last executing test programs:

21.053242091s ago: executing program 3 (id=2041):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, 0x0)

20.711457717s ago: executing program 3 (id=2044):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x103000)
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000340)={0x0, 0xffffffff, 0x2, 0x4, 0x9, 0x1859})

20.618912909s ago: executing program 3 (id=2048):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x9e, &(0x7f0000000100), &(0x7f0000000080)=0x4)

20.470001812s ago: executing program 3 (id=2051):
syz_mount_image$hfsplus(&(0x7f00000008c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nls=iso8859-4,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="0000000061746f3631ff00"/25], 0xff, 0x6db, &(0x7f0000001000)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

20.188075677s ago: executing program 3 (id=2057):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050408000004000000000000", 0x58}], 0x1)

19.559788199s ago: executing program 3 (id=2072):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

19.396724782s ago: executing program 32 (id=2072):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.585442391s ago: executing program 5 (id=2283):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)

2.354858475s ago: executing program 2 (id=2289):
semget$private(0x0, 0x6, 0x583)
semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}, {0x0, 0x19}], 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x40])

2.231996128s ago: executing program 2 (id=2292):
unshare(0xc040400)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0xfffffffd, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x1c)

2.154070349s ago: executing program 5 (id=2294):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200401, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@dir_umask={'dir_umask', 0x3d, 0x6}}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@codepage={'codepage', 0x3d, 'cp862'}}, {@type={'type', 0x3d, "d0a8c62b"}}, {@dir_umask={'dir_umask', 0x3d, 0x8}}]}, 0x1, 0x301, &(0x7f0000000740)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000200)=""/60, 0x3c)

2.08497496s ago: executing program 0 (id=2295):
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x1, 0xa, 0x4, 0x68, 0x8001, 0x2, 0x2, 0x1ff, @broadcast, @remote}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024)

2.0767298s ago: executing program 2 (id=2296):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c1, 0x1, 0x1, 0xd59f80, 0xc, 0x5, 0x6, 0x81, 0xc, 0x3, 0xe6e, 0x5, 0x1, 0x0, 0x0, {0x4, 0x8000}, 0x3, 0xa3}})

1.942937143s ago: executing program 2 (id=2298):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x40c3812)
keyctl$search(0xa, r0, &(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x2}, r0)

1.910001874s ago: executing program 2 (id=2300):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x27)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1.869064965s ago: executing program 0 (id=2301):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x9)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000ec0)=0x100)

1.823883275s ago: executing program 5 (id=2302):
r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
r1 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4000000b})

1.800501866s ago: executing program 0 (id=2303):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})

1.748630707s ago: executing program 2 (id=2305):
r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x2)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0)

1.687134868s ago: executing program 0 (id=2307):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x48e, &(0x7f0000000dc0)="$eJzs3E1sFFUcAPD/bLflm1bEDxC1ikbiRwsFlYMHNTHxgImJHvC4toUgCzW0JkIaqYbgxURIvBsTLyaePXjyZNSTiRcPejckxHARPa2Z3dlmdruFZbvttuzvlwz73s7bfe+/M2/mzTymAfSt0fSfJGJ7RPwREcMRUWguMFp7uXljfvLfG/OTSVQqb/2dpB+Lf27MT9aLJtnrtlqmmL4ULiXxcot6Z89fOF0ql6fPZfnxuTPvj8+ev/DcqTOlk9Mnp89OHD165PChF1+YeL4rcd6TtnXvRzP79rz+ztU3Jo9ffffnb5Nco/NxdMdgLOR+k2ZPdreyntuRSyfFhlVTw41FC2vTItqxKaLaUQer/X84Bi7tXFw3HK990tPGAauqUqlUJpZfvVAB7mJJ9LoFQG/UT/Tp9W99WaOhx7pw/ZXaBVAa981sqa0pLl6oDjZd33bTfEQcX/jvy3SJVbkPAQDQ6Id0/PNsq/FfIe7PlduZzQ2NZHMpuyLi3ojYHRH3RVTLPhARD95h/aNN+aXjn8K1jgJrUzr+eymb22oc/y1OU4wMZLkd1fgHkxOnytMHs9/kQAxuSvOHWn57EtVJoPjt8+XqH82N/9Ilrb8+Fszaca24qfEzU6W50ooDz1z/OGJvsVX82QReNoe1JyL2dljHqae/2df4zsBi6vbx30KxwwblVL6KeKq2/ReiKf66JDc/me7/TfOT45ujPH1wvL5XLPXLr5ffXK7+FcXfBen239q8/2+OfPwjSX6+dnbJVwzdro7Lf3667DVNp/v/UPJ2Q+Uflubmzh2KGEqOLX0/d4O7nq+XT+M/sL91/9+VfSaN/6GISHfihyPikYh4NGv7YxHxeETsv0X8P736xHudx7+60viPtTz+Lbf97zwxcPrH75fWvKXN+NPtf6SaOpC9087xr90GrvT3AwAAgI2gEBHbIymMLaYLhbGx2v/h3x1bC+WZ2blnTsx8cHaq9ozASAwW6ne6hrN8ZPc/R3L3Ryeqs+YRF7P84ey+8RcDW6r5scmZ8lSvg4c+t22Z/p/6a6DXrQNWXRfm0YANSv+H/tV5/3fkgI3uNr3YH2yAu5izOPSvVv3/Yg/aAaw953/oX4v9/0obhXOPezU/vAlsPM7/0L/0f+hLK3muf10k4uuIW5dJ1ktT7yjx2fpoRovEidpuE4V10p58IiKJNguXWq2KK11v2FDXvrDY9l+1OF+5WCqXf/9uJZX2+sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHf8HAAD//xo+4nQ=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1.624020759s ago: executing program 5 (id=2309):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2)

