last executing test programs:

2m1.230379495s ago: executing program 2 (id=647):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x5, 0x0, 0x0, 0x0}, {0xc, 0x800, 0x0, 0x0}], 0x2})

1m58.21329675s ago: executing program 2 (id=667):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0)

1m57.947901789s ago: executing program 2 (id=670):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0)
r1 = dup(r0)
write$binfmt_elf32(r1, &(0x7f0000002800)=ANY=[@ANYBLOB="7f454c464a0301130100000000000000020003"], 0x4b)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m57.757594685s ago: executing program 2 (id=671):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x4216}}]}, 0x1, 0x1535, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000100)='2', 0xfffffe16, 0x8000c5e)

1m57.27751703s ago: executing program 2 (id=675):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

1m56.544100033s ago: executing program 2 (id=682):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x2400cc40)

1m56.042928839s ago: executing program 32 (id=682):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x2400cc40)

5.763119937s ago: executing program 5 (id=1526):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x0, 0x80600})

4.940369774s ago: executing program 5 (id=1528):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}})

4.676815062s ago: executing program 1 (id=1529):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x5, &(0x7f0000000040)={0xe, "810556c721393f4084aa00"}})

4.532097516s ago: executing program 3 (id=1532):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\x00', 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key$user(&(0x7f0000000400), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000580)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0db8f4aec7a8d4529bd5052a6bf936a10285eccab940a95c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcbfab5253370570500000000000000c83e3e593d1d53d80636e4ddc1f2ab58762b3494090000000000000006a45c50874c905ca10b35f22a861952142b29142c7b7feb75b9138dbf818a3c6b96dd8000"/192, 0xc0, r1)
keyctl$dh_compute(0x17, &(0x7f0000000440)={r2, r2, r0}, &(0x7f0000002380)=""/4102, 0x1006, 0x0)

4.486251688s ago: executing program 3 (id=1533):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xc0002011})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6011})

3.113198301s ago: executing program 5 (id=1534):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setresuid(0x0, 0xee01, 0x0)

3.112618352s ago: executing program 3 (id=1535):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x140, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x108, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_EMATCHES={0xe4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x600}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="419892b8b4", @TCF_META_TYPE_VAR="6762ab8b52fbbf7a5d"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="df504b", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4f65f6c06d4b55b3f0da"]}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x9, 0x2188e8564924fac6}, {0x8, 0x5}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="3b9aa19a5093e4d1c834", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ae2e", @TCF_META_TYPE_VAR='\a']}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="2a969cd4", @TCF_META_TYPE_VAR="c5a29d0983a38c474fe4", @TCF_META_TYPE_VAR="b3690e"]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0027170019a81c1e78d4", @TCF_META_TYPE_VAR="ccbcd1cc4e2b", @TCF_META_TYPE_VAR="92", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}]}}]}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3.112130352s ago: executing program 0 (id=1545):
r0 = gettid()
setregid(0xee00, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r0, 0x5, 0x0, 0x0)

2.85058021s ago: executing program 3 (id=1539):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x0, 0x80600})

2.849942s ago: executing program 1 (id=1550):
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc00000001090212000100"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

2.676229665s ago: executing program 4 (id=1540):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_gettime(0x7, &(0x7f00000014c0))

2.403585734s ago: executing program 0 (id=1541):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)

2.18813267s ago: executing program 0 (id=1542):
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB="63727566742c636865636b3d7374726963742c73657373696f6e3d3078303030303030303030303030303032632c6e6f726f636b2c6f76657272696465726f636b7065726d2c696f636861727365743d6e6f6e652c73657373696f6e3d3078303030303030303030303030303032312c757466382c757466382c00922328d2252f3cb72c3a92bb2f4a6d0dbc131030c78e583d527b6e26337bc3ee33244e193dc377be2227be"], 0x4, 0x416, &(0x7f0000000c40)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)
chown(0x0, 0xee00, 0x0)

