10180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.262549][T10170] loop4: detected capacity change from 0 to 40427
[  254.321340][T10170] F2FS-fs (loop4): Invalid segment/section count (24 != 3 * 1)
[  254.347495][T10170] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  254.370894][T10170] F2FS-fs (loop4): invalid crc value
[  254.402992][T10170] F2FS-fs (loop4): Found nat_bits in checkpoint
[  254.468552][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.551407][T10170] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  254.589295][T10170] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  254.729778][T10170] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  254.801512][T10170] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  255.024084][T10170] F2FS-fs (loop4): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0
[  255.542414][T10214] loop0: detected capacity change from 0 to 512
[  255.550746][T10214] EXT4-fs: Ignoring removed nobh option
[  255.642004][T10214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.656337][T10214] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.719710][T10214] Quota error (device loop0): do_check_range: Getting block 1280 out of range 0-5
[  255.843799][T10224] loop3: detected capacity change from 0 to 256
[  255.852569][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.893913][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.900872][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.068249][T10230] loop3: detected capacity change from 0 to 1024
[  256.237932][ T1142] hfsplus: b-tree write err: -5, ino 3
[  256.262108][ T5773] hfsplus: node 4:3 still has 1 user(s)!
[  257.724156][T10246] loop3: detected capacity change from 0 to 131072
[  257.736089][T10246] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  257.744279][T10246] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  257.772993][T10246] F2FS-fs (loop3): invalid crc value
[  257.789456][T10246] F2FS-fs (loop3): Found nat_bits in checkpoint
[  257.877801][T10246] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  257.885119][T10246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  258.019578][T10275] loop4: detected capacity change from 0 to 256
[  258.568962][T10286] size and base must be multiples of 4 kiB
[  258.571535][T10284] loop0: detected capacity change from 0 to 4096
[  258.585374][T10286] CPU: 0 PID: 10286 Comm: syz.4.1474 Not tainted syzkaller #0
[  258.592873][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  258.602975][T10286] Call Trace:
[  258.606264][T10286]  <TASK>
[  258.609202][T10286]  dump_stack_lvl+0x18c/0x250
[  258.613892][T10286]  ? show_regs_print_info+0x20/0x20
[  258.619094][T10286]  ? load_image+0x420/0x420
[  258.623601][T10286]  ? __might_fault+0xaa/0x120
[  258.628283][T10286]  ? __might_fault+0xc6/0x120
[  258.632956][T10286]  ? __might_fault+0xaa/0x120
[  258.637638][T10286]  mtrr_del+0xc3/0xf0
[  258.641624][T10286]  mtrr_ioctl+0xcb6/0x13a0
[  258.646051][T10286]  ? mtrr_close+0x200/0x200
[  258.650575][T10286]  ? __fget_files+0x28/0x460
[  258.655174][T10286]  ? mtrr_close+0x200/0x200
[  258.659679][T10286]  proc_reg_unlocked_ioctl+0x1d2/0x2c0
[  258.665140][T10286]  ? proc_reg_poll+0x290/0x290
[  258.669902][T10286]  __se_sys_ioctl+0xfd/0x170
[  258.674498][T10286]  do_syscall_64+0x55/0xb0
[  258.678928][T10286]  ? clear_bhb_loop+0x40/0x90
[  258.683606][T10286]  ? clear_bhb_loop+0x40/0x90
[  258.688286][T10286]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.694198][T10286] RIP: 0033:0x7fa79c39e159
[  258.698617][T10286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.718225][T10286] RSP: 002b:00007fa79d2d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.726647][T10286] RAX: ffffffffffffffda RBX: 00007fa79c625fa0 RCX: 00007fa79c39e159
[  258.735660][T10286] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  258.743646][T10286] RBP: 00007fa79c43506b R08: 0000000000000000 R09: 0000000000000000
[  258.751635][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.759615][T10286] R13: 00007fa79c626038 R14: 00007fa79c625fa0 R15: 00007ffd401b3ed8
[  258.767610][T10286]  </TASK>
[  258.813932][T10287] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.166994][T10291] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02
[  259.552387][T10302] loop0: detected capacity change from 0 to 136
[  259.679307][T10306] loop3: detected capacity change from 0 to 1024
[  259.744519][ T1197] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  259.954833][ T1197] usb 5-1: Using ep0 maxpacket: 8
[  259.968430][ T1197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  259.991606][ T1197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  260.013261][T10312] input: syz0 as /devices/virtual/input/input17
[  260.019787][ T1197] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  260.031157][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.087856][ T1197] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected
[  260.119072][ T1197] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  260.177989][T10314] loop6: detected capacity change from 0 to 128
[  260.253200][T10314] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  260.264895][T10317] loop3: detected capacity change from 0 to 512
[  260.283421][T10317] EXT4-fs: Ignoring removed nobh option
[  260.378805][T10314] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  260.428451][T10317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.529113][T10317] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.610274][T10317] Quota error (device loop3): do_check_range: Getting block 1280 out of range 0-5
[  260.646926][ T7683] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  260.746538][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.954142][T10331] tun0: tun_chr_ioctl cmd 1074812117
[  261.016909][   T27] usb 5-1: USB disconnect, device number 9
[  261.039743][   T27] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  261.078454][T10327] loop0: detected capacity change from 0 to 32768
[  261.084349][   T27] kobil_sct 5-1:1.0: device disconnected
[  261.137799][T10327] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  261.209028][T10327] XFS (loop0): Ending clean mount
[  261.265613][T10327] XFS (loop0): Quotacheck needed: Please wait.
