last executing test programs:

57.697994268s ago: executing program 1 (id=13788):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc)

57.412712119s ago: executing program 1 (id=13792):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000200))

56.995938114s ago: executing program 1 (id=13799):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x150, 0x24, 0xf0b, 0x78bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0x3, 0x7, 0x10000e, 0x9, 0x13, 0xc, 0x3}}, @TCA_RED_STAB={0x104, 0x2, "dffc81f584d4f47cc5d1a0ea465f1dbce7dedb20829212a82a1570fbdc9d7910afe8885620383df50150b5f034dc6efc6f62daa1a0a0bfb26aa86a69c96a385df5537fc6ef9700edba7e11540f6030ea4250b6cf3d9693948e2438044bcaf7bb7a0c3715660c2120b502fe4078228fedec4e02aff9fa59233fb3ea9dddfc44809dcb3956d9997295475f00b35d44c4113cf11751c1889eac880027cdd067512aa9f794a77c9193b65bb7587cb97751b16232e0e33cbd2efb03f30c688b2472268746648d3e4e5e30c0670203c48be3fddde29f5be076356f5c9beca1bbca19655fe5c9f22eaf90481e20395891d47f9823d78c95b77335df36db962c368f7c5b"}]}}]}, 0x150}}, 0x0)

56.703827041s ago: executing program 1 (id=13804):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f0000000580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

56.125802464s ago: executing program 1 (id=13810):
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}])
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000101401"], 0x30}}, 0x94)

55.170874478s ago: executing program 1 (id=13816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x44}}, 0x0)

54.648683881s ago: executing program 32 (id=13816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x44}}, 0x0)

3.129580209s ago: executing program 0 (id=14421):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006)

2.792614288s ago: executing program 0 (id=14427):
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x3c, 0x0, 0x9})
close(r0)

2.676412268s ago: executing program 3 (id=14429):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x400454d0, 0x0)

2.532894532s ago: executing program 0 (id=14433):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f00000003c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878ce3db471a5a29b9509986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b", @ANYRESHEX, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b383c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bde666812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aafdfda02823a69030b19126f82a4", @ANYRES8, @ANYRESOCT], 0x21, 0x1523, &(0x7f0000002080)="$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")
r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x3, 0x1d1}, &(0x7f0000000040), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)}, 0x1)

2.466343831s ago: executing program 6 (id=14435):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

2.278755293s ago: executing program 3 (id=14438):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84000, 0x0)

2.259444722s ago: executing program 6 (id=14439):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x0)

2.026722842s ago: executing program 3 (id=14443):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x1, 0x0)
read(r0, 0x0, 0x700)

2.017398968s ago: executing program 6 (id=14444):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20040818)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364", 0x55}, {&(0x7f0000000040)="fe07e4ad9a397dadd913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x4, &(0x7f0000000080)=[@mark={{0x10, 0x1, 0x24, 0x80d}}], 0x18}, 0x4000081)

1.99754656s ago: executing program 0 (id=14445):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)

1.946256449s ago: executing program 5 (id=14446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6a, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.828322794s ago: executing program 6 (id=14447):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000200)=0xfffffffd, 0x4)

1.820797669s ago: executing program 2 (id=14448):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = fsopen(&(0x7f0000000240)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.682881632s ago: executing program 5 (id=14449):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5)

1.56409472s ago: executing program 2 (id=14451):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0), 0x4)

1.505074425s ago: executing program 5 (id=14452):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836", 0x27}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115", 0x2f}], 0x2}, 0x24000008)

1.499988596s ago: executing program 6 (id=14453):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18}, 0x20008000)
bind$l2tp6(r0, 0x0, 0x0)

1.306744821s ago: executing program 2 (id=14454):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@gettaction={0x20, 0x32, 0x605, 0x70bd26, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xffffffffffffff9f, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

1.306319874s ago: executing program 5 (id=14456):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)="97", 0x1)
sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4)

1.126284903s ago: executing program 4 (id=14457):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1000000}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4)

1.100622727s ago: executing program 2 (id=14458):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

1.081738348s ago: executing program 5 (id=14459):
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0xe, 0x9e, 0x0, 0x0, 0x1, 0xa41ef7c})
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1e, 0x4)