1.410731783s ago: executing program 0 (id=2313):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000440)={[{@uid}, {@nointegrity}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@noquota}, {}, {@nointegrity}, {@uid}, {@discard_size={'discard', 0x3d, 0x2}}]}, 0x1, 0x6255, &(0x7f0000001840)="$eJzs3c1vHGcdB/DfvvolNIl6qEqEkNuGl1Ka1xICBdoe4MCFA8oVJXLdKiIFlASUVhFx5QsS/BEgJI4IceTEH9ADV278AURKkEA9oE419vM44+2u147jnXWez0dyZn77zHifyXdnXzwz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PdyLi6q/SDScjPhe9iG7EUl2vRMTSysnmOs/HZnM8FxGDhYh6/c1/TkS8FhEfHY948PDuan3zhT324/t/+ecff3LsR//48+Ds//56u/f6pOXu3Pndf/927/G3FwAAAEpUVVXVSR/zT0VEP322BwCefvn1v0ry7eq5q9fnrD9qtVqtPoJ1UzXevWYREevNder3DA7HA8ARsx4ft90FWiT/ovUj4ljbnQDmWqftDnAoHjy8u9pJ+XaarwcrW+35XJAd+a93tq/vmDSdZvQck1k9vjaiF89O6M/SjPowT3L+3dH8r261D9Nyh53/rEzKf7h16VNxcv690fxHPD35d8fmX6qcf39f+ffkDwAAAAAAcyz//f9ky8d/Fw6+KXuy2/HflRn1AQAAAAAAAACetP2O/9cfGf9vm/H/AAAAYG7Vn9Vrvz/+6LZJ38VW336lE/HMyPJAYdLFMstt9wMAAAAAAAAAAAAAStLfOof3SidiEBHPLC9XVVX/NI3W+3XQ9Y+60rcfStb2kzwAAGz56PjItfydiMWIuJK+62+wvLxcVYtLy9VytbSQ388OFxarpcbn2jytb1sY7uENcX9Y1b9ssbFe07TPy9PaR39ffV/DqreHjs1Gi4EDQERsvRo9mPSK9H+vV0dTVZ2Ilt/kcETssv9zRNn/2Yu2H6cAAADA4auqquqkr/M+lY75d9vuFAAwE/n1f/S4gFqtVqvV6qevbqrGu9csImK9uU79nsFw/ABwxKzHx213gRbJv2j9iHi+7U4Ac63Tdgc4FA8e3l3tpHw7zdeDNL57PhdkR/7rnc318vrjptOMnmMyq8fXRvTi2Qn9eW5GfZgnOf/uaP5Xt9qHabmD51/t+DNhW+cYTcq/3s6TLfSnbTn/3mj+Iw57/5+VjeiOzb9UOf/+vvLvyR8AAAAAAOZY/vv/ybk6/jt83M2Zarfjvytj1zi8vgAAAAAAAADAk/Lg4d3VfN1rPv7/hTHLuf7z6ZTz78i/SDn/7kj+Xx1ZrteYv//Wo/z/8/Du6p9u//vzebrX/BfyTCc9sjrpEdFJ99Tpp+lBtu6zNga9YX1Pg06310/n/FSDd+J63Ii1OLdj2W76/3jUfn5He93TwWZ71dtqv7Cjvb/dnte/uKN9kM4uqpZy+5lYjZ/HjXh7s71uW5iy/YtT2qsp7Tn/nv2/SDn/fuOnzn85tXdGprX7H3Y/s983p+Pu583rX/zNucPfnKk2ore9bU319r3YQn82/0+ODeOXt9Zunrlz7fbtm+cjTXbceiHS5AnL+Q/Sz/bz/0tb7fl5v7m/3v9wuO/858VG9Cfm/1Jjvt7el2fctzbk/IfpJ+f/dmofv/8f5fwn7/+vtNAfAAAAAAAAAAAAAAAA2E1VVZuXiL4ZEZfS9T9tXZsJAMxWfv2vknz7rOrejO9PrT7idWfO+jPT+pNqvvqjVh/Fuqka741mERF/b65Tv2f49bhfBgDMs08i4l9td4LWyL9g+fv+6unptjsDzNSt9z/46bUbN9Zu3mq7JwAAAAAAAADA48rjf640xn8+XVXVvZHldoz/+lasHHT8z36e2R5gdMJA1b39b9NuNrrDXrcx3PgLMWn878H23G7jf/en3N9gSvtwSvvClPbFKe1jL/RoyPm/0Bjv/HREnBoZfr2E8V9Hx7wvQc7/xcbjuc7/KyPLNfOv/nCU8+/uyP/s7fd+cfbW+x+8ev29a++uvbv2s4vnz5+7eOnS5cuXz75z/cbaua1/W+zx4cr557GvnQdalpx/zlz+Zcn5fynV8i9Lzv/LqZZ/WXL++f2e/MuS88+ffeRflpz/y6mWf1ly/l9LtfzLkvN/JdXyL0vO/+upln9Zcv6vplr+Zcn5n0m1/MuS8z+b6j3mv3TY/WI2cv75CJf9vyw5/3xmg/zLkvO/kGr5lyXnfzHV8i9Lzv+1VMu/LDn/b6Ra/mXJ+V9KtfzLkvP/ZqrlX5ac/+VUy78sOf9vpVr+Zcn5fzvV8i9Lzv/1VMu/LDn/76Ra/mXJ+X831fIvS87/e6mWf1ly/m+kWv5lefT9/web+e2JJ/N7zBQ7M5iPbpjZmmn7mQkAAAAAAAAAAAAAGDWL04nb3kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4lB04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn9k3r52QGAj5O/kb2DgmGGeTXb/EL7QuJrw2vJVAKPQF2/WuzYLf8Nol0Eg2DZRIGBVVtA0XbQGhNjcVvuCCVoBygVohVSLtBb1BVKhcRFVAAakSrSBbzTnP8+zM7OzMrne8njnn85Hsn3fmzJwzZ87M7nfX3z0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDorjfMfqaWZVn9T/7X5iy7uf7vjROb88tee6O3EAAAAFirX+V/P39ruuDwCm7UsMw/v+J7X19YWFjI3j/856NfWFhIV0xk2eiGLMuvi67+6AO1xmWCx7Px2lDDx0NdVj/c5fqRLtePdrl+rMv1G7pcP97l+iU7YImNxfdj8jvbnv9zc7FLs9uy0fy67W1u9Xhtw9BQ/F5OrpbfZmH0RDaXncpms+mm5Ytla/ny37yrvq63ZnFdQw3r2lo/Qn722PG4DbWwj7c3rWvxPqOfvD6b+PnPHjv+txeeu6Pd7Lobmu6v2M4d2+rb+alwSbGttWxD2idxO4catnNrm+dkuGk7a/nt6v9u3c7nV7idw4ubua5an/PxbCj/9zP5fhpp/LZe2k9bw2W/uDvLssuLm926zJJ1ZUPZpqZLhhafn/HiiKzfR/1Qekk2sqrj9K4VHKf1ObO9+ThtfU3E5/+ucLuRZbah8Wn6ySfHGp73Xy5cy3Ea1R/1cq+V1mOw16+VfjkG43HxTP6gn2h7DG4Pj/+xe5Y/BtseO22OwfS4G47Bbd2OwaGx4Xyb05NQy2+zeAzualp+OF9TLZ/P3tP5GJy6cPrc1PzHP3Hf3OljJ2dPzp7Zs2vX9J59+w4cODB1Yu7U7HTx9zXu7f63KRtKr4FtYd/F18CrW5ZtPFQXvjy25P33Wl+H4x1eh5tblu3163Ck9cHV1ucFufSYLl4b763v9PErQ9kyr7H8+dm59tdhetwNr8ORhtdh288pbV6HIyt4HdaXObdzZV+zjDT8abcNy38uWNsxuLnhGGz9eqT1GOz11yP9cgyOh+PiBzuX/1ywNWzvE5Or/XpkeMkxmB5ueO+pX5K+3h8/kI92x+Wd9StuGssuzs+ev//RYxcunN+VhbEuXtpwrLQer5saHlO25HgdWvXxenjuFU/c2ebyzWFfjd9X/2t82eeqvsze+zs/V/lnt/b7s+nS3VkYPbbe+7PdZ/P6/hzLsi9+55MPf+uxL75h2f1Zz5ufmlr71+Iplza8/44u8/4bc/8LxfrSXT0+PDpSvH6H094ZbXo/bn6qRvL3rlq+7uenVvZ+PBr+rPf78W0d3o+3tCzb6/fj0dYHF9+Pa92+27E2rc/neDhOTk13fj+uL7Nl92qPyZGO78d3h1kL+/81ISmkXNRw7Cx33KZ1jYyMhsc1EtfQfJzuaVp+NGSz+rqe2h2+KExbubLjdMfdxfLDDbeL1us4nWhZttfHafre13LHaa3bd9+uTevzOR6Oi9v2dD5O68s8vXft750b4z8b3jvHuh2Do8Nj9W0eTQdh/n6fLWyMx+D92fHsbHYqm8mvHcuPp1q+rskHVvZeORb+rPd75ZYOx+COlmV7fQymz2PLHXu1kaUPvgdan8/xcFw8+UDnY7C+zBv39/Zr1x3hkrRMw9eurd9fW+57Xne27KbrdayMhO38zv7O35utL3PqwGpzZuf9dG+45KY2+6n19bvca2omW5/9tCVs53MHlt9P9e2pL/OFgys8ng5nWXbpow/m3+8NP1+5dPH7X2/6uUu7n+lc+uiDP33RiX9azfYDMPheKMam4nNdw0+mVvLzfwAAAODG6/Yf1NP3uMfDzzDlfwAAACijmPvj/wpP5H8AAAAojZj7R8JMypD//7j7Ilve+NzcC5ey1MxfCOL1aTc8VCwXO67T4eOJhUX1yx/86ux//+OllW3eUJZlv3zoj9ouv+WhuF2FibCdV9/UfPkSX79vRes++siltN7G/vqXwv3Hx7PSw6BdBXc6y7Jv3vq5fD0TH7iSz6cfOprPhy8/8Xh9mecPFh/H2z/70mL5vwr/d+XwiWNNt3827Icfhzn9tvb7I97ua1des3X/+xbXF29X23ZL/rCf/GBxv/H35Hz+8WL5uJ+X2/5vffapr9WXf/RV7bf/0lD77X8q3O9Xw/yflxfLNz4H9Y/j7T4dtj+uL97u/q98u+32X/1Msfy5NxfLHQ0zrn9H+Hj7m5+ba9xfj9aONT2u7C3FcnH909//0/z6eH/x/lu3f/zIlab90Xp8PP1vxf1MtSwfL4/rif6hZf31+2k8PuP6n/qTo037udv6rz787Mvr99u6/ntbljv30Z35+hfvr/k3Nv31pz/Xdn1xew7//bmmx3P43eF1HNb/5AfD8Riu/9+rxf21/naFo+9ufv+Jy39p86WmxxO99efF+q++7mQ+N4xv3HTTzS+65fK76vsuy57ZUNxft/Wf/JuzTdv/5duL/RGvj//FrHX9y7n8ymL95z82eebs/MW5mbRXH7s1/905by+2J27vreG9tfXjI2cvfGj2/MT0xHSWTZT3V+hds6+E+dNiXO689MKSd9Cdj4Tn886//Oame/71s/Hyf39vcfmVtxWft14dlvt8uHxzeP5Wt/6lnrzr9vz1XXs6bOHC0t8XvBZbt//XgRUtGB5/69cF8Xg/97IP5fuhfl3+eSO+rte4/T+cKe7nG2G/LoTfzLzt9sX1NS4ffzfClfcUr/c177/wNhef178Lz/c7flzcf9yu+Hh/GL6O+faW5ve7eHx849JQ6/3nv8Xjcng/yS4X18el4v6+8vztbTcv/h6S7PId+cd/lu7njlU9zOXMf3x+6tTcmYuPTl2Ynb8wNf/xTxw5ffbimQtH8t/leeTD3W6/+P60KX9/mpndtzfL363OFuM6u9Hbf+6R4zP7p++ZmT1x7OKJC4+cmz1/8vj8/PHZmfl7jp04Mfuxbrefmzm0a/fBPft3T56cmzl04ODBPQcn586crW9GsVFd7Jv+yOSZ80fym8wf2ntw1wMP7J2ePH12ZvbQ/unpyYvdbp9/bpqs3/oPJ8/Pnjp2Ye707OT83CdmD+06uG/f7q6/DfD0uRPzE1PnL56Zujg/e36qeCwTF/KL65/7ut2ecpr/j+Lr2Va14hfxZe+6d1/6/ax1X/3ksndVLNLyC0SfC7+L5rsvPndgJR/H3D8aZlKG/A8AAADkYu4fCzOR/wEAAKA0Yu7fEGYi/wMAAEBpxNw/Hmb6LwEVyf+l6/9vubSi9ev/6/837i/9/4r0/0P//pn39Fv/v3i/0P/vjbX27/X/A/1//X/9f/1//X96oN/6/zH3b8wyP/8HAACAkoq5f1OYifwPAAAApRFz/01hJvI/AAAAlEbM/TeHmX4lYEXyv/6//r/+v/6//n/79ev/Dyb9/870/7vQ/5/KqtX/v9zL7b8B/f+NjR/o/9OP+q3/H3P/i8JMKpL/AQAAoApi7r8lzET+BwAAgNKIuf/WMBP5HwAAAEoj5v7NYSYVyf/6/2vq/6fOlf5/8/br/zfT/w/Hg/6//v860P/vTP+/C/1/5/8frP5/E/1/+lG/9f9j7n9xmElF8j8AAABUQcz9Lwkzkf8BAACg/4xc281i7n9pmMmS/H+NKwAAAABuuJj7b8taiuAV+fm//r/z/+v/6//r/7df/8r7/8OZ/n//0P/vTP+/C/1//X/9f/1/eqrf+v957s/Gs5eFmVQk/wMAAEAVxNx/e5iJ/A8AAAClEXP//wszkf8BAACgNGLu3xJmUpH8r/9fmv7/LxqfOv1//f9O69f/d/7/MtP/70z/vwv9f/1//X/9f3qq3/r/MfffEWZSkfwPAAAAVRBz/51hJvI/AAAAlEbM/f8/zET+BwAAgNKIuX9rmElF8r/+f5/3/2Nz1Pn/9f/1//uy/z+u/9939P870//vYiX9/5v1/5ej/6//r/9Pq37r/8fc//Iwk4rkfwAAAKiCmPtfEWYi/wMAAEBpxNz/yjAT+R8AAABKI+b+iTCTiuT/1fT/a5f1/5dznc//P7aC8/830f/X/++0fv1/5/8vM/3/zvT/u3D+f/1//X/9f3qq3/r/MfffFWZSkfwPAAAAVRBz/7YwE/kfAAAASiPm/rvDTOR/AAAAKI2Y+7eHmVQk/zv//0D0/zP9f/1//X/9f/3/ldH/70z/vwv9f/1//X/9f3qq3/r/Mfe/KsykIvkfAAAAqiDm/nvCTOR/AAAAKI2Y+18dZiL/AwAAQGnE3L8jzKQi+V//X/9f/1//X/+//fr1/weT/n9n+v9d6P/r/+v/6//TU/3W/4+5/zVhJhXJ/wAAAFAFMffvDDOR/wEAAKA0Yu6/N8xE/gcAAIDSiLl/MsykIvlf/1//X/9f/1//P79Y/78k9P87W8/+/5j+v/6//r/+v/5/5fVb/z/m/vvCTCqS/wEAAKAKYu6/P8xE/gcAAIDSiLl/KsxE/gcAAIDSiLl/OsykIvlf/1//X/9f/39V/f9XLt5vifr/bdev/z+Y9P87c/7/LvT/9f9veP9/VP+fUum3/n/M/bvCTCqS/wEAAKAKYu7fHWYi/wMAAEBpxNy/J8xE/gcAAIDSiLl/b5hJRfK//r/+v/6//r/z/7dfv/7/YNL/76z3/f/4EPX/9f/1/53/X/+fpdbQ/2/9HNqT/n/M/Q+EmVQk/wMAAEAVxNy/L8xE/gcAAIDSiLl/f5iJ/A8AAAClEXP/gTCTiuR//X/9f/1//X/9//br1/8fTPr/nTn/fxf6//r/A9z/rx9b+v/0m347/3/M/QfDTCqS/wEAAKAKYu5/bZiJ/A8AAAClEXP/r4WZyP8AAABQGjH3/3qYSUXyv/6//r/+v/5/v/f/x/T/9f9XQf+/M/3/LvT/9f8HuP/v/P/0o37r/8fcfyjMpCL5HwAAAKog5v7fCDOR/wEAAKA0Yu5/XZiJ/A8AAAClEXP/4TCTiuR//f916v/HC/X/9f/1/53/X///utL/70z/vwv9f/1//X/9f3qq3/r/Mfe/PsykIvkfAAAAqiDm/gfDTOR/AAAAKI2Y+98QZiL/AwAAQGnE3P/GMJOK5H/9f+f/v/H9/9Gmbdf/X7yd/n9B/1//fzX0/zvT/+9C/1//X/9f/5+e6rf+f8z9bwozqUj+BwAAgCqIuf/NYSbyPwAAAJRGzP1vCTOR/wEAAKA0Yu5/a5hJRfK//r/+/43v/zv/v/5/Qf9f/78X9P870//vQv9f/1//X/+fnuq3/n/M/b8ZZlKR/A8AAABVEHP/Q2Em8j8AAACURsz9bwszkf8BAACgNGLuf3uYSUXyv/6//r/+v/6//n/79ev/Dyb9/84GrP//q1vC5fr/Bf3//t7+1fb/R1o+vi79/x8t1/9f2NB6e/1/rod+6//H3P+OMJOK5H8AAACogpj73xlmIv8DAABAacTc/64wE/kfAAAASiPm/t8KM6lI/tf/r2/HYntZ/1//P79A/1//X/9/YOn/dzZg/X/n/2+h/9/f2+/8//r/LNVv/f+Y+98dZlKR/A8AAABVEHP/w2Em8j8AAACURsz97wkzkf8BAACgNGLuf2+YSUXyv/6/8//r/+v/6/+3X7/+/2DS/+9M/78L/X/9/37r//+n/j+Drd/6/zH3PxJmUpH8DwAAAFUQc//7wkzkfwAAACiNmPt/O8xE/gcAAIDSiLn//WEmFcn/+v+D0v+f0P9fZf9/LFym/6//r/9fLfr/nen/d6H/r//fb/1/5/9nwPVb/z/m/g+Emaw8/4+veEkAAADghoi5/3fCTCry838AAACogpj7fzfMRP4HAACA0oi5//fCTCqS//X/B6X/7/z/mfP/6/+3PB79f/3/dtav/x/fefT/9f/1/yP9f/1//X9a9Vv/P+b+3w8zqUj+BwAAgCqIuf+DYSbyPwAAAAyEdv8nu1XM/UfCTOR/AAAAKI2Y+4+GmVQk/+v/6//r//dp//8vtv3LD773zqO79P/1//X/V2Vdz/9ff/E7/7/+v/5/ov+v/6//T6t+6//H3H8szGQx+L3dCf4BAABgsMXc/wdhJhX5+T8AAABUQcz9x8NM5H8AAAAojZj7Z8JMKpL/9f/1//X/+7T/P8Dn/4/7Y5D6/5MbBqj/H9909f/bWtf+//sWe+L6/6vt/4+1vbS1/1/T/2+i/7/q7f9ulmX6//r/3ED91v+PuX82zKQi+R8AAACqIOT+oRPFXLxC/gcAAIDSiLn/ZJiJ/A8AAAClEXP/h8JMKpL/9f/1//X/9f+d/7/9+vu2/+/8/x3p/3fWP/3/9pz/X/9/kLdf/1//n6X6rf8fc/9cmElF8j8AAABUQcz9Hw4zkf8BAACgNGLu/0iYifwPAAAApRFz/6kwk4rkf/1//X/9f/1//f/269f/H0z6/53p/3eh/6//r/+v/09P9Vv/P+b+02EmFcn/APwfe3fyZGdd73H8hNuQpKi6xe4u7uKyv38CC1nrzo0LNi60ynIBKs4TQVQccZ4HnMUBJxRxwnkCJxTFCRXnecAZsWIl+X6/Saeffk53crrP8/x+r9fCLzQ054RKET/pvPMAANCD3P2Xxi32PwAAADQjd/9lcYv9DwAAAM3I3f+wuKWT/a//1/832//fR/+/3evr//X/LdP/j9P/L6H/1//r//X/rNTU+v/c/Q+PWzrZ/wAAANCD3P2PiFvsfwAAAGhG7v7L4xb7HwAAAJqRu/+RcUsn+/+0/v/AYj39/3lb3tf+9v+Z8er/W+r/Pf9/29fX/+v/W7a//f+Vx/7Lp//X/+v/g/5f/6//53RT6/9z9z8qbulk/wMAAEAPcvc/Om6x/wEAAKAZufsfE7fY/wAAANCM3P2PjVs62f+e/+/5//p//b/+f/j19f/z5Pn/43rq/y+//fxL777xf2/azevr/9vo/++Nf4/6f/0/6ze1/j93/+Pilk72PwAAAPQgd//j4xb7HwAAAJqRu/8JcYv9DwAAADN0ePCjufufGLd0sv/1//p//X/0/4f0//p//X8L9P/jeur/z+T19f9t9P+e/6//Zzqm1v/n7n9S3NLJ/gcAAIAe5O5/ctxi/wMAAMB0Df1C7BG5+6+IW+x/AAAAaEbu/iNxSyf7X/+/9/3/v/X/8+j/Pf9f/6//b4L+f5z+fwn9v/5f/6//Z6Wm1v/n7r8ybulk/wMAAEAPcvc/JW6x/wEAAKAZufuvilvsfwAAAGhG7v6nxi2d7H/9v+f/6//1//r/4dfX/8/TtPv/jaWvr//X/8+8/z9X/6//1/9zql32//eM/Gd7Jf1/7v6nxS2d7H8AAADoQe7+p8ct9j8AAAA0I3f/1XGL/Q8AAADNyN3/jLilk/2v/9f/6//1/2fc/2/9rnec/n+Y/n9/TLv/X66b/v/A8O+FoP+fff/v+f/6f/0/m0zt+f+5+58Zt3Sy/wEAAKAHufufFbeM7P9d/2Q+AAAAsFa5+58dt/j6PwAAAMxeVme5+58Tt3Sy//X/+n/9v/7f8/+HX3+s/7/plPen/58W/f+4yfT/29D/6//n/P71//p/tppa/5+7/7lxSyf7HwAAAHqQu/+auMX+BwAAgGbk7n9e3GL/AwAAQDNy9z8/bulk/w/3/yf/uv5/Z/T/m9+//n/4+8eq+v/8J+r/R/v/iz3/v0/6/3H6/yU29f/331gs9P/6f/1/9P+Hl32+/p8hU+v/c/e/IG7pZP8DAABAD3L3vzBusf8BAACgGbn7XxS32P8AAADQjNz9L45bOtn/nv+v/9f/z6//9/z/E9b5/P/Fvvf/G/r/HdL/j9P/L+H5//p//f/48/9HfhcA/T9Dptb/5+5/SdzSyf4HAACAHuTuf2ncYv8DAADAPJz6awdO/wWlIXf/y+IW+x8AAACakbv/5XFLO/t/9Fmd+n/9v/5f/6//H379afX/nv+/U/r/cfr/JfT/e9HPbzTW/1+73edPof+/Yq/7/xH6f4Zs6v9vPvnxdfX/uftfEbe0s/8BAACge7n7Xxm32P8AAADQjNz9r4pb7H8AAABoRu7+V8ctnez/Pe//R373Af2//l//r//X/+v/V03/P07/v4T+3/P/Pf9f/89Kber/T7Gu/j93/2vilk72PwAAAPQgd/9r4xb7HwAAAJqRu//auMX+BwAAgGbk7n9d3NLJ/vf8f/2//n/b/v8c/b/+X/8/P2fV35+j/y/6f/2//l//r/9nBabW/+fuf33c0sn+BwAAgB7k7n9D3GL/AwAAwJwcHPuLufvfGLfY/wAAANCM3P1vils62f/6/73t//Pj+v9Z9v+e/6//1//PULfP/z8w9CPRVtv0/7c+5Mj9Nn9E/6//1//r//X/7NAFI39tEv3/0ZP/7zJ3/5vjlk72PwAAAPQgd/9b4hb7HwAAAJqRu/+tcYv9DwAAAM3I3X9d3LLL/T/WPEyZ/t/z//X/+n/9//Dr6//nqdv+f4c8/38J/b/+X/+v/2elJtH/n/LnufvfFrf4+j8AAAA0I3f/2+MW+x8AAACakbv/HXGL/Q8AAADNyN3/zrilk/2v/9f/6//1//r/4dfX/8+T/n+c/n+JOfX/151F/78x/OF19/Nna93vX/+v/2erqfX/ufuvj1s62f8AAADQg9z974pb7H8AAABoRu7+d8ct9j8AAAA0I3f/e+KWTva//l//r//X/+v/h19f/z9P+v9x+v/FYvG+kTcw1P8fPTjN/t/z/yf3/vX/+n+2mlr/n7v/vXFLJ/sfAAAAOnDh4ePnUPxUsP0PAAAALcrdf0PcYv8DAABAM3L3vz9u6WT/6//1//r/k/1/fUv0//p//f9s6f/H6f+XmNPz//X/k3v/+n/9P1tNrf/P3f+BuKWT/Q8AAAA9yN1/Y9xi/wMAAEAzcvd/MG6x/wEAAKAZuftvils62f/6f/2//t/z//X/w6+v/5+nvev/F/p//b/+fwn9v/5f/8/pptb/5+7/UNzSyf4HAACAHuTu/3DcYv8DAABAM3L3fyRusf8BAACgGbn7Pxq3dLL/9f/6f/2//l//P/z6+v958vz/cfr/JfT/+n/9v/6flRru/69YW/+fu/9jcUsn+x8AAAB6kLv/5rjF/gcAAIBm5O7/eNxi/wMAAEAzcvd/Im7pZP/r//X/m/v/xUL/r//fef9/pf7/7Pr/Qwv9/8rp/8fp/5fQ/7fZ/5+zaKj/P7zt5+v/maKpPf8/d/8n45ZO9j8AAAD0IHf/p+IW+x8AAACakbv/03GL/Q8AAADNyN3/mbilk/2v/9f/e/6//t/z/4df3/P/50n/P07/v4T+/6z6//zxeHL9v+f/6/9Zm6n1/7n7Pxu3dLL/AQAAoAe5+z8Xt9j/AAAA0Izc/Z+PW+x/AAAAaEbu/i/ELZ3sf/2//l//r//X/w+/vv5/nvT/4/T/S+j/23z+fx/9/+GF/p8Jmlr/n7v/i3FLJ/sfAAAAepC7/5a4xf4HAACAZuTuvzVusf8BAACgGbn7vxS3dLL/9f/6f/3/PPv/Q/p//b/+f9BU+v+LLrrvbfp//b/+X//v+f/6/95Nrf/P3f/luKWT/Q8AAAA9yN3/lbjF/gcAAIBm5O7/atxi/wMAAEAzcvd/LW7pZP9v7f/PXZwoVE8Y6v+jUZt9/3/wlPeR9P/6/+MfmEH/v9D/6//1/4Om0v97/v+ZvX/9v/5/zu9/V/3/hVs/X/9Pi6bW/+fuvy1u6WT/AwAAQA9y9389brH/AQAAoBm5+78Rt9j/AAAA0Izc/bfHLZ3sf8//1//r//X/+v/h19f/z5P+f5z+fwn9v/7f8/8ve9B/6f9Znan1/7n7vxm3dLL/AQAAoAe5+78Vt9j/AAAA0Izc/XfELfY/AAAANCN3/7fjlk72v/5/f/r//46P6f/1//p//b/+f2/p/8fp/8vp37QT+un/Dw19cN39/Nla9/tvpv/3/H9WaGr9f+7+78Qtnex/AAAA6EHu/u/GLfY/AAAANCN3//fiFvsfAAAAmpG7//txSyf7X//fzfP/7zqv2/7/gfr/015f/6//b5n+P39EH6b/X6Kf/n/Quvv5ub//vvv/C/T/DJpa/5+7/864pZP9DwAAAD3I3f+DuMX+BwAAgGbk7v9h3GL/AwAAQDNy9/8obulk/+v/u+n/rzrxPnvs/z3/X/+v/++J/n+c/n8J/b/+v/3+/7ztPt/z/9kLU+v/c/ffdWAj9n/8QNPJ/gcAAIC5esD/P/TOnf69dx3/30OLH8ctFy+O7vDL2AAAAMDEHdv9BzYWi58c/7P+fv0/AAAA9CB3/0/jlk72v/6/r/6/z+f/6//1//r/nuj/x+n/l9D/6//b7/+3pf9nL0yt/8/d/7O45ZTht7HrbyUAAAAwJbn7fx63dPL1fwAAAOhB7v5fxC1b9r/fDhAAAADmKnf/L+OWTr7+r/+feP+/2KP+P/4+/f8J+n/9/9Dr6//nSf8/blP/f/XI3zjc/x89oP/X/4/Q/+v/9f+cbmr9f+7+X8Utnex/AAAAaNSmn1HI3f/ruMX+BwAAgGbk7v9N3GL/AwAAQDNy9/82bulk/+v/97j/P/YP2NzPZ6q+h8//P1x/5Pn/nff/1xwafH39v/6/Zfr/cZ7/v4T+v5X+/6D+X//PNEyt/8/d/7u4pZP9DwAAAD3I3f/7uMX+BwAAgGbk7v9D3GL/AwAAQDNy9/8xbulk/+v/J/78/zPq/3fw/H/9fx/9/zav307//z/nH7nlkgffcL3+n5P2s//P7wv6f/2//v+ECfX/nv+v/2ciVt//b2z64G77/9z9f4pbOtn/AAAA0IPc/XfHLfY/AAAANCN3/5/jFvsfAAAAmpG7/y9xSyf7X/+v/59K/5//rtfQ/x854/7/8GKxWEv/n01x7/2/5//r/7fy/P9x+v8l9P/6f/2//p+VWn3/v/mDu+3/c/f/NW7pZP8DAABAD3L3/y1uyf1/YNc/dQ8AAABMTO7+v8ctvv4PAAAAzcjd/4+4pZP9r//X/0+l/0+e/3/y89p6/v8lFaf22f//X/2R/n9v6f/H6f+XWH//f8exo/+f5/vX/+v/2Wpq/X/u/n/GLZ3sfwAAAOhB7v574hb7HwAAAJqRu/9fcYv9DwAAAM3I3X9v3NLJ/tf/t9r/ZxGv/9f/T6X/9/x/z//fH/r/cfr/Jdbf/3v+/4zfv/5f/89WU+v/c/f/JwAA///MoWwn")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