[  261.292853][T10345] loop3: detected capacity change from 0 to 4096
[  261.316741][T10345] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  261.324035][T10327] XFS (loop0): Quotacheck: Done.
[  261.385484][T10327] XFS (loop0): User initiated shutdown received.
[  261.392171][T10327] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  261.407744][T10327] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  261.447020][T10345] ntfs3: loop3: ino=1a, mi_enum_attr
[  261.452434][T10345] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  261.463295][ T5769] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  261.474539][ T5810] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  261.476486][T10345] ntfs3: loop3: ino=1a, mi_enum_attr
[  261.487614][T10345] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  261.736062][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.764411][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.817698][ T5810] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  261.864812][ T5810] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  261.884207][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.909366][ T5810] usb 7-1: config 0 descriptor??
[  262.125277][T10353] loop4: detected capacity change from 0 to 4096
[  262.152730][T10353] EXT4-fs: Ignoring removed bh option
[  262.173081][T10353] EXT4-fs (loop4): stripe (13) is not aligned with cluster size (16), stripe is disabled
[  262.199399][T10353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.277524][T10353] EXT4-fs error (device loop4): ext4_empty_dir:3156: inode #12: block 80: comm syz.4.1500: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  262.302696][T10353] EXT4-fs (loop4): Remounting filesystem read-only
[  262.309490][T10353] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #12: comm syz.4.1500: directory missing '..'
[  262.353511][ T5810] plantronics 0003:047F:FFFF.000E: unbalanced delimiter at end of report description
[  262.364884][ T5864] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  262.370898][ T7223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.379392][ T5810] plantronics 0003:047F:FFFF.000E: parse failed
[  262.401598][ T5810] plantronics: probe of 0003:047F:FFFF.000E failed with error -22
[  262.573292][ T5810] usb 7-1: USB disconnect, device number 9
[  262.581901][ T5864] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  262.590198][ T5864] usb 1-1: config 0 has no interface number 0
[  262.608728][ T5864] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  262.618800][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.641656][ T5864] usb 1-1: Product: syz
[  262.647758][ T5864] usb 1-1: Manufacturer: syz
[  262.652420][ T5864] usb 1-1: SerialNumber: syz
[  262.665519][ T5864] usb 1-1: config 0 descriptor??
[  262.787710][T10367] loop4: detected capacity change from 0 to 4096
[  262.838694][T10368] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.885161][ T5864] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  262.916530][ T5864] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  262.929481][   T28] audit: type=1800 audit(1789672321.600:97): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1504" name="file1" dev="loop4" ino=15 res=0 errno=0
[  262.963061][ T5864] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  262.984885][ T5864] usb 1-1: media controller created
[  263.029256][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  263.146706][ T5864] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  263.217791][T10370] loop3: detected capacity change from 0 to 4096
[  263.258983][ T5864] usb 1-1: USB disconnect, device number 8
[  263.305913][T10370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.460636][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.921954][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'.
[  264.428308][T10401] loop3: detected capacity change from 0 to 4096
[  264.519194][T10404] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.520690][T10401] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  264.581743][T10401] NILFS (loop3): mounting fs with errors
[  264.728123][T10407] bond0: (slave dummy0): Error: Device can not be enslaved while up
[  264.970436][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1522'.
[  265.008629][T10413] vlan2: entered promiscuous mode
[  265.018129][T10413] dummy0: entered promiscuous mode
[  265.483961][ T5864] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  265.676240][ T5864] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  265.696511][ T5864] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  265.733965][ T5864] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  265.759953][ T5864] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  265.767233][T10438] loop0: detected capacity change from 0 to 1024
[  265.780790][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  265.804939][ T5864] usb 4-1: Product: syz
[  265.809152][ T5864] usb 4-1: Manufacturer: syz
[  265.845861][ T5864] usb 4-1: SerialNumber: syz
[  266.127527][ T5864] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  266.402064][   T27] usb 4-1: USB disconnect, device number 14
[  266.422627][   T27] usblp0: removed
[  267.109340][T10461] loop3: detected capacity change from 0 to 64
[  267.239347][T10461] hfs: get root inode failed
[  267.645772][T10474] loop6: detected capacity change from 0 to 512
[  267.682872][T10474] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  267.737513][T10474] EXT4-fs (loop6): orphan cleanup on readonly fs
[  267.760029][T10474] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.1549: bad orphan inode 15
[  267.807909][T10474] ext4_test_bit(bit=14, block=18) = 1
[  267.813384][T10474] is_bad_inode(inode)=0
[  267.868416][T10474] NEXT_ORPHAN(inode)=1023
[  267.872844][T10474] max_ino=32
[  267.909248][T10474] i_nlink=0
[  267.926047][T10474] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2974: inode #15: comm syz.6.1549: corrupted xattr block 19: e_value size too large
[  267.963800][T10474] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117)
[  267.981575][T10474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  268.126968][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.198054][ T5779] Bluetooth: hci3: command 0x0406 tx timeout
[  268.500524][T10484] loop6: detected capacity change from 0 to 1024
[  268.529932][T10484] EXT4-fs: Ignoring removed nomblk_io_submit option
[  268.582398][T10484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.781673][T10479] loop4: detected capacity change from 0 to 32768
[  268.821650][ T7683] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.828868][T10489] loop3: detected capacity change from 0 to 2048
[  268.856135][T10479] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.983343][T10489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.087282][T10479] XFS (loop4): Ending clean mount
[  269.109394][T10479] XFS (loop4): Quotacheck needed: Please wait.