940.146051ms ago: executing program 0 (id=14460):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@errors_remount}, {}, {@noquota}, {}, {@errors_continue}, {@grpquota}]}, 0x24, 0x628f, &(0x7f00000065c0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD/eM2fmvHPmPWfn2fV/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzW55zdwnhrIsa/zJ/9qeZc9r/Hvr5PZ82Ss3e4QAAADAev0i//u569OCw6u4U9M6//ySb315cXFxMXv3yJ+PfWZxMd0wmWVjW7Isvy166gfvGWpeJ3gsmxgabvp6uMfmR3rcPtrj9rEet4/3uH1Lj9snety+bAcss7X4eUz+YLvzf24vdml2QzaW37a7w70eG9oyPBx/lpMbyu+zOHYim89OZXPZTMv6xbpD+fpfvaWxrTdmcVvDTdva2ZghP3n0eBzDUNjHu1u2tfSY0Y9enU3+9CePHv/b88/e1Kn23A0tj1eM8/ZdjXF+LCwpxjqUbUn7JI5zuGmcOzu8JiMt4xzK79f4d/s4n1vlOEeWhrmh2l/ziWw4//e38/002vxjvbSfdoZlP7s1y7JLS8NuX2fZtrLhbFvLkuGl12eimJGNx2hMpRdko2uap7esYp426uzu1nnafkzE1/+WcL/RFcbQ/DL96KPjTa/7zxevZJ5GjWe90rHSPgf7fayUZQ7GefHt/Ek/3nEO7g7P/9HbVp6DHedOhzmYnnfTHNzVaw4Oj4/kY04vwlB+n6U5uKdl/ZF8S0N5fea27nNw+vzDZ6cXPvyRu+YfPnZy7uTc6X179szs27//4MGD0yfmT83NFH9f4d4uv23ZcDoGdoV9F4+Bl7et2zxVFz8/vuz8e6XH4USX43B727r9Pg5H25/c0MYckMvndHFsvLOx0ycuD2crHGP563PH+o/D9LybjsPRpuOw4/eUDsfh6CqOw8Y6Z+9Y3XuW0aY/ncaw8veC9c3B7U1zsP39SPsc7Pf7kbLMwYkwL757x8rfC3aG8T4+tdb3IyPL5mB6uuHc01iS3u9PHMxLp3l5c+OGa8azCwtz5+5+5Nj58+f2ZKFsiBc2zZX2+bqt6Tlly+br8Jrn6+H5lzx+c4fl28O+mrir8dfEiq9VY5177u7+WuXf3Trvz5ale7NQ+myj92en7+aN/TmeZZ/9xkcf/Nqjn33Nivuz0W9+bHr978VTX9p0/h1b4fwb+/5fFttLD/XYyNhocfyOpL0z1nI+bn2pRvNz11C+7eemV3c+Hgt/Nvp8fEOX8/GOtnX7fT4ea39y8Xw81OunHevT/npOhHlyaqb7+bixzo69a52To13Px7eGOhT2/ytCp5D6oqa5s9K8TdsaHR0Lz2s0bqF1nu5rWX8s9GaNbT25N7wpTKNc3Ty9/dZi/ZGm+0UbNU8n29bt9zxNP/taaZ4O9frp25Vpfz0nwry4YV/3edpY5+l71n/u3Br/2XTuHO81B8dGxhtjHkuTMD/fZ4tb4xy8OzuenclOZbP5reP5fBrKtzV17+rOlePhz0afK3d0mYO3t63b7zmYvo+tNPeGRpc/+T5ofz0nwrx44t7uc7CxzmsP9Pe96+1hSVqn6b1r+8/XVvqZ181tu+lqzZXRMM5vHOj+s9nGOqcOrrXP7L6f7gxLrumwn9qP35WOqdlsY/bTjjDOZw+uvJ8a42ms85lDq5xPh7Msu/jB+/Of94bfr1y88J0vt/zepdPvdC5+8P4fX3vin9YyfgAG3y+Lsq34Xtf0m6nV/P4fAAAAGAix7x8ONdH/AwAAQGXEvj/+r/BE/w8AAACVEfv+0VCTKvT/f9x7lR2vfXb+lxezlMxfDOLtaTc8UKwXM64z4evJxSWN5fd/ce5//vHi6oY3nGXZzx/4o47r73ggjqswGcb51Otaly/z5btWte2jD11M223Or38uPH58PqudBp0iuDNZln31+k/l25l8z+W8Pv3A0bw+eOnxxxrrPHeo+Dre/5kXFuv/VQj/Hj5xrOX+z4T98MNQZ97UeX/E+33p8it2HnjX0vbi/YZ2XZc/7SfeWzxu/JycTz9WrB/380rj/9onn/xSY/1HXtZ5/BeHO4//yfC4Xwz1f19crN/8GjS+jvf7eBh/3F68391f+HrH8T/1iWL9s68v1jsaatz+7eHr3a9/dr55fz0ydKzleWVvKNaL25/5zp/mt8fHi4/fPv6JI5db9kf7/Hj634vHmW5bPy6P24n+oW37jcdpnp9x+0/+ydGW/dxr+089+MyLG4/bvv0729Y7+8E78u0vPV7rJzb99cc/1XF7cTyH//5sy/M5/PZwHIftP/HeMB/D7f/3VPF47Z+ucPTtreefuP7ntl9seT7RG39abP+pV53M65aJrduued611116aWPfZdm3txSP12v7J//mTMv4P39jsT/i7TGj3779lcTtn/vQ1OkzCxfmZ9NeffT6/LNz3lyMJ473+nBubf/6yJnz75s7NzkzOZNlk9X9CL0r9oVQf1yUS93XXlx2Br3jofB63vyXX9122799Mi7/j3cWyy+/qfi+9fKw3qfD8u3h9Vvb9pd74pYb8+N76OkwwsXlnxe8Hjt3//fBXp/vmwvPv/19QZzvZ1/0vnw/NG7Lv2/E43qd4//ebPE4Xwn7dTF8MvOuG5e217x+/GyEy+8ojvd1779wmouv69+F1/stPyweP44rPt/vhfcxX9/Rer6L8+MrF4fbHz//FI9L4XySXSpuj2vF/X35uRs7Di9+Dkl26ab86z9Lj3PTmp7mShY+vDB9av70hUemz88tnJ9e+PBHjjx85sLp80fyz/I88v5e9186P23Lz0+zc/vvyfKz1ZmiXGWbPf6zDx2fPTBz2+zciWMXTpx/6OzcuZPHFxaOz80u3HbsxIm5D/W6//zsfXv2Htp3YO/UyfnZ+w4eOrTv0NT86TONYRSD6mH/zAemTp87kt9l4b57Du259957ZqYePjM7d9+BmZmpC73un39vmmrc+w+nzs2dOnZ+/uG5qYX5j8zdt+fQ/v17e34a4MNnTyxMTp+7cHr6wsLcueniuUyezxc3vvf1uj/VtPD94v1su6Hig/iyt925P30+a8MXP7riQxWrtH2A6LPhs2i++fyzB1fzdez7x0JNqtD/AwAAALnY94+Hmuj/AQAAoDJi378l1ET/DwAAAJUR+/6JUNN/CahJ/1+5/P+Oi6vavvy//H/z/pL/r1n+/x1ly/8X5wv5//5Yb/6+Dvn/Va0o/y//L/8v/y//Tx+ULf8f+/6tWeb3/wAAAFBRse/fFmqi/wcAAIDKiH3/NaEm+n8AAACojNj3Py/UpCb9v/y//L/8v/y//H/n7cv/Dyb5/+5Klv+faF8g/7/5+f+sXvn/S/0c/ybk/7c2fyH/TxmVLf8f+/5rQ01q0v8DAABAHcS+/7pQE/0/AAAAVEbs+68PNdH/AwAAQGXEvn97qElN+n/5/3Xl/1PmanDz/8WW5f/l/+X/5f+rQv6/u5Ll/5eR/9/8/L/r/w9U/r+F/D9lVLb8f+z7nx9qUpP+HwAAAOog9v0vCDXR/wMAAED5jF7Z3WLf/8JQk2X9/xVuAAAAANh0se+/IWsLgtfk9//y/67/X9rr/4/J/8v/F8qf/x/J5P/LQ/6/O/n/HvqR/78k/y//L/8v/09Utvx/3vdnE9mLQk1q0v8DAABAHcS+/8ZQE/0/AAAAVEbs+38l1ET/DwAAAJUR+/4doSY16f/l/yuT//9Z80tXify/6//L/wflz/+7/n+ZyP93J//fg+v/y//L/8v/01cLHTulzcv/x77/plCTmvT/AAAAUAex77851ET/DwAAAJUR+/5fDTXR/wMAAEBlxL5/Z6hJTfp/+f+S5/9jcrSO1/+X/5f/D8qc/5+Q/y8d+f/u5P97kP+X/5f/l/+nrxa+X7yfbbdZ+f/Y97841KQm/T8AAADUQez7XxJqov8HAACAyoh9/0tDTfT/AAAAUBmx758MNalJ/7+W/P/QJfn/lVzl6/+Pr+L6/y3k/zcl/z8q/1+oU/4/k/8vHfn/7uT/e5D/l/+X/5f/p6/Klv+Pff8toSY16f8BAACgDmLfvyvURP8PAAAAlRH7/ltDTfT/AAAAUBmx798dalKT/t/1/wci/5/J/w9E/t/1/wP5/87k/zeG/H938v89yP/L/8v/y//TV2XL/8e+/2WhJjXp/wEAAKAOYt9/W6iJ/h8AAAAqI/b9Lw810f8DAABAZcS+//ZQk5r0//L/8v/y//L/8v+dt7/h+f9L8v/9IP/fnfx/D/L/8v/y//L/9FXZ8v+x739FqElN+n8AAACog9j33xFqov8HAACAyoh9/52hJvp/AAAAqIzY90+FmtSk/5f/l/+vZv7/P+X/u2xf/r+k+X/X/+8L+f/u5P97kP+X/+9H/n8sLJD/l/9n0/P/8f1a/Dr2/XeFmtSk/wcAAIA6iH3/3aEm+n8AAACojNj3T4ea6P8BAACgMmLfPxNqUpP+X/5f/r+a+X/X/++2/XXl/1+69Ljy/wX5/3KR/+9O/r+Hfub/t8j/1zb/v67r/4/J/1Mpm53/b/869v17Qk1q0v8DAABAHcS+f2+oif4fAAAAKiP2/ftCTfT/AAAAUBmx778n1KQm/b/8v/y//L/8v+v/d96+/P9gkv/vrv/5//gU5f9d/1/+vz/5f9f/p1rKlv+Pff+9oSY16f8BAACgDmLfvz/URP8PAAAAlRH7/gOhJvp/AAAAqIzY9x8MNalJ/y//L/8v/y//L//fefvy/4NJ/r871//vQf5f/n+A8/+NuSX/T9mULf8f+/5DoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5fDzWpSf8v/y//L/8v/7/J+f+xXvn/cfl/+f81kP/vTv6/B/l/+f8Bzv+vcP3/a8PN8v9sirLl/2Pff1+oSU36fwAAAKiD2Pf/RqiJ/h8AAAAqI/b9rwo10f8DAABAZcS+/3CoSU36f/n/Dcr/x4Xy//L/8v+u/y//f1XJ/3cn/9+D/L/8f/Xy//2+/n/7t+lE/p9Oypb/j33/q0NNatL/AwAAQB3Evv/+UBP9PwAAAFRG7PtfE2qi/wcAAIDKiH3/a0NNatL/y/+7/v/m5//HWsYu/790P/n/gvy//P9ayP93J//fg/y//L/8v+v/01dly//Hvv91oSY16f8BAACgDmLf//pQE/0/AAAAVEbs+98QaqL/BwAAgMqIff8bQ01q0v/L/8v/b37+3/X/5f8L8v/y//0g/9+d/H8P8v/y//L/8v/0Vdny/7Hv/81Qk5r0/wAAAFAHse9/INRE/w8AAACVEfv+N4Wa6P8BAACgMmLf/+ZQk5r0//L/8v/y//L/8v+dty//P5jk/7sbsPz/L64Ly+X/C/L/5R7/WvP/o21fX5X8/w9Wyv8vbmm/v/w/V0PZ8v+x739LqElN+n8AAACog9j3vzXURP8PAAAAlRH7/reFmuj/AQAAoDJi3/9boSY16f/l/xvjWEovy//L/+cL5P/l/+X/B5b8f3cDlv93/f828v/lHr/r/8v/s1zZ8v+x7397qElN+n8AAACog9j3Pxhqov8HAACAyoh9/ztCTfT/AAAAUBmx739nqElN+n/5f9f/l/+X/5f/77x9+f/BJP/fnfx/D/L/8v9ly///l/w/g61s+f/Y9z8UalKT/h8AAADqIPb97wo10f8DAABAZcS+/7dDTfT/AAAAUBmx7393qElN+n/5/0HJ/0/K/68x/z8elsn/y//L/9eL/H938v89yP/L/5ct/+/6/wy4suX/Y9//nlCT1ff/E6teEwAAALia2n+dlMS+/3dCTWry+38AAACog9j3/26oif4fAAAAKiP2/b8XalKT/l/+f1Dy/67/n7n+v/x/2/OR/5f/72Tj8v/xzLOm/P+WXtuX/5f/l/8f3PHL/8v/s1zZ8v+x7//9UJOa9P8AAABQB7Hvf2+oif4fAAAABkKn/5PdLvb9R0JN9P8AAABQGbHvPxpqUpP+X/5f/l/+v6T5/7/Y9S/f/dZbj+6R/5f/l/9fkw29/n/j4Hf9f/l/+f9E/l/+X/6fdmXL/8e+/1ioyVLj92YX+AcAAIDBFvv+Pwg1qcnv/wEAAKAOYt9/PNRE/w8AAACVEfv+2VCTmvT/8v+bmP8fzbJM/l/+v4LX/4/7Y5Dy/1NbBij/H0+68v8dbWj+/11LOXH5/7Xm/8c7Lm3P/w/J/7eQ/1/z+L+ZZdmGjf/iv8r/y//Trmz5/9j3z4Wa1KT/BwAAgDoIff/wiaIu3aD/BwAAgMqIff/JUBP9PwAAAFRG7PvfF2pSk/5f/t/1/+X/5f9d/7/z9kub/3f9/67k/7srT/6/M9f/l/8f5PG7/r/8P8uVLf8f+/75UJOa9P8AAABQB7Hvf3+oif4fAAAAKiP2/R8INdH/AwAA/8/efTxZXpd7HD8NTc1MUbfq7u7iLu7du3LNQlYu9A9wwYaFlqEUVMyJwRwx54CWihgwgCImzAlMKGJExSxiwoSojMX08zzTPf3r3+meOd3nd77f12vhIy3jaS0EPoxvvkAzcvc/PG7pZP/r//X/Tfb/h/T/Y5+v/9f/t0z/P07/P4f+X/+v/9f/s1BT6/9z9z8ibulk/wMAAEAPcvdfELfY/wAAANCM3P0Xxi32PwAAADQjd/8j45ZO9r/+X//fZP9/39sfevd99P87fb7+X//fMv3/OP3/HPp//b/+X//PQk2t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7r8obrH/AQAAoBm5+x8Tt3Sy/0/q/9dmffb/mfHq/1vq/73/v+Pn6//1/y072P7/knt+z6f/1//r/4P+X/+v/+dkU+v/c/c/Nm7pZP8DAABAD3L3Py5usf8BAACgGbn7Hx+32P8AAADQjNz9T4hbOtn/3v/3/r/+X/+v/x/+fP3/avL+/7ie+v+Lbjr7gjuu+d9r9/L5+n/9v/5f/89iTa3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAADACjoy+NXc/U+JWzrZ//p//b/+P/r/w/p//b/+vwX6/3E99f+n8vn6f/2//l//z2JNrf/P3f/UuKWT/Q8AAAA9yN3/tLjF/gcAAIDpGvo/Yo/I3X9x3GL/AwAAQDNy9x+NWzrZ//r//e///63/X43+3/v/+n/9fxP0/+P0/3Po//X/+n/9Pws1tf4/d/8lcUsn+x8AAAB6kLv/6XGL/Q8AAADNyN3/jLjF/gcAAIBm5O5/ZtzSyf7X/3v/X/+v/z/4/n/jd7b6/xP/rer/F0f/P07/P4f+/3T7+bP0//p//T+b7bH/v2vkd9sL6f9z9z8rbulk/wMAAEAPcvc/O26x/wEAAKAZufufE7fY/wAAANCM3P3PjVs62f/6f/2//l//f8r9//bf9I7z/v8w/f/B0P+Pm0z/v7Y++GX9/8r3/97/1//r/9liau//5+5/XtzSyf4HAACAHuTuf37cMrL/9/wX8wEAAIClyt3/grjFz/8DAADAysvqLHf/C+OWTva//l//r//X/x/8+/+r3/9fu+n70/9Pi/5/3GT6/x3o//X/q/z96//1/2w3tf4/d/+L4pZO9j8AAAD0IHf/pXGL/Q8AAADNyN3/4rjF/gcAAIBm5O5/SdzSyf4f7v9P/OuT7v9PjoRn+v+k/2+7/89/R/3/aP9/rvf/+6T/H6f/n0P/r//X/+/U/x+Z9+P1/wyZWv+fu/+lcUsn+x8AAAB6kLv/ZXGL/Q8AAADNyN3/8rjF/gcAAIBm5O5/RdzSyf73/r/+X/+/ev2/9/83LPP9/9mB9//r+v9dWm7/v3Z3/hFU/39q37/+X/+/yt9/k/3/WbOt7/+P/F0A9P8MmVr/n7v/lXFLJ/sfAAAAepC7/1Vxi/0PAAAAq2Hz/3dg6K242ax2/6vjFvsfAAAAmpG7/zVxSzv7f/StTv2//l//r//X/w9//oMvW59Np//3/v9uef9/nP5/Dv3/fvTz6431/5ft9OOn0P9fvH/v/9973o/X/zNkS/9/3YmvL6v/z93/2rilnf0PAAAA3cvd/7q4xf4HAACAZuTuf33cYv8DAABAM3L3vyFu6WT/73v/P/J3H9D/6//1//r/aff/U3r/X/+/W/r/cfr/OfT/3v/3/r/+n9O36U8Zt/T/myyr/8/d/8a4pZP9DwAAAD3I3f+muMX+BwAAgGbk7r8sbrH/AQAAoBm5+98ct3Sy/73/r//X/+v/9f/Dn6//X02n1d+fof8v+n/9v/5f/6//ZwGm1v9v3f397X8AAADowVuO/+Ph+Ov19j8AAAC0KHf/W+MW+x8AAACakbv/bXFLJ/tf/7+//X9+Xf+v/5/p//X/+v8D0e37/2tDfyTabof+/4aHHL3/1q/o//X/+n/9v/6fXfrvkX9tEv3/sRN/dpm7/+1xSyf7HwAAAHqQu//yuMX+BwAAgGbk7n9H3GL/AwAAQDNy918Rt+xx/481D1Om//f+v/5f/6//H/58/f9q6rb/3yXv/8+h/9f/6//1/yzUJPr/Tb+cu/+dcYuf/wcAAIBm5O5/V9xi/wMAAEAzcve/O26x/wEAAKAZufvfE7d0sv/1//p//b/+X/8//Pn6/9Wk/x+n/59jlfr/K06j/18f/vKy+/nTtezvX/+v/2e7qfX/ufuvjFs62f8AAADQg9z9741b7H8AAABoRu7+98Ut9j8AAAA0I3f/++OWTva//l//r//X/+v/hz9f/7+a9P/j9P+z2eyqkW9gqP8/dmia/b/3/yf3/ev/9f9sN7X+P3f/B+KWTvY/AAAA9CB3/1Vxi/0PAAAAzcjdf3XcYv8DAABAM3L3fzBu6WT/6//1//p//b/+f/jz9f+rSf8/Tv8/xyq9/6//n9z3r//X/7Pd1Pr/3P0fils62f8AAADQg9z918Qt9j8AAAA0I3f/h+MW+x8AAACakbv/2rilk/2v/9f/6//1/wP9//H/qev/9f+raP/6/5n+X/+v/59D/6//1/9zsqn1/7n7PxK3dLL/AQAAoAe5+z8at9j/AAAA0Izc/R+LW+x/AAAAaEbu/o/HLZ3sf/2//l//r//3/v/w5+v/V5P3/8fp/+fQ/+v/9f/6fxZquP+/eGn9f+7+T8Qtnex/AAAA6EHu/uviFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9r//X/2/t/2cz/b/+X/+/YaD/v/nOy/+rfnkB/f/hmf5/4fT/4/T/c+j/2+z/z5g11P8f2fHH6/+Zoqm9/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6/8X/P7/becPfB/6/w36/5Xv/73/vwL0/+P0/3Po/9vs/73/r/9naabW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBm5+78Ut3Sy//X/+v8F9//e/9f/6/93oP8/GPr/cfr/OfT/zfX/+Wf3+n/9P8sxtf4/d/+X45ZO9j8AAAD0IHf/9XGL/Q8AAADNyN1/Q9xi/wMAAEAzcvd/JW7pZP/r//X/+v/V7P8Pb+n/z5zp/0/8+vr/vk2l/z/nnPvdqP/X/+v/l9//e/9f/89yTa3/z93/1bilk/0PAAAAPcjd/7W4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/b+//z5ptFKobhvr/aNT0/5vo/7d+//r/4d8+vP+v/9f/77+p9P/e/z+171//r/9f5e9/T/3//2//8fp/WjS1/j93/41xSyf7HwAAAHqQu/+bcYv9DwAAAM3I3f+tuMX+BwAAgGbk7r8pbulk/3v/X/+v/9f/6/+HP1//v5r0/+P0/3Po//X/3v+/8IFn6v9ZnKn1/7n7vx23dLL/AQAAoAe5+2+OW+x/AAAAaEbu/u/ELfY/AAAANCN3/3fjlk72v/5f/6//1//r/4c/X/+/mvT/4/T/5eT/aBv66f8PD31x2f386Vr2999M/+/9fxZoav1/7v7vxS2d7H8AAADoQe7+78ct9j8AAAA0I3f/D+IW+x8AAACakbv/h3FLJ/tf/6//b7//P1//f9Ln6//1/y3T/+cf0Yfp/+fop/8ftOx+ftW/f/2//p/tptb/5+6/JW7pZP8DAABAD3L3/yhusf8BAACgGbn7fxy32P8AAADQjNz9P4lbOtn/+v+++v+1WY/9v/f/9f/6/57o/8fp/+fQ/+v/9f/6fxZqav1/7v5b19a73P8AAACwqh5wr4fdsttf99bj/3h49tO45dzZsV3+NDYAAAAwcffs/rX12exnx3/Jz/8DAABAi3L3/zxu6WT/6//76v/7fP9f/6//1//3RP8/Tv8/h/5f/6//1/+zUFPr/3P3/yJu2TT81vf8nxIAAACYktz9v4xbOvn5fwAAAOhB7v5fxS3b9r+/HSAAAACsqtz9v45bOvn5f/3/xPv/2T71//Hr6f836P/1/0Ofr/9fTfr/cafZ/x9b0//r/0fo//X/+n9ONrX+P3f/b+KWTvY/AAAANGrLX1HI3X9b3GL/AwAAQDNy9/82brH/AQAAoBm5+2+PWzrZ//r/A+//M1Xfx/f/j9Q/8/5/5/3/pYcHP1//r/9vmf5/nPf/59D/t9L/H9L/6/+Zhqn1/7n7fxe3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xN//P6X+fxfv/+v/++j/d/j8dvr//zn76PXnPejqK/X/nHCQ/X/+tnDA/f+hvf57bqb/n0P/30r/7/1//T8Tsfj+f33LF/fa/+fu/1Pc0sn+BwAAgB7k7r8jbrH/AQAAoBm5+/8ct9j/AAAA0Izc/X+JWzrZ//p//f9U+v/873oJ/f/RU+7/j8xms6X0/9kU997/e/9f/7+d9//H6f/n0P/r//X/+n8WavH9/9Yv7rX/z93/17ilk/0PAAAAPcjd/7e4Jff/2p7/0j0AAAAwMbn7/x63+Pl/AAAAaEbu/jvjlk72v/5f/z+V/j95///Ej2vr/f/zKk7ts///v/pn+v/9pf8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xG3dLL/AQAAoAe5+++KW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72v/6/1f4/i3j9v/5/Kv2/9/+9/38w9P/j9P9z6P/1//p//T8LNbX+P3f/fwIAAP//krZdRQ==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

914.898813ms ago: executing program 2 (id=14461):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

883.353733ms ago: executing program 5 (id=14462):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x45f)

806.232066ms ago: executing program 4 (id=14463):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x4, 0x5, 0x0, 0x3231564e, [0x94, 0x2], [0x6], 0x13a}})

632.127919ms ago: executing program 4 (id=14464):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x68093, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094)

454.263376ms ago: executing program 4 (id=14465):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001800)='asymmetric\x00', &(0x7f00000019c0))

398.199195ms ago: executing program 3 (id=14466):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0xb, 0xbe, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20)

381.673581ms ago: executing program 2 (id=14467):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xa, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

261.777523ms ago: executing program 4 (id=14468):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)

217.909225ms ago: executing program 6 (id=14469):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f00000000c0)='./file1\x00', 0xa08086, &(0x7f0000009780), 0x1, 0x97a8, &(0x7f00000097c0)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
llistxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=""/225, 0xe1)

216.984993ms ago: executing program 3 (id=14470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0xf2ff96e223395e37, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc8c0)

16.693062ms ago: executing program 4 (id=14471):
unshare(0x8040480)
io_uring_setup(0x15f7, &(0x7f0000000040)={0x0, 0xc89e, 0x2, 0x0, 0xd6})
unshare(0x60400)

16.367856ms ago: executing program 0 (id=14472):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x10000c, 0x4, 0x5, 0xd, 0x8, 0x7, 0x4, 0xd0, 0x101, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}})

0s ago: executing program 3 (id=14473):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4)
sendto$inet(r0, &(0x7f0000000340)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0d001000", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10)

kernel console output (not intermixed with test programs):