1.336773244s ago: executing program 4 (id=2314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!{.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x48}}, 0x804)

1.252058136s ago: executing program 1 (id=2315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.190843387s ago: executing program 4 (id=2316):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x88a, &(0x7f00000002c0)={[{@usrquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@noblock_validity}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@data_err_ignore}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

1.109202129s ago: executing program 1 (id=2317):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x22)

947.949112ms ago: executing program 1 (id=2318):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337)

657.308498ms ago: executing program 1 (id=2319):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

643.772558ms ago: executing program 4 (id=2320):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0)

456.157161ms ago: executing program 4 (id=2321):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x890b, &(0x7f0000000080)={0xffffc0fe, 'erspan0\x00', {}, 0x20})

454.705121ms ago: executing program 1 (id=2322):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)={0x18, 0x1e, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0x8, 0x104, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0)

357.885973ms ago: executing program 1 (id=2323):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x4432, &(0x7f0000004480)="$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")

312.189744ms ago: executing program 5 (id=2324):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x264c}})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

204.093686ms ago: executing program 4 (id=2325):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0)
r1 = epoll_create(0xc02)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x6000200e})

154.371417ms ago: executing program 5 (id=2326):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000000c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000", @ANYRES64=0x0, @ANYBLOB="49a8a1a7ccdfc7eb0a5e6d760f583ec85ed57dd1cb6163e4bbbabf11b2b4e644d954129ea6913927eeddef778da5dd9b83ddfb0d2ce6120fe01dc022cef79b54c9adbec51fd531c0f4f39300c1d9151c288e2a83750632863010599543349a282df9d20c7f8843d2c789aa507951e60572d03e745e367c5cc76b3a8f89b7427458c89f220488ddf560f7da5f2c8e5541bc4bf055c87531357ca2267e9cbe1d3e92567c", @ANYRESOCT, @ANYRESDEC=0x0], 0x2, 0x6e2, &(0x7f0000000c80)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsim10se9h5x6Sg+6hR5Keje054ZA8VXHQCGXnHRTmdmZ1Ui72l3ZeiX9/cTMfDPfc/6zM7MPxATwf2txOqpPI4nF6bc30vXtrbn22NbcRJ7djohaRFQiqp1FJCuR5d7Kp/h2ujEvn8R4/34+Wl5499lX21901qr5lNWrlOqPota7aTOfohkRY/my1yFji08Pdr+vvduHtjeqpLuHacCuFYGLv7xQq/DCdntsdvM++U82H1T9KOctcE4lnftmj6mIyYioR3Tu+vnVoXK6ozt+m2c9AAAAADiqxtGrvLQTO7ERF05iOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBNlT//P8mnSpFuRlI8/7+Wb4s8fQ4NfxDi5xOd5dOTHwwAAAAAAAAAnLjXd2InNuJCsb6bZL/5v1H6jf9b8UGsxVKsxvXYiFasx3qsxmxETJUaqm201tdXZ7Oa0bg0oObN+KxPzZuHj/HWce80AAAAAAAAAJxv9SH598d7t/0+Fvd+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPMgiRjrLLLpUpGeiko1IuoRUUvLbUZ8VqS/JpJ+G5+e/jgAAADghdT3ryb1Eeq89CR2YiMuFOu7SfaZ/0r2ebkeH8RKrMdyrEc7luJO/hk6/dRf2d6aa29vzT1Ip952f/rlkYaetRid7x769/xqVqIRd2M523I9bkcSu5lK3sqr21tz6fJB/3F9mI4p+UluwGjGSuk76ezqp1n6z/u/RageaRefU+XQnKksd7wbkZl8bGmNi0UE+kdi6NGpDuxpNirdb34uDe6pf8w/HNz75IFSfb+5ORMHI3EzKt0jdGVwJCK++49Pfn2vvXL/3t216fOzS309GVriYCTmSpG4+g2KxHAzWSQud9cX4xfxq5iOLyfeidVYjt9EK9ZjqVnkt/LXczqfGhypzyfLa+8MG0l6Tja7169+Y2rGvjFFM36epVrxRnZML8RyJPEwIpbirezvZsx2rwZ7R/jyCGd9ZYQrbcm172WLbpiicXjZv43W5HFJ43qxFNfyNXcqyytv2YvSy32jVNzrRr8flVS/kyfSFv4w8P5w2g5GYrYUiVcOe710QvrX3XS+1l65v3qv9f6I/b2ZL9Pz6E/n6i6RHuGXo57v3MVsnmTn1EyW90r3Drs/XrX8F5eOSk/e5W69zpn6y3gYd/adqT+M+ZiPhaz0laz0eM8dK8272m1p/zU8zUvfaVW7P+yU3289jHbn/RAA59vk9ydrjf82/t34uPHHxr3G2/WfTfxo4rVajP9r/MfVmbE3K68lf4+P43d7n/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnt/bo8f1Wu7202j9R6Z+VDK7Vau8WDxIbUGZfIskflTNC4WTt0ePdoQ0OTkzkw3vO6seZKJ7WOLxw8wSHkWwePF714ceieMrTCF0kPQFPKz/3mIue97aMn4NDeTDRHFImiZEbLF6wpayjv3ob/Y7XWETfYQy5cIwdx9UHOEs31h+8f2Pt0eMfLD9ovbf03tLK+Pz8wszC/FtzN+4ut5dmOvNShVN5+C1wGspvJ7pqEfH68LoDHtQKAAAAAAAAAAAAnKDT+F+Is95HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OttcTqqTyOJ2ZnrM+n69tZcO52K9F7JakRUIiL5bUTyz4hb8eTZrTRjqtRcclg/Hy0vvPvsq+0v9tqqFuUrEZuH1hvNZj5FMyLG8uVxtXd7eHu1veREn+ykG5k0YNfyJZy5/wUAAP//GP3tFA==")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

57.616599ms ago: executing program 0 (id=2327):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x200002}}, {0x8}}]}, 0x44}}, 0x0)

0s ago: executing program 4 (id=2328):
syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0xa, &(0x7f0000000340)=ANY=[@ANYRES8=0x0], 0xfa, 0x6158, &(0x7f000000c680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8, 0x9, 0x0, 0xfffffffd})

kernel console output (not intermixed with test programs):