[  269.140655][T10489] EXT4-fs error (device loop3): ext4_ext_precache:639: inode #2: comm syz.3.1554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  269.316231][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.337284][T10479] XFS (loop4): Quotacheck: Done.
[  269.462876][T10479] XFS (loop4): User initiated shutdown received.
[  269.487164][T10479] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  269.524638][T10479] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  269.622586][ T7223] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.681884][T10505] loop3: detected capacity change from 0 to 4096
[  269.690386][T10505] EXT4-fs: inline encryption not supported
[  269.728623][T10505] EXT4-fs (loop3): Test dummy encryption mode enabled
[  269.835721][T10505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.136045][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.573426][   T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  270.638947][T10519] loop4: detected capacity change from 0 to 40427
[  270.657183][T10519] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  270.666214][T10519] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  270.676374][ T5864] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  270.695166][T10519] F2FS-fs (loop4): invalid crc value
[  270.763063][   T23] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  270.782736][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.812285][   T23] usb 4-1: Product: syz
[  270.812561][T10519] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  270.818290][   T23] usb 4-1: Manufacturer: syz
[  270.828444][   T23] usb 4-1: SerialNumber: syz
[  270.836841][   T23] usb 4-1: config 0 descriptor??
[  270.842180][T10519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  270.854215][   T23] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 015
[  270.893709][ T5864] usb 7-1: Using ep0 maxpacket: 8
[  270.908075][ T5864] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  270.949640][ T5864] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  270.967940][ T5864] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  270.980697][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.004082][ T7223] syz-executor: attempt to access beyond end of device
[  271.004082][ T7223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  271.043026][ T7223] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  271.061271][ T5864] kobil_sct 7-1:1.0: KOBIL USB smart card terminal converter detected
[  271.100578][ T5864] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  271.206228][T10533] loop0: detected capacity change from 0 to 4096
[  271.272097][T10534] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.337599][   T23]  (null): failure reading functionality
[  271.376071][   T23] i2c i2c-1: connected i2c-tiny-usb device
[  271.381631][T10533] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  271.436908][T10533] Remounting filesystem read-only
[  271.498893][ T5769] NILFS (loop0): discard dirty page: offset=0, ino=6
[  271.506762][ T5769] NILFS (loop0): discard dirty block: blocknr=23, size=4096
[  271.515026][ T5769] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  271.530010][ T5769] NILFS (loop0): discard dirty block: blocknr=24, size=4096
[  271.540002][ T5769] NILFS (loop0): discard dirty page: offset=8192, ino=6
[  271.552414][ T5769] NILFS (loop0): discard dirty block: blocknr=25, size=4096
[  271.683649][ T5864] usb 4-1: USB disconnect, device number 15
[  271.914627][T10540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1571'.
[  271.962746][T10542] loop4: detected capacity change from 0 to 512
[  271.980728][ T5810] usb 7-1: USB disconnect, device number 10
[  272.026338][ T5810] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  272.052940][ T5810] kobil_sct 7-1:1.0: device disconnected
[  272.108965][T10542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.179664][T10542] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  272.457838][ T7223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.647531][T10553] binder: 10552:10553 ioctl c018620c 200000000240 returned -1
[  272.702642][T10548] loop0: detected capacity change from 0 to 32768
[  272.850936][   T28] audit: type=1800 audit(1789672331.530:98): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1574" name="file1" dev="loop0" ino=4 res=0 errno=0
[  272.874060][T10548] ERROR: (device loop0): diAllocAG: ipimap->i_size is wrong
[  272.874060][T10548] 
[  272.955051][T10564] ERROR: (device loop0): diWrite: ixpxd invalid
[  272.955051][T10564] 
[  272.988828][T10548] ERROR: (device loop0): remounting filesystem as read-only
[  272.996555][T10564] ERROR: (device loop0): remounting filesystem as read-only
[  272.996637][T10564] ERROR: (device loop0): txCommit: 
[  272.996637][T10564] 
[  273.030418][T10548] ialloc: diAlloc returned -5!
[  273.793074][    C1] net_ratelimit: 37 callbacks suppressed
[  273.808390][   T28] audit: type=1400 audit(1789672332.490:99): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=66226F pid=10590 comm="syz.0.1593" name=66226F offset=66
[  273.827987][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.254674][T10604] netlink: 'syz.4.1599': attribute type 5 has an invalid length.
[  274.273824][T10604] netlink: 'syz.4.1599': attribute type 1 has an invalid length.
[  274.330056][ T5777] Bluetooth: hci0: Zero size dump init pkt
[  274.363106][ T5864] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  274.573041][ T5864] usb 4-1: Using ep0 maxpacket: 32
[  274.588530][ T5864] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  274.604332][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.650447][ T5864] usb 4-1: config 0 descriptor??