1050][ T6003] usb 5-1: SerialNumber: syz
[ 1060.242736][ T6003] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1060.276916][T23869] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1060.444000][ T3416] loop1: detected capacity change from 0 to 32768
[ 1060.756800][ T5835] usb 5-1: USB disconnect, device number 112
[ 1061.080570][ T3477] netlink: 'syz.1.13182': attribute type 1 has an invalid length.
[ 1061.125155][ T3477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1061.356346][ T6003] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1061.421826][T23869] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1061.447780][T23869] ath9k_htc: Failed to initialize the device
[ 1061.475054][ T5835] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1061.584326][ T6003] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1061.611501][ T6003] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1061.653621][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.723236][ T6003] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1061.895531][ T3512] loop0: detected capacity change from 0 to 512
[ 1061.948803][ T3516] loop1: detected capacity change from 0 to 2048
[ 1061.971892][ T3512] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 1061.987890][ T3519] loop3: detected capacity change from 0 to 512
[ 1061.994220][ T5835] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1062.009806][ T3516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1062.061368][ T3519] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1062.082052][ T3512] EXT4-fs (loop0): 1 truncate cleaned up
[ 1062.104540][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1062.130246][ T3512] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.13199: Logical block already allocated
[ 1062.152840][ T3512] EXT4-fs (loop0): Remounting filesystem read-only
[ 1062.158454][ T3519] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1062.202763][ T5835] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.214514][ T3519] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.13202: Directory hole found for htree leaf block 0
[ 1062.215400][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1062.256946][ T5835] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1062.285355][ T3527] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.13205'.
[ 1062.312500][ T3519] EXT4-fs (loop3): Remounting filesystem read-only
[ 1062.312601][ T5835] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1062.361169][ T5835] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[ 1062.370402][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.380289][ T5835] usb 6-1: Product: syz
[ 1062.389654][ T5835] usb 6-1: Manufacturer: syz
[ 1062.397004][ T5835] usb 6-1: SerialNumber: syz
[ 1062.415184][   T29] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1062.425516][ T5821] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[ 1062.458497][ T5835] usb 6-1: config 0 descriptor??
[ 1062.476660][ T5835] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22
[ 1062.539290][ T3533] loop3: detected capacity change from 0 to 256
[ 1062.561854][ T3533] exfat: Deprecated parameter 'utf8'
[ 1062.605716][   T29] usb 5-1: Using ep0 maxpacket: 8
[ 1062.616051][ T3533] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 1062.648845][   T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1062.658091][   T29] usb 5-1: config 0 has no interface number 0
[ 1062.671464][   T29] usb 5-1: config 0 interface 1 has no altsetting 0
[ 1062.674190][ T3535] loop0: detected capacity change from 0 to 512
[ 1062.688237][   T29] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[ 1062.717658][ T3535] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1062.725773][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.748334][   T30] usb 6-1: USB disconnect, device number 122
[ 1062.773953][   T29] usb 5-1: Product: syz
[ 1062.790062][ T3535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[ 1062.793255][   T29] usb 5-1: Manufacturer: syz
[ 1062.803058][ T3535] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1062.814779][ T3535] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.13209: bad orphan inode 3
[ 1062.832465][   T29] usb 5-1: SerialNumber: syz
[ 1062.837280][ T3535] loop0: lost filesystem error report for type 5 error -117
[ 1062.839735][ T3535] EXT4-fs (loop0): Remounting filesystem read-only
[ 1062.842435][   T29] usb 5-1: config 0 descriptor??
[ 1062.847132][    C0] EXT4-fs (loop0): error count since last fsck: 1
[ 1062.864907][    C0] EXT4-fs (loop0): initial error at time 1773612946: ext4_orphan_get:1417
[ 1062.873469][    C0] EXT4-fs (loop0): last error at time 1773612946: ext4_orphan_get:1417
[ 1062.888478][ T6003] stv0680 3-1:4.0: STV(e): camera ping failed!!
[ 1062.913530][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1063.101799][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1063.121004][   T29] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -22
[ 1063.131429][ T6003] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[ 1063.141288][ T6003] stv0680 3-1:4.0: last error: 0,  command = 0x0
[ 1063.159979][ T3529] loop1: detected capacity change from 0 to 32768
[ 1063.178049][ T6003] usb 3-1: USB disconnect, device number 2
[ 1063.341249][  T975] usb 5-1: USB disconnect, device number 113
[ 1063.749789][ T3561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13222'.
[ 1063.789028][ T3561] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1063.886483][ T3565] loop0: detected capacity change from 0 to 2048
[ 1063.978210][ T3565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1064.020715][ T3565] ext4 filesystem being mounted at /2174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1064.118499][ T3579] openvswitch: netlink: IP tunnel dst address not specified
[ 1064.126701][ T3577] xt_time: unknown flags 0xc
[ 1064.168233][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1064.482305][ T3591] loop0: detected capacity change from 0 to 1024
[ 1064.643136][ T3593] loop2: detected capacity change from 0 to 4096
[ 1065.642678][ T3601] loop3: detected capacity change from 0 to 32768
[ 1065.674219][  T975] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1065.680168][ T3601] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[ 1065.685157][ T3601] JBD2: Ignoring recovery information on journal
[ 1065.819250][ T3601] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1065.845143][  T975] usb 3-1: Using ep0 maxpacket: 16
[ 1065.858623][  T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.905714][  T975] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1065.928324][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.949924][ T3640] EXT4-fs: Ignoring removed orlov option
[ 1065.965092][  T975] usb 3-1: Product: syz
[ 1065.994910][  T975] usb 3-1: Manufacturer: syz
[ 1066.005598][ T3640] EXT4-fs: Ignoring removed bh option
[ 1066.008248][  T975] usb 3-1: SerialNumber: syz
[ 1066.035822][  T975] usb 3-1: config 0 descriptor??
[ 1066.060176][ T3640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1066.113837][ T3640] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1066.204673][ T3640] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13257: bg 0: block 248: padding at end of block bitmap is not set
[ 1066.248420][ T3640] loop0: lost filesystem error report for type 5 error -117
[ 1066.251184][    C1] EXT4-fs (loop0): error count since last fsck: 1
[ 1066.265027][    C1] EXT4-fs (loop0): last error at time 1773612949: ext4_validate_block_bitmap:441
[ 1066.283710][ T3640] __quota_error: 8 callbacks suppressed
[ 1066.283728][ T3640] Quota error (device loop0): write_blk: dquota write failed
[ 1066.297087][ T3640] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1066.316051][ T3640] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.13257: Failed to acquire dquot type 1
[ 1066.331980][  T975] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1066.357399][  T975] imon 3-1:0.0: unable to initialize intf0, err -19
[ 1066.379372][  T975] imon:imon_probe: failed to initialize context!
[ 1066.398650][  T975] imon 3-1:0.0: unable to register, err -19
[ 1066.400924][ T3640] loop0: lost filesystem error report for type 5 error -117
[ 1066.414381][  T975] usb 3-1: USB disconnect, device number 3
[ 1066.447033][ T3640] EXT4-fs (loop0): 1 truncate cleaned up
[ 1066.467594][ T5821] ocfs2: Unmounting device (7,3) on (node local)
[ 1066.521053][ T3640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1066.664773][ T3640] EXT4-fs: Ignoring removed orlov option
[ 1066.681415][ T3640] EXT4-fs: Ignoring removed bh option
[ 1066.686939][ T3640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1066.743835][ T3640] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[ 1066.785608][ T3640] EXT4-fs error (device loop0): __ext4_remount:6804: comm syz.0.13257: Abort forced by user
[ 1066.824198][ T3640] EXT4-fs (loop0): Remounting filesystem read-only
[ 1066.867053][ T3640] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1066.893781][ T3640] ext4 filesystem being remounted at /2177/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1066.956896][  T975] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1067.034222][ T3670] netlink: 'syz.3.13270': attribute type 1 has an invalid length.
[ 1067.081380][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1067.177191][  T975] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1067.180451][  T975] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1067.180483][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.180509][  T975] usb 6-1: Product: syz
[ 1067.180527][  T975] usb 6-1: Manufacturer: syz
[ 1067.180547][  T975] usb 6-1: SerialNumber: syz
[ 1067.256546][ T3681] openvswitch: netlink: Duplicate key (type 2).
[ 1067.439674][  T975] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1
[ 1067.553463][ T3686] bond2: option downdelay: invalid value (18446744073709551615)
[ 1067.566183][ T3686] bond2: option downdelay: allowed values 0 - 2147483647
[ 1067.618816][ T3686] bond2 (unregistering): Released all slaves
[ 1067.628219][ T3694] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1067.687802][  T975] usb 6-1: USB disconnect, device number 123
[ 1067.818208][ T3697] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1067.827319][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1067.847653][ T3697] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[ 1067.890817][ T3697] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1068.160393][ T3709] set_capacity_and_notify: 1 callbacks suppressed
[ 1068.160413][ T3709] loop1: detected capacity change from 0 to 1764
[ 1068.242969][ T3709] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 1068.325187][ T3709] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1068.767260][ T3730] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1068.776468][ T3711] loop0: detected capacity change from 0 to 32768
[ 1068.810723][ T3711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13289 (3711)
[ 1068.919884][ T3711] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1068.977328][ T3711] BTRFS info (device loop0): using sha256 checksum algorithm
[ 1069.187792][ T3711] BTRFS info (device loop0): enabling ssd optimizations
[ 1069.223239][ T3711] BTRFS info (device loop0): turning on async discard
[ 1069.266008][ T3711] BTRFS info (device loop0): enabling free space tree
[ 1069.267573][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13306'.
[ 1069.466805][ T5819] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1070.123945][ T3797] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13323'.
[ 1071.033219][ T3835] loop3: detected capacity change from 0 to 64
[ 1071.091273][ T3838] loop5: detected capacity change from 0 to 128
[ 1071.132162][ T3838] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 1071.244262][ T3838] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 1071.378592][ T3807] loop4: detected capacity change from 0 to 32768
[ 1071.393743][ T3848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13346'.
[ 1071.402788][ T3838] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (30846!=65535)
[ 1071.416148][ T3848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13346'.
[ 1071.442840][ T3848] ip6gre2: entered promiscuous mode
[ 1071.448438][ T3807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.13327 (3807)
[ 1071.475989][ T3807] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1071.532374][ T3807] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1071.588076][ T5829] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1071.684014][ T3861] loop0: detected capacity change from 0 to 512
[ 1071.705757][ T3870] netlink: 'syz.1.13351': attribute type 2 has an invalid length.
[ 1071.794376][ T3861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1071.833626][ T3807] BTRFS info (device loop4): enabling ssd optimizations
[ 1071.840610][ T3807] BTRFS info (device loop4): turning on async discard
[ 1071.860670][ T3861] ext4 filesystem being mounted at /2187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1071.895538][ T3874] loop1: detected capacity change from 0 to 2048
[ 1071.942925][ T3807] BTRFS info (device loop4): enabling free space tree
[ 1071.966442][ T3874] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1072.006748][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1072.091785][ T3891] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1072.188323][ T5820] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1073.917315][ T3963] loop0: detected capacity change from 0 to 256
[ 1073.960730][ T3963] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[ 1074.127008][ T3972] loop5: detected capacity change from 0 to 1024
[ 1074.219879][ T3976] loop2: detected capacity change from 0 to 256
[ 1074.272516][ T3976] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[ 1074.297861][T28033] hfsplus: b-tree write err: -5, ino 25
[ 1074.301757][ T3980] xt_TCPMSS: Only works on TCP SYN packets
[ 1074.320093][T28033] hfsplus: b-tree write err: -5, ino 4
[ 1074.352680][T28033] hfsplus: b-tree write err: -5, ino 2
[ 1074.552463][ T3986] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1074.585497][ T3986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1074.892139][ T3994] loop2: detected capacity change from 0 to 4096
[ 1074.962369][ T3999] loop3: detected capacity change from 0 to 1024
[ 1075.000164][ T4004] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1075.014717][ T3999] EXT4-fs: Ignoring removed bh option
[ 1075.038721][ T3994] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[ 1075.120271][ T3994] Remounting filesystem read-only
[ 1075.135227][ T3999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1075.227928][ T3999] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #11: comm syz.3.13409: directory missing '.'
[ 1075.247502][ T3999] EXT4-fs (loop3): Remounting filesystem read-only
[ 1075.313244][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1075.325361][ T4016] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13418'.
[ 1075.404849][ T4021] netlink: 'syz.1.13417': attribute type 21 has an invalid length.
[ 1075.415277][ T4016] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13418'.
[ 1075.431017][ T4021] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1075.624009][ T4029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13421'.
[ 1075.947701][ T4043] netlink: 'syz.2.13427': attribute type 10 has an invalid length.
[ 1076.001057][ T4043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13427'.
[ 1076.010639][ T4043] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1076.138612][ T4043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1076.844715][ T4047] loop0: detected capacity change from 0 to 32768
[ 1076.885028][ T4047] jfs_lookup: iget failed on inum 32
[ 1076.895324][ T4047] jfs_lookup: iget failed on inum 32
[ 1077.682374][  T975] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1077.762759][ T4121] IPVS: Error connecting to the multicast addr
[ 1077.887866][  T975] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1077.917847][  T975] usb 1-1: config 4 has an invalid interface number: 138 but max is 0
[ 1077.927838][  T975] usb 1-1: config 4 has no interface number 0
[ 1077.955692][  T975] usb 1-1: config 4 interface 138 has no altsetting 0
[ 1077.965042][ T4129] loop3: detected capacity change from 0 to 512
[ 1078.005425][  T975] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[ 1078.020240][ T4125] loop4: detected capacity change from 0 to 4096
[ 1078.037687][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.055158][ T4129] EXT4-fs: Ignoring removed nobh option
[ 1078.066334][  T975] usb 1-1: Product: syz
[ 1078.071768][ T4125] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[ 1078.081392][  T975] usb 1-1: Manufacturer: syz
[ 1078.083616][ T4129] EXT4-fs: Ignoring removed nobh option
[ 1078.103055][  T975] usb 1-1: SerialNumber: syz
[ 1078.141202][ T4129] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1078.231221][ T4129] EXT4-fs (loop3): 1 truncate cleaned up
[ 1078.304133][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1078.535459][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1078.593378][  T975] catc 1-1:4.138: Can't set altsetting 1.
[ 1078.620418][  T975] catc 1-1:4.138: probe with driver catc failed with error -5
[ 1078.644370][  T975] usb 1-1: USB disconnect, device number 7
[ 1079.057506][ T4133] loop1: detected capacity change from 0 to 32768
[ 1079.100819][ T4133] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1079.129185][ T4138] loop5: detected capacity change from 0 to 32768
[ 1079.164068][ T4138] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1079.182470][ T4174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1079.297009][ T4138] XFS (loop5): Ending clean mount
[ 1079.331355][ T4133] XFS (loop1): Ending clean mount
[ 1079.370295][ T4138] XFS (loop5): Quotacheck needed: Please wait.
[ 1079.441824][ T4180] loop0: detected capacity change from 0 to 256
[ 1079.534334][ T4138] XFS (loop5): Quotacheck: Done.
[ 1079.558171][ T4182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13486'.
[ 1079.569722][ T5822] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1079.791232][ T5829] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1079.839806][ T4186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13489'.
[ 1080.454701][ T4210] loop2: detected capacity change from 0 to 128
[ 1080.475152][ T4210] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 1080.516184][ T4210] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1080.595982][ T4210] ext2 filesystem being mounted at /2271/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1080.622364][ T4220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13504'.