hkdsk.
[   97.383355][ T5814] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[   97.434324][ T5814] ntfs: volume version 3.1.
[   97.445240][ T5814] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   97.457096][ T5814] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   97.497744][ T5814] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[   97.564470][   T21] usb 4-1: USB disconnect, device number 4
[   97.608798][ T5814] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[   97.632406][ T5814] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[   97.813055][ T5818] loop4: detected capacity change from 0 to 32768
[   97.933848][ T4717] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   98.108853][ T5852] tmpfs: Bad value for 'mpol'
[   98.304255][ T4717] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.332631][ T4717] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   98.361071][ T5865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.682'.
[   98.368619][ T4717] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 170, setting to 64
[   98.440981][ T4717] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   98.554013][ T4717] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40
[   98.568867][ T4717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   98.597463][ T4717] usb 1-1: SerialNumber: syz
[   98.623729][ T4215] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   98.634287][ T5829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   98.641365][ T5829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   98.652756][   T26] audit: type=1326 audit(1750424479.268:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.3.688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2393893929 code=0x0
[   98.694716][ T4717] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[   98.883757][ T4215] usb 3-1: Using ep0 maxpacket: 16
[   98.912337][ T5889] loop3: detected capacity change from 0 to 4096
[   98.927283][ T4717] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[   98.939857][ T4717] usb 1-1: USB disconnect, device number 4
[   98.995101][ T5889] ntfs: volume version 3.1.
[   99.013811][   T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   99.163810][ T4215] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[   99.172864][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.194099][ T4215] usb 3-1: Product: syz
[   99.198311][ T4215] usb 3-1: Manufacturer: syz
[   99.202946][ T4215] usb 3-1: SerialNumber: syz
[   99.225964][ T4215] usb 3-1: config 0 descriptor??
[   99.267326][   T21] usb 2-1: Using ep0 maxpacket: 16
[   99.286510][ T4215] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[   99.338331][ T4707] udevd[4707]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.383788][   T21] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[   99.392089][   T21] usb 2-1: config 0 has no interface number 0
[   99.413733][   T21] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[   99.504624][ T4215] usb 3-1: USB disconnect, device number 6
[   99.593921][   T21] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[   99.603058][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.643523][   T21] usb 2-1: Product: syz
[   99.648028][   T21] usb 2-1: Manufacturer: syz
[   99.652664][   T21] usb 2-1: SerialNumber: syz
[   99.659872][   T21] usb 2-1: config 0 descriptor??
[   99.694171][ T5882] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   99.758127][   T21] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  100.211397][ T5927] 9pnet_virtio: no channels available for device syz
[  100.403252][ T5938] loop4: detected capacity change from 0 to 512
[  100.471254][    T7] usb 2-1: USB disconnect, device number 5
[  100.484001][ T3057] usb 2-1: Failed to submit usb control message: -71
[  100.500971][ T3057] usb 2-1: unable to send the bmi data to the device: -71
[  100.528174][ T3057] usb 2-1: unable to get target info from device
[  100.549317][ T5942] loop3: detected capacity change from 0 to 4096
[  100.561295][ T5938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  100.623748][ T3057] usb 2-1: could not get target info (-71)
[  100.626079][ T5948] loop1: detected capacity change from 0 to 1764
[  100.641191][ T5938] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.656281][ T3057] usb 2-1: could not probe fw (-71)
[  100.752158][ T5948] iso9660: Corrupted directory entry in block 2 of inode 1920
[  100.871725][ T5955] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.045717][ T5942] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  101.115342][ T5965] loop0: detected capacity change from 0 to 1024
[  101.140795][ T5942] Remounting filesystem read-only
[  101.219248][ T5965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.605971][ T5989] binder: 5986:5989 ioctl c00c620f 0 returned -14
[  101.645395][ T5992] netlink: 'syz.1.741': attribute type 1 has an invalid length.
[  101.842942][ T5984] loop4: detected capacity change from 0 to 8192
[  101.898951][ T6006] loop3: detected capacity change from 0 to 256
[  101.954405][ T5984] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  101.987925][ T5984] REISERFS (device loop4): using ordered data mode
[  102.013793][ T5984] reiserfs: using flush barriers
[  102.055593][ T6006] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  102.073712][ T5984] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  102.087921][ T6015] loop1: detected capacity change from 0 to 2048
[  102.111773][ T6006] FAT-fs (loop3): Filesystem has been set read-only
[  102.132903][ T5984] REISERFS (device loop4): checking transaction log (loop4)
[  102.151968][ T6015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.237041][ T5984] REISERFS (device loop4): Using r5 hash to sort names
[  102.280114][ T5984] REISERFS (device loop4): using 3.5.x disk format
[  102.311327][ T5984] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  102.328762][   T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  102.586794][ T6027] loop3: detected capacity change from 0 to 2048
[  102.593878][   T21] usb 1-1: Using ep0 maxpacket: 8
[  102.642922][ T6027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.722454][   T21] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  102.736907][   T21] usb 1-1: config 0 has no interface number 0
[  102.806313][ T6036] loop2: detected capacity change from 0 to 64
[  102.893965][   T21] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  102.920006][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.934380][   T21] usb 1-1: Product: syz
[  102.944281][   T21] usb 1-1: Manufacturer: syz
[  102.953501][   T21] usb 1-1: SerialNumber: syz
[  102.992575][   T21] usb 1-1: config 0 descriptor??
[  103.005942][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  103.005957][   T26] audit: type=1800 audit(1750424483.618:4): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.762" name="file1" dev="loop2" ino=18 res=0 errno=0
[  103.353921][   T21] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  103.360366][   T21] usb 1-1: No valid video chain found.
[  103.398508][ T6060] loop4: detected capacity change from 0 to 512
[  103.401494][   T21] usb 1-1: USB disconnect, device number 5
[  103.454220][ T6063] loop3: detected capacity change from 0 to 164
[  103.487804][ T6060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  103.526452][ T6067] loop2: detected capacity change from 0 to 256
[  103.629306][ T6060] EXT4-fs (loop4): 1 truncate cleaned up
[  103.688041][ T6060] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,init_itable,nodiscard,stripe=0x0000000000004000,errors=remount-ro,bsdgroups,. Quota mode: none.
[  104.395395][ T6123] loop1: detected capacity change from 0 to 16
[  104.458086][ T6126] netlink: 'syz.4.806': attribute type 21 has an invalid length.
[  104.502927][ T6126] netlink: 132 bytes leftover after parsing attributes in process `syz.4.806'.
[  104.525568][ T6123] erofs: (device loop1): mounted with root inode @ nid 36.
[  104.536051][ T6130] binder: Bad value for 'max'
[  104.542932][ T6126] netlink: 'syz.4.806': attribute type 1 has an invalid length.
[  104.561458][ T6123] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet
[  104.667316][ T6134] ax25_connect(): syz.0.809 uses autobind, please contact jreuter@yaina.de
[  104.803766][ T6144] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  104.955544][   T26] audit: type=1400 audit(1750424485.568:5): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=6151 comm="syz.1.819"
[  105.003568][ T6150] loop4: detected capacity change from 0 to 4096
[  105.066341][ T6150] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  105.113850][ T6150] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  105.171529][ T6150] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  105.239135][ T6150] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  105.296313][ T6150] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  105.371236][ T6150] ntfs: volume version 3.1.
[  105.409238][ T6150] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  105.467375][ T6150] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  105.548055][ T6174] loop3: detected capacity change from 0 to 2048
[  105.597659][ T6150] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  105.631495][ T6174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.899990][ T6140] loop2: detected capacity change from 0 to 32768
[  106.009310][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'.
[  106.112051][ T6140] XFS (loop2): Mounting V5 Filesystem
[  106.364415][ T6140] XFS (loop2): Ending clean mount
[  106.381166][ T6140] XFS (loop2): Quotacheck needed: Please wait.
[  106.562952][ T6140] XFS (loop2): Quotacheck: Done.
[  106.853211][ T4172] XFS (loop2): Unmounting Filesystem
[  106.994997][ T6250] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component
[  107.615617][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'.
[  107.901565][ T6308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.891'.
[  107.953984][ T6308] netlink: 64 bytes leftover after parsing attributes in process `syz.2.891'.
[  108.354270][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'.
[  108.392071][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.907'.
[  108.427848][ T6338] device vlan0 entered promiscuous mode
[  108.533921][ T6350] netlink: 'syz.2.913': attribute type 1 has an invalid length.
[  108.574309][ T6350] netlink: 224 bytes leftover after parsing attributes in process `syz.2.913'.
[  108.610810][ T6350] nbd: couldn't find a device at index 1024
[  108.994034][    T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  109.105153][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.930'.
[  109.169831][ T6384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.930'.
[  109.329631][ T6397] loop3: detected capacity change from 0 to 164
[  109.615318][    T7] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  109.639266][ T6415] netlink: 'syz.3.945': attribute type 2 has an invalid length.
[  109.653968][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.662020][    T7] usb 2-1: Product: syz
[  109.691909][    T7] usb 2-1: Manufacturer: syz
[  109.696792][ T6415] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.945'.
[  109.776980][    T7] usb 2-1: SerialNumber: syz
[  109.795668][    T7] usb 2-1: config 0 descriptor??
[  109.836454][ T6424] loop3: detected capacity change from 0 to 512
[  109.855119][ T6422] loop4: detected capacity change from 0 to 512
[  109.872992][    T7] usb 2-1: selecting invalid altsetting 3
[  109.879947][    T7] comedi comedi0: could not set alternate setting 3 in high speed
[  109.890753][    T7] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device.
[  109.893137][ T6422] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  109.911100][ T6424] EXT4-fs (loop3): inline encryption not supported
[  109.927394][    T7] usbdux: probe of 2-1:0.0 failed with error -22
[  109.943963][ T6424] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  110.013829][    C1] sd 0:0:1:0: tag#6540 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  110.023813][    C1] sd 0:0:1:0: tag#6540 CDB: Verify(10)
[  110.029322][    C1] sd 0:0:1:0: tag#6540 CDB[00]: 2f 65 3d b1 4c 87 bb 4c b7 a9 8c 8f 3f 59 df 1a
[  110.038459][    C1] sd 0:0:1:0: tag#6540 CDB[10]: 0c bf cf 70 fe 68 eb 31 46 84 62 08 44 50 6c e3
[  110.047550][    C1] sd 0:0:1:0: tag#6540 CDB[20]: 1f
[  110.047589][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.956'.
[  110.076172][ T6424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  110.093770][ T6424] System zones: 1-12
[  110.124680][ T6424] EXT4-fs (loop3): orphan cleanup on readonly fs
[  110.149034][    T7] usb 2-1: USB disconnect, device number 6
[  110.171105][ T6424] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.951: invalid indirect mapped block 12 (level 1)
[  110.212139][ T6422] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback.
[  110.258406][ T6422] ext4 filesystem being mounted at /191/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.278629][ T6424] EXT4-fs (loop3): Remounting filesystem read-only
[  110.294586][ T6424] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.951: invalid indirect mapped block 2 (level 2)
[  110.365570][ T6424] EXT4-fs (loop3): Remounting filesystem read-only
[  110.372388][ T6424] EXT4-fs (loop3): 1 truncate cleaned up
[  110.422592][ T6424] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,inlinecrypt,noload,errors=remount-ro,data_err=ignore. Quota mode: none.
[  111.056216][ T6481] loop3: detected capacity change from 0 to 512
[  111.111640][ T6489] bond0: (slave netdevsim0): Error: Device can not be enslaved while up
[  111.120536][ T6488] netlink: 164 bytes leftover after parsing attributes in process `syz.2.978'.
[  111.233392][ T6481] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  111.251883][ T6481] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  111.270928][ T6481] System zones: 0-1, 15-15, 18-18, 34-34
[  111.279904][ T6481] EXT4-fs (loop3): orphan cleanup on readonly fs
[  111.286852][ T6481] __quota_error: 8 callbacks suppressed
[  111.286867][ T6481] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  111.303369][ T6481] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  111.328797][ T6481] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  111.363181][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.975: bad orphan inode 16
[  111.390221][ T6509] loop2: detected capacity change from 0 to 1024
[  111.416124][ T6481] ext4_test_bit(bit=15, block=18) = 1
[  111.422041][ T6481] is_bad_inode(inode)=0
[  111.426332][ T6481] NEXT_ORPHAN(inode)=0
[  111.430420][ T6481] max_ino=32
[  111.441887][ T6503] loop4: detected capacity change from 0 to 2048
[  111.441980][ T6481] i_nlink=2
[  111.464514][ T6481] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.572044][ T6513] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.586571][ T6481] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  112.129970][ T6527] loop4: detected capacity change from 0 to 2048
[  112.189462][ T6527] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  112.243361][ T6527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.584956][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'.
[  112.728946][ T6557] netlink: 'syz.3.1012': attribute type 1 has an invalid length.
[  112.791243][ T6559] kAFS: unable to lookup cell ''
[  112.791243][ T6557] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1012'.
[  112.973726][ T6572] rdma_rxe: rxe creation allowed on top of a real device only
[  113.108981][ T6573] loop4: detected capacity change from 0 to 4096
[  113.173106][ T6584] netlink: 'syz.3.1026': attribute type 21 has an invalid length.
[  113.192815][  T150] block nbd1: Attempted send on invalid socket
[  113.199458][  T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  113.212589][  T150] block nbd1: Attempted send on invalid socket
[  113.218894][  T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  113.244043][ T6573] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  113.313968][ T4717] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  113.434864][ T6573] ntfs3: loop4: failed to convert "c46c" to cp437
[  113.674896][ T4717] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  113.693709][ T4717] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  113.739848][ T4717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.741464][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'.
[  113.780103][ T6580] loop2: detected capacity change from 0 to 32768
[  113.891384][ T6580] ERROR: (device loop2): dbAlloc: unable to allocate blocks
[  113.891384][ T6580] 
[  114.033747][ T4215] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  114.051967][ T4717] usb 1-1: string descriptor 0 read error: -71
[  114.066249][ T4717] hub 1-1:32.0: USB hub found
[  114.117804][ T6620] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  114.124164][ T4717] hub 1-1:32.0: config failed, can't read hub descriptor (err -22)
[  114.254714][ T4717] usb 1-1: USB disconnect, device number 6
[  114.292341][ T6629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1048'.
[  114.420494][ T4215] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  114.444978][ T4215] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  114.471679][ T4215] usb 5-1: config 0 has no interface number 0
[  114.494427][ T4707] udevd[4707]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.496575][ T4215] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  114.581819][ T4215] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  114.633778][ T4215] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  114.653132][ T4215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.693812][ T4215] usb 5-1: config 0 descriptor??
[  114.792109][ T6647] netlink: 3416 bytes leftover after parsing attributes in process `syz.3.1057'.
[  114.820330][ T6647] netlink: 3416 bytes leftover after parsing attributes in process `syz.3.1057'.
[  114.860795][ T6647] netlink: 242 bytes leftover after parsing attributes in process `syz.3.1057'.
[  115.094940][ T6631] loop1: detected capacity change from 0 to 32768
[  115.143863][ T6631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1049 (6631)
[  115.206486][ T4215] usb 5-1: USB disconnect, device number 4
[  115.222729][ T6631] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  115.242138][ T6631] BTRFS info (device loop1): using free space tree
[  115.249013][   T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  115.277133][ T6631] BTRFS info (device loop1): has skinny extents
[  115.387003][ T6665] loop2: detected capacity change from 0 to 1024
[  115.418852][ T6665] EXT4-fs (loop2): Ignoring removed bh option
[  115.458985][ T6665] EXT4-fs (loop2): inline encryption not supported
[  115.475278][ T6665] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  115.528313][ T6665] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.1066: lblock 2 mapped to illegal pblock 2 (length 1)
[  115.574036][ T6665] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  115.582613][ T6665] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.1066: lblock 0 mapped to illegal pblock 48 (length 1)
[  115.606962][ T6665] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  115.622097][ T6665] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1066: Failed to acquire dquot type 0
[  115.635237][ T6631] BTRFS info (device loop1): enabling ssd optimizations
[  115.644667][ T6665] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  115.660516][ T6665] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.1066: mark_inode_dirty error
[  115.692290][ T6665] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  115.710223][ T6665] EXT4-fs (loop2): 1 orphan inode deleted
[  115.716882][ T6665] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[  115.722719][ T6696] netlink: 'syz.3.1071': attribute type 10 has an invalid length.
[  115.753251][  T144] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  115.774132][   T13] usb 1-1: unable to get BOS descriptor or descriptor too short
[  115.804020][ T6696] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  115.834027][  T144] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  115.865188][   T13] usb 1-1: config 66 interface 0 has no altsetting 0
[  115.883467][  T144] EXT4-fs error (device loop2): ext4_release_dquot:6240: comm kworker/u4:1: Failed to release dquot type 0
[  115.919266][ T6665] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm syz.2.1066: lblock 1 mapped to illegal pblock 1 (length 1)
[  115.992818][ T4707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4707)
[  116.054157][ T6665] Quota error (device loop2): find_next_id: Can't read quota tree block 1
[  116.090954][   T13] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  116.113885][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.113914][   T13] usb 1-1: Product: syz
[  116.113928][   T13] usb 1-1: Manufacturer: syz
[  116.113952][   T13] usb 1-1: SerialNumber: syz
[  116.187313][ T4172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0
[  116.189955][ T4172] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  116.194863][ T4172] EXT4-fs error (device loop2): ext4_quota_off:6510: inode #3: comm syz-executor: mark_inode_dirty error
[  116.239858][ T6702] loop3: detected capacity change from 0 to 4096
[  116.402807][ T6702] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  116.456008][   T13] ati_remote2 1-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint
[  116.506847][   T13] usb 1-1: USB disconnect, device number 7
[  116.536351][ T6715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1080'.
[  116.785344][ T4259] ntfs3: loop3: ntfs3_write_inode r=1a failed, -22.
[  116.792747][ T4169] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[  116.828942][ T4169] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[  116.880463][ T4169] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  116.903927][ T6729] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  117.179183][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'.
[  117.179209][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1097'.
[  117.270357][ T6754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  117.279071][ T6755] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  117.407814][ T6758] loop3: detected capacity change from 0 to 16
[  117.408807][ T6759] openvswitch: netlink: Actions may not be safe on all matching packets
[  117.463932][ T4717] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  117.471524][ T6758] erofs: (device loop3): mounted with root inode @ nid 36.
[  117.525540][ T6758] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89