[  274.691889][ T5864] as10x_usb: device has been detected
[  274.702410][ T5864] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  274.776651][ T5864] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  274.875196][ T5864] as10x_usb: error during firmware upload part1
[  274.892647][ T5864] Registered device nBox DVB-T Dongle
[  275.055112][ T5864] usb 4-1: USB disconnect, device number 16
[  275.329095][ T5864] Unregistered device nBox DVB-T Dongle
[  275.346927][ T5864] as10x_usb: device has been disconnected
[  275.812986][ T5828] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  275.869166][T10632] loop6: detected capacity change from 0 to 1024
[  276.005479][ T5828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  276.021992][ T5828] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  276.032285][ T5828] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  276.058486][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  276.070444][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  276.080379][ T5828] usb 1-1: Product: syz
[  276.086927][ T5828] usb 1-1: Manufacturer: syz
[  276.091615][ T5828] usb 1-1: SerialNumber: syz
[  276.356368][ T5828] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  276.603149][ T5828] usb 1-1: USB disconnect, device number 9
[  276.630090][ T5828] usblp0: removed
[  277.422800][ T5828] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  277.620425][ T5828] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  277.644380][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.653473][ T5828] usb 5-1: Product: syz
[  277.658252][ T5828] usb 5-1: Manufacturer: syz
[  277.669499][ T5828] usb 5-1: SerialNumber: syz
[  277.685592][ T5828] usb 5-1: config 0 descriptor??
[  277.710805][ T5828] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 010
[  278.137586][T10653] loop0: detected capacity change from 0 to 32768
[  278.144284][ T5828]  (null): failure reading functionality
[  278.158397][T10653] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.1619 (10653)
[  278.188661][ T5828] i2c i2c-1: connected i2c-tiny-usb device
[  278.210533][T10653] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  278.248317][T10653] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  278.282904][ T5885] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  278.293604][T10653] BTRFS info (device loop0): using free space tree
[  278.422758][T10653] BTRFS info (device loop0): enabling ssd optimizations
[  278.450360][T10653] BTRFS info (device loop0): auto enabling async discard
[  278.460814][ T5828] usb 5-1: USB disconnect, device number 10
[  278.515065][ T5885] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  278.552562][ T5885] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  278.562225][ T5885] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  278.596552][ T5885] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  278.616265][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  278.649463][ T5885] usb 7-1: Product: syz
[  278.664753][ T5885] usb 7-1: Manufacturer: syz
[  278.669437][ T5885] usb 7-1: SerialNumber: syz
[  278.890427][T10672] loop3: detected capacity change from 0 to 40427
[  278.948980][T10672] F2FS-fs (loop3): invalid crc value
[  278.966865][ T5885] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  278.998843][T10672] F2FS-fs (loop3): Found nat_bits in checkpoint
[  279.109988][ T5769] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  279.146780][T10672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  279.275481][ T5885] usb 7-1: USB disconnect, device number 11
[  279.336473][ T5885] usblp0: removed
[  279.376138][T10672] F2FS-fs (loop3): access invalid blkaddr:3
[  279.394902][T10672] CPU: 0 PID: 10672 Comm: syz.3.1629 Not tainted syzkaller #0
[  279.402386][T10672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  279.412900][T10672] Call Trace:
[  279.416315][T10672]  <TASK>
[  279.419266][T10672]  dump_stack_lvl+0x18c/0x250
[  279.423989][T10672]  ? show_regs_print_info+0x20/0x20
[  279.429223][T10672]  ? __lock_acquire+0x1336/0x7d80
[  279.434296][T10672]  f2fs_is_valid_blkaddr+0xe6c/0x15c0
[  279.439711][T10672]  f2fs_map_blocks+0xc20/0x4080
[  279.444600][T10672]  ? verify_lock_unused+0x140/0x140
[  279.449849][T10672]  ? f2fs_get_block_locked+0xe0/0xe0
[  279.455157][T10672]  ? __might_sleep+0xe0/0xe0
[  279.459765][T10672]  ? read_lock_is_recursive+0x20/0x20
[  279.465152][T10672]  ? f2fs_precache_extents+0x19f/0x260
[  279.470623][T10672]  ? down_write+0x16e/0x200
[  279.475115][T10672]  ? down_read_killable+0x340/0x340
[  279.475144][T10672]  ? up_write+0x1be/0x410
[  279.475165][T10672]  ? max_file_blocks+0xb0/0x1b0
[  279.475192][T10672]  f2fs_precache_extents+0x194/0x260
[  279.475212][T10672]  ? f2fs_pin_file_control+0x1a0/0x1a0
[  279.500657][T10672]  ? stack_trace_save+0xaa/0x100
[  279.505613][T10672]  ? stack_trace_snprint+0xf0/0xf0
[  279.510730][T10672]  ? __stack_depot_save+0x1f/0x660
[  279.515848][T10672]  f2fs_fiemap+0x13b/0x15b0
[  279.520372][T10672]  ? f2fs_overwrite_io+0x200/0x200
[  279.525496][T10672]  ? __might_fault+0xaa/0x120
[  279.530178][T10672]  ? __lock_acquire+0x7d80/0x7d80
[  279.535216][T10672]  ? __might_fault+0xaa/0x120
[  279.539900][T10672]  ? __might_fault+0xc6/0x120
[  279.544603][T10672]  ? __might_fault+0xaa/0x120
[  279.549304][T10672]  do_vfs_ioctl+0x14fe/0x1cc0
[  279.554000][T10672]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  279.559655][T10672]  ? tomoyo_path_number_perm+0x217/0x5e0
[  279.565301][T10672]  ? __lock_acquire+0x7d80/0x7d80
[  279.570318][T10672]  ? slab_free_freelist_hook+0x130/0x1a0
[  279.575951][T10672]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[  279.575988][T10672]  ? __kmem_cache_free+0xba/0x1f0
[  279.576022][T10672]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  279.576050][T10672]  ? tomoyo_path_number_perm+0x217/0x5e0