[ 1080.692484][ T5818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1080.989343][ T4234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13511'.
[ 1081.118433][ T5871] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1081.295032][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1081.312024][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1081.357156][ T5871] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1081.371638][ T4212] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1081.383783][ T4212] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1081.403050][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.417145][ T4212] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1081.432757][ T4212] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1081.443573][ T5871] usb 2-1: config 0 descriptor??
[ 1081.490290][ T4254] loop2: detected capacity change from 0 to 1024
[ 1081.510239][ T4212] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1081.523985][ T4212] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1081.609795][ T4212] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1081.640334][ T4212] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1081.644317][T28027] hfsplus: b-tree write err: -5, ino 25
[ 1081.707693][T28027] hfsplus: b-tree write err: -5, ino 4
[ 1081.729519][T28027] hfsplus: b-tree write err: -5, ino 2
[ 1081.938315][ T5871] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 5/7
[ 1081.967068][ T5871] pyra 0003:1E7D:2CF6.0002: parse failed
[ 1081.987851][ T5871] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -22
[ 1082.174472][ T5835] usb 2-1: USB disconnect, device number 113
[ 1082.528340][ T4292] netlink: 'syz.5.13538': attribute type 10 has an invalid length.
[ 1082.562145][ T4292] batadv0: left promiscuous mode
[ 1082.613382][ T4292] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1082.674520][ T4292] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1082.740076][ T5871] usb 4-1: new full-speed USB device number 126 using dummy_hcd
[ 1082.847004][ T5835] kernel read not supported for file /vga_arbiter (pid: 5835 comm: kworker/1:4)
[ 1082.892279][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13544'.
[ 1082.973510][ T5871] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1082.993909][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.059272][ T5871] usb 4-1: config 0 descriptor??
[ 1083.071719][ T5871] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1083.185179][   T29] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1083.321236][ T4325] loop2: detected capacity change from 0 to 128
[ 1083.332032][ T4325] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 1083.358290][   T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.369857][ T4325] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 1083.382791][   T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1083.399139][   T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1083.409471][   T29] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1083.416205][   T29] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1083.416446][ T4325] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.13553: checksumming directory block 0
[ 1083.425533][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.461736][   T29] usb 6-1: config 0 descriptor??
[ 1083.502502][ T5871] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1083.534635][ T4328] netlink: 336 bytes leftover after parsing attributes in process `syz.1.13554'.
[ 1083.544373][ T5871] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1083.563029][ T4328] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13554'.
[ 1083.585430][ T5818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1083.744502][ T5835] usb 4-1: USB disconnect, device number 126
[ 1083.883007][ T4340] loop1: detected capacity change from 0 to 512
[ 1083.892830][ T4339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13559'.
[ 1083.915103][ T4340] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1083.928844][ T4335] loop4: detected capacity change from 0 to 4096
[ 1083.931327][   T29] kye 0003:0458:5015.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1083.983380][   T29] kye 0003:0458:5015.0003: unbalanced collection at end of report description
[ 1083.993479][ T4335] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1084.006435][   T29] kye 0003:0458:5015.0003: parse failed
[ 1084.041533][   T29] kye 0003:0458:5015.0003: probe with driver kye failed with error -22
[ 1084.092306][ T4335] ntfs3(loop4): Failed to load $Extend (-22).
[ 1084.142644][ T4335] ntfs3(loop4): Failed to initialize $Extend.
[ 1084.259713][ T5871] usb 6-1: USB disconnect, device number 124
[ 1085.063661][ T5835] IPVS: starting estimator thread 0...
[ 1085.174396][ T4383] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1085.184365][   T29] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1085.216239][ T4387] sp0: Synchronizing with TNC
[ 1085.240679][ T4386] [U] è
[ 1085.339182][ T4390] loop5: detected capacity change from 0 to 1764
[ 1085.351174][ T4394] tipc: Started in network mode
[ 1085.363253][ T4394] tipc: Node identity 5, cluster identity 4711
[ 1085.370611][ T4394] tipc: Node number set to 5
[ 1085.390893][   T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1085.430230][   T29] usb 4-1: config 0 has no interface number 0
[ 1085.442761][   T29] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1085.473718][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.515718][   T29] usb 4-1: Product: syz
[ 1085.526957][   T29] usb 4-1: Manufacturer: syz
[ 1085.537448][   T29] usb 4-1: SerialNumber: syz
[ 1085.573045][   T29] usb 4-1: config 0 descriptor??
[ 1085.610814][   T31] audit: type=1326 audit(1773612967.516:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1085.702665][   T31] audit: type=1326 audit(1773612967.516:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1085.772357][   T31] audit: type=1326 audit(1773612967.516:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1085.838325][   T29] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1085.859779][   T31] audit: type=1326 audit(1773612967.516:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1085.884025][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1085.892495][   T29] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1085.907907][   T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1085.918424][   T29] usb 4-1: media controller created
[ 1085.923933][   T31] audit: type=1326 audit(1773612967.553:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2581f9c502 code=0x7ffc0000
[ 1085.965195][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1085.983551][ T4406] loop0: detected capacity change from 0 to 1024
[ 1085.994924][   T31] audit: type=1326 audit(1773612967.553:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2581f9c502 code=0x7ffc0000
[ 1086.019412][   T31] audit: type=1326 audit(1773612967.553:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1086.083889][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1086.115878][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1086.130403][   T31] audit: type=1326 audit(1773612967.563:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1086.153710][ T5835] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1086.200984][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.235049][   T31] audit: type=1326 audit(1773612967.591:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1086.276943][   T13] hfsplus: b-tree write err: -5, ino 25
[ 1086.287131][   T13] hfsplus: b-tree write err: -5, ino 4
[ 1086.292668][   T13] hfsplus: b-tree write err: -5, ino 2
[ 1086.321423][ T5835] usb 3-1: config 0 descriptor??
[ 1086.330930][   T13] hfsplus: b-tree write err: -5, ino 17
[ 1086.336532][   T29] usb 4-1: USB disconnect, device number 127
[ 1086.370513][   T31] audit: type=1326 audit(1773612967.600:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4399 comm="syz.1.13586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f2581f9c799 code=0x7ffc0000
[ 1086.492862][ T4419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13595'.
[ 1086.560080][ T5835] ath6kl: Failed to submit usb control message: -71
[ 1086.595498][ T5835] ath6kl: unable to send the bmi data to the device: -71
[ 1086.609253][ T4418] loop4: detected capacity change from 0 to 4096
[ 1086.623929][ T5835] ath6kl: Unable to send get target info: -71
[ 1086.640214][ T5835] ath6kl: Failed to init ath6kl core: -71
[ 1086.647303][ T5835] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1086.654416][ T4423] loop1: detected capacity change from 0 to 1024
[ 1086.711468][ T5835] usb 3-1: USB disconnect, device number 4
[ 1086.736967][ T4423] hfsplus: b-tree write err: -5, ino 2
[ 1086.886934][   T13] hfsplus: b-tree write err: -5, ino 25
[ 1086.909165][   T13] hfsplus: b-tree write err: -5, ino 4
[ 1086.925055][   T13] hfsplus: b-tree write err: -5, ino 2
[ 1086.943343][   T13] hfsplus: b-tree write err: -5, ino 26
[ 1087.226823][ T4441] new mount options do not match the existing superblock, will be ignored
[ 1087.272088][ T4441] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[ 1087.365226][ T4446] loop2: detected capacity change from 0 to 1024
[ 1087.391802][ T4446] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[ 1087.442458][ T5835] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1087.456018][ T4446] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1087.521206][ T4446] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.13608: iget: special inode unallocated
[ 1087.536578][ T4454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13612'.
[ 1087.557192][ T4446] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[ 1087.557459][ T4446] EXT4-fs (loop2): Remounting filesystem read-only
[ 1087.566645][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1087.566668][    C1] EXT4-fs (loop2): initial error at time 1773612969: ext4_get_journal_inode:5863: inode 32
[ 1087.566709][    C1] EXT4-fs (loop2): last error at time 1773612969: ext4_get_journal_inode:5863: inode 32
[ 1087.608474][ T4446] EXT4-fs (loop2): no journal found
[ 1087.614174][ T4446] EXT4-fs (loop2): can't get journal size
[ 1087.622717][ T4446] EXT4-fs (loop2): filesystem is read-only
[ 1087.630512][ T4446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1087.685918][ T5835] usb 6-1: Using ep0 maxpacket: 32
[ 1087.693056][ T5835] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1087.701469][ T5835] usb 6-1: config 0 has no interface number 0
[ 1087.710591][ T5835] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1087.719740][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.727722][ T5835] usb 6-1: Product: syz
[ 1087.732050][ T5835] usb 6-1: Manufacturer: syz
[ 1087.736642][ T5835] usb 6-1: SerialNumber: syz
[ 1087.746261][ T4459] loop1: detected capacity change from 0 to 1024
[ 1087.761272][ T5835] usb 6-1: config 0 descriptor??
[ 1087.771075][ T5835] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1087.813688][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.860715][ T4459] hfsplus: size 25, res 24, name_len 20
[ 1088.012852][ T5835] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1088.038041][ T4465] IPVS: Scheduler module ip_vs_sip not found
[ 1088.103926][ T5835] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1088.114957][ T4471] loop2: detected capacity change from 0 to 256
[ 1088.228671][ T4471] FAT-fs (loop2): Directory bread(block 64) failed
[ 1088.267842][ T4471] FAT-fs (loop2): Directory bread(block 65) failed
[ 1088.300481][ T4471] FAT-fs (loop2): Directory bread(block 66) failed
[ 1088.353216][ T4471] FAT-fs (loop2): Directory bread(block 67) failed
[ 1088.392437][ T4471] FAT-fs (loop2): Directory bread(block 68) failed
[ 1088.421321][ T4471] FAT-fs (loop2): Directory bread(block 69) failed
[ 1088.437891][ T4471] FAT-fs (loop2): Directory bread(block 70) failed
[ 1088.470185][ T4471] FAT-fs (loop2): Directory bread(block 71) failed
[ 1088.476858][ T4471] FAT-fs (loop2): Directory bread(block 72) failed
[ 1088.502072][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1088.513141][ T5835] usb 6-1: USB disconnect, device number 125
[ 1088.519804][ T4471] FAT-fs (loop2): Directory bread(block 73) failed
[ 1088.594230][ T5835] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1088.667654][ T5835] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1088.698699][ T4490] loop4: detected capacity change from 0 to 256
[ 1088.713969][ T5835] quatech2 6-1:0.51: device disconnected
[ 1089.106260][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13638'.
[ 1089.263934][ T4512] netlink: 260 bytes leftover after parsing attributes in process `syz.1.13640'.
[ 1089.279357][ T4513] loop0: detected capacity change from 0 to 128
[ 1089.301037][ T4513] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1089.307510][ T4516] vim2m vim2m.0: vidioc_s_fmt queue busy
[ 1089.335932][ T4513] hpfs: filesystem error: improperly stopped
[ 1089.364518][ T4513] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1089.393981][ T4513] hpfs: You really don't want any checks? You are crazy...
[ 1089.436764][ T4513] hpfs: hpfs_map_sector(): read error
[ 1089.469735][ T4513] hpfs: code page support is disabled
[ 1089.514085][ T4513] hpfs: hpfs_map_4sectors(): unaligned read
[ 1089.520070][ T4513] hpfs: hpfs_map_4sectors(): unaligned read
[ 1089.593830][ T4513] hpfs: filesystem error: unable to find root dir
[ 1089.626391][ T4513] hpfs: hpfs_map_4sectors(): unaligned read
[ 1089.649334][ T4513] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[ 1090.322029][ T4556] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[ 1090.413434][ T4559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13663'.
[ 1090.849776][ T4578] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[ 1091.655431][ T4605] loop5: detected capacity change from 0 to 32768
[ 1091.670488][ T4605] (syz.5.13685,4605,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1091.694205][ T4605] (syz.5.13685,4605,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1091.708232][ T4605] (syz.5.13685,4605,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xcca5a7f0. Applying ECC.
[ 1091.722952][ T4605] (syz.5.13685,4605,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x8304edbd
[ 1091.736695][ T4605] (syz.5.13685,4605,0):ocfs2_validate_dir_block:465 ERROR: Checksum failed for dinode 288
[ 1091.746649][ T4605] (syz.5.13685,4605,0):ocfs2_read_virt_blocks:1037 ERROR: status = -5
[ 1091.754876][ T4605] (syz.5.13685,4605,0):ocfs2_read_dir_block:524 ERROR: status = -5
[ 1091.762810][ T4605] (syz.5.13685,4605,0):ocfs2_find_entry_el:741 ERROR: reading directory 18, offset 0
[ 1091.772529][ T4605] (syz.5.13685,4605,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[ 1091.782258][ T4605] (syz.5.13685,4605,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[ 1091.782318][ T4605] (syz.5.13685,4605,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[ 1091.803963][ T4605] (syz.5.13685,4605,0):ocfs2_initialize_super:2198 ERROR: status = -22
[ 1091.812319][ T4605] (syz.5.13685,4605,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1092.123620][ T4621] loop5: detected capacity change from 0 to 64
[ 1092.233017][ T4624] loop1: detected capacity change from 0 to 1024
[ 1092.427806][T28027] hfsplus: b-tree write err: -5, ino 25
[ 1092.434949][ T4592] loop2: detected capacity change from 0 to 32768
[ 1092.447515][T28027] hfsplus: b-tree write err: -5, ino 4
[ 1092.463890][T28027] hfsplus: b-tree write err: -5, ino 2
[ 1092.489754][T28027] hfsplus: b-tree write err: -5, ino 17
[ 1092.543440][ T4592] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1092.667593][ T4606] loop0: detected capacity change from 0 to 32768
[ 1092.725079][ T4606] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[ 1092.772332][ T4606] JBD2: Ignoring recovery information on journal
[ 1092.867535][ T4645] loop1: detected capacity change from 0 to 4096
[ 1092.921341][ T4606] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1092.963700][ T4651] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1092.974212][ T4592] XFS (loop2): Ending clean mount
[ 1092.983734][ T4646] loop3: detected capacity change from 0 to 2048
[ 1092.987243][ T4592] XFS (loop2): Quotacheck needed: Please wait.
[ 1093.020055][ T4646] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1093.062401][ T4645] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 32 already freed
[ 1093.099183][ T4645] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 191 already freed
[ 1093.138244][ T4653] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1093.138408][ T4646] syz.3.13702: attempt to access beyond end of device
[ 1093.138408][ T4646] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[ 1093.162524][ T4645] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[ 1093.206609][ T4592] XFS (loop2): Quotacheck: Done.
[ 1093.341500][ T5819] ocfs2: Unmounting device (7,0) on (node local)
[ 1093.460110][ T4646] NILFS (loop3): error -2 truncating bmap (ino=16)
[ 1093.483508][ T4658] NILFS (loop3): error -2 truncating bmap (ino=16)
[ 1093.620352][ T5818] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1094.042079][ T5835] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1094.251363][ T5835] usb 2-1: Using ep0 maxpacket: 16
[ 1094.278124][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1094.309517][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1094.346235][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1094.379516][ T5835] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1094.411344][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.412208][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13721'.
[ 1094.442680][   T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1094.452238][ T5835] usb 2-1: config 0 descriptor??
[ 1094.585804][ T4697] loop4: detected capacity change from 0 to 4096
[ 1094.614878][ T4697] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1094.618540][   T29] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1094.643911][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.663198][   T29] usb 4-1: Product: syz
[ 1094.692031][ T4697] ntfs3(loop4): ino=19, mi_enum_attr
[ 1094.719084][   T29] usb 4-1: Manufacturer: syz
[ 1094.727671][   T29] usb 4-1: SerialNumber: syz
[ 1094.745834][   T29] usb 4-1: config 0 descriptor??
[ 1094.781902][   T29] gspca_main: sq905c-2.14.0 probing 2770:9052
[ 1094.943064][ T5835] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max
[ 1095.209028][ T5835] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1095.243015][ T5835] microsoft 0003:045E:07DA.0004: no inputs found