[  117.599014][ T6758] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89
[  117.625436][   T26] audit: type=1800 audit(1750424498.238:6): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1102" name="file3" dev="loop3" ino=89 res=0 errno=0
[  117.826472][ T4717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.862768][ T4717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.883512][ T4717] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  117.913811][ T4717] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.971628][ T4717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.986002][ T6785] loop3: detected capacity change from 0 to 1024
[  118.000376][ T6789] loop1: detected capacity change from 0 to 128
[  118.008043][ T4717] usb 5-1: config 0 descriptor??
[  118.044563][ T4717] hub 5-1:0.0: USB hub found
[  118.100116][ T6789] EXT4-fs (loop1): Test dummy encryption mode enabled
[  118.123544][ T6789] EXT4-fs (loop1): Test dummy encryption mode enabled
[  118.155799][ T6797] loop0: detected capacity change from 0 to 512
[  118.170265][ T6789] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none.
[  118.202641][ T6789] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  118.263853][ T4717] hub 5-1:0.0: 14 ports detected
[  118.274300][ T6797] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  118.284178][ T4717] hub 5-1:0.0: insufficient power available to use all downstream ports
[  118.358795][ T6797] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  118.449688][ T6797] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  118.483944][ T4717] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  118.492797][ T6797] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e11c, mo2=0002]
[  118.504595][ T6797] System zones: 0-1, 15-15, 18-18, 34-34
[  118.511523][ T6797] EXT4-fs (loop0): orphan cleanup on readonly fs
[  118.513965][ T4717] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  118.518655][ T6797] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  118.539233][ T6797] EXT4-fs warning (device loop0): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  118.554417][ T6797] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  118.564894][ T6797] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1121: bg 0: block 40: padding at end of block bitmap is not set
[  118.633738][ T6797] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  118.634425][ T4717] usb 5-1: USB disconnect, device number 5
[  118.688794][ T6797] EXT4-fs (loop0): 1 truncate cleaned up
[  118.716969][ T6797] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,min_batch_time=0x0000000000000007,grpid,,errors=continue. Quota mode: writeback.
[  118.755343][ T6789] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  118.887913][ T6822] loop2: detected capacity change from 0 to 4096
[  119.113155][ T6822] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  119.232456][ T3057] ntfs3: loop2: ino=1c, Internal error
[  119.244113][ T3057] ntfs3: loop2: ntfs3_write_inode r=1c failed, -22.
[  119.534129][ T6812] loop3: detected capacity change from 0 to 32768
[  119.622821][ T6812] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  119.695444][ T6812] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  119.720451][ T6826] loop0: detected capacity change from 0 to 32768
[  119.780761][ T6826] (syz.0.1129,6826,1):ocfs2_verify_heartbeat:836 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[  119.844963][ T6826] (syz.0.1129,6826,0):ocfs2_fill_super:1177 ERROR: status = -22
[  119.871921][ T6812] (syz.3.1126,6812,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=1296, name_len=0
[  119.882699][ T6826] exFAT-fs (loop0): invalid boot record signature
[  119.910167][ T6812] (syz.3.1126,6812,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  119.934331][ T6812] (syz.3.1126,6812,0):ocfs2_symlink:1864 ERROR: status = -2
[  119.955993][ T6826] exFAT-fs (loop0): failed to read boot sector
[  119.964103][ T6812] (syz.3.1126,6812,0):ocfs2_symlink:2065 ERROR: status = -2
[  120.010309][ T6826] exFAT-fs (loop0): failed to recognize exfat type
[  120.041389][ T6825] loop1: detected capacity change from 0 to 32768
[  120.067826][ T4169] ocfs2: Unmounting device (7,3) on (node local)
[  120.135383][ T6825] XFS: noikeep mount option is deprecated.
[  120.238858][ T6825] XFS (loop1): Mounting V5 Filesystem
[  120.297340][ T6834] loop2: detected capacity change from 0 to 32768
[  120.450158][ T6867] loop4: detected capacity change from 0 to 512
[  120.484909][ T6834] XFS (loop2): Mounting V5 Filesystem
[  120.497505][ T6825] XFS (loop1): Ending clean mount
[  120.505614][ T6825] XFS (loop1): Quotacheck needed: Please wait.
[  120.506025][ T6867] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  120.620766][ T6877] netlink: 'syz.0.1146': attribute type 10 has an invalid length.
[  120.648918][ T6867] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1144: inode #13: comm syz.4.1144: iget: illegal inode #
[  120.672283][ T6877] team0: Device hsr_slave_0 failed to register rx_handler
[  120.703907][ T6825] XFS (loop1): Quotacheck: Done.
[  120.796291][ T6867] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1144: couldn't read orphan inode 13 (err -117)
[  120.812336][ T6834] XFS (loop2): Ending clean mount
[  120.821963][ T4173] XFS (loop1): Unmounting Filesystem
[  120.864621][ T6867] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,nogrpid,jqfmt=vfsv0,delalloc,nolazytime,,errors=continue. Quota mode: none.
[  120.945778][ T4172] XFS (loop2): Unmounting Filesystem
[  121.187131][ T6894] loop0: detected capacity change from 0 to 1024
[  121.488474][  T144] hfsplus: b-tree write err: -5, ino 4
[  121.916255][ T6923] netlink: 'syz.3.1167': attribute type 32 has an invalid length.
[  121.989027][ T6929] device tunl0 entered promiscuous mode
[  122.015062][ T6929] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1168'.
[  122.081606][ T6917] loop1: detected capacity change from 0 to 8192
[  122.193035][ T6917] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  122.221875][ T6917] FAT-fs (loop1): Filesystem has been set read-only
[  122.568882][ T6965] loop1: detected capacity change from 0 to 16
[  122.644656][ T6965] erofs: (device loop1): mounted with root inode @ nid 36.
[  122.686074][ T6965] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  122.732521][ T6965] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  122.830977][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1193'.
[  122.873317][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1193'.
[  122.908123][ T6988] netlink: 'syz.4.1199': attribute type 3 has an invalid length.
[  123.033139][ T6996] loop3: detected capacity change from 0 to 8
[  123.203288][ T6996] SQUASHFS error: Failed to read block 0x6e6: -5
[  123.224723][ T6996] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  123.257488][ T6996] SQUASHFS error: Unable to read directory block [631:26]
[  123.414139][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'.
[  123.477562][ T7025] tmpfs: Bad value for 'mpol'
[  123.483218][ T7023] loop4: detected capacity change from 0 to 512
[  123.593385][ T7035] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1221'.
[  123.675643][ T7023] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters
[  123.764440][ T7023] Quota error (device loop4): write_blk: dquota write failed
[  123.794373][ T7023] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  123.844047][ T7023] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.1216: Failed to acquire dquot type 0
[  123.912021][ T7023] EXT4-fs (loop4): 1 truncate cleaned up
[  123.938543][ T7023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  123.971013][ T7023] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.048676][ T7023] Quota error (device loop4): write_blk: dquota write failed
[  124.093692][ T7068] device erspan1 entered promiscuous mode
[  124.121646][ T7023] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  124.151833][ T7023] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.1216: Failed to acquire dquot type 0
[  124.199782][ T7070] loop0: detected capacity change from 0 to 1024
[  124.269472][ T7070] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  124.507112][ T7084] loop3: detected capacity change from 0 to 8
[  124.886434][ T7063] loop1: detected capacity change from 0 to 32768
[  124.923530][ T7100] loop2: detected capacity change from 0 to 1024
[  124.928493][ T7106] loop0: detected capacity change from 0 to 256
[  124.980598][ T7112] netlink: 'syz.4.1257': attribute type 10 has an invalid length.
[  125.026398][  T144] hfsplus: b-tree write err: -5, ino 4
[  125.032412][ T7063] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  125.039282][ T7106] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  125.054438][ T7063] BTRFS info (device loop1): using free space tree
[  125.060991][ T7063] BTRFS info (device loop1): has skinny extents
[  125.081363][ T7112] team0: Device hsr_slave_0 failed to register rx_handler
[  125.378832][ T7143] loop0: detected capacity change from 0 to 128
[  125.446472][ T7143] befs: Invalid uid -1, using default
[  125.463789][ T7143] befs: (loop0): No write support. Marking filesystem read-only
[  125.507151][ T7143] befs: (loop0): invalid magic header
[  125.570154][ T7063] BTRFS info (device loop1): enabling ssd optimizations
[  125.715501][ T7165] loop2: detected capacity change from 0 to 256
[  125.821449][ T7165] FAT-fs (loop2): Directory bread(block 64) failed
[  125.852219][ T7165] FAT-fs (loop2): Directory bread(block 65) failed
[  125.861618][ T4718] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  125.882065][ T7165] FAT-fs (loop2): Directory bread(block 66) failed
[  125.904071][   T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  125.934497][ T7165] FAT-fs (loop2): Directory bread(block 67) failed
[  125.941772][ T7165] FAT-fs (loop2): Directory bread(block 68) failed
[  125.993565][ T7165] FAT-fs (loop2): Directory bread(block 69) failed
[  126.025041][ T7165] FAT-fs (loop2): Directory bread(block 70) failed
[  126.070214][ T7165] FAT-fs (loop2): Directory bread(block 71) failed
[  126.085748][ T7165] FAT-fs (loop2): Directory bread(block 72) failed
[  126.092626][ T7165] FAT-fs (loop2): Directory bread(block 73) failed
[  126.153805][   T21] usb 5-1: Using ep0 maxpacket: 16
[  126.159643][ T4718] usb 4-1: Using ep0 maxpacket: 16
[  126.273950][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  126.285340][ T4718] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.484070][ T4718] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  126.493446][   T21] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  126.527239][ T4718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.540406][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.556382][ T7177] netlink: 'syz.1.1276': attribute type 10 has an invalid length.
[  126.558828][ T4718] usb 4-1: Product: syz
[  126.569923][   T21] usb 5-1: Product: syz
[  126.579118][   T21] usb 5-1: Manufacturer: syz
[  126.600393][ T4718] usb 4-1: Manufacturer: syz
[  126.607111][ T4717] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  126.623904][   T21] usb 5-1: SerialNumber: syz
[  126.628689][ T4718] usb 4-1: SerialNumber: syz
[  126.641547][   T21] usb 5-1: config 0 descriptor??
[  126.648150][ T7177] team0: Device hsr_slave_0 failed to register rx_handler
[  126.649852][ T4718] usb 4-1: config 0 descriptor??
[  126.704756][   T21] hub 5-1:0.0: bad descriptor, ignoring hub
[  126.719769][   T21] hub: probe of 5-1:0.0 failed with error -5
[  126.854480][ T4717] usb 1-1: Using ep0 maxpacket: 32
[  126.924156][ T4718] usb 4-1: ignoring: not an USB2CAN converter
[  126.981674][ T1108] usb 5-1: USB disconnect, device number 6
[  126.984001][ T4717] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  127.003351][ T7187] netlink: 'syz.1.1284': attribute type 3 has an invalid length.
[  127.029123][ T4717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.058861][ T4717] usb 1-1: config 0 descriptor??
[  127.115938][ T4717] gspca_main: sq930x-2.14.0 probing 041e:403c
[  127.218041][ T4718] usb 4-1: USB disconnect, device number 5
[  127.365341][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1289'.
[  127.479231][ T7201] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  127.489749][ T7201] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  127.543951][ T4717] gspca_sq930x: ucbus_write failed -71
[  127.549894][ T4717] sq930x: probe of 1-1:0.0 failed with error -71
[  127.595099][ T4717] usb 1-1: USB disconnect, device number 8
[  127.690153][ T7193] loop2: detected capacity change from 0 to 32768
[  127.751384][ T7193] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1287 (7193)
[  127.804107][ T7193] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  127.812823][ T7193] BTRFS info (device loop2): using free space tree
[  127.915464][ T7193] BTRFS info (device loop2): has skinny extents
[  128.173741][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.353407][ T7193] BTRFS info (device loop2): enabling ssd optimizations
[  128.453776][ T1108] usb 4-1: Using ep0 maxpacket: 8
[  128.789368][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  128.801277][ T1108] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  128.819626][ T1108] usb 4-1: Product: syz
[  128.837298][ T1108] usb 4-1: Manufacturer: syz
[  128.847596][ T1108] usb 4-1: SerialNumber: syz
[  128.872220][ T1108] usb 4-1: config 0 descriptor??
[  128.938525][ T1108] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  129.218522][ T7282] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  129.363767][ T1108] gspca_zc3xx: reg_r err -71
[  129.368565][ T1108] gspca_zc3xx: probe of 4-1:0.0 failed with error -71
[  129.392678][ T7293] loop2: detected capacity change from 0 to 8
[  129.409289][ T1108] usb 4-1: USB disconnect, device number 6
[  129.512695][ T7300] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  129.528670][ T7298] loop1: detected capacity change from 0 to 1024
[  129.547764][ T7293] SQUASHFS error: Failed to read block 0x1ec: -5
[  129.563016][ T7293] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  129.699165][ T7298] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  129.758354][ T7313] syz.4.1335 uses old SIOCAX25GETINFO
[  130.140251][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'.
[  130.208717][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.300242][ T7330] device batadv_slave_0 entered promiscuous mode
[  130.323307][ T7326] loop0: detected capacity change from 0 to 4096
[  130.381885][ T7330] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  130.883757][ T4718] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  131.133749][ T4718] usb 4-1: Using ep0 maxpacket: 32
[  131.261816][ T7380] loop0: detected capacity change from 0 to 512
[  131.262712][ T4718] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[  131.300853][ T4718] usb 4-1: config 0 has no interface number 0
[  131.329521][ T4718] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  131.381778][ T7380] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.386280][ T4718] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  131.489607][ T7380] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  131.582551][ T7380] EXT4-fs (loop0): 1 truncate cleaned up
[  131.592118][ T7380] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,block_validity,quota,nombcache,,errors=continue. Quota mode: writeback.
[  131.607972][ T4718] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  131.627426][ T4718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.636583][ T4718] usb 4-1: Product: syz
[  131.641127][ T4718] usb 4-1: Manufacturer: syz
[  131.646120][ T4718] usb 4-1: SerialNumber: syz
[  131.652662][ T4718] usb 4-1: config 0 descriptor??
[  131.674002][ T7348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  131.711637][ T7348] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  131.763493][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'.
[  131.850203][ T7407] netlink: 736 bytes leftover after parsing attributes in process `syz.4.1377'.
[  132.030834][ T7416] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  132.144448][    T7] usb 4-1: USB disconnect, device number 7
[  132.426538][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1392'.
[  132.444503][ T7441] unsupported nla_type 40
[  132.502403][ T7445] loop1: detected capacity change from 0 to 256
[  132.516284][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  132.522672][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  132.622894][ T7445] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  132.624512][ T7451] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975)
[  132.877550][ T7468] loop3: detected capacity change from 0 to 8
[  133.065631][ T7470] loop2: detected capacity change from 0 to 4096
[  133.067979][ T7462] loop0: detected capacity change from 0 to 8192
[  133.130385][ T7477] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1412'.
[  133.164888][ T7470] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  133.177962][ T7462] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  133.198516][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'.
[  133.223822][ T7462] REISERFS (device loop0): using ordered data mode
[  133.264451][ T7462] reiserfs: using flush barriers
[  133.273701][    T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  133.306909][ T7462] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  133.384378][ T7462] REISERFS (device loop0): checking transaction log (loop0)
[  133.534005][    T7] usb 2-1: Using ep0 maxpacket: 16
[  133.577506][ T4172] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  133.580758][ T7462] REISERFS (device loop0): Using tea hash to sort names
[  133.602373][ T4172] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  133.641358][ T4172] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  133.663006][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.675397][ T7462] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  133.697030][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.993993][    T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.054200][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.062514][    T7] usb 2-1: Product: syz
[  134.094917][    T7] usb 2-1: Manufacturer: syz
[  134.099572][    T7] usb 2-1: SerialNumber: syz
[  134.370395][ T7509] loop2: detected capacity change from 0 to 4096
[  134.374839][ T7517] Scaler: =================  START STATUS  =================
[  134.390108][ T7517] Scaler: ==================  END STATUS  ==================
[  134.538427][ T7509] NILFS (loop2): invalid segment: Checksum error in segment payload
[  134.607636][ T7509] NILFS (loop2): trying rollback from an earlier position
[  134.653938][    T7] usb 2-1: cannot find UAC_HEADER
[  134.691943][ T7509] NILFS (loop2): recovery complete
[  134.727490][    T7] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  134.736645][ T7529] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.774238][    T7] usb 2-1: USB disconnect, device number 7
[  134.801521][ T7531] openvswitch: netlink: Message has 4 unknown bytes.
[  134.948720][ T7537] loop4: detected capacity change from 0 to 64
[  134.976211][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1439'.
[  135.034595][ T4659] udevd[4659]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.272726][ T7545] loop0: detected capacity change from 0 to 4096
[  135.307757][ T7552] loop4: detected capacity change from 0 to 512
[  135.414913][ T7552] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  135.424467][ T7545] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  135.520704][ T7561] loop3: detected capacity change from 0 to 4096
[  135.561874][ T7545] ntfs3: loop0: failed to convert "c46c" to cp932
[  135.579099][ T7552] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,jqfmt=vfsv0,init_itable,errors=remount-ro,nobarrier,. Quota mode: writeback.
[  135.595428][ T7552] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.674323][ T7561] NILFS (loop3): invalid segment: Checksum error in segment payload
[  135.682994][ T7561] NILFS (loop3): trying rollback from an earlier position
[  135.822105][ T7561] NILFS (loop3): recovery complete
[  135.831923][ T7576] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.930170][ T7583] loop4: detected capacity change from 0 to 256
[  136.081318][ T7583] FAT-fs (loop4): Directory bread(block 64) failed
[  136.113793][ T7583] FAT-fs (loop4): Directory bread(block 65) failed
[  136.120558][ T7583] FAT-fs (loop4): Directory bread(block 66) failed
[  136.160573][ T7583] FAT-fs (loop4): Directory bread(block 67) failed
[  136.243761][ T7583] FAT-fs (loop4): Directory bread(block 68) failed
[  136.304452][ T7583] FAT-fs (loop4): Directory bread(block 69) failed
[  136.314000][ T7583] FAT-fs (loop4): Directory bread(block 70) failed
[  136.320593][ T7583] FAT-fs (loop4): Directory bread(block 71) failed
[  136.339188][ T7602] netlink: 'syz.2.1469': attribute type 10 has an invalid length.
[  136.382912][ T7583] FAT-fs (loop4): Directory bread(block 72) failed
[  136.389224][ T7602] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1469'.
[  136.429973][ T7583] FAT-fs (loop4): Directory bread(block 73) failed
[  136.833900][    T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  136.935677][ T7636] loop0: detected capacity change from 0 to 64
[  137.020839][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1487'.
[  137.129193][ T7646] loop2: detected capacity change from 0 to 256
[  137.189887][ T7646] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.250601][    T7] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[  137.277018][    T7] usb 2-1: config 0 has no interface number 0
[  137.464039][    T7] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=4e.39
[  137.481192][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.512471][    T7] usb 2-1: Product: syz
[  137.526997][    T7] usb 2-1: Manufacturer: syz
[  137.554126][    T7] usb 2-1: SerialNumber: syz
[  137.574841][    T7] usb 2-1: config 0 descriptor??
[  137.639562][    T7] gspca_main: pac7311-2.14.0 probing 093a:2601
[  138.057084][ T7694] loop4: detected capacity change from 0 to 256
[  138.074015][    T7] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  138.090597][    T7] pac7311: probe of 2-1:0.39 failed with error -71
[  138.133989][    T7] usb 2-1: USB disconnect, device number 8
[  138.900122][ T7739] loop3: detected capacity change from 0 to 256
[  139.108409][ T7739] FAT-fs (loop3): Directory bread(block 64) failed
[  139.156704][ T7739] FAT-fs (loop3): Directory bread(block 65) failed
[  139.187435][   T26] audit: type=1800 audit(1750424519.798:7): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1534" name="/newroot/310/file0" dev="tmpfs" ino=1597 res=0 errno=0