[  279.576078][T10672]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  279.576137][T10672]  ? __fget_files+0x28/0x460
[  279.582110][T10672]  ? bpf_lsm_file_ioctl+0x9/0x10
[  279.582138][T10672]  ? security_file_ioctl+0x80/0xa0
[  279.592771][T10672]  __se_sys_ioctl+0x83/0x170
[  279.592804][T10672]  do_syscall_64+0x55/0xb0
[  279.592831][T10672]  ? clear_bhb_loop+0x40/0x90
[  279.592857][T10672]  ? clear_bhb_loop+0x40/0x90
[  279.603900][T10672]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  279.603931][T10672] RIP: 0033:0x7f03b759e159
[  279.603950][T10672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.603974][T10672] RSP: 002b:00007f03b846f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  279.603997][T10672] RAX: ffffffffffffffda RBX: 00007f03b7825fa0 RCX: 00007f03b759e159
[  279.613889][T10672] RDX: 0000200000005880 RSI: 00000000c020660b RDI: 0000000000000004
[  279.613905][T10672] RBP: 00007f03b763506b R08: 0000000000000000 R09: 0000000000000000
[  279.613919][T10672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.613930][T10672] R13: 00007f03b7826038 R14: 00007f03b7825fa0 R15: 00007ffec62ccae8
[  279.613966][T10672]  </TASK>
[  279.614011][    C0] vkms_vblank_simulate: vblank timer overrun
[  279.645826][    C1] net_ratelimit: 42 callbacks suppressed
[  279.677277][    C0] vkms_vblank_simulate: vblank timer overrun
[  279.889007][ T5773] syz-executor: attempt to access beyond end of device
[  279.889007][ T5773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  279.960147][ T5773] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  280.246554][T10707] loop0: detected capacity change from 0 to 512
[  280.295247][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'.
[  280.327025][T10711] IPVS: Error joining to the multicast group
[  280.407339][T10707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.619395][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.848999][T10723] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1641'.
[  281.234494][T10739] loop3: detected capacity change from 0 to 256
[  281.282433][ T1197] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  281.464794][ T1197] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  281.495661][ T1197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.559893][ T1197] usb 7-1: config 0 descriptor??
[  281.734763][T10754] program syz.3.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.816740][ T1197] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  281.846571][ T1197] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  282.043237][T10764] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  282.059063][ T1197] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2
[  282.082667][ T1197] [drm] Initialized udl on minor 2
[  282.308739][T10770] loop0: detected capacity change from 0 to 2048
[  282.351987][T10770] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  282.373733][T10772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1661'.
[  282.386352][T10770] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  282.423857][T10770] UDF-fs: Scanning with blocksize 512 failed
[  282.440112][ T1197] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  282.486596][ T1197] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  282.519204][ T5885] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  282.541225][T10770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.551174][ T1197] usb 7-1: USB disconnect, device number 12
[  282.573401][ T5885] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  283.557537][T10782] loop3: detected capacity change from 0 to 32768
[  283.675204][T10782] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  283.805463][T10782] (syz.3.1666,10782,1):ocfs2_double_lock:1197 ERROR: status = -2
[  283.843277][T10782] (syz.3.1666,10782,1):ocfs2_rename:1306 ERROR: status = -2
[  283.850691][T10782] (syz.3.1666,10782,1):ocfs2_rename:1697 ERROR: status = -2
[  284.090091][ T5773] ocfs2: Unmounting device (7,3) on (node local)
[  284.286348][T10788] loop0: detected capacity change from 0 to 40427
[  284.300523][T10788] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  284.308457][T10788] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  284.330034][T10788] F2FS-fs (loop0): invalid crc_offset: 33558524
[  284.370246][T10788] F2FS-fs (loop0): Found nat_bits in checkpoint
[  284.477404][T10788] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  284.490454][T10788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  284.692101][ T5828] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  284.727789][T10829] loop3: detected capacity change from 0 to 64
[  284.832510][ T1142] net_ratelimit: 42 callbacks suppressed
[  284.888092][ T5828] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  284.912825][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.939894][ T5828] usb 7-1: config 0 descriptor??
[  284.976379][ T5828] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  285.183983][ T5828] gp8psk: usb in 128 operation failed.
[  285.204254][T10833] loop3: detected capacity change from 0 to 512
[  285.229030][T10833] EXT4-fs: Ignoring removed nobh option
[  285.256818][T10833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  285.315961][T10833] EXT4-fs (loop3): 1 truncate cleaned up
[  285.338867][T10833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.410729][T10833] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  285.428153][ T5828] gp8psk: FW Version = 0.00.0 (0x0)  Build 2000/00/00
[  285.447733][T10827] loop4: detected capacity change from 0 to 32768
[  285.513843][T10827] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.1685 (10827)
[  285.581066][T10827] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  285.604082][T10827] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  285.613929][T10827] BTRFS info (device loop4): using free space tree
[  285.637527][ T5828] gp8psk: usb in 149 operation failed.