[ 1095.253848][ T5835] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[ 1095.287816][ T5835] usb 2-1: USB disconnect, device number 114
[ 1095.391004][ T4717] fido_id[4717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1095.412324][   T29] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[ 1095.433699][   T29] sq905c 4-1:0.0: probe with driver sq905c failed with error -71
[ 1095.466095][   T29] usb 4-1: USB disconnect, device number 2
[ 1095.479354][ T5936] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1095.582209][ T4701] loop5: detected capacity change from 0 to 40427
[ 1095.598117][ T4701] F2FS-fs (loop5): invalid crc value
[ 1095.662681][ T5936] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[ 1095.674947][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1095.707838][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[ 1095.751253][ T5936] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00
[ 1095.763396][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1095.769455][ T4701] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1095.795703][ T5936] usb 3-1: config 0 descriptor??
[ 1095.825860][ T4701] F2FS-fs (loop5): Start checkpoint disabled!
[ 1095.849479][ T4701] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[ 1095.889553][ T4701] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1095.931878][ T4732] loop0: detected capacity change from 0 to 1024
[ 1095.950598][ T4701] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[ 1095.958812][ T4732] EXT4-fs: inline encryption not supported
[ 1096.034763][ T4732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1096.161084][ T4732] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[ 1096.206910][ T4732] EXT4-fs (loop0): Remounting filesystem read-only
[ 1096.262588][ T5936] hid_parser_main: 8 callbacks suppressed
[ 1096.262612][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.287346][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.300959][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.314510][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.345620][ T4743] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1096.363446][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.372149][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1096.381381][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.389534][ T4743] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1096.411274][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.420680][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.427833][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.441546][ T4743] hpfs: You really don't want any checks? You are crazy...
[ 1096.461810][ T5936] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0
[ 1096.471814][ T4743] hpfs: hpfs_map_sector(): read error
[ 1096.501510][ T4743] hpfs: code page support is disabled
[ 1096.517634][ T4743] hpfs: hpfs_map_4sectors(): unaligned read
[ 1096.540148][ T4743] hpfs: hpfs_map_4sectors(): unaligned read
[ 1096.546071][ T4743] hpfs: filesystem error: unable to find root dir
[ 1096.560714][ T5936] corsair 0003:1B1C:1B3E.0005: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0
[ 1096.603664][ T5936] usb 3-1: USB disconnect, device number 5
[ 1096.653834][ T4749] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[ 1096.712712][ T4749] hpfs: filesystem error: improperly stopped
[ 1096.779744][ T4749] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1096.835981][ T4749] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[ 1096.869116][ T4749] hpfs: You really don't want any checks? You are crazy...
[ 1096.876685][ T4749] hpfs: hpfs_map_sector(): read error
[ 1096.951149][ T4752] fido_id[4752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1096.982787][ T4749] hpfs: code page support is disabled
[ 1097.004214][ T4749] hpfs: hpfs_map_4sectors(): unaligned read
[ 1097.030457][ T4749] hpfs: hpfs_map_4sectors(): unaligned read
[ 1097.065715][ T4749] hpfs: filesystem error: unable to find root dir
[ 1097.137515][ T4761] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13740'.
[ 1097.289929][ T4766] set_capacity_and_notify: 3 callbacks suppressed
[ 1097.289951][ T4766] loop1: detected capacity change from 0 to 512
[ 1097.418792][ T4774] loop3: detected capacity change from 0 to 256
[ 1097.446925][ T4766] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[ 1097.530084][ T4766] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[ 1097.578921][ T4766] EXT4-fs (loop1): 1 truncate cleaned up
[ 1097.600935][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1097.635414][ T4774] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[ 1097.694152][ T4766] EXT4-fs: group quota file already specified
[ 1097.899690][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1098.026363][ T4792] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13766'.
[ 1098.051656][ T4792] tipc: Enabling of bearer <u¦:sy> rejected, media not registered
[ 1098.195951][ T4777] loop4: detected capacity change from 0 to 32768
[ 1098.290087][ T4777] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1098.439088][ T4814] loop3: detected capacity change from 0 to 2048
[ 1098.443127][ T4777] XFS (loop4): Ending clean mount
[ 1098.569187][ T4818] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1098.668906][ T5820] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1098.706411][ T4822] loop5: detected capacity change from 0 to 2048
[ 1098.870246][ T4822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1099.023626][ T4832] loop1: detected capacity change from 0 to 128
[ 1099.111535][ T4832] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1099.138537][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1099.261325][ T4832] ext4 filesystem being mounted at /2319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1099.353140][ T4829] loop3: detected capacity change from 0 to 32768
[ 1099.382741][ T4829] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.13778 (4829)
[ 1099.414728][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1099.423815][ T4829] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1099.443805][ T4829] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1099.496574][ T4842] loop4: detected capacity change from 0 to 4096
[ 1099.588712][ T4829] BTRFS info (device loop3): enabling ssd optimizations
[ 1099.617246][ T4829] BTRFS info (device loop3): turning on async discard
[ 1099.636938][ T4863] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1099.649137][ T4829] BTRFS info (device loop3): enabling free space tree
[ 1099.695556][ T4829] BTRFS info (device loop3): enabling auto defrag
[ 1099.702040][ T4829] BTRFS info (device loop3): max_inline set to 4096
[ 1099.727260][ T4844] loop0: detected capacity change from 0 to 4096
[ 1099.929357][   T31] kauditd_printk_skb: 20 callbacks suppressed
[ 1099.929379][   T31] audit: type=1800 audit(1773612980.911:509): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13784" name="file2" dev="loop0" ino=31 res=0 errno=0
[ 1100.185325][ T5821] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1100.863367][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13803'.
[ 1100.885017][ T4899] loop1: detected capacity change from 0 to 512
[ 1100.902817][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13803'.
[ 1100.934765][ T4899] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1100.951673][ T4896] netlink: 'syz.0.13803': attribute type 14 has an invalid length.
[ 1101.009474][ T4899] EXT4-fs (loop1): 1 truncate cleaned up
[ 1101.072618][ T4899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1101.144207][ T4906] EXT4-fs: Ignoring removed nobh option
[ 1101.179022][ T4906] EXT4-fs: inline encryption not supported
[ 1101.208495][ T4909] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1101.302274][ T4909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1101.352879][ T5822] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[ 1101.382721][ T4906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1101.476795][ T5822] EXT4-fs (loop1): Remounting filesystem read-only
[ 1101.620800][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1101.686809][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1101.744352][  T975] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1101.849253][ T4904] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1101.940416][  T975] usb 3-1: Using ep0 maxpacket: 8
[ 1101.978756][  T975] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1102.009429][  T975] usb 3-1: config 179 has no interface number 0
[ 1102.019360][ T4904] XFS (loop3): Ending clean mount
[ 1102.036431][  T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1102.049773][ T4904] XFS (loop3): Quotacheck needed: Please wait.
[ 1102.056215][T23869] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1102.103259][  T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1102.154293][ T4904] XFS (loop3): Quotacheck: Done.
[ 1102.160330][  T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1102.181581][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1102.213115][  T975] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1102.253804][T23869] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1102.283408][T23869] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1102.290101][ T4902] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1102.299923][  T975] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1102.312971][ T4902] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1102.340752][ T5821] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1102.358243][T23869] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1102.394289][ T4902] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 1102.402122][  T975] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1102.417722][T23869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.438007][ T5936] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1102.445010][ T5936] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1102.449636][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.479930][T28027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.509917][ T4922] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1102.520212][ T4914] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1102.573206][T23869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1102.809361][ T5936] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 340ms
[ 1102.887454][ T5936] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1102.891653][T28027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.933369][ T4902] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1103.060077][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1103.111522][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1103.152755][T23869] usb 5-1: USB disconnect, device number 114
[ 1103.222539][ T1707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1103.235325][ T1707] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1103.245211][ T1707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1103.258073][ T1707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1103.282779][ T1707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1103.356324][ T4902] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1103.400752][ T5936] usb 3-1: USB disconnect, device number 6
[ 1103.406323][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1103.415448][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[ 1103.424243][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1103.449652][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1103.458920][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1103.474155][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1103.489563][T28027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.505958][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1103.545186][   T31] audit: type=1326 audit(1773612984.297:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1103.585903][   T31] audit: type=1326 audit(1773612984.297:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1103.614307][   T31] audit: type=1326 audit(1773612984.297:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1103.637053][   T31] audit: type=1326 audit(1773612984.297:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1103.660576][   T31] audit: type=1326 audit(1773612984.297:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1103.711010][   T31] audit: type=1326 audit(1773612984.297:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1103.740717][T28027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.804430][   T31] audit: type=1326 audit(1773612984.297:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1103.850119][   T31] audit: type=1326 audit(1773612984.297:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4948 comm="syz.3.13819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1104.117698][ T4960] set_capacity_and_notify: 4 callbacks suppressed
[ 1104.117718][ T4960] loop3: detected capacity change from 0 to 1024
[ 1104.268406][ T4960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1104.352227][ T4960] ext4 filesystem being mounted at /2291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1104.394181][ T4960] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.13826: bg 0: block 112: padding at end of block bitmap is not set
[ 1104.439714][T28027] bridge_slave_1: left allmulticast mode
[ 1104.445978][T28027] bridge_slave_1: left promiscuous mode
[ 1104.486682][T28027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.492277][ T4960] EXT4-fs (loop3): Remounting filesystem read-only
[ 1104.537432][ T4960] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.3.13826: cleanup dec ref error -28
[ 1104.648353][T28027] bridge_slave_0: left allmulticast mode
[ 1104.670736][ T4979] loop4: detected capacity change from 0 to 1024
[ 1104.678063][T28027] bridge_slave_0: left promiscuous mode
[ 1104.683855][T28027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.697613][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1104.873592][T28033] hfsplus: b-tree write err: -5, ino 25
[ 1104.887793][T28033] hfsplus: b-tree write err: -5, ino 4
[ 1104.904193][T28033] hfsplus: b-tree write err: -5, ino 2
[ 1105.035820][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13838'.
[ 1105.219291][   T30] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[ 1105.232792][   T31] audit: type=1326 audit(1773612985.868:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4994 comm="syz.3.13839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bd9c799 code=0x7ffc0000
[ 1105.424067][   T30] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1105.435350][   T30] usb 1-1: config 0 has no interface number 0
[ 1105.451545][   T30] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1105.477769][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1105.517668][   T30] usb 1-1: config 0 descriptor??
[ 1105.525256][ T5001] loop4: detected capacity change from 0 to 4096
[ 1105.551080][   T30] usb 1-1: selecting invalid altsetting 1
[ 1105.575915][ T5005] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1105.585870][   T30] dvb_ttusb_budget: ttusb_init_controller: error
[ 1105.602139][ T5006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1105.611272][   T30] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1105.721130][ T1707] Bluetooth: hci3: command tx timeout
[ 1105.768524][   T30] DVB: Unable to find symbol cx22700_attach()
[ 1105.885681][   T30] DVB: Unable to find symbol tda10046_attach()
[ 1105.892073][   T30] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1105.905577][   T30] usb 1-1: USB disconnect, device number 8
[ 1106.101023][T28027] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1106.341650][T28027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1106.397924][T28027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1106.428609][T28027] bond0 (unregistering): Released all slaves
[ 1106.471904][T28027] bond1 (unregistering): Released all slaves
[ 1106.506276][T28027] bond2 (unregistering): Released all slaves
[ 1106.534771][T28027] bond3 (unregistering): Released all slaves
[ 1106.568885][ T4983] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1106.755807][T28027] hmac(sha2: left promiscuous mode
[ 1106.792049][ T5034] loop5: detected capacity change from 0 to 512
[ 1107.257669][ T4942] chnl_net:caif_netlink_parms(): no params data found
[ 1107.627227][ T4942] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1107.634914][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.642076][ T4942] bridge_slave_0: entered allmulticast mode
[ 1107.650120][ T4942] bridge_slave_0: entered promiscuous mode
[ 1107.659124][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1107.666363][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1107.674158][ T4942] bridge_slave_1: entered allmulticast mode
[ 1107.682615][ T4942] bridge_slave_1: entered promiscuous mode
[ 1107.692201][T28027] IPVS: stopping backup sync thread 4556 ...
[ 1107.733062][ T4942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1107.746007][ T4942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1107.789309][ T4942] team0: Port device team_slave_0 added
[ 1107.798287][ T4942] team0: Port device team_slave_1 added
[ 1107.945056][ T1707] Bluetooth: hci3: command tx timeout
[ 1108.245316][ T4942] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1108.255699][ T5046] loop2: detected capacity change from 0 to 32768
[ 1108.268076][ T4942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1108.363697][ T4942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1108.366820][ T5046] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1108.490075][ T4942] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1108.497126][ T4942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1108.528657][ T4942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1108.626309][ T5088] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13870'.
[ 1108.678715][ T5046] XFS (loop2): Ending clean mount
[ 1108.705081][ T5046] XFS (loop2): Quotacheck needed: Please wait.
[ 1108.820183][ T4942] hsr_slave_0: entered promiscuous mode
[ 1108.860123][ T5046] XFS (loop2): Quotacheck: Done.
[ 1108.882416][ T4942] hsr_slave_1: entered promiscuous mode
[ 1108.899859][ T4942] debugfs: 'hsr0' already exists in 'hsr'
[ 1108.905626][ T4942] Cannot create hsr debugfs directory
[ 1109.129573][ T5818] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1109.409682][ T5108] loop3: detected capacity change from 0 to 1024
[ 1109.497789][ T5108] hfsplus: bad catalog entry type
[ 1109.649800][  T223] hfsplus: b-tree write err: -5, ino 25