[  139.197762][ T7739] FAT-fs (loop3): Directory bread(block 66) failed
[  139.308849][ T7739] FAT-fs (loop3): Directory bread(block 67) failed
[  139.344101][ T7739] FAT-fs (loop3): Directory bread(block 68) failed
[  139.371627][ T7739] FAT-fs (loop3): Directory bread(block 69) failed
[  139.386157][ T7739] FAT-fs (loop3): Directory bread(block 70) failed
[  139.403060][ T7739] FAT-fs (loop3): Directory bread(block 71) failed
[  139.469704][ T7739] FAT-fs (loop3): Directory bread(block 72) failed
[  139.511329][ T7739] FAT-fs (loop3): Directory bread(block 73) failed
[  139.744966][ T7718] loop0: detected capacity change from 0 to 32768
[  139.752954][ T7763] loop2: detected capacity change from 0 to 256
[  139.869914][ T7718] ea_get: invalid extended attribute
[  139.899503][ T7735] loop1: detected capacity change from 0 to 32768
[  139.993700][ T4718] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  140.063564][ T7735] XFS (loop1): Mounting V5 Filesystem
[  140.197028][ T7735] XFS (loop1): Ending clean mount
[  140.211509][ T7735] XFS (loop1): Quotacheck needed: Please wait.
[  140.340603][ T7735] XFS (loop1): Quotacheck: Done.
[  140.364011][ T4718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.435015][ T7794] loop3: detected capacity change from 0 to 512
[  140.464071][ T4718] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.05
[  140.473177][ T4718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  140.473712][ T4178] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  140.502021][ T4718] usb 5-1: SerialNumber: syz
[  140.532070][ T4718] usb 5-1: config 0 descriptor??
[  140.534357][ T4173] XFS (loop1): Unmounting Filesystem
[  140.575093][ T4718] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  140.612393][ T7794] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback.
[  140.632387][ T4718] usb 5-1: Detected SIO
[  140.633513][ T7794] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.637981][ T4718] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  140.723342][ T7794] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.1557: invalid size
[  140.744283][ T7794] EXT4-fs (loop3): Remounting filesystem read-only
[  140.822743][    T7] usb 5-1: USB disconnect, device number 7
[  140.835924][    T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  140.846262][    T7] ftdi_sio 5-1:0.0: device disconnected
[  140.933851][ T4178] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  140.946230][ T4178] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.963725][ T4178] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  140.973005][ T4178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.054889][ T4178] hub 1-1:4.0: USB hub found
[  141.219681][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'.
[  141.238226][ T7815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1566'.
[  141.266487][ T4178] hub 1-1:4.0: 13 ports detected
[  141.273774][ T4178] usb 1-1: selecting invalid altsetting 1
[  141.279556][ T4178] hub 1-1:4.0: Using single TT (err -22)
[  141.313808][ T4178] hub 1-1:4.0: insufficient power available to use all downstream ports
[  141.397251][ T7823] netlink: 'syz.4.1570': attribute type 3 has an invalid length.
[  141.433566][ T7819] loop1: detected capacity change from 0 to 4096
[  141.474169][ T4178] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  141.483663][ T4178] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  141.513457][ T7819] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  141.559363][ T7831] netlink: 'syz.2.1574': attribute type 5 has an invalid length.
[  141.573832][ T4178] usb 1-1: USB disconnect, device number 9
[  141.664237][ T7819] ntfs3: loop1: failed to convert "c46c" to macgaelic
[  141.726268][ T7839] netlink: 'syz.3.1578': attribute type 3 has an invalid length.
[  142.113815][ T4178] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  142.355119][ T7872] device ip6gre1 entered promiscuous mode
[  142.533735][ T4718] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  142.549244][ T4178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.581059][ T7882] loop2: detected capacity change from 0 to 64
[  142.587743][   T21] Bluetooth: hci0: command 0x0c20 tx timeout
[  142.670756][ T4178] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.05
[  142.690189][ T4178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  142.705427][ T4178] usb 2-1: SerialNumber: syz
[  142.714522][ T4178] usb 2-1: config 0 descriptor??
[  142.760606][ T7884] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1600'.
[  142.771304][ T4178] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  142.803704][ T4178] usb 2-1: Detected SIO
[  142.820746][ T4178] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  143.018717][   T21] usb 2-1: USB disconnect, device number 9
[  143.038640][   T21] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  143.063371][   T21] ftdi_sio 2-1:0.0: device disconnected
[  143.067148][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1604'.
[  143.092418][ T4718] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  143.121972][ T4718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.133771][ T4718] usb 1-1: Product: syz
[  143.138069][ T4718] usb 1-1: Manufacturer: syz
[  143.152982][ T4718] usb 1-1: SerialNumber: syz
[  143.190764][ T4718] r8152-cfgselector 1-1: config 0 descriptor??
[  143.323890][ T4178] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  143.421325][ T7916] loop2: detected capacity change from 0 to 64
[  143.668009][ T7926] loop1: detected capacity change from 0 to 16
[  143.683948][ T4718] r8152-cfgselector 1-1: Unknown version 0x0000
[  143.691436][ T4718] r8152-cfgselector 1-1: USB disconnect, device number 10
[  143.743841][    T7] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  143.750302][ T7930] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1622'.
[  143.764429][ T4178] usb 5-1: unable to get BOS descriptor or descriptor too short
[  143.774335][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'.
[  143.785390][ T7926] erofs: (device loop1): mounted with root inode @ nid 36.
[  143.805230][ T7926] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  143.842967][ T7926] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -4 in[49, 4047] out[1851]
[  143.857484][ T7926] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  143.858112][ T4178] usb 5-1: not running at top speed; connect to a high speed hub
[  143.974350][ T4178] usb 5-1: config 129 has an invalid interface number: 135 but max is 1
[  143.982949][ T4178] usb 5-1: config 129 has no interface number 1
[  143.989600][ T4178] usb 5-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  144.003395][ T4178] usb 5-1: config 129 interface 135 has no altsetting 0
[  144.010998][ T4178] usb 5-1: config 129 interface 0 has no altsetting 0
[  144.074619][ T7940] device ip6gre1 entered promiscuous mode
[  144.105854][    T7] usb 4-1: not running at top speed; connect to a high speed hub
[  144.131564][ T7943] loop1: detected capacity change from 0 to 64
[  144.214138][    T7] usb 4-1: config 110 has an invalid interface number: 40 but max is 0
[  144.222701][ T4178] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  144.232670][    T7] usb 4-1: config 110 has no interface number 0
[  144.262916][ T4178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.274481][    T7] usb 4-1: config 110 interface 40 altsetting 5 endpoint 0x8 has invalid maxpacket 15725, setting to 64
[  144.293659][ T4178] usb 5-1: Product: syz
[  144.298037][ T4178] usb 5-1: Manufacturer: syz
[  144.302693][ T4178] usb 5-1: SerialNumber: syz
[  144.318326][    T7] usb 4-1: config 110 interface 40 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  144.345318][    T7] usb 4-1: config 110 interface 40 has no altsetting 0
[  144.434191][ T7957] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1634'.
[  144.547045][ T7964] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1638'.
[  144.584097][    T7] usb 4-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=fb.38
[  144.624348][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.639850][    T7] usb 4-1: Product: syz
[  144.654473][    T7] usb 4-1: Manufacturer: syz
[  144.673664][    T7] usb 4-1: SerialNumber: syz
[  144.688123][ T4178] au0828: au0828: Device initialization failed.
[  144.696706][ T4178] au0828: au0828: Device must be connected to a high-speed USB 2.0 port.
[  144.715042][ T4178] usb 5-1: USB disconnect, device number 8
[  144.726318][ T7920] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  144.733450][ T7967] loop0: detected capacity change from 0 to 4096
[  144.768543][ T7967] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  144.780613][ T7967] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  144.800961][ T7967] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  144.819618][ T7967] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  144.852398][ T7967] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  144.874199][ T7967] ntfs: volume version 3.1.
[  144.880879][ T7967] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  144.893465][ T7967] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  144.908668][ T7967] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  144.920389][ T7967] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  144.931840][ T7967] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  144.992459][ T7971] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1642'.
[  145.051687][ T7973] device ip6gre2 entered promiscuous mode
[  145.239234][    T7] usb 4-1: USB disconnect, device number 8
[  145.274380][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1646'.
[  145.403731][ T4718] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  145.509487][ T4163] udevd[4163]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:110.40/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.653964][ T4718] usb 2-1: Using ep0 maxpacket: 8
[  145.783959][ T4718] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  145.795495][ T4718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  145.834377][ T4718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  145.874589][ T4718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  145.927687][ T4718] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  145.957806][ T4718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  146.002338][ T4718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.023480][ T8027] loop0: detected capacity change from 0 to 128
[  146.071722][ T8027] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  146.120044][ T8027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.556603][ T4215] usb 2-1: USB disconnect, device number 10
[  146.663323][ T8066] loop2: detected capacity change from 0 to 64
[  146.672657][ T8067] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  146.802138][ T8076] xt_CT: You must specify a L4 protocol and not use inversions on it
[  146.951161][ T8090] QAT: Device 244 not found
[  146.967079][ T8091] netlink: 'syz.3.1701': attribute type 2 has an invalid length.
[  147.001313][ T8091] netlink: 'syz.3.1701': attribute type 1 has an invalid length.
[  147.270429][ T8109] loop4: detected capacity change from 0 to 1764
[  147.573407][ T8130] tipc: Can't bind to reserved service type 0
[  147.822619][ T8137] loop4: detected capacity change from 0 to 4096
[  147.893795][ T8137] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  147.899785][ T8097] loop0: detected capacity change from 0 to 32768
[  148.043286][ T8097] XFS (loop0): Mounting V5 Filesystem
[  148.073801][    T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  148.146808][ T8097] XFS (loop0): Ending clean mount
[  148.159775][ T8097] XFS (loop0): Quotacheck needed: Please wait.
[  148.276440][ T8097] XFS (loop0): Quotacheck: Done.
[  148.333795][    T7] usb 4-1: Using ep0 maxpacket: 8
[  148.406800][ T4171] XFS (loop0): Unmounting Filesystem
[  148.422784][ T8178] xt_limit: Overflow, try lower: 33554432/384
[  148.484108][    T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.522719][    T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  148.595215][    T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  148.874007][    T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  148.912385][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.941228][    T7] usb 4-1: Product: syz
[  148.946008][    T7] usb 4-1: Manufacturer: syz
[  148.983350][    T7] usb 4-1: SerialNumber: syz
[  149.066227][    T7] cdc_ether: probe of 4-1:1.0 failed with error -22
[  149.082931][    T7] usbtest 4-1:1.0: couldn't get endpoints, -22
[  149.105598][    T7] usbtest: probe of 4-1:1.0 failed with error -22
[  149.341498][ T5255] usb 4-1: USB disconnect, device number 9
[  149.491947][ T8176] loop1: detected capacity change from 0 to 32768
[  149.524287][    T7] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  149.540617][ T8176] XFS: ikeep mount option is deprecated.
[  149.572048][ T8176] XFS: noikeep mount option is deprecated.
[  149.675687][ T8176] XFS (loop1): Mounting V5 Filesystem
[  149.817977][ T8190] loop4: detected capacity change from 0 to 32768
[  149.855934][ T8176] XFS (loop1): Ending clean mount
[  149.897324][ T8176] XFS (loop1): Quotacheck needed: Please wait.
[  149.934073][    T7] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  149.946327][    T7] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  149.961271][    T7] usb 1-1: config 0 has no interface number 0
[  149.967790][    T7] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  149.979545][    T7] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  149.989881][    T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  149.998578][ T8218] trusted_key: encrypted_key: master key parameter '' is invalid
[  150.000104][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.017466][ T8216] loop2: detected capacity change from 0 to 64
[  150.022633][ T8190] XFS (loop4): Mounting V5 Filesystem
[  150.042636][    T7] usb 1-1: config 0 descriptor??
[  150.062916][ T8176] XFS (loop1): Quotacheck: Done.
[  150.194488][ T8190] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  150.239368][ T8228] xt_TCPMSS: Only works on TCP SYN packets
[  150.311237][ T8190] XFS (loop4): Starting recovery (logdev: internal)
[  150.313891][ T4173] XFS (loop1): Unmounting Filesystem
[  150.390428][    T7] usb 1-1: USB disconnect, device number 11
[  150.408594][ T8190] XFS (loop4): Ending recovery (logdev: internal)
[  150.625641][ T8237] __nla_validate_parse: 1 callbacks suppressed
[  150.625662][ T8237] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1759'.
[  150.661785][ T4176] XFS (loop4): Unmounting Filesystem
[  151.391803][ T8271] loop4: detected capacity change from 0 to 164
[  151.792769][ T8291] device veth3 entered promiscuous mode
[  151.799392][ T8292] netlink: 'syz.3.1778': attribute type 11 has an invalid length.
[  151.813917][ T8292] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1778'.
[  152.040854][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1782'.
[  152.062737][ T8303] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1783'.
[  152.251728][ T8314] netlink: 'syz.4.1786': attribute type 7 has an invalid length.
[  152.286726][ T8319] netlink: 'syz.1.1757': attribute type 27 has an invalid length.
[  152.536524][ T8333] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  152.578283][ T8335] loop0: detected capacity change from 0 to 256
[  152.793147][ T8337] loop1: detected capacity change from 0 to 4096
[  152.839830][ T8348] IPVS: length: 94 != 8
[  152.846530][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'.
[  152.864010][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'.
[  152.947792][ T8337] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  153.185277][ T8366] netlink: 'syz.4.1805': attribute type 4 has an invalid length.
[  153.273982][ T8366] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1805'.
[  153.276001][ T8366] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  153.358530][ T8312] loop2: detected capacity change from 0 to 32768
[  153.604604][ T8312] XFS (loop2): Mounting V5 Filesystem
[  153.668567][ T8389] device bond2 entered promiscuous mode
[  153.688120][ T4215] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 
[  153.699616][ T4215] XFS (loop2): Unmount and run xfs_repair
[  153.706523][ T4215] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  153.714189][ T4215] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00  XAGF............
[  153.723138][ T4215] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[  153.730359][ T8389] 8021q: adding VLAN 0 to HW filter on device bond2
[  153.732231][ T4215] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  153.749510][ T4215] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[  153.749531][ T4215] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  153.749546][ T4215] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[  153.749559][ T4215] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  153.749572][ T4215] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  153.749853][ T8312] XFS (loop2): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74
[  153.749997][ T8312] XFS (loop2): Error -117 reserving per-AG metadata reserve pool.
[  153.750425][ T8312] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:573).  Shutting down filesystem.
[  153.750456][ T8312] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  153.750469][ T8312] XFS (loop2): Ending clean mount
[  153.750775][ T8312] XFS (loop2): Failed to initialize disk quotas.
[  153.769299][ T8312] XFS (loop2): Error -5 reserving per-AG metadata reserve pool.
[  153.815357][ T8389] bond2 (unregistering): Released all slaves
[  153.844669][ T4172] XFS (loop2): Unmounting Filesystem
[  154.483733][ T4716] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  154.673802][ T8387] loop4: detected capacity change from 0 to 32768
[  154.716979][ T8387] gfs2: fsid=^Ö5xóî¥sŒ: Trying to join cluster "lock_nolock", "^Ö5xóî¥sŒ"
[  154.749397][ T8387] gfs2: fsid=^Ö5xóî¥sŒ: Now mounting FS (format 0)...
[  154.795682][ T8387] gfs2: fsid=^Ö5xóî¥sŒ.0: journal 0 mapped with 16 extents in 0ms
[  154.841527][    T7] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0, already locked for use
[  154.859370][    T7] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Looking at journal...
[  154.904527][ T4716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.959001][ T4716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  155.000944][ T4716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  155.043993][ T4716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.044498][    T7] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Journal head lookup took 185ms
[  155.083809][ T4716] usb 4-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00
[  155.120489][    T7] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Done
[  155.140706][ T8387] gfs2: fsid=^Ö5xóî¥sŒ.0: first mount done, others may mount
[  155.149067][ T4716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.194885][ T4716] usb 4-1: config 0 descriptor??
[  155.287639][ T4716] usb 4-1: MIDIStreaming interface descriptor not found
[  155.465545][ T8470] netlink: 'syz.2.1842': attribute type 1 has an invalid length.
[  155.523788][ T8475] netlink: 'syz.1.1843': attribute type 3 has an invalid length.
[  155.542584][ T4716] usb 4-1: USB disconnect, device number 10
[  155.562292][ T8470] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1842'.
[  155.833722][ T8494] xt_NFQUEUE: number of total queues is 0
[  156.160216][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'.
[  156.233944][ T4716] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  156.329409][ T8517] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  156.338824][ T4215] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  156.614106][ T4716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.640970][ T4716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  156.675858][ T4716] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  156.750548][ T4215] usb 2-1: config 1 has an invalid interface number: 128 but max is 1
[  156.787676][ T4215] usb 2-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config
[  156.820941][ T8551] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1871'.
[  156.824103][ T4215] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  156.854239][ T4215] usb 2-1: config 1 has no interface number 0
[  156.861190][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1872'.
[  156.871405][ T4215] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  156.885460][ T4716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  156.904501][ T4716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.913035][ T4716] usb 1-1: Product: syz
[  156.922917][ T4716] usb 1-1: Manufacturer: syz
[  156.930372][ T4716] usb 1-1: SerialNumber: syz
[  157.025003][ T4716] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  157.031884][ T4716] cdc_ncm 1-1:1.0: bind() failure
[  157.074005][ T4215] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.113797][ T4215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.132282][ T4215] usb 2-1: Product: syz
[  157.137035][ T4215] usb 2-1: Manufacturer: syz
[  157.141757][ T4215] usb 2-1: SerialNumber: syz
[  157.214799][ T4215] cdc_wdm 2-1:1.128: skipping garbage
[  157.241159][ T4215] cdc_wdm 2-1:1.128: invalid descriptor buffer length
[  157.249314][    T7] usb 1-1: USB disconnect, device number 12
[  157.255396][ T4215] cdc_wdm: probe of 2-1:1.128 failed with error -22
[  157.472457][ T5255] usb 2-1: USB disconnect, device number 11
[  157.614981][ T8550] loop3: detected capacity change from 0 to 32768
[  157.764714][ T8558] loop4: detected capacity change from 0 to 32768
[  157.945951][ T8558] XFS (loop4): Mounting V5 Filesystem
[  158.039219][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'.
[  158.200189][ T8558] XFS (loop4): Ending clean mount
[  158.219548][ T8558] XFS (loop4): Quotacheck needed: Please wait.
[  158.346373][ T8617] netlink: 'syz.0.1898': attribute type 1 has an invalid length.
[  158.367845][ T8558] XFS (loop4): Quotacheck: Done.
[  158.413275][ T8617] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1898'.
[  158.453818][ T8617] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1898'.
[  158.595837][ T4176] XFS (loop4): Unmounting Filesystem
[  158.872209][ T8634] netlink: 'syz.1.1907': attribute type 1 has an invalid length.
[  158.923166][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'.
[  159.071877][ T8641] loop3: detected capacity change from 0 to 4096
[  159.107997][ T8645] loop1: detected capacity change from 0 to 64