[  285.654594][ T5828] gp8psk: failed to get FPGA version
[  285.675043][ T5828] gp8psk: usb in 138 operation failed.
[  285.681595][ T5828] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  285.718028][T10827] BTRFS info (device loop4): enabling ssd optimizations
[  285.730773][T10827] BTRFS info (device loop4): auto enabling async discard
[  285.742120][ T5828] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  285.755532][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.796240][ T5828] usb 7-1: USB disconnect, device number 13
[  286.062157][ T7223] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  286.402975][T10864] sctp: [Deprecated]: syz.3.1694 (pid 10864) Use of struct sctp_assoc_value in delayed_ack socket option.
[  286.402975][T10864] Use struct sctp_sack_info instead
[  286.446150][T10868] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  286.464734][ T5764] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop4 scanned by udevd (5764)
[  286.966105][T10884] loop6: detected capacity change from 0 to 64
[  287.081855][T10884] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  287.138436][T10887] program syz.3.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  287.634036][ T5777] block nbd0: Receive control failed (result -32)
[  287.656094][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'.
[  287.704152][T10906] loop3: detected capacity change from 0 to 16
[  287.772063][T10906] erofs: (device loop3): mounted with root inode @ nid 36.
[  287.932515][T10914] WARNING! power/level is deprecated; use power/control instead
[  287.973115][T10917] netlink: 'syz.0.1716': attribute type 8 has an invalid length.
[  287.980870][T10917] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1716'.
[  288.003242][T10917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1716'.
[  288.120288][T10919] loop3: detected capacity change from 0 to 128
[  288.467404][T10932] 
: renamed from bond0 (while UP)
[  288.581706][   T23] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  288.781671][   T23] usb 7-1: Using ep0 maxpacket: 16
[  288.806068][   T23] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.857698][   T23] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.885645][   T23] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  288.919981][   T23] usb 7-1: config 0 interface 0 has no altsetting 0
[  288.937227][   T23] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  288.948921][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.988706][   T23] usb 7-1: config 0 descriptor??
[  289.417003][   T23] hid (null): report_id 49134 is invalid
[  289.429341][T10953] loop4: detected capacity change from 0 to 512
[  289.442941][   T23] hid (null): unknown global tag 0xd
[  289.462728][   T23] hid (null): unknown global tag 0xc
[  289.495616][   T23] hid (null): unknown global tag 0xc
[  289.505745][T10953] EXT4-fs error (device loop4): __ext4_iget:5091: inode #11: block 1: comm syz.4.1732: invalid block
[  289.516152][   T23] hid (null): global environment stack overflow
[  289.567837][T10953] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1732: couldn't read orphan inode 11 (err -117)
[  289.620208][ T1197] usb 7-1: USB disconnect, device number 14
[  289.775191][T10953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.996149][ T7223] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.111435][    C0] net_ratelimit: 43 callbacks suppressed
[  290.350090][T10962] loop6: detected capacity change from 0 to 136
[  290.395227][T10962] Attempt to read inode for relocated directory
[  291.225137][T10964] loop0: detected capacity change from 0 to 32768
[  291.424708][T10980] ialloc: diAlloc returned -28!
[  291.809717][T10968] loop6: detected capacity change from 0 to 32768
[  291.900394][T10968] ERROR: (device loop6): dbAlloc: the hint is outside the map
[  291.900394][T10968] 
[  291.921717][ T5828] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  291.938253][T10968] ERROR: (device loop6): remounting filesystem as read-only
[  292.030091][ T7683] ------------[ cut here ]------------
[  292.036767][ T7683] kernel BUG at fs/jfs/inode.c:175!
[  292.082139][ T7683] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  292.088234][ T7683] CPU: 1 PID: 7683 Comm: syz-executor Not tainted syzkaller #0
[  292.093801][ T6183] inotify_handle_inode_event: group=ffff888031872800 mark=ffff888078389320 mask=8000
[  292.095781][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  292.113338][ T6183] fsnotify_insert_event: group=ffff888031872800 event=ffff88801ce59cc0
[  292.115280][ T7683] RIP: 0010:jfs_evict_inode+0x424/0x430
[  292.125520][ T5141] get_one_event: group=ffff888031872800 event=ffff88801ce59cc0
[  292.129016][ T7683] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f6 6a df fe e9 16 fe ff ff e8 ec de 86 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54
[  292.129032][ T7683] RSP: 0018:ffffc900038e7b08 EFLAGS: 00010293