[ 1109.699065][  T223] hfsplus: b-tree write err: -5, ino 4
[ 1109.717643][  T223] hfsplus: b-tree write err: -5, ino 2
[ 1109.966180][ T5131] loop4: detected capacity change from 0 to 1024
[ 1109.973597][ T5131] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1110.031691][ T5131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1110.106568][T28027] hsr_slave_0: left promiscuous mode
[ 1110.168502][ T1707] Bluetooth: hci3: command tx timeout
[ 1110.183679][T28027] hsr_slave_1: left promiscuous mode
[ 1110.262519][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.287427][T28027] veth1_macvtap: left promiscuous mode
[ 1110.328813][T28027] veth0_macvtap: left promiscuous mode
[ 1110.552553][ T5163] comedi comedi3: dt2817: I/O port conflict (0x4e24,5)
[ 1110.563136][ T5155] loop5: detected capacity change from 0 to 4096
[ 1110.643877][ T5165] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1110.714654][ T5155] NILFS (loop5): error -2 preparing GC: cannot delete virtual blocks from DAT file
[ 1111.020939][ T5171] loop2: detected capacity change from 0 to 4096
[ 1111.083786][ T5184] loop0: detected capacity change from 0 to 64
[ 1111.142876][ T5184] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1111.263956][ T5187] loop5: detected capacity change from 0 to 1024
[ 1111.331040][ T5187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[ 1111.444195][T28027] team_slave_1 (unregistering): left promiscuous mode
[ 1111.508269][T28027] team0 (unregistering): Port device team_slave_1 removed
[ 1111.547131][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[ 1111.602966][T28027] team_slave_0 (unregistering): left promiscuous mode
[ 1111.657935][T28027] team0 (unregistering): Port device team_slave_0 removed
[ 1111.763612][ T5198] loop2: detected capacity change from 0 to 4096
[ 1111.831031][ T5198] ntfs3(loop2): failed to convert "256c" to koi8-ru
[ 1112.007559][  T975] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[ 1112.029155][ T5199] lo: Caught tx_queue_len zero misconfig
[ 1112.169032][  T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1112.193841][  T975] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1112.232572][ T5209] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1112.243026][  T975] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1112.275566][  T975] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1112.283811][  T975] usb 1-1: Product: syz
[ 1112.343294][  T975] usb 1-1: Manufacturer: syz
[ 1112.347930][  T975] usb 1-1: SerialNumber: syz
[ 1112.375533][  T975] usb 1-1: config 0 descriptor??
[ 1112.394551][ T1707] Bluetooth: hci3: command tx timeout
[ 1112.402881][ T5215] netlink: 23 bytes leftover after parsing attributes in process `syz.2.13915'.
[ 1112.672768][  T975] usb 1-1: USB disconnect, device number 9
[ 1112.707654][ T4942] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1112.750869][ T4942] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1112.752954][ T5224] loop3: detected capacity change from 0 to 2048
[ 1112.815933][ T4942] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1112.830720][ T5228] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1112.894909][ T4942] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1112.927207][T28027] IPVS: stop unused estimator thread 0...
[ 1113.890794][ T5254] loop5: detected capacity change from 0 to 4096
[ 1114.145830][ T5243] loop4: detected capacity change from 0 to 131072
[ 1114.184472][ T5254] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[ 1114.209359][ T5243] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[ 1114.217452][ T5243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1114.233730][ T5243] F2FS-fs (loop4): invalid crc value
[ 1114.244201][ T5266] syz_tun: entered promiscuous mode
[ 1114.338207][ T5243] F2FS-fs (loop4): access invalid blkaddr:146945
[ 1114.344577][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: syz.4.13923 Not tainted syzkaller #0 PREEMPT(full) 
[ 1114.344605][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1114.344621][ T5243] Call Trace:
[ 1114.344631][ T5243]  <TASK>
[ 1114.344641][ T5243]  dump_stack_lvl+0xe8/0x150
[ 1114.344683][ T5243]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[ 1114.344722][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.344761][ T5243]  f2fs_get_node_info+0x607/0x1e30
[ 1114.344807][ T5243]  read_node_folio+0x221/0x410
[ 1114.344844][ T5243]  ? __pfx_read_node_folio+0x10/0x10
[ 1114.344886][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.344915][ T5243]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[ 1114.344956][ T5243]  __get_node_folio+0x3cb/0xe90
[ 1114.344994][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345030][ T5243]  ? __pfx___get_node_folio+0x10/0x10
[ 1114.345062][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345092][ T5243]  ? do_raw_spin_unlock+0xf5/0x210
[ 1114.345128][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345159][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345188][ T5243]  ? iget_locked+0x61c/0x6a0
[ 1114.345218][ T5243]  f2fs_iget+0x814/0x5dc0
[ 1114.345252][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345285][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345324][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345358][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345388][ T5243]  ? do_raw_spin_unlock+0xf5/0x210
[ 1114.345417][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345446][ T5243]  ? _raw_spin_unlock+0x28/0x50
[ 1114.345485][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345514][ T5243]  ? f2fs_build_stats+0xb2f/0x1220
[ 1114.345545][ T5243]  ? f2fs_fill_super+0x4d89/0x7740
[ 1114.345589][ T5243]  f2fs_fill_super+0x4e78/0x7740
[ 1114.345684][ T5243]  get_tree_bdev_flags+0x431/0x4f0
[ 1114.345715][ T5243]  ? __pfx_f2fs_fill_super+0x10/0x10
[ 1114.345754][ T5243]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1114.345786][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345821][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.345856][ T5243]  vfs_get_tree+0x92/0x2a0
[ 1114.345889][ T5243]  do_new_mount+0x341/0xd30
[ 1114.345925][ T5243]  ? apparmor_capable+0x126/0x170
[ 1114.345960][ T5243]  ? __pfx_do_new_mount+0x10/0x10
[ 1114.345997][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.346027][ T5243]  ? ns_capable+0x89/0xe0
[ 1114.346063][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.346096][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.346132][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.346161][ T5243]  ? user_path_at+0xd4/0x160
[ 1114.346190][ T5243]  __se_sys_mount+0x31d/0x420
[ 1114.346235][ T5243]  ? __pfx___se_sys_mount+0x10/0x10
[ 1114.346271][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.346316][ T5243]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1114.346346][ T5243]  ? __x64_sys_mount+0x20/0xc0
[ 1114.346387][ T5243]  do_syscall_64+0x14d/0xf80
[ 1114.346414][ T5243]  ? trace_irq_disable+0x3b/0x150
[ 1114.346452][ T5243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1114.346487][ T5243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1114.346514][ T5243] RIP: 0033:0x7fd38ff9da0a
[ 1114.346537][ T5243] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1114.346558][ T5243] RSP: 002b:00007fd390ef3e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1114.346583][ T5243] RAX: ffffffffffffffda RBX: 00007fd390ef3ee0 RCX: 00007fd38ff9da0a
[ 1114.346602][ T5243] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 00007fd390ef3ea0
[ 1114.346619][ T5243] RBP: 00002000000000c0 R08: 00007fd390ef3ee0 R09: 0000000002210000
[ 1114.346637][ T5243] R10: 0000000002210000 R11: 0000000000000246 R12: 0000200000000100
[ 1114.346654][ T5243] R13: 00007fd390ef3ea0 R14: 0000000000010608 R15: 00002000000003c0
[ 1114.346692][ T5243]  </TASK>
[ 1114.346739][ T5243] F2FS-fs (loop4): f2fs_get_node_info of read_node_folio+0x221/0x410: inconsistent nat entry, ino:3, nid:3, blkaddr:146945, ver:0, flag:0
[ 1114.740422][ T5243] F2FS-fs (loop4): Failed to read root inode
[ 1114.797126][ T5266] syz_tun: left promiscuous mode
[ 1114.986605][ T4942] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1115.124807][ T5286] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[ 1115.234555][ T4942] 8021q: adding VLAN 0 to HW filter on device team0
[ 1115.311983][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1115.319201][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1115.433687][T15297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1115.440919][T15297] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1115.556737][ T5936] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1115.759601][ T5936] usb 3-1: Using ep0 maxpacket: 32
[ 1115.804491][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1115.878194][ T5936] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1115.905544][ T5936] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1115.936669][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1115.967226][ T5936] usb 3-1: Product: syz
[ 1115.971426][ T5936] usb 3-1: Manufacturer: syz
[ 1115.989051][ T5319] loop5: detected capacity change from 0 to 16
[ 1116.006336][ T5936] usb 3-1: SerialNumber: syz
[ 1116.027673][ T5319] erofs (device loop5): mounted with root inode @ nid 36.
[ 1116.067947][ T5936] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input77
[ 1116.142407][ T5317] loop4: detected capacity change from 0 to 4096
[ 1116.211226][ T5317] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[ 1116.338457][ T5317] ntfs3(loop4): ino=1a, mi_enum_attr
[ 1116.343863][ T5317] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1116.444361][ T5328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13953'.
[ 1116.457047][ T5835] usb 3-1: USB disconnect, device number 7
[ 1116.597527][ T4942] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1116.659741][ T5835] appletouch 3-1:1.0: input: appletouch disconnected
[ 1116.746983][ T5334] loop5: detected capacity change from 0 to 128
[ 1116.868528][ T5337] loop4: detected capacity change from 0 to 256
[ 1117.388963][ T5346] loop2: detected capacity change from 0 to 2048
[ 1117.506171][ T5353] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1117.879419][ T4942] veth0_vlan: entered promiscuous mode
[ 1117.912196][ T5323] loop0: detected capacity change from 0 to 40427
[ 1117.954750][ T5323] F2FS-fs (loop0): invalid crc value
[ 1117.960260][ T4942] veth1_vlan: entered promiscuous mode
[ 1118.119946][ T4942] veth0_macvtap: entered promiscuous mode
[ 1118.199859][ T4942] veth1_macvtap: entered promiscuous mode
[ 1118.340844][ T4942] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1118.365675][ T4942] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1118.367119][ T5323] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1118.430819][ T5323] F2FS-fs (loop0): Start checkpoint disabled!
[ 1118.509437][T15297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.546806][ T5323] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[ 1118.573329][T15297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.640487][ T5323] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1118.648164][T15297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.690843][T15297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.020365][T15292] kworker/u8:10: attempt to access beyond end of device
[ 1119.020365][T15292] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1119.075353][T15292] CPU: 1 UID: 0 PID: 15292 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[ 1119.075387][T15292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1119.075405][T15292] Workqueue: writeback wb_workfn (flush-7:0)
[ 1119.075445][T15292] Call Trace:
[ 1119.075455][T15292]  <TASK>
[ 1119.075466][T15292]  dump_stack_lvl+0xe8/0x150
[ 1119.075505][T15292]  f2fs_handle_critical_error+0x37c/0x540
[ 1119.075545][T15292]  f2fs_write_end_io+0xcdb/0xff0
[ 1119.075604][T15292]  __submit_merged_bio+0x256/0x700
[ 1119.075644][T15292]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1119.075688][T15292]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1119.075736][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.075777][T15292]  f2fs_write_data_pages+0x2975/0x35e0
[ 1119.075854][T15292]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1119.075907][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.075937][T15292]  ? __lock_acquire+0x6b5/0x2cf0
[ 1119.076002][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076034][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076081][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076122][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076174][T15292]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1119.076214][T15292]  do_writepages+0x32e/0x550
[ 1119.076253][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076288][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076323][T15292]  ? reacquire_held_locks+0x104/0x190
[ 1119.076360][T15292]  ? writeback_sb_inodes+0x477/0x1a20
[ 1119.076403][T15292]  __writeback_single_inode+0x133/0x11a0
[ 1119.076441][T15292]  ? do_raw_spin_unlock+0xf5/0x210
[ 1119.076473][T15292]  writeback_sb_inodes+0x992/0x1a20
[ 1119.076541][T15292]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1119.076573][T15292]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1119.076643][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076673][T15292]  ? rcu_is_watching+0x15/0xb0
[ 1119.076709][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.076750][T15292]  wb_writeback+0x456/0xb70
[ 1119.076789][T15292]  ? queue_io+0x271/0x4a0
[ 1119.076832][T15292]  ? __pfx_wb_writeback+0x10/0x10
[ 1119.076864][T15292]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1119.076908][T15292]  wb_workfn+0x414/0xf50
[ 1119.076940][T15292]  ? look_up_lock_class+0x57/0x110
[ 1119.076984][T15292]  ? __pfx_wb_workfn+0x10/0x10
[ 1119.077016][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077045][T15292]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1119.077075][T15292]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1119.077102][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077138][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077170][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077200][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077233][T15292]  ? process_scheduled_works+0xa8d/0x18c0
[ 1119.077268][T15292]  ? process_scheduled_works+0xa8d/0x18c0
[ 1119.077310][T15292]  process_scheduled_works+0xb6e/0x18c0
[ 1119.077383][T15292]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1119.077424][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077455][T15292]  ? assign_work+0x3d5/0x5e0
[ 1119.077495][T15292]  worker_thread+0xa53/0xfc0
[ 1119.077551][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077592][T15292]  kthread+0x388/0x470
[ 1119.077618][T15292]  ? __pfx_worker_thread+0x10/0x10
[ 1119.077651][T15292]  ? __pfx_kthread+0x10/0x10
[ 1119.077678][T15292]  ret_from_fork+0x51e/0xb90
[ 1119.077716][T15292]  ? __pfx_ret_from_fork+0x10/0x10
[ 1119.077748][T15292]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1119.077777][T15292]  ? __switch_to+0xc7d/0x1450
[ 1119.077811][T15292]  ? __pfx_kthread+0x10/0x10
[ 1119.077839][T15292]  ret_from_fork_asm+0x1a/0x30
[ 1119.077898][T15292]  </TASK>
[ 1119.102497][T15297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.116428][T15292] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1119.246022][T15297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.644562][ T5397] usb usb8: selecting invalid altsetting 56942
[ 1119.741642][ T5400] loop2: detected capacity change from 0 to 256
[ 1119.791253][ T5400] exfat: Deprecated parameter 'namecase'
[ 1119.796995][ T5400] exfat: Deprecated parameter 'utf8'
[ 1119.825111][ T5403] loop3: detected capacity change from 0 to 128
[ 1119.893353][ T5400] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[ 1119.917473][T15297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1119.934947][ T5403] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[ 1119.961087][T15297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1119.978429][ T5403] FAT-fs (loop3): Filesystem has been set read-only
[ 1120.011398][ T5405] loop4: detected capacity change from 0 to 256
[ 1120.025623][ T5403] syz.3.13978: attempt to access beyond end of device
[ 1120.025623][ T5403] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[ 1120.054079][ T5405] exfat: Deprecated parameter 'utf8'
[ 1120.064069][ T5403] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[ 1120.149886][ T5403] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[ 1120.164012][ T5405] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1120.201904][ T5403] syz.3.13978: attempt to access beyond end of device
[ 1120.201904][ T5403] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[ 1120.281897][   T31] kauditd_printk_skb: 7 callbacks suppressed
[ 1120.281916][   T31] audit: type=1800 audit(1773612999.937:526): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13978" name="file2" dev="loop3" ino=1048790 res=0 errno=0
[ 1120.369038][   T31] audit: type=1804 audit(1773612999.946:527): pid=5405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13979" name="/newroot/2402/file0/file1" dev="loop4" ino=1048797 res=1 errno=0
[ 1120.584011][ T5421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13982'.
[ 1120.688289][   T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1120.880872][   T30] usb 7-1: Using ep0 maxpacket: 16
[ 1120.901211][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1120.949319][   T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1120.964316][ T5434] loop3: detected capacity change from 0 to 2048
[ 1121.000509][   T30] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 1121.031374][   T30] usb 7-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[ 1121.037337][ T5434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1121.039483][   T30] usb 7-1: Manufacturer: syz
[ 1121.148656][   T30] usb 7-1: config 0 descriptor??
[ 1121.233131][ T5442] hfsplus: found bad thread record in catalog
[ 1121.261347][ T5442] hfsplus: found bad thread record in catalog
[ 1121.472960][   T13] hfsplus: found bad thread record in catalog
[ 1121.631545][   T30] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:041E:3100.0006/input/input78
[ 1121.755899][   T30] creative-sb0540 0003:041E:3100.0006: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0
[ 1121.873025][ T5468] set_capacity_and_notify: 1 callbacks suppressed
[ 1121.873045][ T5468] loop2: detected capacity change from 0 to 512
[ 1121.909945][   T30] usb 7-1: USB disconnect, device number 2
[ 1121.942975][ T5468] EXT4-fs (loop2): 1 truncate cleaned up