[  159.117148][ T8605] loop2: detected capacity change from 0 to 32768
[  159.156443][ T8605] gfs2: fsid=^Ö5xóî¥sŒ: Trying to join cluster "lock_nolock", "^Ö5xóî¥sŒ"
[  159.175583][ T8641] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  159.209406][ T8605] gfs2: fsid=^Ö5xóî¥sŒ: Now mounting FS (format 0)...
[  159.246689][ T8605] gfs2: fsid=^Ö5xóî¥sŒ.0: journal 0 mapped with 16 extents in 0ms
[  159.279896][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0, already locked for use
[  159.301090][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Looking at journal...
[  159.500764][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Journal head lookup took 199ms
[  159.544147][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Done
[  159.550107][ T8605] gfs2: fsid=^Ö5xóî¥sŒ.0: first mount done, others may mount
[  159.780928][ T8670] loop3: detected capacity change from 0 to 16
[  159.788255][ T8669] Restarting kernel threads ... done.
[  159.819408][ T8670] erofs: (device loop3): mounted with root inode @ nid 36.
[  160.064312][ T8682] fuse: Invalid rootmode
[  160.255830][ T8696] loop1: detected capacity change from 0 to 64
[  160.357439][ T8700] loop3: detected capacity change from 0 to 64
[  161.128518][ T8738] device wireguard0 entered promiscuous mode
[  161.338746][ T8753] loop3: detected capacity change from 0 to 512
[  161.434367][ T8753] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  161.463729][ T8753] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  161.475507][ T8690] loop0: detected capacity change from 0 to 32768
[  161.486298][    T7] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  161.506231][ T8690] gfs2: fsid=^Ö5xóî¥sŒ: Trying to join cluster "lock_nolock", "^Ö5xóî¥sŒ"
[  161.517018][ T8753] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  161.526336][ T8690] gfs2: fsid=^Ö5xóî¥sŒ: Now mounting FS (format 0)...
[  161.537598][ T8753] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  161.546256][ T8753] System zones: 0-2, 18-18, 34-35
[  161.570519][ T8763] loop2: detected capacity change from 0 to 8
[  161.575590][ T8690] gfs2: fsid=^Ö5xóî¥sŒ.0: journal 0 mapped with 16 extents in 0ms
[  161.578914][ T8753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.611195][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0, already locked for use
[  161.619488][ T8763] SQUASHFS error: Failed to read block 0x738: -5
[  161.626361][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Looking at journal...
[  161.635487][ T8763] SQUASHFS error: Unable to read metadata cache entry [736]
[  161.723848][ T4718] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  161.735565][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Journal head lookup took 109ms
[  161.746996][ T5255] gfs2: fsid=^Ö5xóî¥sŒ.0: jid=0: Done
[  161.752629][ T8690] gfs2: fsid=^Ö5xóî¥sŒ.0: first mount done, others may mount
[  161.853893][    T7] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  161.885162][    T7] usb 5-1: config 0 has an invalid interface number: 2 but max is -1
[  161.893367][    T7] usb 5-1: config 0 has an invalid interface number: 2 but max is -1
[  161.913746][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.931520][    T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  161.940885][    T7] usb 5-1: config 0 has no interface number 0
[  161.947570][    T7] usb 5-1: too many endpoints for config 0 interface 2 altsetting 48: 48, using maximum allowed: 30
[  161.957860][ T8767] loop2: detected capacity change from 0 to 1024
[  161.984242][    T7] usb 5-1: config 0 interface 2 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  162.018941][    T7] usb 5-1: config 0 interface 2 has no altsetting 1
[  162.023795][ T4718] usb 2-1: Using ep0 maxpacket: 32
[  162.047361][ T8767] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.155625][ T8767] EXT4-fs warning (device loop2): empty_inline_dir:1844: bad inline directory (dir #12) - no `..'
[  162.163992][ T4718] usb 2-1: config 0 interface 0 has no altsetting 0
[  162.183874][    T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.193081][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.193932][ T4718] usb 2-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  162.213331][    T7] usb 5-1: Product: syz
[  162.217762][    T7] usb 5-1: Manufacturer: syz
[  162.222379][    T7] usb 5-1: SerialNumber: syz
[  162.238497][    T7] usb 5-1: config 0 descriptor??
[  162.267619][ T4718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.276033][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1972'.
[  162.276063][ T8774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1972'.
[  162.343875][ T4718] usb 2-1: config 0 descriptor??
[  162.416855][ T4718] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  162.447239][ T8780] loop3: detected capacity change from 0 to 256
[  162.450366][ T8776] loop0: detected capacity change from 0 to 4096
[  162.472875][ T4718] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  162.498335][ T4718] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  162.518362][ T4718] usb 2-1: media controller created
[  162.542197][ T8780] FAT-fs (loop3): Directory bread(block 64) failed
[  162.553223][ T4718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.553289][ T8780] FAT-fs (loop3): Directory bread(block 65) failed
[  162.565028][ T8782] loop2: detected capacity change from 0 to 764
[  162.575116][ T8776] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  162.607855][ T8780] FAT-fs (loop3): Directory bread(block 66) failed
[  162.613964][    T7] usb 5-1: MIDIStreaming interface descriptor not found
[  162.615427][ T8780] FAT-fs (loop3): Directory bread(block 67) failed
[  162.629213][ T8780] FAT-fs (loop3): Directory bread(block 68) failed
[  162.637709][ T8780] FAT-fs (loop3): Directory bread(block 69) failed
[  162.647262][ T4718] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  162.667800][ T8782] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  162.683788][ T4718] error writing reg: 0xff, val: 0x00
[  162.684440][    T7] usb 5-1: USB disconnect, device number 9
[  162.693982][ T8780] FAT-fs (loop3): Directory bread(block 70) failed
[  162.725120][ T8782] Symlink component flag not implemented
[  162.731270][ T8782] Symlink component flag not implemented (7)
[  162.743497][ T8780] FAT-fs (loop3): Directory bread(block 71) failed
[  162.754823][ T8776] ntfs3: loop0: failed to convert "c46c" to default
[  162.788489][ T4718] dvb_usb_mxl111sf: probe of 2-1:0.0 failed with error -22
[  162.802292][ T8780] FAT-fs (loop3): Directory bread(block 72) failed
[  162.833720][ T8780] FAT-fs (loop3): Directory bread(block 73) failed
[  162.978262][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1978'.
[  163.109725][ T4717] usb 2-1: USB disconnect, device number 12
[  163.151024][ T4188] udevd[4188]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.794115][ T4716] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  163.834060][ T4717] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  163.921171][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  163.921189][   T26] audit: type=1800 audit(1750424544.528:8): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1997" name="/" dev="sockfs" ino=46268 res=0 errno=0
[  164.123712][ T4717] usb 4-1: Using ep0 maxpacket: 16
[  164.228706][ T8821] loop1: detected capacity change from 0 to 32768
[  164.242041][ T8821] XFS: ikeep mount option is deprecated.
[  164.244335][ T4716] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  164.257787][ T4717] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  164.261672][ T8809] loop2: detected capacity change from 0 to 32768
[  164.273329][ T4717] usb 4-1: config 0 has no interface number 0
[  164.280591][ T4717] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  164.338714][ T8821] XFS (loop1): Mounting V5 Filesystem
[  164.376575][ T8809] XFS (loop2): Mounting V5 Filesystem
[  164.435610][ T4716] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  164.464016][ T4717] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  164.464917][ T8821] XFS (loop1): Ending clean mount
[  164.473441][ T4717] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  164.480455][ T8821] XFS (loop1): Quotacheck needed: Please wait.
[  164.492513][ T4716] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  164.525447][ T8809] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  164.545970][ T4716] usb 1-1: Manufacturer: syz
[  164.548490][ T8858] loop4: detected capacity change from 0 to 1024
[  164.550707][ T4716] usb 1-1: SerialNumber: syz
[  164.567485][ T4717] usb 4-1: Product: syz
[  164.572517][ T4717] usb 4-1: SerialNumber: syz
[  164.586903][ T4717] usb 4-1: config 0 descriptor??
[  164.595064][ T8809] XFS (loop2): Starting recovery (logdev: internal)
[  164.618778][ T8858] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback.
[  164.646506][ T4717] cm109 4-1:0.8: invalid payload size 208, expected 4
[  164.652714][ T8821] XFS (loop1): Quotacheck: Done.
[  164.655901][ T4717] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input15
[  164.696862][ T8809] XFS (loop2): Ending recovery (logdev: internal)
[  164.796537][ T4173] XFS (loop1): Unmounting Filesystem
[  164.917979][ T4716] usbhid 1-1:36.0: couldn't find an input interrupt endpoint
[  164.953153][ T4716] usb 1-1: USB disconnect, device number 13
[  164.988858][ T4172] XFS (loop2): Unmounting Filesystem
[  165.129189][ T4718] usb 4-1: USB disconnect, device number 11
[  165.222695][ T4718] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  165.394017][   T21] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  165.460681][ T8872] loop0: detected capacity change from 0 to 64
[  165.567716][ T8872] attempt to access beyond end of device
[  165.567716][ T8872] loop0: rw=0, want=65536, limit=64
[  165.611450][ T8872] Buffer I/O error on dev loop0, logical block 32767, async page read
[  165.628658][ T8872] attempt to access beyond end of device
[  165.628658][ T8872] loop0: rw=0, want=65536, limit=64
[  165.639965][ T8880] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2014'.
[  165.658241][ T8872] Buffer I/O error on dev loop0, logical block 32767, async page read
[  165.794267][   T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  165.832925][   T21] usb 5-1: config 0 has no interface number 0
[  165.865928][ T8884] loop2: detected capacity change from 0 to 1764
[  165.907544][ T8886] loop3: detected capacity change from 0 to 4096
[  166.013436][ T8886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.034022][   T21] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  166.045701][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.055157][   T21] usb 5-1: Product: syz
[  166.059463][   T21] usb 5-1: Manufacturer: syz
[  166.066725][   T21] usb 5-1: SerialNumber: syz
[  166.068303][ T8884] iso9660: Corrupted directory entry in block 2 of inode 1920
[  166.081763][   T21] usb 5-1: config 0 descriptor??
[  166.116586][ T8874] loop1: detected capacity change from 0 to 32768
[  166.165559][ T8886] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.2018: directory missing '..'
[  166.174303][ T8874] XFS: noikeep mount option is deprecated.
[  166.355017][   T21] dvb_usb_ec168: probe of 5-1:0.1 failed with error -71
[  166.381231][   T21] usb 5-1: USB disconnect, device number 10
[  166.412626][ T8874] XFS (loop1): Mounting V5 Filesystem
[  166.498871][ T8893] loop0: detected capacity change from 0 to 32768
[  166.548301][ T8893] XFS: attr2 mount option is deprecated.
[  166.567041][ T8874] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  166.671650][ T8874] XFS (loop1): Starting recovery (logdev: internal)
[  166.700780][ T8893] XFS (loop0): Mounting V5 Filesystem
[  166.810972][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'.
[  166.873967][ T8874] XFS (loop1): Ending recovery (logdev: internal)
[  166.885947][ T8923] netlink: 'syz.2.2027': attribute type 1 has an invalid length.
[  166.902749][ T8874] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x481/0x6a0, xfs_finobt block 0x20
[  166.918743][ T8874] XFS (loop1): Unmount and run xfs_repair
[  166.924911][ T8874] XFS (loop1): Failed to initialize disk quotas.
[  167.016402][ T8893] XFS (loop0): Ending clean mount
[  167.071635][ T8874] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x481/0x6a0, xfs_finobt block 0x20
[  167.085824][ T8893] XFS (loop0): Quotacheck needed: Please wait.
[  167.111847][ T8934] loop4: detected capacity change from 0 to 65
[  167.172394][ T8874] XFS (loop1): Unmount and run xfs_repair
[  167.178372][ T8893] XFS (loop0): Quotacheck: Done.
[  167.199150][ T8934] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  167.247111][ T4173] XFS (loop1): Unmounting Filesystem
[  167.414814][ T4171] XFS (loop0): Unmounting Filesystem
[  167.523815][ T4716] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  167.537042][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2040'.
[  167.813730][ T4716] usb 3-1: Using ep0 maxpacket: 32
[  167.944494][ T4716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.056281][ T8960] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[  168.121935][ T8965] netlink: 'syz.0.2037': attribute type 30 has an invalid length.
[  168.164473][ T4716] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  168.178566][ T4716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.213670][ T4716] usb 3-1: Product: syz
[  168.227430][ T4716] usb 3-1: Manufacturer: syz
[  168.241800][ T8970] loop3: detected capacity change from 0 to 1024
[  168.252942][ T4716] usb 3-1: SerialNumber: syz
[  168.308995][ T4716] usb 3-1: config 0 descriptor??
[  168.374738][ T4716] usb 3-1: bad CDC descriptors
[  168.380142][ T4716] usb 3-1: unsupported MDLM descriptors
[  168.437427][ T4169] hfsplus: bad catalog entry type
[  168.615961][ T4717] usb 3-1: USB disconnect, device number 7
[  168.633931][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2060'.
[  168.683930][ T8987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2060'.
[  168.970109][  T156] hfsplus: b-tree write err: -5, ino 4
[  168.990918][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2069'.
[  169.027154][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2069'.
[  169.161919][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.290557][ T9018] loop4: detected capacity change from 0 to 64
[  169.317714][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.495935][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.682904][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.772846][ T9040] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2087'.
[  169.871429][ T9046] loop2: detected capacity change from 0 to 256
[  170.143400][  T264] block nbd4: Attempted send on invalid socket
[  170.150792][  T264] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  170.163907][ T9058] VFS: unable to read V7 FS superblock on device nbd4.
[  170.171355][ T9058] VFS: could not find a valid V7 on nbd4.
[  170.326497][ T9065] loop1: detected capacity change from 0 to 4096
[  170.398026][ T9065] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  170.436154][ T9035] chnl_net:caif_netlink_parms(): no params data found
[  170.506652][ T9065] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  170.560963][ T9065] ntfs3: loop1: Failed to load $Extend.
[  170.674844][ T9065] ntfs3: loop1: ino=5, "/" directory corrupted
[  171.063283][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.073756][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.100142][ T9035] device bridge_slave_0 entered promiscuous mode
[  171.131022][ T9101] netlink: 'syz.4.2108': attribute type 3 has an invalid length.
[  171.151721][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.169802][ T9101] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2108'.
[  171.180156][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.207644][ T9035] device bridge_slave_1 entered promiscuous mode
[  171.244447][ T9108] loop2: detected capacity change from 0 to 64
[  171.306282][ T9035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.363504][ T9035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.364869][ T9108] hfs: request for non-existent node 16777216 in B*Tree
[  171.423952][ T9108] hfs: request for non-existent node 16777216 in B*Tree
[  171.520796][ T9111] loop4: detected capacity change from 0 to 1024
[  171.544484][ T4717] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  171.553437][ T9035] team0: Port device team_slave_0 added
[  171.621808][ T9035] team0: Port device team_slave_1 added
[  171.684269][ T9062] loop0: detected capacity change from 0 to 32768
[  171.712424][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.732052][ T9062] XFS: ikeep mount option is deprecated.
[  171.744157][  T144] hfsplus: b-tree write err: -5, ino 4
[  171.767449][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.804975][   T21] Bluetooth: hci0: command 0x0409 tx timeout
[  171.832321][ T9062] XFS: noikeep mount option is deprecated.
[  171.844045][ T4717] usb 2-1: Using ep0 maxpacket: 16
[  171.895880][ T9035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.958844][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.008359][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.046093][ T9130] netlink: 'syz.2.2118': attribute type 1 has an invalid length.
[  172.063746][ T9062] XFS (loop0): Mounting V5 Filesystem
[  172.084496][ T9035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.156266][ T9136] loop2: detected capacity change from 0 to 16
[  172.159807][ T9122] loop4: detected capacity change from 0 to 4096
[  172.173848][ T4717] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  172.187529][ T4717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.199675][ T4717] usb 2-1: Product: syz
[  172.205602][ T4717] usb 2-1: Manufacturer: syz
[  172.210582][ T4717] usb 2-1: SerialNumber: syz
[  172.212984][ T9136] erofs: (device loop2): mounted with root inode @ nid 36.
[  172.235222][ T4717] usb 2-1: config 0 descriptor??
[  172.282245][ T9035] device hsr_slave_0 entered promiscuous mode
[  172.289699][ T4717] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  172.308819][ T9035] device hsr_slave_1 entered promiscuous mode
[  172.329136][ T9035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.340405][ T9035] Cannot create hsr debugfs directory
[  172.341323][ T9062] XFS (loop0): Ending clean mount
[  172.390771][ T9122] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  172.402701][ T9062] XFS (loop0): Quotacheck needed: Please wait.
[  172.546388][ T5255] usb 2-1: USB disconnect, device number 13
[  172.609506][ T9062] XFS (loop0): Quotacheck: Done.
[  172.779157][ T4716] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  172.819749][    T9] device hsr_slave_0 left promiscuous mode
[  172.842425][    T9] device hsr_slave_1 left promiscuous mode
[  172.881827][ T4171] XFS (loop0): Unmounting Filesystem
[  172.887921][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.906758][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.934126][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.973418][    T9] device bridge_slave_1 left promiscuous mode
[  172.984531][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.069463][    T9] device bridge_slave_0 left promiscuous mode
[  173.105091][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.178045][    T9] device veth1_macvtap left promiscuous mode
[  173.195339][ T4716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.206221][    T9] device veth0_macvtap left promiscuous mode
[  173.212365][ T4716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  173.237697][    T9] device veth1_vlan left promiscuous mode
[  173.244702][    T9] device veth0_vlan left promiscuous mode
[  173.263711][ T4716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  173.294220][ T4716] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.348302][ T4716] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  173.391431][ T4716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.400634][ T9170] xt_nfacct: accounting object `syz1' does not exists
[  173.433120][ T4716] usb 3-1: config 0 descriptor??
[  173.528969][ T4716] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16
[  173.778692][    T7] usb 3-1: USB disconnect, device number 8
[  173.817200][    T7] appletouch 3-1:0.0: input: appletouch disconnected
[  173.871369][    T9] bond1 (unregistering): Released all slaves
[  173.879754][ T4716] Bluetooth: hci0: command 0x041b tx timeout
[  174.001598][   T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  174.102293][    T9] team0 (unregistering): Port device team_slave_1 removed
[  174.135619][    T9] team0 (unregistering): Port device team_slave_0 removed
[  174.175873][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.205700][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.230820][ T9177] loop4: detected capacity change from 0 to 32768
[  174.261795][ T9177] XFS: attr2 mount option is deprecated.
[  174.274092][   T23] usb 2-1: Using ep0 maxpacket: 16
[  174.326179][ T9177] XFS (loop4): Mounting V5 Filesystem
[  174.420273][    T9] bond0 (unregistering): Released all slaves
[  174.423939][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  174.456002][   T23] usb 2-1: config 0 has no interface number 0
[  174.470584][ T9177] XFS (loop4): Ending clean mount
[  174.502747][ T9177] XFS (loop4): Quotacheck needed: Please wait.
[  174.534124][ T9177] XFS (loop4): Quotacheck: Done.
[  174.568248][ T9189] netlink: 'syz.0.2137': attribute type 3 has an invalid length.
[  174.665976][   T23] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  174.683671][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.691710][   T23] usb 2-1: Product: syz
[  174.734284][   T23] usb 2-1: Manufacturer: syz
[  174.738989][   T23] usb 2-1: SerialNumber: syz
[  174.761820][ T9035] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  174.775665][   T23] usb 2-1: config 0 descriptor??
[  174.830759][ T9208] Unsupported ieee802154 address type: 0
[  174.841068][   T23] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  175.009642][ T4176] XFS (loop4): Unmounting Filesystem
[  175.017670][ T9035] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  175.293858][   T23] gspca_spca1528: reg_w err -71
[  175.323740][   T23] spca1528: probe of 2-1:0.1 failed with error -71
[  175.353104][   T23] usb 2-1: USB disconnect, device number 14
[  175.520545][ T9035] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  175.544834][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  175.552464][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  175.573376][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  175.584208][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  175.661597][ T9213] device geneve2 entered promiscuous mode