[  292.129049][ T7683] RAX: ffffffff8300ac64 RBX: ffff88805c727330 RCX: ffff88802b385a00
[  292.129061][ T7683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805c727330
[  292.129072][ T7683] RBP: 0000000000000001 R08: ffffffff911eb647 R09: 1ffffffff223d6c8
[  292.129084][ T7683] R10: dffffc0000000000 R11: fffffbfff223d6c9 R12: dffffc0000000000
[  292.129097][ T7683] R13: dffffc0000000000 R14: ffff88805c726fb8 R15: ffff88805c727368
[  292.129109][ T7683] FS:  000055555997f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  292.129124][ T7683] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  292.129137][ T7683] CR2: 0000001b3031eff4 CR3: 0000000061854000 CR4: 00000000003506e0
[  292.129154][ T7683] Call Trace:
[  292.129160][ T7683]  <TASK>
[  292.129167][ T7683]  ? jfs_write_inode+0x220/0x220
[  292.129193][ T7683]  evict+0x4b7/0x8a0
[  292.129213][ T7683]  ? xa_load+0x64/0x2e0
[  292.129235][ T7683]  ? proc_nr_inodes+0x230/0x230
[  292.129254][ T7683]  ? do_raw_spin_unlock+0x121/0x230
[  292.129277][ T7683]  ? do_raw_spin_unlock+0x121/0x230
[  292.129299][ T7683]  evict_inodes+0x64a/0x6e0
[  292.129318][ T7683]  ? clear_inode+0x150/0x150
[  292.129336][ T7683]  ? dentry_kill+0xb8/0x290
[  292.129360][ T7683]  generic_shutdown_super+0x97/0x2b0
[  292.129378][ T7683]  kill_block_super+0x44/0x90
[  292.129393][ T7683]  deactivate_locked_super+0x97/0x100
[  292.129411][ T7683]  cleanup_mnt+0x3d7/0x460
[  292.129431][ T7683]  task_work_run+0x1d4/0x260
[  292.137014][ T5141] fsnotify_remove_first_event: group=ffff888031872800 event=ffff88801ce59cc0
[  292.156527][ T7683]  ? task_work_cancel+0x220/0x220
[  292.156555][ T7683]  ? exit_to_user_mode_loop+0x3b/0x110
[  292.156577][ T7683]  exit_to_user_mode_loop+0xe6/0x110
[  292.156596][ T7683]  exit_to_user_mode_prepare+0xee/0x180
[  292.156599][    C0] virtqueue callback for ffff88814004f400 (ffffffff84a02460)
[  292.156617][ T7683]  syscall_exit_to_user_mode+0x1a/0x50
[  292.156634][ T7683]  do_syscall_64+0x61/0xb0
[  292.156654][    C0] virtqueue interrupt with no work for ffff88814004f200
[  292.156653][ T7683]  ? clear_bhb_loop+0x40/0x90
[  292.156666][    C0] virtqueue interrupt with no work for ffff88814004f000
[  292.156674][ T7683]  ? clear_bhb_loop+0x40/0x90
[  292.156693][ T7683]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  292.156711][ T7683] RIP: 0033:0x7fa92619f397
[  292.156727][ T7683] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  292.156742][ T7683] RSP: 002b:00007ffc650af608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  292.156767][ T7683] RAX: 0000000000000000 RBX: 00007fa9262344bb RCX: 00007fa92619f397
[  292.156780][ T7683] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc650af6c0
[  292.156791][ T7683] RBP: 00007ffc650af6c0 R08: 00007ffc650b06c0 R09: 00000000ffffffff
[  292.156803][ T7683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc650b0750
[  292.156814][ T7683] R13: 00007fa9262344bb R14: 000000000004746b R15: 00007ffc650b0790
[  292.156834][ T7683]  </TASK>
[  292.156854][ T7683] Modules linked in:
[  292.157078][    C1] virtqueue callback for ffff888142a69600 (ffffffff85c745d0)
[  292.460762][ T1197] Added buffer head 0 to ffff88814004f400
[  292.461250][    C1] virtqueue callback for ffff888142a69600 (ffffffff85c745d0)
[  292.474192][    C1] No more buffers in queue
[  292.478670][    C1] eth0: xmit ffff8880628808c0 42:01:0a:80:00:01
[  292.480140][ T5769] kernfs backing_file: removing
[  292.484976][    C1] Added buffer head 1 to ffff888142a69800
[  292.485006][    C1] virtqueue callback for ffff888142a69800 (ffffffff85c746c0)
[  292.485985][    C1] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 12)
[  292.500234][ T5769] kernfs offset: removing
[  292.505202][    C1] Sent skb ffff8880628808c0
[  292.514970][ T5769] kernfs sizelimit: removing
[  292.519256][    C1] No more buffers in queue
[  292.523857][ T5769] kernfs autoclear: removing
[  292.528367][    C1] Receiving skb proto 0x0800 len 436 type 0
[  292.532790][ T5769] kernfs partscan: removing
[  292.537359][    C1] Receiving skb proto 0x0800 len 52 type 0
[  292.537376][    C1] Receiving skb proto 0x0800 len 52 type 0
[  292.537409][    C1] Receiving skb proto 0x0800 len 756 type 0
[  292.537424][    C1] No more buffers in queue
[  292.537719][    C1] No more buffers in queue
[  292.543771][ T5769] kernfs dio: removing
[  292.548132][    C1] eth0: xmit ffff88802f2f2000 42:01:0a:80:00:01
[  292.554007][ T5769] kernfs loop: removing
[  292.559759][    C1] Added buffer head 1 to ffff888142a69800
[  292.565657][    C1] virtqueue callback for ffff888142a69800 (ffffffff85c746c0)
[  292.565814][ T5769] kobject: 'loop0' (ffff8880200a1968): kobject_uevent_env
[  292.570412][    C1] Sent skb ffff88802f2f2000
[  292.574815][ T5769] kobject: 'loop0' (ffff8880200a1968): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  292.578649][    C1] No more buffers in queue
[  292.628409][    C1] eth0: xmit ffff88802f2f2280 42:01:0a:80:00:01