[ 1121.990397][ T5468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1122.079284][ T5477] loop0: detected capacity change from 0 to 512
[ 1122.086600][ T5477] EXT4-fs: Ignoring removed oldalloc option
[ 1122.115616][ T5477] EXT4-fs (loop0): 1 truncate cleaned up
[ 1122.140683][ T5477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1122.173617][ T5471] fido_id[5471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1122.196056][ T5477] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14006: bg 0: block 370: padding at end of block bitmap is not set
[ 1122.221908][ T5477] EXT4-fs (loop0): Remounting filesystem read-only
[ 1122.265666][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1122.283063][ T5477] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[ 1122.346198][ T5480] loop4: detected capacity change from 0 to 2048
[ 1122.391330][ T5480] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1122.436504][ T6009] udevd[6009]: incorrect nilfs2 checksum on /dev/loop4
[ 1122.501843][ T5490] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1122.560242][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1122.961994][ T5503] kAFS: unable to lookup cell '°
Õ§K²ùyyµ¬
[ 1122.961994][ T5503] 
[ 1122.961994][ T5503] =6%ñ©*°;¾eÕܲ5ô;ZÑ*ëÜd{ªÀ¿iElÝZS—j—­UF
/»�øk!ª�b…�tF\_·Üvf£Vn¯D…ìPʳ¤ý´PÑB1Ú%ÐA)X¥ã‰\YT"8ÏŽŽµd²J_¿�.�ÖÁÐé5d×#ãÛœÒh»Gp6è"±5ͺô�*§Û
Ò,‚š°âI—ÚémÞíIæ-(W
ÕAž?”¨¹W�ÏZ)nÑ[ÿ®qGjnÚ‡%(„J-ô%�ؘccʵÌÎÅ{|ê6ZØÉûçËA–5Îkó@¥aÀ­’+o­éSŽT;ÅÞò¨]5«Ò!œG3ƒ{âÁK¤ÓÓ,'
[ 1123.510281][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1123.538903][ T5520] loop3: detected capacity change from 0 to 4096
[ 1123.585430][ T5520] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[ 1123.670753][ T5520] ntfs3(loop3): ino=1a, mi_enum_attr
[ 1123.676120][ T5520] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 1123.714001][ T5520] ntfs3(loop3): ino=1a, mi_enum_attr
[ 1123.733333][ T5520] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[ 1123.945544][   T31] audit: type=1326 audit(1773613003.360:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.034502][   T31] audit: type=1326 audit(1773613003.360:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.169555][   T31] audit: type=1326 audit(1773613003.360:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.169620][   T31] audit: type=1326 audit(1773613003.398:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.169672][   T31] audit: type=1326 audit(1773613003.398:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.169725][   T31] audit: type=1326 audit(1773613003.398:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.169776][   T31] audit: type=1326 audit(1773613003.398:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.169825][   T31] audit: type=1326 audit(1773613003.398:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.6.14029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f055fb9c799 code=0x7ffc0000
[ 1124.256131][ T5540] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1124.855614][ T5555] loop6: detected capacity change from 0 to 4096
[ 1124.927280][ T5555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1125.212191][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.291103][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14047'.
[ 1125.307180][ T5571] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1125.653902][ T5585] loop3: detected capacity change from 0 to 2048
[ 1125.730647][ T5585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1125.794267][   T31] kauditd_printk_skb: 5 callbacks suppressed
[ 1125.794287][   T31] audit: type=1326 audit(1773613005.100:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5599 comm="syz.4.14056" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd38ff9c799 code=0x0
[ 1126.018646][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1126.202951][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14057'.
[ 1126.243930][ T5607] loop2: detected capacity change from 0 to 256
[ 1126.428093][ T5607] FAT-fs (loop2): Directory bread(block 64) failed
[ 1126.460010][ T5607] FAT-fs (loop2): Directory bread(block 65) failed
[ 1126.482241][ T5607] FAT-fs (loop2): Directory bread(block 66) failed
[ 1126.488854][ T5607] FAT-fs (loop2): Directory bread(block 67) failed
[ 1126.546502][ T5607] FAT-fs (loop2): Directory bread(block 68) failed
[ 1126.574837][ T5607] FAT-fs (loop2): Directory bread(block 69) failed
[ 1126.593963][ T5590] loop0: detected capacity change from 0 to 32768
[ 1126.601271][ T5607] FAT-fs (loop2): Directory bread(block 70) failed
[ 1126.607797][ T5607] FAT-fs (loop2): Directory bread(block 71) failed
[ 1126.619132][ T5618] trusted_key: encrypted_key: key user:syz not found
[ 1126.632154][ T5607] FAT-fs (loop2): Directory bread(block 72) failed
[ 1126.666206][ T5607] FAT-fs (loop2): Directory bread(block 73) failed
[ 1127.470369][ T5640] loop3: detected capacity change from 0 to 1764
[ 1127.510661][ T5642] macvlan2: entered allmulticast mode
[ 1127.516049][ T5642] bridge0: entered allmulticast mode
[ 1127.532644][ T5640] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1127.573810][ T5642] bridge0: port 1(macvlan2) entered blocking state
[ 1127.606916][ T5642] bridge0: port 1(macvlan2) entered disabled state
[ 1127.678681][ T5642] bridge0: left allmulticast mode
[ 1127.832960][ T5646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14075'.
[ 1128.028994][ T5654] tipc: Enabled bearer <eth:macvlan1>, priority 10
[ 1128.247969][ T5631] loop4: detected capacity change from 0 to 32768
[ 1128.308739][ T5631] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1128.488831][ T5674] loop3: detected capacity change from 0 to 2048
[ 1128.548700][ T5674] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1128.587964][T23869] IPVS: starting estimator thread 0...
[ 1128.603429][ T5631] XFS (loop4): Ending clean mount
[ 1128.609832][ T5682] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1128.706964][   T30] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1128.708713][ T5681] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1128.795444][ T5678] loop6: detected capacity change from 0 to 4096
[ 1128.838788][ T5678] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[ 1128.863954][ T5820] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1128.940616][ T5678] ntfs3(loop6): ino=19, mi_enum_attr
[ 1128.949092][   T30] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1128.971654][ T5678] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1128.981372][   T30] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1129.042541][   T30] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0100, bcdDevice= 0.40
[ 1129.087833][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.112323][   T30] usb 1-1: Product: syz
[ 1129.116522][   T30] usb 1-1: Manufacturer: syz
[ 1129.121114][   T30] usb 1-1: SerialNumber: syz
[ 1129.189902][ T5690] Bluetooth: MGMT ver 1.23
[ 1129.231876][ T6003] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1129.433858][ T6003] usb 3-1: Using ep0 maxpacket: 32
[ 1129.455502][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1129.507614][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1129.534952][ T6003] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[ 1129.557160][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.575817][ T6003] usb 3-1: config 0 descriptor??
[ 1129.766298][   T29] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[ 1129.777790][ T5707] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) !
[ 1129.823096][   T30] usbhid 1-1:1.0: can't add hid device: -71
[ 1129.839448][   T30] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[ 1129.869206][   T30] usb 1-1: USB disconnect, device number 10
[ 1129.949015][   T29] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[ 1129.958862][   T29] usb 4-1: config 0 has no interface number 0
[ 1129.967423][   T29] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1129.991483][   T29] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1130.024114][   T29] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1130.034525][ T6003] zydacron 0003:13EC:0006.0007: item fetching failed at offset 0/2
[ 1130.064331][ T6003] zydacron 0003:13EC:0006.0007: parse failed
[ 1130.068430][   T29] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1130.084064][ T6003] zydacron 0003:13EC:0006.0007: probe with driver zydacron failed with error -22
[ 1130.093010][   T29] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1130.120450][   T29] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1130.175910][   T29] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1130.218923][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.237592][   T29] usb 4-1: config 0 descriptor??
[ 1130.257540][ T5696] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1130.266105][ T5696] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1130.295473][   T29] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1130.296514][ T6003] usb 3-1: USB disconnect, device number 8
[ 1130.621064][ T5696] ldusb 4-1:0.55: Write buffer overflow, 1 bytes dropped
[ 1130.670603][ T5736] loop5: detected capacity change from 0 to 164
[ 1130.688309][ T6003] usb 4-1: USB disconnect, device number 3
[ 1130.733462][ T6003] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[ 1130.757107][ T5739] loop6: detected capacity change from 0 to 1024
[ 1130.826913][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14111'.
[ 1130.898748][T15292] hfsplus: b-tree write err: -5, ino 25
[ 1130.921715][T15292] hfsplus: b-tree write err: -5, ino 4
[ 1130.927312][T15292] hfsplus: b-tree write err: -5, ino 2
[ 1130.985930][T15292] hfsplus: b-tree write err: -5, ino 20
[ 1131.168954][ T5756] loop6: detected capacity change from 0 to 256
[ 1131.193757][ T5756] FAT-fs (loop6): bogus number of FAT sectors
[ 1131.215775][ T5757] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14117'.
[ 1131.242513][ T5756] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1132.002807][ T5792] loop2: detected capacity change from 0 to 256
[ 1132.172507][ T5795] loop5: detected capacity change from 0 to 1024
[ 1132.353773][ T5800] loop6: detected capacity change from 0 to 4096
[ 1132.479052][T15297] hfsplus: b-tree write err: -5, ino 8
[ 1132.500586][ T5811] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1132.756210][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14141'.
[ 1132.916507][ T5837] can0: slcan on ptm0.
[ 1133.114165][ T5836] can0 (unregistered): slcan off ptm0.
[ 1133.418567][ T5905] netlink: 'syz.2.14151': attribute type 1 has an invalid length.
[ 1133.440989][ T5905] netlink: 236 bytes leftover after parsing attributes in process `syz.2.14151'.
[ 1133.595315][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14156'.
[ 1133.605188][   T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1133.776353][   T29] usb 1-1: Using ep0 maxpacket: 32
[ 1133.826765][   T29] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1133.861281][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.911491][   T29] usb 1-1: Product: syz
[ 1133.922241][   T29] usb 1-1: Manufacturer: syz
[ 1133.947701][   T29] usb 1-1: SerialNumber: syz
[ 1133.978575][ T5941] loop6: detected capacity change from 0 to 736
[ 1133.991042][   T29] usb 1-1: config 0 descriptor??
[ 1134.020450][   T29] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1134.028132][   T29] dvb-usb: bulk message failed: -22 (4/0)
[ 1134.058604][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1134.118096][   T29] dvb-usb: bulk message failed: -22 (5/0)
[ 1134.123866][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1134.239524][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1134.266748][ T5882] ttusb2: i2c wr len=58 too high
[ 1134.295668][   T29] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1134.330089][   T29] usb 1-1: media controller created
[ 1134.411396][ T5957] mkiss: ax0: crc mode is auto.
[ 1134.445974][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1134.557126][   T29] usb 1-1: selecting invalid altsetting 3
[ 1134.607693][   T29] ttusb2: set interface to alts=3 failed
[ 1134.709605][ T5957] sp0: Synchronizing with TNC
[ 1134.776863][   T29] DVB: Unable to find symbol tda10086_attach()
[ 1134.812113][   T29] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1134.884024][   T29] dvb-usb: bulk message failed: -22 (4/0)
[ 1134.902864][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1134.936249][   T29] dvb-usb: bulk message failed: -22 (5/0)
[ 1134.949063][   T29] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1134.981206][   T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1135.035670][ T6003] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1135.037351][   T29] usb 1-1: USB disconnect, device number 11
[ 1135.077113][  T975] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1135.131081][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14176'.
[ 1135.185100][ T5983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14176'.
[ 1135.195916][   T29] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1135.280656][  T975] usb 7-1: Using ep0 maxpacket: 16
[ 1135.291051][ T6003] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[ 1135.320965][  T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1135.333448][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.352433][  T975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1135.365876][ T6003] usb 6-1: Product: syz
[ 1135.376405][ T6003] usb 6-1: Manufacturer: syz
[ 1135.381236][ T6003] usb 6-1: SerialNumber: syz
[ 1135.385930][  T975] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1135.431710][  T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.475369][  T975] usb 7-1: config 0 descriptor??
[ 1135.818479][ T6002] sp0: Synchronizing with TNC
[ 1135.954350][  T975] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 1135.970210][ T6007] loop0: detected capacity change from 0 to 256
[ 1135.980626][ T6007] exfat: Deprecated parameter 'namecase'
[ 1136.007483][  T975] microsoft 0003:045E:07DA.0008: no inputs found
[ 1136.031319][ T6003] rtl8150 6-1:1.0: couldn't reset the device
[ 1136.041307][ T6003] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[ 1136.056524][  T975] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[ 1136.061321][ T6007] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11ccab4c, utbl_chksum : 0xe619d30d)
[ 1136.104125][ T6003] usb 6-1: USB disconnect, device number 126
[ 1136.187732][   T29] usb 7-1: USB disconnect, device number 3
[ 1136.402736][ T6014] fido_id[6014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1136.431090][ T6022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14187'.
[ 1136.640508][ T6028] loop2: detected capacity change from 0 to 64
[ 1136.854331][ T6032] bond7: (slave bond_slave_1): Device is not our slave
[ 1136.894846][ T6032] bond7: option active_slave: invalid value (bond_slave_1)
[ 1136.997500][ T6032] bond7 (unregistering): Released all slaves
[ 1137.241971][ T6045] loop6: detected capacity change from 0 to 4096
[ 1137.261226][ T6041] loop2: detected capacity change from 0 to 4096
[ 1137.319446][ T6045] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1137.387133][ T6045] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[ 1137.406020][ T6041] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1137.513669][   T31] audit: type=1800 audit(1773613016.063:542): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.14194" name="file1" dev="loop6" ino=30 res=0 errno=0
[ 1137.555031][ T6043] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex
[ 1137.586340][ T6041] ntfs3(loop2): Failed to load $Extend (-22).
[ 1137.603415][ T6041] ntfs3(loop2): Failed to initialize $Extend.
[ 1137.879979][   T30] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1138.062107][   T30] usb 6-1: Using ep0 maxpacket: 32
[ 1138.109823][ T6076] loop4: detected capacity change from 0 to 128
[ 1138.135697][   T30] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 1138.143926][   T30] usb 6-1: config 0 has no interface number 0
[ 1138.147151][ T6078] overlayfs: workdir and upperdir must be separate subtrees
[ 1138.158180][   T30] usb 6-1: config 0 interface 12 has no altsetting 0
[ 1138.218772][   T30] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1138.252636][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.260655][   T30] usb 6-1: Product: syz
[ 1138.291302][   T30] usb 6-1: Manufacturer: syz
[ 1138.306262][   T30] usb 6-1: SerialNumber: syz
[ 1138.323163][   T30] usb 6-1: config 0 descriptor??
[ 1139.029175][   T30] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1139.059632][   T30] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[ 1139.085319][   T30] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1139.118703][   T30] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[ 1139.171514][   T30] usb 6-1: USB disconnect, device number 127
[ 1139.219650][ T6110] loop3: detected capacity change from 0 to 256
[ 1139.298646][ T6110] exfat: Deprecated parameter 'utf8'
[ 1139.405185][ T6087] loop4: detected capacity change from 0 to 32768
[ 1139.423469][ T6110] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[ 1139.452734][ T6110] exFAT-fs (loop3): failed to load alloc-bitmap
[ 1139.455363][ T6087] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1139.482760][ T6110] exFAT-fs (loop3): failed to recognize exfat type
[ 1139.872240][ T6087] XFS (loop4): Ending clean mount
[ 1139.903435][ T6087] XFS (loop4): Quotacheck needed: Please wait.
[ 1140.005949][ T6087] XFS (loop4): Quotacheck: Done.
[ 1140.181628][ T5820] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1140.240374][ T6112] loop0: detected capacity change from 0 to 32768
[ 1140.370353][ T6156] IPVS: Error connecting to the multicast addr
[ 1140.398568][ T6112] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1140.503766][ T6112] XFS (loop0): Ending clean mount
[ 1140.519677][ T6167] netlink: 'syz.2.14246': attribute type 1 has an invalid length.
[ 1140.774774][ T6176] loop5: detected capacity change from 0 to 512
[ 1140.815921][ T5819] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1140.862204][ T6176] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8)
[ 1140.924711][ T6176] FAT-fs (loop5): Filesystem has been set read-only
[ 1141.573584][ T6201] virtiofs: Bad value for 'dax'
[ 1142.108906][ T6174] loop6: detected capacity change from 0 to 40427
[ 1142.143440][ T6174] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[ 1142.190937][ T6174] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1142.222483][ T6174] F2FS-fs (loop6): invalid crc value
[ 1142.365373][ T6222] loop0: detected capacity change from 0 to 4096
[ 1142.544620][ T6234] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14273'.