1.90293989s ago: executing program 5 (id=1543):
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007680afe8eaed0b3c589f1daf0fe389a4c0a839d3c96e249534fa8c59f66f0cc85c3f06a689df8de150e8fafa3625335e4b43e7531b74c008bda93c795f58e5e86b52a1af8fccc1c69527b2e4334c33bd8a3ace83266d463402c750b85ae0b07ec332198c13b68e9ae20cb684c8515f951156f670f39e3896fd7b3b16b737398cde6ae247e1eeb5d0a5dc27a235f1f0540ae603751adc5ebd6e760979e44a"], 0x1, 0x9e29, &(0x7f0000013e80)="$eJwkmFMQ3wfTRlM3tW27PbVt27btU/f/s1Hbdpu0aZLatq3URspv3vl2Zm93njl7rp57BjhsgMMHeO8A7xvgiAHeP8CRAxw1wNEDfGCADw7woQE+PMBHBvjoAB8b4OMDfGKATw7wqQE+PcBnBvjsAJ8b4PMDfGGALw7wpQG+PMBXBvjqAF8b4OsDfGOAbw7wrQG+PcB3BvjuAN8b4PsD/GCAHw7wowF+PMBPBvjpAD8b4OcD/GKAYwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwY4doB/DvCvAf49wH8G+O8A/xvgkADHCXDcAMcLcPwAJwhwwgAnCnDiAIcGOEmAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHOAgwCDAMMAowDjAJMA0wCzAPsAiwDLAKsA6wCbANsAuwD/CcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4AhwU4PMB7A7wvwBEB3h/gyABHBTg6wAcCfDDAhwJ8OMBHAnw0wMcCfDzAJwJ8MsCnAnw6wGcCfDbA5wJ8PsAXAnwxwJcCfDnAVwJ8NcDXAnw9wDcCfDPAtwJ8O8B3Anw3wPcCfD/ADwL8MMCPAvw4wE8C/DTAzwL8PMAvAhwT4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeDYAP8M8K8A/w7wnwD/DfC/AIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4NMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2I54R4bojnhXh+iBeEeGGIF4V4cYiXhHhpiJeFeHmIV4R4ZYhXhXh1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeId4V4d4j3hDgsxOEh3hvifSGOCPH+EEeGOCrE0SE+EOKDIT4U4sMhPhLioyE+FuLjIT4R4pMhPhXi0yE+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIX4W4uchfhHimBC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DfG3EH8P8Y8Qx4b4Z4h/hfh3iP+E+G+I/4U4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wqERThLhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8/8sw5P9noQgXjnCRCBeNcLEIF49wiQiXjHCpCIlw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rw5AiN8JQIT43wtAhPj/CMCM+M8KwIz45wEGEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2Ef4TkRnhvheRGeH+EFEV4Y4UURXhzhJRFeGuFlEV4e4RURXhnhVRFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPREOi3B4hPdGeF+EIyK8P8KREY6KcHSED0T4YIQPRfhwhI9E+GiEj0X4eIRPRPhkhE9F+HSEz0T4bITPRfh8hC9E+GKEL0X4coSvRPhqhK9F+HqEb0T4ZoRvRfh2hO9E+G6E70X4foQfRPhhhB9F+HGEn0T4aYSfRfh5hF9EOCbCLyP8KsKvI/wmwm8j/C7C7yP8IcIfI/wpwp8j/CXCXyP8LcLfI/wjwrER/hnhXxH+HeE/Ef4b4X8RDolxnBjHjXG8GMePcYIYJ4xxohgnjnFojJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMS8VIjEvHuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuMP4Q4b8j+9OMe4c4y4x7hrjbjHuHuMeMe4Z414x7h3jPjHuG+N+Me4f4wExHhjjQTEeHOMhMR4a42ExHh7jETEeGeNRMR4d4zExHhvjcTEeH+MJMZ4Y40kxnhyjMZ4S46kxnhbj6TGeEeOZMZ4V49kxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGYTEOj/HeGO+LcUSM98c4MsZRMY6O8YEYH4zxoRgfjvGRGB+N8bEYH4/xiRifjPGpGJ+O8ZkYn43xuRifj/GFGF+M8aUYX47xlRhfjfG1GF+P8Y0Y34zxrRjfjvGdGN+N8b0Y34/xgxg/jPGjGD+O8ZMYP43xsxg/j/GLGMfE+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTgxAkOTXCSBCdNcLIEJ09wigSnTHCqBKdOcJoEp01wugSnT3CGBGdMcKYEZ05wlgRnTXC2BGdPcI4E50xwrgTnTnCeBOdNcL4E509wgQQXTHChBBdOcJEEF01wsQQXT3CJBJdMcKkESXDpBJdJcNkEl0tw+QRXSHDFBFdKcOUEV0lw1QRXS3D1BNdIcM0E10pw7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBI9L8PgET0jwxARPSvDkBE3wlARPTfC0BE9P8IwEz0zwrATPTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9CQ5LcHiC9yZ4X4IjErw/wZEJjkpwdIIPJPhggg8l+HCCjyT4aIKPJfh4gk8k+GSCTyX4dILPJPhsgs8l+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyQ4JsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBsQn+meBfCf6d4D8J/pvgfwkOSXGcFMdNcbwUx09xghQnTHGiFCdOcWiKk6Q4aYqTpTh5ilOkOGWKU6U4dYrTpDhtitOlOH2KM6Q4Y4ozpThzirOkOGuKs6U4e4pzpDhninOlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKS6S4ZIpLpUiKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6Z4XIrHp3hCiiemeFKKJ6doiqekeGqKp6V4eopnpHhmimeleHaKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFK9L8foUb0jxxhRvSvHmFG9J8dYUb0vx9hTvSPHOFO9K8e4U70lxWIrDU7w3xftSHJHi/SmOTHFUiqNTfCDFB1N8KMWHU3wkxUdTfCzFx1N8IsUnU3wqxadTfCYleTbF51J8PsUXUnwxxZdSfDnFV1J8NcXXUnw9xTdSfDPFt1J8O8V3Unw3xfdSfD/FD1L8MMWPUvw4xU9S/DTFz1L8PMUvUhyT4pcpfpXi1yl+k+K3KX6X4vcp/pDijyn+lOLPKf6S4q8p/pbi7yn+keLYFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4NMNJMpw0w8kynDzDKTKcMsOpMpw6w2kynDbD6TKcPsMZMpwxw5kynDnDWTKcNcPZMpw9wzkynDPDuTKcO8N5Mpw3w/kynD/DBTJcMMOFMlw4w0UyXDTDxTJcPMMlMlwyw6UyJMOlM1wmw2UzXC7D5TNcIcMVM1wpw5UzXCXDVTNcLcPVM1wjwzUzXCvDtTNcJ8N1M1wvw/Uz3CDDDTPcKMONM9wkw00z3CzDzTPcIsMtM9wqw60z3CbDbTPcLsPtM9whwx0z3CnDnTPcJcNdM9wtw90z3CPDPTPcK8O9M9wnw30z3C/D/TM8IMMDMzwow4MzPCTDQzM8LMPDMzwiwyMzPCrDozM8JsNjMzwuw+MzPCHDEzM8KcOTMzTDUzI8NcPTMjw9wzMyPDPDszI8O8NBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn2G52R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2R4a4a3ZXh7hndkeGeGd2V4d4b3ZDgsw+EZ3pvhfRmOyPD+DEdmOCrD0Rk+kOGDGT6U4cMZPpLhoxk+luHjGT6R4ZMZPpXh0xk+k+GzGT6X4fMZvpDhixm+lOHLGb6S4asZvpbh6xm+keGbGb6V4dsZvpPhuxm+l+H7GX6Q4YcZfpThxxl+kuGnGX6W4ecZfpHhmAy/zPCrDL/O8JsMv83wuwy/z/CHDH/M8KcMf87wlwx/zfC3DH/P8I8Mx2b4Z4Z/Zfh3hv9k+G+G/2U4JMdxchw3x/FyHD/HCXKcMMeJcpw4x6E5TpLjpDlOluPkOU6R45Q5TpXj1DlOk+O0OU6X4/Q5zpDjjDnOlOPMOc6S46w5zpbj7DnOkeOcOc6V49w5zpPjvDnOl+P8OS6Q44I5LpTjwjkukuOiOS6W4+I5LpHjkjkulSM5Lp3jMjkum+NyOS6f4wo5rpjjSjmunOMqOa6a42o5rp7jGjmumeNaOa498ZAh/2Oxbo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkeGKOJ+V4co7meEqOp+Z4Wo6n53hGjmfmeFaOZ+c4yDHIMcwxyjHOMckxzTHLMc+xyLHMscqxzrHJsc2xy7HP8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GOHO/M8a4c7/7fv8acM3ZYjsPz/++R/7cjchwyZMiQkTmOynF0jg/k+OD/3B8yZMjDOT6S46M5Ppbj4zk+keOTOT6V49M5PpPjszk+l+PzOb6Q44s5vpTjyzm+kuOrOb6W4+s5vpHjmzm+lePbOb6T47s5vpfj+zl+kOOHOX6U48c5fpLjpzl+luPnOX6R45gcv8zxqxy/zvGbHL/N8bscv8/xhxx/zPGnHH/O8Zccf83xtxx/z/GPHMfm+GeOf+X4d47/5Phvjv/9j0mB4xQ4boHjFTh+gRMUOGGBExU4cYFDC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKpACly6wGUKXLbAjWZqxi5f4AoFrljgSgWuXOAqBa5a4GoFrl7gGgWuWeBaBa5d4DoFrlvgegWuX+AGBW74v3sFblzgJgVuWuBmBW5e4BYFblngVgVuXeA2BW5b4HYFbl/gDgXuWOBOBe5c4C4F7lrgbgXuXuAeBe5Z4F4F7l3gPgXuW+B+Be5f4AEFHljgQQUeXOAhBR5a4GEFHl7gEQUeWeBRBR5d4DEFHlvgcQUeX+AJBZ5Y4EkFnlygBZ5S4KkFnlbg6QWeUeCZBZ5V4NkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAYQUOL/DeAu8rcESB9xc4ssBRBY4u8IECHyzwoQIfLvCRAh8t8LECHy/wiQKfLPCpAp8u8JkCny3wuQKfL/CFAl8s8KUCXy7wlQJfLfC1Al8v8I0C3yzwrQLfLvCdAt8t8L0C3y/wgwI/LPCjAj8u8JMCPy3wswI/L/CLAscU+GWBXxX4dYHfFPhtgd8V+H2BPxT4Y4E/Ffhzgb8U+GuBvxX4e4F/FDi2wD8L/KvAvwv8p8B/C/yvwCEljlPiuCWOV+L4JU5Q4oQlTlTixCUOLXGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSKXHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEi3xlBJPLfG0Ek8v8YwSzyzxrBLPLnFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9JQ4rcXiJ95Z4X4kjSry/xJEljipxdIkPlPhgiQ+V+HCJj5T4aImPlfh4iU+U+GSJT5X4dInPlPhsic+V+HyJL5T4Yokvlfhyia+U+GqJr5X4eolvlPhmiW+V+HaJ75T4bonvlfh+iR+U+GGJH5X4cYmflPhpiZ+V+HmJX5Q4psQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEsSX+WeJfJf5d4j8l/lvifyUOqXCcCsetcLwKx69wggonrHCiCieucGiFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVUiFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1dohadUeGqFp1V4eoVnVHhmhWdVeHaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7Cs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76lwWIXDK7y3wvsqHFHh/RWOrHBUhaMrfKDCByt8qMKHK3ykwkcrfKzCxyt8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8r/KTCTyv8rMLPK/yiwjEVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFY6t8M8K/6rw7wr/qfDfCv+rcEiN49Q4bo3j1Th+jRPUOGGNE9U4cY1Da5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKpGaly6xmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3LTGzWrcvMYtatyyxq1q3LrGbWrctsbtaty+xh1q3LHGnWrcucZdaty1xt1q3L3GPWrcs8a9aty7xn1q3LfG/Wrcv8YDajywxoNqPLjGQ2o8tMbDajy8xiNqPLLGo2o8usZjajy2xuNqPL7GE2o8scaTajy5Rms8pcZTazytxtNrPKPGM2s8q8azaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nd4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjcNqHF7jvTXeV+OIGu+vcWSNo2ocXeMDNT5Y40M1PlzjIzU+WuNjNT5e4xM1PlnjUzU+XeMzNT5b43M1Pl/jCzW+WONLNb5c4ys1vlrjazW+XuMbNb5Z41s1vl3jOzW+W+N7Nb5f4wc1fljjRzV+XOMnNX5a42c1fl7jFzWOqfHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6hxbI1/1vhXjX/X+E+N/9b4X41DGhynwXEbHK/B8RucoMEJG5yowYkbHNrgJA1O2uBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GINLt7gEg0u2eBSDdLg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ3a4CkNntrgaQ2e3uAZDZ7Z4FkNnt3goMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexoc1uDwBu9t8L4GRzR4f4MjGxzV4OgGH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9ocEyDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg2Mb/LPBvxr8u8F/Gvy3wf8aHNLiOC2O2+J4LY7f4gQtTtjiRC1O3OLQFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpc4Y8iQ/2VfqkVaXLrFZVpctsXlWly+xRVaXLHFlVpcucVVWly1xdVaXL3FNVpcs8W1Wly7xXVaXLfF9Vpcv8UNWtywxY1a3LjFTVrctMXNWty8xS1a3LLFrVrcusVtWty2xe1a3L7FHVrcscWdWty5xV1a3LXF3VrcvcU9Wtyzxb1a3LvFfVrct8X9Wty/xQNaPLDFg1o8uMVDWjy0xcNaPLzFI1o8ssWjWjy6xWNaPLbF41o8vsUTWjyxxZNaPLlFWzylxVNbPK3F01s8o8UzWzyrxbNbHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3hOi+e2eF6L57d4QYsXtnhRixe3eEmLl7Z4WYuXt3hFi1e2eFWLV7d4TYvXtnhdi9e3eEOLN7Z4U4s3t3hLi7e2eFuLt7d4R4t3tnhXi3e3eE+Lw1oc3uK9Ld7X4ogW729xZIujWhzd4gMtPtjiQy0+3OIjLT7a4mMtPt7iEy0+2eJTLT7d4jMtPtvicy1D/+feCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy2OafHLFr9q8esWv2nx2xa/a/H7Fn9o8ccWf2rx5xZ/afHXFn9r8fcW/2hxbIt/tvhXi3+3+E+L/7b4X4tDOhynw3E7HK/D8TucoMMJO5yow4k7HNrhJB1O2uFkHU7e4RQdTtnhVB1O3eE0HU7b4XQdTt/hDB3O2OFMHc7c4SwdztrhbB3O3uEcHc7Z4Vwdzt3hPB3O2+F8Hc7f4QIdLtjhQh0u3OEiHS7a4WIdLt7hEh0u2eFSHdLh0h0u0+GyHS7X4fIdrtDhih1DhwwZ4sodrtLhqh2u1uHqHa7R4ZodrtXh2h2u0+G6Ha7X4fodbtDhhh1u1OHGHW7S4aYdbtbh5h1u0eGWHW7V4dYdbtPhth1u1+H2He7Q4Y4d7tThzh3u0uGuHe7W4e4d7tHhnh3u1eHeHe7T4b4d7tfh/h0e0OGBHR7U4cEdHtLhoR0e1uHhHR7R4ZEdHtXh0R0e0+GxHR7X4fEdntDhiR2e1OHJHdrhKR2e2uFpHZ7e4RkdntnhWR2e3eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dczo8t8PzOjy/wws6vLDDizq8uMNLOry0w8s6vLzDKzq8ssOrOry6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzq8tcPbOry9wzs6vLPDuzq8u8N7OhzW4fAO7+3wvg5HdHh/hyM7HNXh6A4f6PDBDh/q8OEOH+nw0Q4f6/DxDp/o8MkOn+rw6Q6f6fDZDp/r8PkOX+jwxQ5f6vDlDl/p8NUOX+vw9Q7f6PDNDt/q8O0O3+nw3Q7f6/D9Dj/o8MMOP+rw4w4/6fDTDj/r8PMOv+hwTIdfdvhVh193+E2H33b4XYffd/hDhz92+FOHP3f4S4e/dvhbh793+EeHYzv8s8O/Ovy7w386/LfD/zoc0uM4PY7b43g9jt/jBD1O2ONEPU7c49AeJ+lx0h4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ+tx9h7n6HHOHufqce4e5+lx3h7n63H+HhfoccEeF+px4R4X6XHRHhfrcfEel+hxyR6X6pEel+5xmR6X7XG5HpfvcYUeV+xxpR5X7nGVHlftcbUeV+9xjR7X7HGtHtfucZ0e1+1xvR7X73GDHjfscaMeN+5xkx437XGzHjfvcYset+xxqx637nGbHrftcbset+9xhx537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/Hvfv8YAeD+zxoB4P7vGQHg/t8bAeD+/xiB6P7PGoHo/u8Zgej+3xuB6P7/GEHk/s8aQeT+7RHk/p8dQeT+vx9B7P6PHMHs/q8eweBz0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj32PZ7T47k9ntfj+T1e0OOFPV7U48U9XtLjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPd7S46093tbj7T3e0eOdPd7V49093tPjsB6H93hvj/f1OKLH+3sc2eOoHkf3+H8snEMQpgfDLSe2bTuTpGPbtm3bHWNiv4+N2HbGsW3bNm59t/7tWXb18lQPH+CIAY4c4KgBjh7gmAGOHeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQMcGuASAS4Z4FIBEuDSAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4VMNH/OG4T4LYBbhfg9gHuEOCOAe4U4M4B7hLgrgHuFuDuAe4R4J4B7hXg3gHuE+C+Ae4X4P4BHhDggQEeFODBAR4S4KEBHhbg4QEeEeCRAR4V4NEBHhPgsQEeF+DxAZ4Q4IkBnhTgyQEa4CkBnhrgaQGeHuAZAZ4Z4FkBnh3gOQGeG+CwAM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8KcBBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+DVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXg3QHeE+C9Ad4X4P0BPhDggwE+FODDAT4S4PAARwQ4MsBRAY4OcEyAYwN8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP8CHBLiOCGOG+J4IY4f4gQhThjiRCFOHOIkIU4a4mQhTh7iFCFOGeJUIU4d4jQhThvidCFOH+IMIc4Y4kwhzhziLCHOGuJsIc4e4hwhzhniXCHOHeI8Ic4b4nwhzh/iAiEuGOJCIS4c4iIhLhriYiEuHuLQEJcIcckQlwqREJcOcZkQlw1xuRCXD3GFEFcMcaUQVw5xlRBXDXG1EFcPcY0Q1wxxrRDXDnGdENcNcb0Q1w9xgxA3DHGjEDcOcZMQNw1xsxA3D3GLELcMcasQtw5xmxC3DXG7ELcPcYcQdwxxpxB3DnGXEHcNcbcQdw9xjxD3DHGvEPcOcZ8Q9w1xvxD3D/GAEA8M8aAQDw7xkBAPDfGwEA8P8YgQjwzxqBCPDvGYEI8N8bgQjw/xhBBPDPGkEE8O0RBPCfHUEE8L8fQQzwjxzBDPCvHsEM8J8dwQh4V4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYiDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQbw/xjhDvDPGuEO8O8Z4Q7w3xvhDvD/GBEB8M8aEQHw7xkRCHhzgixJEhjgpxdIhjQhwb4qMhPhbi4yE+EeKTIT4V4tMhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIX4R4pchfhXi1yF+E+K3IX4X4vch/hDijyH+FOLPIf4S4q8h/hbi7yH+EeKfIf4V4t8h/hPivyH+F+KQCMeJcNwIx4tw/AgniHDCCCeKcOIIJ4lw0ggni3DyCKeIcMoIp4pw6giniXDaCKeLcPoIZ4hwxghninDmCGeJcNYIZ4tw9gjniHDOCOeKcO4I54lw3gjni3D+CBeIcMEIF4pw4QgXiXDRCBeLcPEIh0a4RIRLRrhUhES4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0W4eoRrRLhmhGtFuHaE60S4boTrRbh+hBtEuGGEG0W4cYSbRLhphJtFuHmEW0S4ZYRbRbh1hNtEuG2E20W4fYQ7RLhjhDtFuHOEu0S4a4S7Rbh7hHtEuGeEe0W4d4T7RLhvhPtFuH+EB0R4YIQHRXhwhIdEeGiEh0V4eIRHRHhkhEdFeHSEx0R4bITHRXh8hCdEeGKEJ0V4coRGeEqEp0Z4WoSnR3hGhGdGeFaEZ0d4ToTnRjgswvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsiHEQYRBhGGEUYR5hEmEaYRZhHWERYRlhFWEfYRNhG2EXYR3h1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YIQPRfhwhI9EODzCERGOjHBUhKMjHBPh2AgfjfCxCB+P8IkIn4zwqQifjvCZCJ+N8LkIn4/whQhfjPClCF+O8JUIX43wtQhfj/CNCN+M8K0I347wnQjfjfC9CN+P8IMIP4zwowg/jvCTCD+N8LMIP4/wiwi/jPCrCL+O8JsIv43wuwi/j/CHCH+M8KcIf47wlwh/jfC3CH+P8I8I/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYwTxzhJjJPGOFmMk8c4RYxTxjhVjFPHOE2M08Y4XYzTxzhDjDPGOFOMM8c4S4yzxjhbjLPHOEeMc8Y4V4xzxzhPjPPGOF+M88e4QIwLxrhQjAvHuEiMi8a4WIyLxzg0xiViXDLGpWIkxqVjXCbGZWNcLsblY1whxhVjXCnGlWNcJcZVY1wtxtVjXCPGNWNcK8a1Y1wnxnVjXC/G9WPcIMYNY9woxo1j3CTGTWPcLMbNY9wixi1j3CrGrWPcJsZtY9wuxu1j3CHGHWPcKcadY9wlxl1j3C3G3WPcI8Y9Y9wrxr1j3CfGfWPcL8b9YzwgxgNjPCjGg2M8JMZDYzwsxsNjPCLGI2M8KsajYzwmxmNjPC7G42M8IcYTYzwpxpNjNMZTYjw1xtNiPD3GM2I8M8azYjw7xnNiPDfGYTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFeMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7Gq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjfCjGh2N8JMbhMY6IcWSMo2IcHeOYGMfG+GiMj8X4eIxPxPhkjE/F+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4z/xTgkwXESHDfB8RIcP8EJEpwwwYkSnDjBSRKcNMHJEpw8wSkSnDLBqRKcOsFpEpw2wekSnD7BGRKcMcGZEpw5wVkSnDXB2RKcPcE5EpwzwbkSnDvBeRKcN8H5Epw/wQUSXDDBhRJcOMFFElw0wcUSXDzBoQkukeCSCS6VIAkuneAyCS6b4HIJLp/gCgmumOBKCa6c4CoJrprgagmunuAaCa6Z4FoJrp3gOgmum+B6Ca6f4AYJbpjgRglunOAmCW6a4GYJbp7gFglumeBWCW6d4DYJbpvgdglun+AOCe6Y4E4J7pzgLgnumuBuCe6e4B4J7pngXgnuneA+Ce6b4H4J7p/gAQkemOBBCR6c4CEJHprgYQkenuARCR6Z4FEJHp3gMQkem+BxCR6f4AkJnpjgSQmenKAJnpLgqQmeluDpCZ6R4JkJnpXg2cn4Q4YMwXMTHJbgeQmen+AFCV6Y4EUJXpzgJQlemuBlCV6e4BUJXpngVQkOEgwSDBOMEowTTBJME8wSzBMsEiwTrBKs/+fY/7WeugT7BK9O8JoEr03wugSvT/CGBG9M8KYEb07wlgRvTfC2BG9P8I4E70zwrgTvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEhyc4IsGRCY5KcHSCYxIcm+CjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8J/pfgkBTHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFIemuESKS6a4VIqkuHSKy6S4bIrLpbh8iiukuGKKK6W4coqrpLhqiquluHqKa6S4Zoprpbh2iuukuG6K66W4foobpLhhihuluHGKm6S4aYqbpbh5ilukuGWKW6W4dYrbpLhtituluH2KO6S4Y4o7pbhzirukuGuKu6W4e4p7pLhninuluHeK+6S4b4r7pbh/igekeGCKB6V4cIqHpHhoioeleHiKR6R4ZIpHpXh0isekeGyKx6V4fIonpHhiiieleHKKpnhKiqemeFqKp6d4RopnpnhWimeneE6K56Y4LMXzUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsWrUhykGKQYphilGKeYpJimmKWYp1ikWKZYpVin2KTYptil2Kd4dYrXpHhtiteleH2KN6R4Y4o3pXhzirekeGuKt6V4e4p3pHhnineleHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpDg8xREpjkxxVIqjUxyT4tgUH03xsRQfT/GJFJ9M8akUn07xmRSfTfG5FJ9P8YUUX0zxpRRfTvGVFF9N8bUUX0/xjRTfTPGtFN9O8Z0U303xvRTfT/GDFD9M8aMUP07xkxQ/TfGzFD9P8YsUv0zxqxS/TvGbFL9N8bsUv0/xhxR/TPGnFH9O8ZcUf03xtxR/T/GPFP9M8a8U/07xnxT/TfG/FIdkOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhm9luFiGi2c4NMMlMlwyw6UyJMOlM1wmw2UzXC7D5TNcIcMVM1wpw5UzXCXDVTNcLcPVM1wjwzUzXCvDtTNcJ8N1M1wvw/Uz3CDDDTPcKMONM9wkw00z3CzDzTPcIsMtM9wqw60z3CbDbTPcLsPtM9whwx0z3CnDnTPcJcNdM9wtw90z3CPDPTPcK8O9M9wnw30z3C/D/TM8IMMDMzwow4MzPCTDQzM8LMPDMzwiwyMzPCrDozM8JsNjMzwuw+MzPCHDEzM8KcOTMzTDUzI8NcPTMjw9wzMyPDPDszI8O8NzMjw3w2EZnpfh+RlekOGFGV6U4cUZXpLhpRleluHlGV6R4ZUZXpXhIMMgwzDDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+w6szvCbDazO8LsPrM7whwxszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zN8IMMHM3wow4czfCTD4RmOyHBkhqMyHJ3hmAzHZvhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+Ob/Ofx2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lynDjHSXKcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHoTkukeOSOS6VIzkuneMyOS6b43I5Lp/jCjmumONKOa6c4yo5rprjajmunuMaOa6Z41o5rp3jOjmum+N6Oa6f4wY5bpjjRjlunOMmOW6a42Y5bp7jFjlumeNWOW6d4zY5bpvjdjlun+MOOe6Y40457pzjLjnumuNuOe6e4x457pnjXjnuneM+Oe6b43457p/jATkemONBOR6c4yE5Hvq/feiQIYfneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjifnaI6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkeG6Ow3I8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8KsdBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OV+d4TY7X5nhdjtfneEOON+Z4U44353hLjrfmeFuOt+d4R4535nhXjnfneE+O9+Z4X4735/hAjg/m+FCOD+f4SI7DcxyR48gcR+U4OscxOY7N8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8nx3xz/y3FIgeMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBQwtcosAlC1yqQApcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLHAkwo8uUALPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCxxW4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsC7y6wGsKvLbA6wq8vsAbCryxwJsKvLnAWwq8tcDbCry9wDsKvLPAuwq8u8B7Cry3wPsKvL/ABwp8sMCHCny4wEcKHF7giAJHFjiqwNEFjilwbIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBP/+Pz6T4a4G/Ffh7gX8U+GeBfxX4d4H/FPhvgf8VOKTEcUoct8TxShy/xAlKnLDEiUqcuMRJSpy0xMlKnLzEKUqcssSpSpy6xGlKnLbE6UqcvsQZSpyxxJlKnLnEWUqctcTZSpy9xDlKnLPEuUqcu8R5Spy3xPlKnL/EBUpcsMSFSly4xEVKXLTExUpcvMShJS5R4pIlLlUiJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWOJJJZ5coiWeUuKpJZ5W4uklnlHimSWeVeLZJZ5T4rklDivxvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyUOL3FEiSNLHFXi6BLHlDi2xEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEf0v8r8QhFY5T4bgVjlfh+BVOUOGEFU5U4cQVTlLhpBVOVuHkFU5R4ZQVTlXh1BVOU+G0FU5X4fQVzlDhjBXOVOHMFc5S4awVzlbh7BXOUeGcFc5V4dwVzlPhvBXOV+H8FS5Q4YIVLlThwhUuUuGiFS5W4eIVDq1wiQqXrHCpCqlw6QqXqXDZCpercPkKV6hwxQpXqnDlClepcNUKV6tw9QrXqHDNCteqcO0K16lw3QrXq3D9CjeocMMKN6pw4wo3qXDTCjercPMKt6hwywq3qnDrCrepcNsKt6tw+wp3qHDHCneqcOcKd6lw1wp3q3D3CveocM8K96pw7wr3qXDfCvercP8KD6jwwAoPqvDgCg+p8NAKD6vw8AqPqPDICo+q8OgKj6nw2AqPq/D4Ck+o8MQKT6rw5Aqt8JQKT63wtApPr/CMCs+s8KwKz67wnArPrXBYhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVOKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsK6wqbCtsKuwr/DqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+pcHiFIyocWeGoCkdXOKbCsRU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff5b4X8VDqlxnBrHrXG8GsevcYIaJ6xxohonrnGSGietcbIaJ69xihqnrHGqGqeucZoap61xuhqnr3GGGmescaYaZ65xlhpnrXG2GmevcY4a56xxrhrnrnGeGuetcb4a569xgRoXrHGhGheucZEaF61xsRoXr3FojUvUuGSNS9VIjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1nhSjSfXaI2n1HhqjafVeHqNZ9R4Zo1n1Xh2jefUeG6Nw2o8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI3DaxxR48gaR9U4usYxNY6t8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qPHPGv+q8e8a/6nx3xr/q3FIg+M0OG6D4zU4foMTNDhhgxM1OHGDkzQ4aYOTNTh5g1M0OGWDUzU4dYPTNDhtg9M1OH2DMzQ4Y4MzNThzg7M0OGuDszU4e4NzNDhng3M1OHeD8zQ4b4PzNTh/gws0uGCDCzW4cIOLNLhog4s1uHiDQxtcosElG1yqQRpcusFlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaXLvBdRpct8H1Gly/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tsHjGjy+wRMaPLHBkxo8uUEbPKXBUxs8rcHTGzyjwTMbPKvBsxs8p8FzGxzW4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG7y6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcaHN7giAZHNjiqwdENjmlwbIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNvhVg183+E2D3zb4XYPfN/hDgz82+FODPzf4S4O/Nvhbg783+EeDfzb4V4N/N/hPg/82+F+DQ1ocp8VxWxyvxfFbnKDFCVucqMWJW5ykxUlbnKzFyVucosUpW5yqxalbnKbFaVucrsXpW5yhxRlbnKnFmVucpcVZW5ytxdlbnKPFOVucq8W5W5ynxXlbnK/F+VtcoMUFW1yoxYVbXKTFRVtcrMXFWxza4hItLtniUi3S4tItLtPisi0u1+LyLa7Q4ootrtTiyi2u0uKqLa7W4uotrtHimi2u1eLaLa7T4rotrtfi+i1u0OKGLW7U4sYtbtLipi1u1uLmLW7R4pYtbtXi1i1u0+K2LW7X4vYt7tDiji3u1OLOLe7S4q4t7tbi7i3u0eKeLe7V4t4t7tPivi3u1+L+LR7Q4oEtHtTiwS0e0uKhLR7W4uEtHtHikS0e1eLRLR7T4rEtHtfi8S2e0OKJLZ7U4skt2uIpLZ7a4mktnt7iGS2e2eJZLZ7d4jktntvisBbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavanHQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/i1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uLwFke0OLLFUS2ObnFMi2NbfLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+xRdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9a/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/Wvyzxb9a/LvFf1r8t8X/WhzS4TgdjtvheB2O3+EEHU7Y4UQdTtzhJB1O2uFkHU7e4RQdTtnhVB1O3eE0HU7b4XQdTt/hDB3O2OFMHc7c4SwdztrhbB3O3uEcHc7Z4Vwdzt3hPB3O2+F8Hc7f4QIdLtjhQh0u3OEiHS7a4WIdLt7h0A6X6HDJDpfqkA6X7nCZDpftcLkOl+9whQ5X7HClDlfucJUOV+1wtQ5X73CNDtfscK0O1+5wnQ7X7XC9DtfvcIMON+xwow437nCTDjftcLMON+9wiw637HCrDrfucJsOt+1wuw6374b8/y/djh3u1OHOHe7S4a4d7tbh7h3u0eGeHe7V4d4d7tPhvh3u1+H+HR7Q4YEdHtThwR0e0uGhHR7W4eEdHtHhkR0e1eHRHR7T4bEdHtfh8R2e0OGJHZ7U4ckd2uEpHZ7a4Wkdnt7hGR2e2eFZHZ7d4TkdntvhsA7P6/D8Di/o8MIOL+rw4g4v6fDSDi/r8PIOr+jwyg6v6nDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/h1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uHwDkd0OLLDUR2O7nBMh2M7fLTDxzp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/HXYEH/r8PcO/+jwzw7/6vDvDv/p8N8O/+twSI/j9Dhuj+P1OH6PE/Q4YY8T9Thxj5P0OGmPk/U4eY9T9Dhlj1P1OHWP0/Q4bY/T9Th9jzP0OGOPM/U4c4+z9Dhrj7P1OHuPc/Q4Z49z9Th3j/P0OG+P8/U4f48L9Lhgjwv1uHCPi/S4aI+L9bh4j0N7XKLHJXtcqkd6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxx5N6PLlHezylx1N7PK3H03s8o8czezyrx7N7PKfHc3sc1uN5PZ7f4wU9XtjjRT1e3OMlPV7a42U9Xt7jFT1e2eNVPQ56DHoMe4x6jHtMekx7zHrMeyx6LHuseqx7bHpse+x67Hu8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7eryzx7t6vLvHe3q8t8f7ery/xwd6fLDHh3p8uMdHehze44geR/Y4qsfRPY7pcWyP/4+Fc2zC9ACU5WbjjW3b6di2bdt2x9rYNt7HRmwtY9u2jVvn3PMTZqqm5ktXjxjgyAGOGuDoAY4Z4NgBPj3AZwb47ACfG+DzA3xhgC8O8KUBvjzAVwb46gBfG+DrA3xjgG8O8K0Bvj3Adwb47gDfG+D7A/xggB8O8KMBfjzATwb46QA/G+DnA/xigF8O8KsBfj3Abwb47QC/G+D3A/xhgD8O8KcB/jzAXwb46wB/G+DvA/xjgH8O8K8B/j3Afwb47wD/G+CQAMcJcGiA4wY4XoDjBzhBgBMGOFGAEwc4LMBJApw0wMkCnDzAKQKcMsCpApw6wGkCnDbA6QKcPsAZApwxwJkCnDnAWQKcNcDZApw9wDkCnDPAuQKcO8B5Apw3wPkCnD/ABQJcMMCFAlw4wEUCXDTAxQJcPMAlAlwyQAJcKsClA1wmwGUDXC7A5QNcIcAVA1wpwJUDXCXAVQNcLcDVA1wjwDUDXCvAtQNcJ8B1A1wvwPUD3CDADQPcKMCNA9wkwE0D3CzAzQPcIsAtA9wqwK0D3CbAbQPcLsDtA9whwB0D3CnAnQPcJcBdA9wtwN0D3CPAPQPcK8C9A9wnwH0D3C/A/QM8IMADAzwowIMDPCTAQwM8LMDDAzwiwCMDPCrAowM8JsBjAzwuwOMDPCHAEwM8KUADPDnAUwI8NcDTAjw9wDMCPDPAswI8O8BzAjw3wOEBnhfg+QFeEOCFAV4U4MUBXhLgpQFeFuDlAV4R4JUBXhXg1QFeE+C1AV4X4PUB3hDgjQHeFODNAd4S4K0B3hbg7QHeEeCdAQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrAEQGODHBUgKMDHBPg2ACfDvCZAJ8N8LkAnw/whQBfDPClAF8O8JUAXw3wtQBfD/CNAN8M8K0A3w7wnQDfDfC9AN8P8IMAPwzwowA/DvCTAD8N8LMAPw/wiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8N8L9gXIeEOE6IQ0McN8TxQhw/xAlCnDDEiUKcOMRhIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4R4pIhEuJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGOJJIRriySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhDg/xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEO8McRBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+JdId4d4j0h3hvifSHeH+IDIT4Y4kMhPhziIyE+GuJjIT4e4hMhPhniUyGOCHFkiKNCHB3imBDHhvh0iM+E+GyIz4X4fIgvhPhiiC+F+HKIr4T4aoivhfh6iG+E+GaIb4X4dojvhPhuiO+F+H6IH4T4YYgfhfhxiJ+E+GmIn4X4eYhfhPhliF+F+HWI34T4bYjfhfh9iD+E+GOIP4X4c4i/hPhriL+F+HuIf4T4Z4h/hfh3iP+E+G+I/4U4JMJxIhwa4bgRjhfh+BFOEOGEEU4U4cQRDotwkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiXjJAIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rQCE+O8JQIT43wtAhPj/CMCM+M8KwIz47wnAjPjXB4hOdFeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4SDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsI74rw7gjvifDeCO+L8P4IH4jwwQgfivDhCB+J8NEIH4vw8QifiPDJCJ+KcESEIyMcFeHoCMdEODbCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMJPI/wsws8j/CLCLyP8KsKvI/wmwm8j/C7C7yP8IcIfI/wpwp8j/CXCXyP8LcLfI/wjwj8j/CvCvyP8J8J/I/wvwiExjhPj0BjHjXG8GMePcYIYJ4xxohgnjnFYjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMxLhUjEvHuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMmw4dMuR/ets8xi1i3DLGrWLcOsZtYtw2xu1i3D7GHWLcMcadYtw5xl1i3DXG3WLcPcY9Ytwzxr1i3DvGfWLcN8b9Ytw/xgNiPDDGg2I8OMZDYjw0xsNiPDzGI2I8MsajYjw6xmNiPDbG42I8PsYTYjwxxpNiNMaTYzwlxlNjPC3G02M8I8YzYzwrxrNjPCfGc2McHuN5MZ4f4wUxXhjjRTFeHOMlMV4a42UxXh7jFTFeGeNVMV4d4zUxXhvjdTFeH+MNMd4Y400x3hzjLTHeGuNtMd4e4x0x3hnjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xrtivDvGe2K8N8b7Yrw/xgdifDDGh2J8OMZHYnw0xsdifDzGJ2J8MsanYhwR48gYR8U4OsYxMY6N8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4nx0xg/i/HzGL+I8csYv4rx6xi/ifHbGL+L8fsYf4jxxxh/ivHnGH+J8dcYf4vx9xj/iPHPGP+K8e8Y/4nx3xj/i3FIguMkODTBcRMcL8HxE5wgwQkTnCjBiRMcluAkCU6a4GQJTp7gFAlOmeBUCU6d4DQJTpvgdAlOn+AMCc6Y4EwJzpzgLAnOmuBsCc6e4BwJzpngXAnOneA8Cc6b4HwJzp/gAgkumOBCCS6c4CIJLprgYgkunuASCS6ZIAkuleDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6R4JoJrpXg2gmuk+C6Ca6X4PoJbpDghglulODGCW6S4KYJbpbg5glukeCWCW6V4NYJbpPgtglul+D2Ce6Q4I4J7pTgzgnukuCuCe6W4O4J7pHgngnuleDeCe6T4L4J7pfg/gkekOCBCR6U4MEJHpLgoQkeluDhCR6R4JEJHpXg0Qkek+CxCR6X4PEJnpDgiQmelKAJnpzgKcOHeWqCpyV4eoJnJHhmgmcleHaC5yR4boLDEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBaxO8LsHrE7whwRsTvCnBmxO8JcFbE7wtwdsTvCPBOxMcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneFeCdyd4T4L3Jnhfgvcn+ECCDyb4UIIPJ/hIgo8m+FiCjyf4RIJPJvhUgiMSHJngqARHJzgmwbEJPp3gMwk+m+BzCT6f4AsJvpjgSwm+nOArCb6a4GsJvp7gGwm+meBbCb6d4DsJvpvgewm+n+AHCX6Y4EcJfpzgJwl+muBnCX6e4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUh6Y4borjpTh+ihOkOGGKE6U4cYrDUpwkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTJMWlUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjTFk1M8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJ7ieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsW7Urw7xXtSvDfF+1K8P8UHUnwwxYdSfDjFR1J8NMXHUnw8xSdSfDLFp1IckeLIFEelODrFMSmOTfHpFJ9J8dkUn0vx+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30rx7RTfSfHdFN9L8f0UP0jxwxQ/SvHjFD9J8dMUP0vx8xS/SPHLFL9K8esUv0nx2xS/S/H7FH9I8ccUf0rx5xR/SfHXFH9L8fcU/0jxzxT/SvHvFP9J8d8U/0txSIbjZDg0w3EzHC/D8TOcIMMJM5wow4kzHJbhJBlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOEiGS6a4WIZLp7hEhkumSEZLpXh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+2dD/ZQf2z/CADA/M8KAMD87wkAwPzfCwDA/P8IgMj8zwqAyPzvCYDI/N8LgMj8/whAxPzPCkDM3w5AxPyfDUDE/L8PQMz8jwzAzPyvDsDM/J8NwMh2d4XobnZ3hBhhdmeFGGF2d4SYaXZnhZhpdneEWGV2Z4VYZXZ3hNhtdmeF2G12d4Q4Y3ZnhThjdneEuGt2Z4W4a3Z3hHhndmOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/CuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQxHZDgyw1EZjs5wTIZjM3w6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08y/DTDzzL8PMMvMvwyw68y/DrDbzL8NsPvMvw+wx8y/DHDnzL8OcNfMvw1w98y/D3DPzL8M8O/Mvw7w38y/DfD/zIckuM4OQ7Ncdwcx8tx/BwnyHHCHCfKceIch+U4SY6T5jhZjpPnOEWOU+Y4VY5T5zhNjtPmOF2O0+c4Q44z5jhTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmuFiOi+e4RI5L5kiOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkeGKOJ+VojifneEqOp+Z4Wo6n53hGjmfmeFaOZ+d4To7n5jg8x/NyPD/HC3K8MMeLcrw4x0tyvDTHy3K8PMcrcrwyx6tyvDrHa3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8dBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2Od+V4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/lOCLHkTmOynF0jmNyHJvj0zk+k+OzOT6X4/M5vpDjizm+lOPLOb6S46s5vpbj6zm+keObOb6V49s5vpPjuzm+l+P7OX6Q44c5fpTjxzl+kuOnOX6W4+c5fpHjlzl+lePXOX6T47c5fpfj9zn+kOOPOf6U4885/pLjrzn+luPvOf6R4585/pXj3zn+k+O/Of6X45ACxylwaIHjFjhegeMXOEGBExY4UYETFziswEkKnLTAyQqcvMApCpyywKkKnLrAaQqctsDpCpy+wBkKnLHAmQqcucBZCpy1wNkKnL3AOQqcs8C5Cpy7wHkKnLfA+Qqcv8AFClywwIUKXLjARQpctMDFCly8wCUKXLJAClyqwKULXKbAZQtcrsDlC1yhwBULXKnAlQtcpcBVC1ytwNULXKPANQtcq8C1C1ynmOB/v3e9AtcvcIMCNyxwowI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKcCdy5wlwJ3LXC3AncvcI8C9yxwrwL3LnCfAvctcL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v8IQCTyzwpAIt8OQCTynw1AJPK/D0As8o8MwCzyrw7ALPKfDcAocXeF6B5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FjgoMCgwLDAqMC4wKTAtMCswL7AosCyYcMiQIdYFNgW2BXYF9gXeVeDdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXgiAJHFjiqwNEFjilwbIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBPxf4S4G/Fvhbgb8X+EeBfxb4V4F/F/hPgf8W+F+BQ0ocp8ShJY5b4ngljl/iBCVOWOJEJU5c4rASJylx0hInK3HyEqcoccoSpypx6hKnKXHaEqcrcfoSZyhxxhJnKnHmEmcpcdYSZytx9hLnKHHOEucqce4S5ylx3hLnK3H+EhcoccESFypx4RIXKXHREhcrcfESlyhxyRIpcakSly5xmRKXLXG5EpcvcYUSVyxxpRJXLnGVElctcbUSVy9xjRLXLHGtEtcucZ0S1y1xvRLXL3GDEjcscaMSNy5xkxI3LXGzEjcvcYsStyxxqxK3LnGbErctcbsSty9xhxJ3LHGnEncucZcSdy1xtxJ3L3GPEvcsca8S9y5xnxL3LXG/Evcv8YASDyzxoBIPLvGQEg8t8bASDy/xiBKPLPGoEo8u8ZgSjy3xuBKPL/GEEk8s8aQSLfHkEk8p8dQSTyvx9BLPKPHMEs8q8ewSzynx3BKHl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Y4KDEoMSwxKjEuMSkxLTErMS+xKLEssSqxLrEpsS2xK7Ev8a4S7y7xnhLvLfG+Eu8v8YESHyzxoRIfLvGREh8t8bESHy/xiRKfLPGpEkeUOLLEUSWOLnFMiWNLfLrEZ0p8tsTnSny+xBdKfLHEl0p8ucRXSny1xNdKfH3i/5OblvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUMqHKfCoRWOW+F4FY5f4QQVTljhRBVOXOGwCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKqXCpCpeucJkKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCq3w5ApPqfDUCk+r8PQKz6jwzArPqvDsCs+p8NwKh1d4XoXnV3hBhRdWeFGFF1d4SYWXVnhZhZdXeEWFV1Z4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWOKgwqDCsMKowrjCpMK0wqzCvsKiwrLCqsK6wqbCtsKuwr/CuCu+u8J4K763wvgrvr/CBCh+s8KEKH67wkQofrfCxCh+v8IkKn6zwqQpHVDiywlEVjq5wTIVjK3y6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuM4NQ6tcdwax6tx/BonqHHCGieqceIah9U4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1kiNS9W4dI3L1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9VojSfXeEqNp9Z4Wo2n13hGjWfWeFaNZ9d4To3n1ji8xvNqPL/GC2q8sMaLary4xktqvLTGy2q8vMYraryyxqtqvLrGa2q8tsbrary+xhtqvLHGm2q8ucZbary1xttqvL3GO2q8s8ZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2Nd9V4d4331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1PhkjU/VOKLGkTWOqnF0jWNqHFvj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45AGx2lwaIPjNjheg+M3OEGDEzY4UYMTNziswUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLJBGlyqwaUbXKbBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypQRs8ucFTGjy1wdMaPL3BMxo8s8GzGjy7wXMaPLfB4Q2e1+D5DV7Q4IUNXtTgxQ1e0uClDV7W4OUNXtHglQ1e1eDVDV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0NDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwb7BrsG7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsERDY5scFSDoxsc0+DYBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHtDhOi0NbHLfF8Vocv8UJWpywxYlanLjFYS1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLdLiUi0u3eIyLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS3a4sktntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LQ5v8bwWz2/xghYvbPGiFi9u8ZIWL23xshYvb/GKFq9s8aoWr27xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbHHQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/iXS3e3eI9Ld7b4n0t3t/iAy0+2OJDLT7c4iMtPtriYy0+3uITLT7Z4lMtjmhxZIujWhzd4pgWx7b/fy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//9T54Ox+lwaIfjdjheh+N3OEGHE3Y4UYcTdzisw0k6nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLJDOlyqw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypQzs8ucNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfD4R2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z0dDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO7yrw7s7vKfDezu8r8P7O3ygwwc7fKjDhzt8pMNHO3ysw8c7fKLDJzt8qsMRHY7scFSHozsc0+HYDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvDv/u8J8O/+3wvw6H9DhOj0N7HLfH8Xocv8cJepywx4l6nLjHYT1O0uOkPU7W4+Q9TtHjlD1O1ePUPU7T47Q9Ttfj9D3O0OOMPc7U48w9ztLjrD3O1uPsPc7R45w9ztXj3D3O0+O8Pc7X4/w9LtDjgj0u1OPCPS7S46I9Ltbj4j0u0eOSPdLjUj0u3eMyPS7b43I9Lt/jCj2u2ONKPa7c4yo9rtrjaj2u3uMaPa7Z41o9rt3jOj2u2+N6Pa7f4wY9btjjRj1u3OMmPW7a42Y9bt7jFj1u2eNWPW7d4zY9btvjdj1u3+MOPe7Y40497tzjLj3u2uNuPe7e4x497tnjXj3u3eM+Pe7b43497t/jAT0e2ONBPR7c4yE9HtrjYT0e3uMRPR7Z41E9Ht3jMT0e2+NxPR7f4wk9ntjjST3a48k9ntLjqT2e1uPpPZ7R45k9ntXj2T2e0+O5PQ7v8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7HHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY9/jXT3e3eM9Pd7b43093t/jAz0+2ONDPT7c4yM9PtrjYz0+3uMTPT7Z41M9juhxZI+jehzd45gex/b49P9j0Z7b+C4ch4tv1VbLtu062bZt2/bJtm3b+7xtZNtYtrFqtfv6XvfvPIfXf2eALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPBzhqgJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HODoAf41wL8H+M8Axwzw3wH+N8CxAxwS4NAAxwlw3ADHC3BYgMMDHD/ACQIcEeCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBEuASAS4Z4FIBLh3gMgEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJARrgiQGeFODJAZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXg3QHeE+C9Ad4X4P0BPhDggwE+FODDAT4S4KMBPhbg4wGODHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/gBwF+GOBHAX4c4KgAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwvw9wD/CPDPAEcH+FeAfwf4T4BjAvw3wP8CHBvgkBCHhjhOiOOGOF6Iw0IcHuL4IU4Q4ogQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD5EQlwhxyRCXCnHpEJcJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjREE8M8aQQTw7xlBBPDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQbw/xjhDvDPGuEO8O8Z4Q7w3xvhDvD/GBEB8M8aEQHw7xkRAfDfGxEB8PcWSIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EJ8I8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xBHhfhJiJ+G+FmIn4f4RYhfhvhViF+H+E2I34b4XYjfh/hDiD+G+FOIP4f4S4i/hvhbiL+H+EeIf4Y4OsS/Qvw7xH9CHBPivyH+F+LYEIdEODTCcSIcN8LxIhwW4fAIx49wgghHRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiERLhEhEtGuFSES0e4TITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGsP+79nI8L1Ilw/wg0i3DDCjSLcOMJNItw0ws0i3DzCLSLcMsKtItw6wm0i3DbC7SLcPsIdItwxwp0i3DnCXSLcNcLdItw9wj0i3DPCvSLcO8J9Itw3wv0i3D/CAyI8MMKDIjw4wkMiPDTCwyI8PMIjIjwywqMiPDrCYyI8NsLjIjw+whMiNMITIzwpwpMjPCXCUyM8LcLTIzwjwjMjPCvCsyM8J8JzIzwvwvMjvCDCCyO8KMKLI7wkwksjvCzCyyO8IsIrI7wqwqsjvCbCayO8LsLrI7whwhsjvCnCmyO8JcJbI7wtwtsjvCPCOyO8K8K7I7wnwnsjvC/C+yN8IMIHI3wowocjfCTCRyN8LMLHIxwZ4SDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsInInwywqcifDrCZyJ8NsLnInw+whcifDHClyJ8OcJXInw1wtcifD3CNyJ8M8K3Inw7wncifDfC9yJ8P8IPIvwwwo8i/DjCURF+EuGnEX4W4ecRfhHhlxF+FeHXEX4T4bcRfhfh9xH+EOGPEf4U4c8R/hLhrxH+FuHvEf4R4Z8Rjo7wrwj/jvCfCMdE+G+E/0U4NsIhMQ6NcZwYx41xvBiHxTg8ZvTY/58jYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDxGYlwixiVjXCrGpWNcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhRmM8McaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYjw/xgtivDDGi2K8OMZLYrw0xstivDzGK2K8MsarYrw6xmtivDbG62K8PsYbYrwxxptivDnGW2K8NcbbYrw9xjtivDPGu2K8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMaRMQ5iDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8IsYnY3wqxqdjfCbGZ2N8LsbnY3whxhdjfCnGl2N8JcZXY3wtxtdjfCPGN2N8K8a3Y3wnxndjfC/G92P8IMYPY/woxo9jHBXjJzF+GuNnMX4e4xcxfhnjVzF+HeM3MX4b43cxfh/jDzH+GONPMf4c4y8x/hrjbzH+HuMfMf4Z4+gY/4rx7xj/iXFMjP/G+F+MY2MckuDQBMdJcNwEx0twWILDExw/wQkSHJHghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCZLgEgkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQma4IkJnpTgyQmekuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJPpTgwwk+kuCjCT6W4OMJjkxwkGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2Cf4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOCoBD9J8NMEP0vw8wS/SPDLBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcE/0jwzwRHJ/hXgn8n+E+CYxL8N8H/Ehyb4JAUh6Y4TorjpjheisNSHJ7i+ClOkOKIFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF0+RFJdIcckUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I0RRPTPGkFE9O8ZQUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTPGhFB9O8ZEUH03xsRQfT3FkioMUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xSfSPHJFJ9K8ekUn0nx2RSfS/H5FF9I8cUUX0rx5RRfSfHVFF9L8fUU30jxzRTfSvHtFN9J8d0U30vx/RQ/SPHDFD9K8eMUR6X4SYqfpvhZip+n+EWKX6b4VYpfp/hNit+m+F2K36f4Q4o/pvhTij+n+EuKv6b4W4q/p/hHin+mODrFv1L8O8V/UhyT4r8p/pfi2BSHZDg0w3EyHDfD8TIcluHwDMfPcIIMR2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2S4aIaLZbh4hmS4RIZLZrhUhktnuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoZmeGKGJ2V4coanZHhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52V4foYXZHhhhhdleHGGl2R4aYaXZXh5hldkeGWGV2V4dYbXZHhthtdleH2GN2R4Y4Y3ZXhzhrdkeGuGt2V4e4Z3ZHhnhndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9l+HiGIzMcZBhkGGYYZRhnmGSYZphlmGdYZFhmWGVYZ9hk2GbYZdhn+ESGT2b4VIZPZ/hMhs9m+FyGz2f4QoYvZvhShi9n+EqGr2b4WoavZ/hGhm9m+FaGb2f4TobvZvhehu9n+EGGH2b4UYYfZzgqw08y/DTDzzL8PMMvMvwyw68y/DrDbzL8NsPvMvw+wx8y/DHDnzL8OcNfMvw1w98y/D3DPzL8M8PRGf6V4d8Z/pPhmAz/zfC/DMdmOCTHoTmOk+O4OY6X47Ach+c4fo4T5DgixwlznCjHiXOcJMdJc5wsx8lznCLHKXOcKsepc5wmx2lznC7H6XOcIccZc5wpx5lznCXHWXOcLcfZc5wjxzlznCvHuXOcJ8d5c5wvx/lzXCDHBXNcKMeFc1wkx0VzXCzHxXMkxyVyXDLHpXJcOsdlclw2x+VyXD7HFXJcMceVclw5x1VyXDXH1XJcPcc1clwzx7VyXDvHdXJcN8f1clw/xw1y3DDHjXLcOMdNctw0x81y3DzHLXLcMsetctw6x21y3DbH7XLcPscdctwxx51y3DnHXXLcNcfdctw9xz1y3DPHvXLcO8d9ctw3x/1y3D/HA3I8MMeDcjw4x0NyPDTHw3I8PMcjcjwyx6NyPDrHY3I8Nsfjcjw+xxNyNMcTczwpx5NzPCXHU3M8LcfTczwjxzNzPCvHs3M8J8dzczwvx/NzvCDHC3O8KMeLc7wkx0tzvCzHy3O8Iscrc7wqx6tzvCbHa3O8Lsfrc7whxxtzvCnHm3O8Jcdbc7wtx9tzvCPHO3O8K8e7c7wnx3tzvC/H+3N8IMcHc3wox4dzfCTHR3N8LMfHcxyZ4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HfsSQIf8z8WSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6jcvwkx09z/CzHz3P8Iscvc/wqx6//53EIfpvjdzl+n+MPOf6Y4085/pzjLzn+muNvOf6e4x85/pnj6Bz/yvHvHP/JcUyO/+b4X45jcxxS4NACxylw3ALHK3BYgcMLHL/ACQocUeCEBU5U4MQFTlLgpAVOVuDkBU5R4JQFTlXg1AVOU+C0BU5X4PQFzlDgjAXOVODMBc5S4KwFzlbg7AXOUeCcBc5V4NwFzlPgvAXOV+D8BS5Q4IIFLlTgwgUuUuCiBS5W4OIFUuASBS5Z4FIFLl3gMgUuW+ByBS5f4AoFrljgSgWuXOAqBa5a4GoFrl7gGgWuWeBaBa5d4DoFrlvgegWuX+AGBW5Y4EYFblzgJgVuWuBmBW5e4BYFblngVgVuXeA2BW5b4HYFbl/gDgXuWOBOBe5c4C4F7lrgbgXuXuAeBe5Z4F4F7l3gPgXuW+B+Be5f4AEFHljgQQUeXOAhBR5a4GEFHl7gEQUeWeBRBR5d4DEFHlvgcQUeX+AJBVrgiQWeVODJBZ5S4KkFnlbg6QWeUeCZBZ5V4NkFnlPguQWeV+D5BV5Q4IUFXlTgxQVeUuClBV5W4OUFXlHglQVeVeDVBV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbg4wWOLHBQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/gEwU+WeBTBT5d4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4KgCPynw0wI/K/DzAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAkcX+FeBfxf4T4FjCvy3wP8KHFvgkBKHljhOieOWOF6Jw0ocXuL4JU5Q4ogSJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL5ESlyhxyRKXKnHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjREk8s8aQSTy7xlBJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSzy/xghIvLPGiEi8u8ZISLy3xshIvL/GKEq8s8aoSry7xmhKvLfG6Eq8v8YYSbyzxphJvLvGWEm8t8bYSby/xjhLvLPGuEu8u8Z4S7y3xvhLvL/GBEh8s8aESHy7xkRIfLfGxEh8vcWSJgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Ep8o8ckSnyrx6RKfKfHZEp8r8fkSXyjxxRJfKvHlEl8p8dUSXyvx9RLfKPHNEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xJHlfhJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XYnfl/hDiT+W+FOJP5f4S4m/lvhbib+X+EeJf5Y4usS/Svy7xH9KHFPivyX+V+LYEodUOLTCcSoct8LxKhxW4fAKx69wggpHVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFVLhEhUtWuFSFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVowaOWSIR1d4TIXHVnhchcdXeEKFVnhihSdVeHKFp1R4aoWnVXh6hWdUeGaFZ1V4doXnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVDL+6wmsqvLbC6yq8vsIbKryxwpsqvLnCWyq8tcLbKry9wjsqvLPCuyq8u8J7Kry3wvsqvL/CByp8sMKHKny4wkcqfLTCxyp8vMKRFQ4qDCoMK4wqjCtMKkwrzCrMKywqLCusKqwrbCpsK+wq7Ct8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8rHFXhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4egK/6rw7wr/qXBMhf9W+F+FYyscUuPQGsepcdwax6txWI3Daxy/xglqHFHjhDVOVOPENU5S46Q1Tlbj5DVOUeOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojUuVuPiNVLjEjUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNR5b43E1Hl/jCTVa44k1nlTjyTWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjpTVeVuPlNV5R45U1XlXj1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S46013lbj7TXeUeOdNd5V49013lPjvTXeV+P9NT5Q44M1PlTjwzU+UuOjNT5W4+M1jqxxUGNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2Nf4xM1PlnjUzU+XeMzNT5b43M1Pl/jCzW+WONLNb5c4ys1vlrjazW+XuMbNb5Z41s1vl3jOzW+W+N7Nb5f4wc1fljjRzV+XOOoGj+p8dMaP6vx8xq/qPHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6jxzxpH1/hXjX/X+E+NY2r8t8b/ahxb45AGhzY4ToPjNjheg8MaHN7g+A1O0OCIBidscKIGJ25wkgYnbXCyBidvcIoGp2xwqganbnCaBqdtcLoGp29whgZnbHCmBmducJYGZ21wtgZnb3COBudscK4G525wngbnbXC+BudvcIEGF2xwoQYXbnCRBhdtcLEGF2+QBpdocMkGl2pw6QaXaXDZBpdrcPkGV2hwxQZXanDlBldpcNUGV2tw9QbXaHDNBtdqcO0G12lw3QbXa3D9BjdocMMGN2pw4wY3aXDTBjdrcPMGt2hwywa3anDrBrdpcNsGt2tw+wZ3aHDHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AaPa/D4Bk9o0AZPbPCkBk9u8JQGT23wtAZPb/CMBs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wlgZvbfC2Bm9v8I4G72zwrgbvbvCeBu9t8L4G72/wgQYfbPChBh9u8JEGH23wsQYfb3Bkg4MGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGRzX4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382OLrBvxr8u8F/GhzT4L8N/tfg2AaHtDi0xXFaHLfF8Voc1uLwFsdvcYIWR7Q4YYsTtThxi5O0OGmLk7U4eYtTtDhli1O1OHWL07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIuLtbh4i7S4RItLjhnqUi0u3eIyLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gkt2uKJLZ7U4sktntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLY5scdBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi3+ITLT7Z4lMtPt3iMy0+2+JzLT7f4gstvtjiSy2+3OIrLb7a4mstvt7iGy2+2eJbLb7d4jstvtviey2+3+IHLX7Y4kctftziqBY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8WR7f4V4t/t/hPi2Na/LfF/1oc2+KQDod2OE6H43Y4XofDOhze4fgdTtDhiA4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvkA6X6HDJDpfqcOkOl+lw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6NAOT+zwpA5P7vCUDk/t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+9wZIeDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsOn+jwyQ6f6vDpDp/p8NkOn+vw+Q5f6PDFDl/q8OUOX+nw1Q5f6/D1Dt/o8M0O3+rw7Q7f6fDdDt/r8P0OP+jwww4/6vDjDkd1+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dji6w786/LvDfzoc0+G/Hf7X4dgOh/Q4tMdxehy3x/F6HNbj8B7H73GCHkf0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI/0uESPS/a4VI9L97hMj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKP9nhijyf1eHKPp/R4ao+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4jyN7HPT4/wIAAP//JinLgw==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0)