[  292.634677][    C1] Added buffer head 1 to ffff888142a69800
[  292.640391][    C1] virtqueue callback for ffff888142a69800 (ffffffff85c746c0)
[  292.648283][    C1] Sent skb ffff88802f2f2280
[  292.651183][ T7683] ---[ end trace 0000000000000000 ]---
[  292.652896][    C1] No more buffers in queue
[  292.658217][ T7683] RIP: 0010:jfs_evict_inode+0x424/0x430
[  292.658243][ T7683] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f6 6a df fe e9 16 fe ff ff e8 ec de 86 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54
[  292.658257][ T7683] RSP: 0018:ffffc900038e7b08 EFLAGS: 00010293
[  292.664316][    C1] No more buffers in queue
[  292.674583][ T5141] inotify_read: group=ffff888031872800 kevent=ffff88801ce59cc0
[  292.687963][    C1] No more buffers in queue
[  292.688204][    C1] No more buffers in queue
[  292.697340][ T5769] kobject: 'loop0' (ffff8880200a1968): kobject_uevent_env
[  292.701714][   T23] nf_nat: Already setup manip DST for ct ffff888029a53e00 (status bits 0x188)
[  292.710172][ T7683] 
[  292.710748][   T23] nf_nat: Already setup manip SRC for ct ffff888029a53e00 (status bits 0x188)
[  292.717588][T10986] kcov: kcov_start: t = ffff88802d659e00, size = 524288, area = ffffc90004be9000
[  292.725818][    C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq
[  292.731524][ T7683] RAX: ffffffff8300ac64 RBX: ffff88805c727330 RCX: ffff88802b385a00
[  292.733414][    C1] kcov: kcov_start: t = ffff88801c66bc00, size = 262144, area = ffffc900020d1000
[  292.743158][ T5769] kobject: 'loop0' (ffff8880200a1968): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  292.751336][    C1] kcov: kcov_move_area: ffffc900161a6000 1048576 <= ffffc900020d1000 14
[  292.752896][ T5828] usb 4-1: USB quirks for this device: 0x8
[  292.783969][ T7683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805c727330
[  292.787192][ T5141] copy_event_to_user: group=ffff888031872800 event=ffff88801ce59cc0
[  292.801458][T10987] kcov: kcov_start: t = ffff888029e01e00, size = 524288, area = ffffc9000d59b000
[  292.827096][    C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq
[  292.835283][    C1] kcov: kcov_start: t = ffff888078540000, size = 262144, area = ffffc900020d1000
[  292.838098][ T7683] RBP: 0000000000000001 R08: ffffffff911eb647 R09: 1ffffffff223d6c8
[  292.844411][    C1] kcov: kcov_move_area: ffffc900161a6000 1048576 <= ffffc900020d1000 14
[  292.845406][ T5141] inotify_read: group=ffff888031872800 kevent=0000000000000000
[  292.867580][T10986] kcov: kcov_task_exit: t = ffff88802d659e00, kcov->t = ffff88802d659e00
[  292.869362][    C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq
[  292.881324][ T7683] R10: dffffc0000000000 R11: fffffbfff223d6c9 R12: dffffc0000000000
[  292.885479][    C1] kcov: kcov_start: t = ffff88807d895a00, size = 262144, area = ffffc900020d1000
[  292.901384][T10987] kcov: kcov_task_exit: t = ffff888029e01e00, kcov->t = ffff888029e01e00
[  292.902528][    C1] kcov: kcov_move_area: ffffc900161a6000 1048576 <= ffffc900020d1000 14
[  292.919778][ T5828] usb 4-1: skipped 1 descriptor after interface
[  292.926431][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.937430][ T5828] usb 4-1: udev 17, busnum 4, minor = 400
[  292.943257][ T5828] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  292.943943][ T7683] R13: dffffc0000000000 R14: ffff88805c726fb8 R15: ffff88805c727368
[  292.953026][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.969209][ T5758] No more buffers in queue
[  292.973724][ T5758] eth0: xmit ffff88802f395500 42:01:0a:80:00:01
[  292.980028][ T5758] Added buffer head 1 to ffff888142a69800
[  292.982064][ T7683] FS:  000055555997f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  292.985830][    C1] virtqueue callback for ffff888142a69800 (ffffffff85c746c0)
[  293.002210][    C1] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3)
[  293.012355][ T7683] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  293.013944][    C1] Sent skb ffff88802f395500
[  293.025002][    C1] No more buffers in queue
[  293.029592][ T5828] device: '4-1': device_add
[  293.034254][ T5777] Bluetooth: hci3: command 0x0406 tx timeout
[  293.039827][ T7223] send_to_group: group=ffff888031872800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888021ae1800 data_type=1 dir=0000000000000000 cookie=0
[  293.040275][ T5777] hci3: err 0x6e
[  293.058491][ T7683] CR2: 00007fa79c3eb840 CR3: 0000000061854000 CR4: 00000000003506f0
[  293.059370][ T5828] kobject: '4-1' (ffff88823bcfa8a8): kobject_add_internal: parent: 'usb4', set: 'devices'
[  293.070488][ T5769] send_to_group: group=ffff888031872800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88802ecbe900 data_type=1 dir=0000000000000000 cookie=0
[  293.077404][ T5777] hci3 cmd_cnt 1 cmd queued 0
[  293.077479][ T5828] usb 4-1: ACPI companion not found
[  293.102454][ T5828] usb 4-1: No ACPI support
[  293.103908][ T7683] Kernel panic - not syncing: Fatal exception
[  293.107127][ T7683] Kernel Offset: disabled