[ 1142.616411][ T6174] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1142.718265][ T6174] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1142.766474][ T6174] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1142.987993][ T6250] tipc: Started in network mode
[ 1143.025420][ T6250] tipc: Node identity , cluster identity 4711
[ 1143.105207][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14280'.
[ 1143.577652][ T6273] vivid-004: disconnect
[ 1143.593090][ T6268] vivid-004: reconnect
[ 1143.853888][ T6283] loop5: detected capacity change from 0 to 1024
[ 1144.118753][  T223] hfsplus: b-tree write err: -5, ino 25
[ 1144.132525][  T223] hfsplus: b-tree write err: -5, ino 4
[ 1144.138072][  T223] hfsplus: b-tree write err: -5, ino 2
[ 1144.213262][ T6295] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1144.250055][ T6295] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[ 1144.818055][ T6325] loop3: detected capacity change from 0 to 64
[ 1144.875468][ T6327] loop2: detected capacity change from 0 to 256
[ 1144.910713][ T6325] hfs: inconsistency in B*Tree (1,0,2,2,3)
[ 1144.935203][ T6327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[ 1145.030901][ T6327] exFAT-fs (loop2): failed to exfat_utf8_to_utf16 (err : -22) nls len : 165
[ 1145.541498][ T6346] loop5: detected capacity change from 0 to 512
[ 1145.613162][ T6346] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[ 1145.616758][ T6323] loop4: detected capacity change from 0 to 32768
[ 1145.655921][ T6346] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1145.677325][ T6346] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.14316: Block bitmap for bg 0 marked uninitialized
[ 1145.718579][ T6346] loop5: lost filesystem error report for type 5 error -117
[ 1145.725197][    C1] EXT4-fs (loop5): error count since last fsck: 1
[ 1145.739010][    C1] EXT4-fs (loop5): initial error at time 1773613023: ext4_read_block_bitmap_nowait:517
[ 1145.748705][    C1] EXT4-fs (loop5): last error at time 1773613023: ext4_read_block_bitmap_nowait:517
[ 1145.760337][ T6346] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem
[ 1145.771201][ T6346] loop5: lost filesystem error report for type 5 error -117
[ 1145.791498][ T6346] EXT4-fs (loop5): 1 orphan inode deleted
[ 1145.835042][ T6346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1145.885198][ T6323] JBD2: Ignoring recovery information on journal
[ 1145.984434][ T6323] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1146.131011][ T6323] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[ 1146.131121][ T6323] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1146.137416][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1146.174788][ T6323] OCFS2: File system is now read-only.
[ 1146.275798][ T6329] loop6: detected capacity change from 0 to 32768
[ 1146.379501][ T6329] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[ 1146.392299][ T6329] JBD2: Ignoring recovery information on journal
[ 1146.618000][ T5820] ocfs2: Unmounting device (7,4) on (node local)
[ 1146.676161][ T6329] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1146.699700][ T6338] loop3: detected capacity change from 0 to 32768
[ 1146.729114][ T6338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14313 (6338)
[ 1146.773773][ T6338] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1146.803968][ T6352] loop2: detected capacity change from 0 to 32768
[ 1146.816659][ T6338] BTRFS info (device loop3): using crc32c checksum algorithm
[ 1146.971720][ T6352] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1147.078447][ T6338] BTRFS info (device loop3): allowing degraded mounts
[ 1147.113885][ T6338] BTRFS info (device loop3): enabling ssd optimizations
[ 1147.131173][ T6352] XFS (loop2): Ending clean mount
[ 1147.136724][ T4942] ocfs2: Unmounting device (7,6) on (node local)
[ 1147.198969][ T6338] BTRFS info (device loop3): enabling free space tree
[ 1147.332684][ T5818] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1147.543576][ T5821] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1147.741277][ T6402] loop4: detected capacity change from 0 to 4096
[ 1148.005582][ T6402] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[ 1148.005617][ T6402] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[ 1148.177913][   T13] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[ 1148.184523][ T5820] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[ 1148.184557][ T5820] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1148.184611][ T5820] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[ 1148.195752][T15297] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[ 1148.268472][  T975] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1148.442657][  T975] usb 4-1: config 4 has an invalid interface number: 42 but max is 0
[ 1148.442692][  T975] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1148.442716][  T975] usb 4-1: config 4 has no interface number 0
[ 1148.442763][  T975] usb 4-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=81.51
[ 1148.442792][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1148.475513][  T975] s2255 4-1:4.42: Could not find bulk-in endpoint
[ 1148.475616][  T975] Sensoray 2255 driver load failed: 0xfffffff4
[ 1148.475641][  T975] s2255 4-1:4.42: probe with driver s2255 failed with error -12
[ 1148.693696][ T6003] usb 4-1: USB disconnect, device number 4
[ 1148.968536][ T6439] loop4: detected capacity change from 0 to 4096
[ 1149.057797][ T6442] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1149.089755][ T6439] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[ 1149.112139][ T6439] NILFS (loop4): nilfs_sufile_do_free: segment 6 is already clean
[ 1149.120570][ T6003] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1149.312538][ T6003] usb 6-1: Using ep0 maxpacket: 16
[ 1149.324282][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1149.357260][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.404269][ T6003] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 1149.428265][ T6003] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[ 1149.444065][ T6003] usb 6-1: Manufacturer: syz
[ 1149.457104][ T6003] usb 6-1: config 0 descriptor??
[ 1149.459533][ T6448] loop6: detected capacity change from 0 to 2048
[ 1149.540026][ T6456] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1149.810365][  T975] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1149.909060][ T6003] hid (null): unknown global tag 0xd
[ 1149.919970][ T6003] creative-sb0540 0003:041E:3100.0009: unknown global tag 0xd
[ 1149.939441][ T6003] creative-sb0540 0003:041E:3100.0009: item 0 1 1 13 parsing failed
[ 1149.951425][T23869] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1149.972200][ T6003] creative-sb0540 0003:041E:3100.0009: parse failed
[ 1149.989417][ T6003] creative-sb0540 0003:041E:3100.0009: probe with driver creative-sb0540 failed with error -22
[ 1150.013065][  T975] usb 5-1: Using ep0 maxpacket: 8
[ 1150.028444][  T975] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 1150.042566][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.059235][  T975] usb 5-1: Product: syz
[ 1150.063610][  T975] usb 5-1: Manufacturer: syz
[ 1150.068739][  T975] usb 5-1: SerialNumber: syz
[ 1150.088983][  T975] usb 5-1: config 0 descriptor??
[ 1150.127460][ T6003] usb 6-1: USB disconnect, device number 2
[ 1150.133687][T23869] usb 3-1: Using ep0 maxpacket: 8
[ 1150.145088][T23869] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[ 1150.174247][T23869] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1150.185202][T23869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.193686][T23869] usb 3-1: Product: syz
[ 1150.204940][T23869] usb 3-1: Manufacturer: syz
[ 1150.211604][T23869] usb 3-1: SerialNumber: syz
[ 1150.234911][T23869] usb 3-1: config 0 descriptor??
[ 1150.251371][ T6462] loop0: detected capacity change from 0 to 32768
[ 1150.253641][T23869] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1150.270495][T23869] usb 3-1: setting power ON
[ 1150.289963][T23869] dvb-usb: bulk message failed: -22 (2/0)
[ 1150.306355][T23869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1150.316429][   T31] audit: type=1800 audit(1773613028.036:543): pid=6462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14356" name="file1" dev="loop0" ino=7 res=0 errno=0
[ 1150.330844][ T6462] jfs_rename did not expect dtDelete to return rc = -2
[ 1150.344844][  T975] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 1150.368590][T23869] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1150.377705][T23869] usb 3-1: media controller created
[ 1150.383208][ T6462] ERROR: (device loop0): jfs_rename: 
[ 1150.383208][ T6462] 
[ 1150.409808][ T6462] ERROR: (device loop0): remounting filesystem as read-only
[ 1150.416764][T23869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1150.474418][ T6458] dvb-usb: bulk message failed: -22 (3/0)
[ 1150.480746][ T6458] dvb-usb: bulk message failed: -22 (3/0)
[ 1150.535995][T23869] usb 3-1: selecting invalid altsetting 6
[ 1150.557376][T23869] usb 3-1: digital interface selection failed (-22)
[ 1150.572630][T23869] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1150.593804][T23869] usb 3-1: setting power OFF
[ 1150.598781][T23869] dvb-usb: bulk message failed: -22 (2/0)
[ 1150.621629][T23869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1150.641860][T23869] (NULL device *): no alternate interface
[ 1150.743835][T23869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1150.778695][  T975] usb write operation failed. (-71)
[ 1150.797135][  T975] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1150.825307][T23869] usb 3-1: USB disconnect, device number 9
[ 1150.837120][  T975] dvbdev: DVB: registering new adapter (Terratec H7)
[ 1150.844543][  T975] usb 5-1: media controller created
[ 1150.862198][  T975] usb read operation failed. (-71)
[ 1150.891995][  T975] usb write operation failed. (-71)
[ 1150.935717][  T975] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 1150.984640][  T975] usb 5-1: USB disconnect, device number 115
[ 1151.129207][ T6485] loop6: detected capacity change from 0 to 256
[ 1151.609015][ T6499] loop6: detected capacity change from 0 to 512
[ 1151.611249][ T6473] loop3: detected capacity change from 0 to 32768
[ 1151.615565][ T6501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14374'.
[ 1151.643301][ T6499] EXT4-fs: Ignoring removed oldalloc option
[ 1151.672889][ T6499] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1151.745913][ T6499] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.14375: bad orphan inode 131083
[ 1151.775583][ T6496] loop2: detected capacity change from 0 to 4096
[ 1151.786683][ T6473] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1151.797913][ T6499] loop6: lost filesystem error report for type 5 error -117
[ 1151.808163][    C1] EXT4-fs (loop6): error count since last fsck: 1
[ 1151.821990][    C1] EXT4-fs (loop6): initial error at time 1773613029: ext4_orphan_get:1417
[ 1151.830568][    C1] EXT4-fs (loop6): last error at time 1773613029: ext4_orphan_get:1417
[ 1151.864529][ T6499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1151.965638][ T6499] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.6.14375: path /65/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0
[ 1152.033926][ T6473] XFS (loop3): Ending clean mount
[ 1152.313331][ T5821] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1152.359033][ T4942] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1152.693205][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14386'.
[ 1153.385221][ T6561] loop6: detected capacity change from 0 to 1024
[ 1154.100067][ T6594] loop5: detected capacity change from 0 to 2048
[ 1154.171258][ T6596] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1155.013585][ T6634] bridge_slave_0: default FDB implementation only supports local addresses
[ 1155.076830][ T6639] loop0: detected capacity change from 0 to 256
[ 1155.091479][ T6639] exfat: Deprecated parameter 'utf8'
[ 1155.122452][ T6639] exfat: Deprecated parameter 'namecase'
[ 1155.170316][ T6639] exfat: Deprecated parameter 'namecase'
[ 1155.194473][ T6639] exfat: Deprecated parameter 'utf8'
[ 1155.222564][ T6639] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x151dac50)
[ 1155.292446][ T6639] exFAT-fs (loop0): invalid boot region
[ 1155.300586][ T6639] exFAT-fs (loop0): failed to recognize exfat type
[ 1155.332051][ T6651] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14439'.
[ 1155.607887][ T6658] loop4: detected capacity change from 0 to 4096
[ 1155.668943][ T6658] NILFS (loop4): mounting unchecked fs
[ 1155.683970][ T6658] NILFS (loop4): invalid segment: Sequence number mismatch
[ 1155.716286][ T6658] NILFS (loop4): trying rollback from an earlier position
[ 1155.748870][ T6658] NILFS (loop4): recovery complete
[ 1155.764174][T23869] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1155.795900][ T6668] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1155.946073][T23869] usb 4-1: Using ep0 maxpacket: 8
[ 1155.975963][T23869] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[ 1156.006159][T23869] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1156.039716][T23869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.085746][T23869] usb 4-1: Product: syz
[ 1156.095939][T23869] usb 4-1: Manufacturer: syz
[ 1156.111266][T23869] usb 4-1: SerialNumber: syz
[ 1156.152559][T23869] usb 4-1: config 0 descriptor??
[ 1156.178013][T23869] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1156.195876][T23869] usb 4-1: setting power ON
[ 1156.211275][T23869] dvb-usb: bulk message failed: -22 (2/0)
[ 1156.242750][T23869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1156.250151][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14454'.
[ 1156.277951][ T6686] tc_dump_action: action bad kind
[ 1156.286121][T23869] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1156.301763][T23869] usb 4-1: media controller created
[ 1156.357965][T23869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1156.378894][ T6657] dvb-usb: bulk message failed: -22 (3/0)
[ 1156.394587][ T6657] cxusb: i2c rd: len=1792 is too big!
[ 1156.394587][ T6657] 
[ 1156.457198][T23869] usb 4-1: selecting invalid altsetting 6
[ 1156.474150][T23869] usb 4-1: digital interface selection failed (-22)
[ 1156.488862][T23869] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1156.508390][T23869] usb 4-1: setting power OFF
[ 1156.520350][T23869] dvb-usb: bulk message failed: -22 (2/0)
[ 1156.536244][T23869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1156.562580][T23869] (NULL device *): no alternate interface
[ 1156.690816][T23869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1156.740118][T23869] usb 4-1: USB disconnect, device number 5
[ 1156.915070][ T6705] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1157.192495][ T6697] loop0: detected capacity change from 0 to 32768
[ 1157.256775][ T6697] read_mapping_page failed!
[ 1157.274414][ T6697] ERROR: (device loop0): txCommit: 
[ 1157.274414][ T6697] 
[ 1157.428964][  T110] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[ 1157.439947][  T110] ------------[ cut here ]------------
[ 1157.445457][  T110] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[ 1157.470638][  T110] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 1157.477059][  T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[ 1157.486162][  T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1157.496212][  T110] RIP: 0010:txUnlock+0xdaf/0xdf0
[ 1157.501155][  T110] Code: c8 fd 90 0f 0b e8 11 63 66 fe 48 c7 c7 20 63 0b 8c 48 c7 c6 19 5f 0b 8c ba a4 03 00 00 48 c7 c1 20 70 0b 8c e8 a2 7d c8 fd 90 <0f> 0b e8 ea 62 66 fe 48 c7 c7 20 63 0b 8c 48 c7 c6 19 5f 0b 8c ba
[ 1157.520762][  T110] RSP: 0018:ffffc90002dc7c48 EFLAGS: 00010246
[ 1157.526826][  T110] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ea4506644c0f3400
[ 1157.534784][  T110] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1157.542742][  T110] RBP: ffffc9000291a048 R08: ffffc90002dc79c7 R09: 1ffff920005b8f38
[ 1157.550701][  T110] R10: dffffc0000000000 R11: fffff520005b8f39 R12: dffffc0000000000
[ 1157.558660][  T110] R13: 1ffff110130fe16a R14: ffff8880987f0b50 R15: 0000000000000000
[ 1157.567141][  T110] FS:  0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000
[ 1157.576058][  T110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1157.582627][  T110] CR2: 00007fb039de7000 CR3: 000000005097f000 CR4: 0000000000350ef0
[ 1157.590590][  T110] Call Trace:
[ 1157.593853][  T110]  <TASK>
[ 1157.596776][  T110]  jfs_lazycommit+0x582/0xaa0
[ 1157.601455][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[ 1157.606646][  T110]  ? __pfx_default_wake_function+0x10/0x10
[ 1157.612449][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1157.618072][  T110]  ? __kthread_parkme+0x7a/0x1f0
[ 1157.623006][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1157.628633][  T110]  kthread+0x388/0x470
[ 1157.632687][  T110]  ? __pfx_jfs_lazycommit+0x10/0x10
[ 1157.637877][  T110]  ? __pfx_kthread+0x10/0x10
[ 1157.642457][  T110]  ret_from_fork+0x51e/0xb90
[ 1157.647044][  T110]  ? __pfx_ret_from_fork+0x10/0x10
[ 1157.652149][  T110]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1157.657771][  T110]  ? __switch_to+0xc7d/0x1450
[ 1157.662979][  T110]  ? __pfx_kthread+0x10/0x10
[ 1157.667584][  T110]  ret_from_fork_asm+0x1a/0x30
[ 1157.672363][  T110]  </TASK>
[ 1157.675365][  T110] Modules linked in:
[ 1157.680161][  T110] ---[ end trace 0000000000000000 ]---
[ 1157.730247][  T110] RIP: 0010:txUnlock+0xdaf/0xdf0
[ 1157.735311][  T110] Code: c8 fd 90 0f 0b e8 11 63 66 fe 48 c7 c7 20 63 0b 8c 48 c7 c6 19 5f 0b 8c ba a4 03 00 00 48 c7 c1 20 70 0b 8c e8 a2 7d c8 fd 90 <0f> 0b e8 ea 62 66 fe 48 c7 c7 20 63 0b 8c 48 c7 c6 19 5f 0b 8c ba
[ 1157.845101][  T110] RSP: 0018:ffffc90002dc7c48 EFLAGS: 00010246
[ 1157.851592][  T110] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ea4506644c0f3400
[ 1157.860734][  T110] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1157.868973][  T110] RBP: ffffc9000291a048 R08: ffffc90002dc79c7 R09: 1ffff920005b8f38
[ 1157.877328][  T110] R10: dffffc0000000000 R11: fffff520005b8f39 R12: dffffc0000000000
[ 1157.887048][  T110] R13: 1ffff110130fe16a R14: ffff8880987f0b50 R15: 0000000000000000
[ 1157.895638][  T110] FS:  0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000
[ 1157.904836][  T110] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1157.911509][  T110] CR2: 00007fb039de7000 CR3: 000000002b5aa000 CR4: 0000000000350ef0
[ 1157.919917][  T110] Kernel panic - not syncing: Fatal exception
[ 1157.926257][  T110] Kernel Offset: disabled
[ 1157.930610][  T110] Rebooting in 86400 seconds..