1.864698551s ago: executing program 0 (id=1544):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b)
sendfile(r0, r1, &(0x7f0000000000), 0x9)

1.641858598s ago: executing program 4 (id=1546):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0xf}}, {@grpid}, {@nobh}, {@block_validity}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

1.641079798s ago: executing program 3 (id=1547):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x3c, r0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x63}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}]}]}]}, 0x3c}}, 0x0)

1.539959781s ago: executing program 0 (id=1548):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

1.394872086s ago: executing program 3 (id=1549):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x5, &(0x7f0000000040)={0xe, "810556c721393f4084aa00"}})

1.294407459s ago: executing program 1 (id=1551):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x3, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1.077157316s ago: executing program 4 (id=1552):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x3214212, &(0x7f0000000080)=ANY=[], 0x7, 0xf30, &(0x7f0000002040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80)
truncate(&(0x7f0000000900)='./file1\x00', 0x10b741)
ioctl$FS_IOC_SETFSLABEL(r0, 0x80086e8a, 0x0)

1.016025608s ago: executing program 1 (id=1553):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
recvfrom$inet6(r0, &(0x7f0000000300)=""/109, 0x6d, 0x2, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

1.015813128s ago: executing program 5 (id=1554):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x9, 0x0, 0x2, 0x1}, 0x14)

789.402705ms ago: executing program 1 (id=1555):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0x800000, &(0x7f0000000340)=ANY=[], 0x1, 0x380, &(0x7f0000000c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1cb041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x12420e1, 0x0, 0x0, 0x0, 0x0)

686.858108ms ago: executing program 5 (id=1556):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b0, 0x3c3c, 0x8, 0x1b, 'S\x00'})

528.088923ms ago: executing program 4 (id=1557):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x2010000, &(0x7f00000000c0)=ANY=[], 0x2, 0x150b, &(0x7f0000001d40)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./bus\x00')

206.982223ms ago: executing program 4 (id=1558):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = socket$inet6(0xa, 0x1, 0x0)
splice(r0, 0xfffffffffffffffc, r1, 0x0, 0x81, 0x2)

49.164518ms ago: executing program 1 (id=1559):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2220400f, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=0000000000000\x00\x00\x00\x000&0007,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303034a13030303030303135322c696f636861727365743d69736f383835392d312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d303030303030303030303030303030303030003030303700214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d07543773fcf2c9f31dd3b1c80712839a8d0109b0d0ae07ffdf4824487f400849083d4432b199785293c904c10ae80d599fa74814c17a52be875e0dc26be42dffe76c6e203ad5df9da6ccb005e994000000000000000000"], 0x1, 0x14fe, &(0x7f0000001580)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x198)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x0)

142.89µs ago: executing program 0 (id=1560):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0)

0s ago: executing program 4 (id=1561):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}]}}]}, 0x94}}, 0x40040)

kernel console output (not intermixed with test programs):