[  175.731881][ T9215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2146'.
[  175.799137][ T9035] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  175.991443][   T23] Bluetooth: hci0: command 0x040f tx timeout
[  176.103770][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.115998][ T9219] loop0: detected capacity change from 0 to 4096
[  176.167974][ T9219] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  176.228518][ T7387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.242595][ T7387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.307856][ T9035] 8021q: adding VLAN 0 to HW filter on device team0
[  176.316667][ T9219] ntfs: volume version 3.1.
[  176.356649][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.367119][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.436664][ T9240] loop1: detected capacity change from 0 to 164
[  176.452600][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.459787][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.511189][ T9240] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  176.522781][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  176.658469][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.759489][ T9258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.770707][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.810668][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.817868][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.938158][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.970098][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.013529][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.042279][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.089961][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.124290][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.141667][ T9035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  177.191627][ T9035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.207483][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.224817][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.260812][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.299290][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.330859][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2169'.
[  177.354496][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.364026][ T9278] nbd: must specify at least one socket
[  177.400926][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  177.682142][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  177.887650][ T9035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.913540][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.930377][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.034593][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  178.403789][ T9337] 8021q: VLANs not supported on vxcan1
[  178.753837][ T9355] loop1: detected capacity change from 0 to 64
[  178.793979][ T4716] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  178.872897][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.886428][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.969552][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.999211][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  179.056223][ T9035] device veth0_vlan entered promiscuous mode
[  179.074175][ T4716] usb 3-1: Using ep0 maxpacket: 32
[  179.088524][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  179.104354][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  179.142381][ T9363] mkiss: ax0: crc mode is auto.
[  179.146749][ T9035] device veth1_vlan entered promiscuous mode
[  179.224643][ T4716] usb 3-1: config 0 has an invalid interface number: 228 but max is 0
[  179.232847][ T4716] usb 3-1: config 0 has no interface number 0
[  179.281877][ T7387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  179.301819][ T7387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  179.313981][   T23] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  179.341400][ T7387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  179.354816][ T4716] usb 3-1: New USB device found, idVendor=094b, idProduct=0001, bcdDevice=14.06
[  179.374621][ T7387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  179.379933][ T4716] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  179.396252][ T9035] device veth0_macvtap entered promiscuous mode
[  179.416151][ T4716] usb 3-1: Manufacturer: syz
[  179.424998][ T9035] device veth1_macvtap entered promiscuous mode
[  179.432836][ T4716] usb 3-1: config 0 descriptor??
[  179.521707][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.572773][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.610294][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.631182][ T9345] loop4: detected capacity change from 0 to 32768
[  179.640296][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.672071][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.723708][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.737531][ T9345] (syz.4.2191,9345,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  179.739455][   T23] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  179.764419][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.785242][   T23] usb 2-1: config 0 has no interface number 0
[  179.792586][   T21] usb 3-1: USB disconnect, device number 9
[  179.803636][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.806701][    T7] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  179.824747][ T9345] (syz.4.2191,9345,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  179.849773][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.878086][ T9345] JBD2: Ignoring recovery information on journal
[  179.892151][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  179.921201][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  179.943080][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  179.953560][ T9345] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  179.961791][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  179.973422][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.000769][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.011270][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.022103][   T23] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  180.035962][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.047257][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.078678][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.099596][   T23] usb 2-1: Product: syz
[  180.109736][   T23] usb 2-1: Manufacturer: syz
[  180.123214][   T23] usb 2-1: SerialNumber: syz
[  180.130022][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.154829][   T23] usb 2-1: config 0 descriptor??
[  180.182999][ T9035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.209470][ T9035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.221592][ T9345] (syz.4.2191,9345,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC.
[  180.222396][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.236636][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  180.255139][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  180.263547][ T9345] (syz.4.2191,9345,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b
[  180.278292][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  180.303700][    T7] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00
[  180.324762][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  180.343130][ T9345] (syz.4.2191,9345,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  180.347264][ T9035] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.362618][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.385480][    T7] usb 1-1: config 0 descriptor??
[  180.401943][ T9345] (syz.4.2191,9345,0):ocfs2_quota_read:201 ERROR: status = -5
[  180.405881][ T9035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.410228][ T9368] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  180.435212][   T23] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  180.443763][ T9345] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6
[  180.453064][ T9345] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  180.459368][ T9035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.475918][ T9035] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.484820][   T23] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  180.493026][   T23] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  180.514007][   T23] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  180.537495][   T23] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  180.546361][ T9345] (syz.4.2191,9345,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  180.563046][ T9345] (syz.4.2191,9345,0):ocfs2_mknod:314 ERROR: status = -5
[  180.572201][ T9345] (syz.4.2191,9345,0):ocfs2_mknod:502 ERROR: status = -5
[  180.630694][ T9345] (syz.4.2191,9345,0):ocfs2_create:676 ERROR: status = -5
[  180.705115][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.734811][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.754986][ T4176] ocfs2: Unmounting device (7,4) on (node local)
[  180.774156][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.833261][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.860229][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.891061][ T9392] loop2: detected capacity change from 0 to 512
[  180.956027][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.977324][    T7] semitek 0003:1EA7:0907.0001: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.0-1/input0
[  181.131225][    T7] usb 1-1: USB disconnect, device number 14
[  181.210124][ T9392] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nolazytime,delalloc,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro,. Quota mode: writeback.
[  181.245574][ T5255] usb 2-1: USB disconnect, device number 15
[  181.284284][ T9392] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.300377][ T5255] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  181.324445][ T9398] fido_id[9398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  181.358199][ T5255] keyspan 2-1:0.133: device disconnected
[  181.385207][ T9392] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.2202: corrupted inode contents
[  181.457839][ T9392] EXT4-fs (loop2): Remounting filesystem read-only
[  181.482988][ T9392] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.2202: mark_inode_dirty error
[  181.529535][ T9392] EXT4-fs (loop2): Remounting filesystem read-only
[  181.565050][ T9392] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.2202: corrupted inode contents
[  181.599796][ T9392] EXT4-fs (loop2): Remounting filesystem read-only
[  181.609196][ T9392] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.2202: mark_inode_dirty error
[  181.629984][ T9392] EXT4-fs (loop2): Remounting filesystem read-only
[  181.801563][ T9420] program syz.5.2206 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  181.899955][ T9422] loop1: detected capacity change from 0 to 2048
[  182.024017][ T9422] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  182.073847][ T5271] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  182.110490][ T9436] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.343807][ T5271] usb 1-1: Using ep0 maxpacket: 16
[  182.464017][ T5271] usb 1-1: config 4 has an invalid interface number: 51 but max is 0
[  182.482423][ T5271] usb 1-1: config 4 has no interface number 0
[  182.513210][ T9461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2221'.
[  182.513759][ T5271] usb 1-1: config 4 interface 51 has no altsetting 0
[  182.744320][ T5271] usb 1-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b
[  182.800113][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.801601][ T9478] loop4: detected capacity change from 0 to 1024
[  182.845225][ T5271] usb 1-1: Product: syz
[  182.849454][ T5271] usb 1-1: Manufacturer: syz
[  182.895018][ T5271] usb 1-1: SerialNumber: syz
[  182.898787][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2232'.
[  182.970625][ T5271] upd78f0730 1-1:4.51: upd78f0730 converter detected
[  182.998267][ T5271] usb 1-1: upd78f0730 converter now attached to ttyUSB0
[  183.014923][ T9478] hfsplus: bad catalog entry type
[  183.108838][ T9494] device vlan2 entered promiscuous mode
[  183.124511][ T9494] device bridge0 entered promiscuous mode
[  183.129861][    T9] hfsplus: b-tree write err: -5, ino 4
[  183.263243][ T9501] sctp: [Deprecated]: syz.1.2238 (pid 9501) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.263243][ T9501] Use struct sctp_sack_info instead
[  183.300695][ T5271] usb 1-1: USB disconnect, device number 15
[  183.304802][ T9501] 8021q: VLANs not supported on hsr0
[  183.316201][ T5271] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  183.360223][ T5271] upd78f0730 1-1:4.51: device disconnected
[  183.599712][ T9520] loop2: detected capacity change from 0 to 256
[  183.605527][ T9522] netlink: 'syz.1.2247': attribute type 27 has an invalid length.
[  183.739598][ T9528] program syz.1.2249 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.813842][   T23] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  183.926854][ T9533] loop2: detected capacity change from 0 to 1024
[  184.005417][ T9533] hfsplus: unable to parse mount options
[  184.203865][ T4716] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  184.224198][   T23] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  184.261073][   T23] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.291733][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  184.314533][   T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  184.357474][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.405605][   T23] usb 5-1: config 0 descriptor??
[  184.633997][ T4716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.685162][ T4716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.706479][ T4716] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  184.726303][ T4716] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  184.738817][ T4716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.759083][ T4716] usb 1-1: config 0 descriptor??
[  184.885707][   T23] logitech 0003:046D:C24F.0002: unbalanced collection at end of report description
[  184.921448][   T23] logitech 0003:046D:C24F.0002: parse failed
[  184.934077][   T23] logitech: probe of 0003:046D:C24F.0002 failed with error -22
[  184.986542][ T9580] loop2: detected capacity change from 0 to 2048
[  185.139107][   T23] usb 5-1: USB disconnect, device number 11
[  185.180695][ T9586] loop1: detected capacity change from 0 to 256
[  185.294050][ T9586] exfat: Deprecated parameter 'namecase'
[  185.309432][ T9580] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  185.360701][ T9591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.366082][ T9580] attempt to access beyond end of device
[  185.366082][ T9580] loop2: rw=524288, want=33554432, limit=2048
[  185.374212][ T4716] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 11/15
[  185.388665][ T9586] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  185.399395][ T4716] plantronics 0003:047F:FFFF.0003: parse failed
[  185.411118][ T4716] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22
[  185.491004][ T9580] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0
[  185.542425][ T9580] NILFS error (device loop2): nilfs_readdir: bad page in #2
[  185.709988][ T5255] usb 1-1: USB disconnect, device number 16
[  185.803709][ T9605] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2276'.
[  185.839736][ T9605] openvswitch: netlink: Tunnel attr 14896 out of range max 16
[  186.067773][   T26] audit: type=1326 audit(1750424566.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.1.2282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe420ef8929 code=0x0
[  186.114685][ T9623] loop5: detected capacity change from 0 to 512
[  186.247989][ T9623] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  186.294563][ T9623] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  186.322772][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'.
[  186.335525][ T9623] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #2: comm syz.5.2283: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  186.364359][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2291'.
[  186.370380][ T9643] loop0: detected capacity change from 0 to 256
[  186.374237][ T9640] netlink: 'syz.4.2291': attribute type 18 has an invalid length.
[  186.474485][ T9649] mmap: syz.4.2293 (9649) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  186.489758][   T26] audit: type=1800 audit(1750424567.098:10): pid=9643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2290" name=F26BC524B970A5BC277FE4FB38 dev="loop0" ino=1048614 res=0 errno=0
[  186.658847][ T9656] loop5: detected capacity change from 0 to 64
[  186.761929][ T9662] netlink: 'syz.4.2299': attribute type 3 has an invalid length.
[  186.987535][ T9679] loop0: detected capacity change from 0 to 512
[  187.094426][ T9679] EXT4-fs (loop0): 1 truncate cleaned up
[  187.100128][ T9679] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  187.496412][ T9699] loop4: detected capacity change from 0 to 512
[  187.658144][ T9699] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  187.697578][ T9699] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  187.742623][ T9699] EXT4-fs (loop4): 1 truncate cleaned up
[  187.803682][ T9699] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="errors=continue,noload,noblock_validity,grpjquota="grpquota,jqfmt=vfsold,data_err=ignore,,errors=continue. Quota mode: writeback.
[  188.064311][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2319'.
[  188.427309][ T9697] loop0: detected capacity change from 0 to 32768
[  188.502436][ T9723] loop5: detected capacity change from 0 to 1024
[  188.591708][ T4171] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN
[  188.603473][ T4171] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7]
[  188.611914][ T4171] CPU: 0 PID: 4171 Comm: syz-executor Not tainted 5.15.185-syzkaller #0
[  188.620355][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  188.630424][ T4171] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0
[  188.637048][ T4171] Code: ff df 80 3c 08 00 74 08 48 89 df e8 ef 57 f3 fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 c7 57 f3 fd bb 90 00 00 00 49 03 1e
[  188.657388][ T4171] RSP: 0018:ffffc90002f2fa80 EFLAGS: 00010202
[  188.663680][ T4171] RAX: 00000000000000ba RBX: ffff888066091648 RCX: dffffc0000000000
[  188.671676][ T4171] RDX: 0000000000000000 RSI: ffffffff8a59a720 RDI: ffffffff8a59a6e0
[  188.679674][ T4171] RBP: 1ffff1100cc122d1 R08: dffffc0000000000 R09: fffffbfff1ff3619
[  188.687759][ T4171] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffff888147bb2110
[  188.695760][ T4171] R13: ffff888066091688 R14: 00000000000005d0 R15: ffff88807b2f1dec
[  188.703755][ T4171] FS:  000055557ccae500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  188.713051][ T4171] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.719664][ T4171] CR2: 00007f5bd7fc1000 CR3: 0000000062f34000 CR4: 00000000003506f0
[  188.727800][ T4171] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  188.735887][ T4171] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  188.744085][ T4171] Call Trace:
[  188.747381][ T4171]  <TASK>
[  188.750341][ T4171]  bio_associate_blkg+0x23a/0x340
[  188.755394][ T4171]  lbmStartIO+0x204/0x4c0
[  188.759750][ T4171]  lbmWrite+0x361/0x480
[  188.763932][ T4171]  jfs_flush_journal+0x535/0xeb0
[  188.768904][ T4171]  ? lmLogShutdown+0x820/0x820
[  188.773698][ T4171]  ? dqput+0x460/0x460
[  188.777796][ T4171]  ? writeback_inodes_sb_nr+0x30/0x30
[  188.783201][ T4171]  jfs_sync_fs+0x79/0xa0
[  188.787467][ T4171]  sync_filesystem+0xe6/0x220
[  188.792172][ T4171]  generic_shutdown_super+0x6b/0x300
[  188.797485][ T4171]  kill_block_super+0x7c/0xe0
[  188.802191][ T4171]  deactivate_locked_super+0x93/0xf0
[  188.807510][ T4171]  cleanup_mnt+0x418/0x4d0
[  188.811953][ T4171]  ? lockdep_hardirqs_on+0x94/0x140
[  188.817274][ T4171]  task_work_run+0x125/0x1a0
[  188.821889][ T4171]  exit_to_user_mode_loop+0x10f/0x130
[  188.827299][ T4171]  exit_to_user_mode_prepare+0xb1/0x140
[  188.832883][ T4171]  syscall_exit_to_user_mode+0x16/0x40
[  188.838381][ T4171]  do_syscall_64+0x58/0xa0
[  188.842935][ T4171]  ? clear_bhb_loop+0x30/0x80
[  188.847651][ T4171]  ? clear_bhb_loop+0x30/0x80
[  188.852355][ T4171]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  188.858281][ T4171] RIP: 0033:0x7f45597d1c57
[  188.862890][ T4171] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  188.870664][ T9715] loop1: detected capacity change from 0 to 32768
[  188.882519][ T4171] RSP: 002b:00007ffe5dcddf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  188.882553][ T4171] RAX: 0000000000000000 RBX: 00007f4559852925 RCX: 00007f45597d1c57
[  188.882566][ T4171] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5dcde010
[  188.882576][ T4171] RBP: 00007ffe5dcde010 R08: 0000000000000000 R09: 0000000000000000
[  188.882587][ T4171] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5dcdf0a0
[  188.882598][ T4171] R13: 00007f4559852925 R14: 000000000002e050 R15: 00007ffe5dcdf0e0
[  188.882617][ T4171]  </TASK>
[  188.882623][ T4171] Modules linked in:
[  188.993644][ T4171] ---[ end trace c440d9f2cde85974 ]---
[  188.999338][ T4171] RIP: 0010:bio_associate_blkg_from_css+0x2ab/0x9c0
[  189.006366][ T4171] Code: ff df 80 3c 08 00 74 08 48 89 df e8 ef 57 f3 fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 c7 57 f3 fd bb 90 00 00 00 49 03 1e
[  189.027644][ T4171] RSP: 0018:ffffc90002f2fa80 EFLAGS: 00010202
[  189.034320][ T4171] RAX: 00000000000000ba RBX: ffff888066091648 RCX: dffffc0000000000
[  189.042522][ T4171] RDX: 0000000000000000 RSI: ffffffff8a59a720 RDI: ffffffff8a59a6e0
[  189.051019][ T4171] RBP: 1ffff1100cc122d1 R08: dffffc0000000000 R09: fffffbfff1ff3619
[  189.060946][ T4171] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffff888147bb2110
[  189.069217][ T4171] R13: ffff888066091688 R14: 00000000000005d0 R15: ffff88807b2f1dec
[  189.077689][ T4171] FS:  000055557ccae500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  189.084784][ T9735] loop4: detected capacity change from 0 to 32768
[  189.087172][ T4171] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.099897][ T4171] CR2: 0000564c4b7b5950 CR3: 0000000062f34000 CR4: 00000000003506e0
[  189.107990][ T4171] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  189.116245][ T4171] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  189.124373][ T4171] Kernel panic - not syncing: Fatal exception
[  189.130855][ T4171] Kernel Offset: disabled
[  189.135183][ T4171] Rebooting in 86400 seconds..