g filesystem read-only
[  174.317348][ T4290] Bluetooth: hci0: command 0x041b tx timeout
[  174.400401][   T11] device veth1_macvtap left promiscuous mode
[  174.428705][   T11] device veth0_macvtap left promiscuous mode
[  174.443953][   T11] device veth1_vlan left promiscuous mode
[  174.445593][ T4274] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  174.450376][   T11] device veth0_vlan left promiscuous mode
[  174.677397][   T11] bond1 (unregistering): Released all slaves
[  174.898479][   T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  175.101652][   T22] usb 4-1: Using ep0 maxpacket: 16
[  175.133749][   T22] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  175.154734][   T22] usb 4-1: config 0 has no interface number 0
[  175.161847][   T22] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  175.171988][   T22] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  175.194491][   T22] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  175.215538][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.223681][   T22] usb 4-1: Product: syz
[  175.228044][   T22] usb 4-1: Manufacturer: syz
[  175.232671][   T22] usb 4-1: SerialNumber: syz
[  175.249195][   T22] usb 4-1: config 0 descriptor??
[  175.256394][ T6373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.269709][ T6373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.390080][   T11] team0 (unregistering): Port device team_slave_1 removed
[  175.452299][   T11] team0 (unregistering): Port device team_slave_0 removed
[  175.500990][ T6373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.508383][ T6373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.530244][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.591931][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.727613][   T22] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  175.934010][   T22] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 170
[  176.068127][   T11] bond0 (unregistering): Released all slaves
[  176.143219][ T4319] usb 4-1: USB disconnect, device number 8
[  176.276413][ T6267] team0: Port device team_slave_0 added
[  176.283019][ T6348] team0: No ports can be present during mode change
[  176.335203][ T6267] team0: Port device team_slave_1 added
[  176.339977][ T6374] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 16777220, id = 0
[  176.397484][ T4290] Bluetooth: hci0: command 0x040f tx timeout
[  176.476658][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.533075][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.559319][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.574521][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.596125][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.629473][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.678050][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.757301][ T4319] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  176.793044][ T6267] device hsr_slave_0 entered promiscuous mode
[  176.801300][ T6385] loop4: detected capacity change from 0 to 16
[  176.818939][ T6267] device hsr_slave_1 entered promiscuous mode
[  176.825987][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.847502][ T6267] Cannot create hsr debugfs directory
[  176.852058][ T6385] erofs: (device loop4): mounted with root inode @ nid 36.
[  176.949407][ T4319] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  176.981298][ T4319] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  177.031790][ T4319] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  177.066769][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.477888][ T6267] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  177.518359][ T6267] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  177.549339][ T4319] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  177.556989][ T6267] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  177.559086][ T4319] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7
[  177.590895][ T6267] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  177.620261][ T6401] loop0: detected capacity change from 0 to 1024
[  177.691280][ T4319] input: failed to attach handler kbd to device input7, error: -5
[  177.745721][ T4319] usb 2-1: USB disconnect, device number 10
[  177.915591][   T40] hfsplus: b-tree write err: -5, ino 25
[  177.916541][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.932204][   T40] hfsplus: b-tree write err: -5, ino 4
[  177.938743][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.952471][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.961019][   T40] hfsplus: b-tree write err: -5, ino 2
[  177.973364][ T6267] 8021q: adding VLAN 0 to HW filter on device team0
[  177.991149][   T40] hfsplus: b-tree write err: -5, ino 20
[  178.004350][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.014714][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.032461][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.039741][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.112193][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.142829][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.172573][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.222337][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.229597][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.267757][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.307072][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.355334][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.391798][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.432439][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.455091][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.477614][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[  178.510979][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.555289][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.590713][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.622619][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.660173][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.706524][ T6267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.863666][ T6430] loop1: detected capacity change from 0 to 1024
[  178.938600][ T4290] Bluetooth: hci1: link tx timeout
[  178.943805][ T4290] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  179.067626][ T4984] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  179.229779][   T46] hfsplus: b-tree write err: -5, ino 8
[  179.279836][ T4984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.315777][ T4984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.356672][ T4984] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  179.426402][ T4984] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  179.452728][ T4984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.498557][ T4984] usb 1-1: config 0 descriptor??
[  179.577398][ T4887] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  179.693007][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.729066][ T6454] loop4: detected capacity change from 0 to 4096
[  179.736634][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.752769][ T6454] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  179.762011][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.777450][ T6454] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  179.797377][ T4887] usb 2-1: Using ep0 maxpacket: 32
[  179.811942][ T4887] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  179.839589][ T6454] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  179.856971][ T4887] usb 2-1: config 0 has no interface number 0
[  179.879982][ T4887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.903140][ T6454] ntfs: volume version 3.1.
[  179.914970][ T4887] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.925348][ T4887] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  179.926766][ T4984] plantronics 0003:047F:FFFF.0007: unbalanced delimiter at end of report description
[  179.936434][ T4887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.991338][ T4984] plantronics 0003:047F:FFFF.0007: parse failed
[  180.015854][ T4887] usb 2-1: config 0 descriptor??
[  180.017210][ T4984] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22
[  180.144900][ T4984] usb 1-1: USB disconnect, device number 8
[  180.147326][ T4886] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  180.229710][ T4331] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  180.281625][ T4278] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  180.367340][ T4886] usb 4-1: Using ep0 maxpacket: 32
[  180.374743][ T4886] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  180.413755][ T4886] usb 4-1: config 0 has no interface number 0
[  180.430222][ T4886] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  180.472915][ T4886] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  180.497498][ T4886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.526149][ T4886] usb 4-1: Product: syz
[  180.546453][ T4886] usb 4-1: Manufacturer: syz
[  180.566873][ T4886] usb 4-1: SerialNumber: syz
[  180.581420][ T4886] usb 4-1: config 0 descriptor??
[  180.587618][ T6458] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  180.653529][ T4887] uclogic 0003:28BD:0094.0008: pen parameters not found
[  180.663564][ T4887] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring
[  180.821135][ T6458] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  180.869843][ T4887] usb 2-1: USB disconnect, device number 11
[  180.990818][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.009524][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.046020][ T6481] loop0: detected capacity change from 0 to 4096
[  181.089091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.100076][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.131872][ T6267] device veth0_vlan entered promiscuous mode
[  181.139453][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.158445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.186168][ T6267] device veth1_vlan entered promiscuous mode
[  181.256410][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.267331][ T4886] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  181.286759][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.297708][ T4886] asix: probe of 4-1:0.188 failed with error -71
[  181.317700][ T4886] usb 4-1: USB disconnect, device number 9
[  181.338823][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.386196][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.448040][ T6267] device veth0_macvtap entered promiscuous mode
[  181.518619][ T6267] device veth1_macvtap entered promiscuous mode
[  181.589837][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.646175][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.665787][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.680388][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.715913][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.752709][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.772095][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.817398][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.843348][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.866498][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.892740][ T6476] loop4: detected capacity change from 0 to 32768
[  181.893323][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.934722][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.944564][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.962174][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.976605][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.988776][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.003042][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.029996][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.066629][ T6476] XFS (loop4): Mounting V5 Filesystem
[  182.076360][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.093960][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.104838][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.152092][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.156051][ T6476] XFS (loop4): Ending clean mount
[  182.175766][ T6476] XFS (loop4): Quotacheck needed: Please wait.
[  182.197862][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.222530][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.253110][ T6267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.263550][ T6267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.272967][ T6267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.282379][ T6267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.324201][ T6476] XFS (loop4): Quotacheck: Done.
[  182.537270][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.545565][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.624806][ T6512] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  182.639606][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.667661][  T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.697949][  T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.732821][ T4278] XFS (loop4): Unmounting Filesystem
[  182.761071][  T997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.156360][ T6529] loop5: detected capacity change from 0 to 256
[  183.729093][ T6542] program syz.0.773 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.792644][ T6545] loop3: detected capacity change from 0 to 64
[  183.857055][ T6547] loop5: detected capacity change from 0 to 2048
[  183.955644][ T6547] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  183.995233][ T6547] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.020809][ T6545] syz.3.774: attempt to access beyond end of device
[  184.020809][ T6545] loop3: rw=2049, sector=412, nr_sectors = 2 limit=64
[  184.069827][ T6556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.126110][ T6545] Buffer I/O error on dev loop3, logical block 206, lost async page write
[  184.205108][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  184.440150][ T6560] block nbd5: not configured, cannot reconfigure
[  184.810556][ T6531] loop1: detected capacity change from 0 to 32768
[  184.898232][ T6550] syz.4.765 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  184.974931][ T6531] XFS (loop1): Mounting V5 Filesystem
[  185.057385][ T4887] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  185.083108][ T6531] XFS (loop1): Ending clean mount
[  185.107322][ T6531] XFS (loop1): Quotacheck needed: Please wait.
[  185.129684][ T6585] loop0: detected capacity change from 0 to 512
[  185.171329][ T6585] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  185.196205][ T6531] XFS (loop1): Quotacheck: Done.
[  185.262808][ T4887] usb 6-1: config 0 has no interfaces?
[  185.263699][ T6585] EXT4-fs (loop0): 1 truncate cleaned up
[  185.276945][ T6585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  185.298886][ T4887] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  185.314419][ T4887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.323211][ T4887] usb 6-1: Product: syz
[  185.327846][ T4887] usb 6-1: Manufacturer: syz
[  185.332534][ T4887] usb 6-1: SerialNumber: syz
[  185.342125][ T4887] usb 6-1: config 0 descriptor??
[  185.452819][ T4277] XFS (loop1): Unmounting Filesystem
[  185.578890][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  185.601450][ T4890] usb 6-1: USB disconnect, device number 2
[  185.791981][ T6597] loop0: detected capacity change from 0 to 512
[  185.944709][ T6597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  185.967252][ T6599] loop3: detected capacity change from 0 to 1024
[  185.967476][ T6597] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.984044][ T6599] EXT4-fs: Ignoring removed bh option
[  186.093643][ T6599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  186.219057][ T6609] loop4: detected capacity change from 0 to 2048
[  186.353896][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  186.387400][ T6609] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  186.465448][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  186.474949][ T6612] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.561458][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  187.492461][ T6637] loop0: detected capacity change from 0 to 4096
[  187.541745][ T6637] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  187.837067][ T4274] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  187.878552][ T4274] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  187.885137][ T4274] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  188.930135][ T6683] loop0: detected capacity change from 0 to 256
[  189.000302][ T6655] loop1: detected capacity change from 0 to 32768
[  189.001988][ T6683] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  189.120782][ T6654] loop4: detected capacity change from 0 to 32768
[  189.150065][ T6655] JBD2: Ignoring recovery information on journal
[  189.367520][ T6655] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  189.403455][ T6654] XFS (loop4): Mounting V5 Filesystem
[  189.490108][ T6709] syz.0.822 (6709): /proc/6707/oom_adj is deprecated, please use /proc/6707/oom_score_adj instead.
[  189.708855][ T6654] XFS (loop4): Ending clean mount
[  189.725268][ T4277] ocfs2: Unmounting device (7,1) on (node local)
[  189.859703][ T6715] loop3: detected capacity change from 0 to 8
[  189.971988][ T4278] XFS (loop4): Unmounting Filesystem
[  190.062148][ T6720] loop1: detected capacity change from 0 to 2048
[  190.224096][ T6720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  190.267404][ T6720] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.381323][ T6729] netlink: 'syz.0.828': attribute type 4 has an invalid length.
[  190.412209][ T6730] loop3: detected capacity change from 0 to 2048
[  190.505366][ T6730] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  190.594832][ T6733] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.634012][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  190.993087][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.827'.
[  191.021489][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.827'.
[  191.286911][ T6753] loop0: detected capacity change from 0 to 1024
[  191.322494][ T6753] EXT4-fs: Ignoring removed oldalloc option
[  191.348789][ T6753] EXT4-fs: Ignoring removed oldalloc option
[  191.505345][ T6753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  191.688792][ T6759] loop4: detected capacity change from 0 to 4096
[  191.725108][ T6759] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  191.937326][   T22] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  192.030392][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  192.038301][ T4278] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  192.066366][ T4278] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  192.112706][ T4278] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  192.136720][   T22] usb 4-1: config 0 has no interfaces?
[  192.146285][   T22] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  192.199720][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.224672][   T22] usb 4-1: Product: syz
[  192.240522][   T22] usb 4-1: Manufacturer: syz
[  192.250708][   T22] usb 4-1: SerialNumber: syz
[  192.273551][   T22] usb 4-1: config 0 descriptor??
[  192.330978][ T6784] loop5: detected capacity change from 0 to 2048
[  192.388283][ T6784] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  192.462008][ T6791] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.636723][   T22] usb 4-1: USB disconnect, device number 10
[  193.052321][ T6808] loop4: detected capacity change from 0 to 256
[  193.155285][ T6808] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  193.227887][ T6815] loop1: detected capacity change from 0 to 1024
[  193.246164][ T6808] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  193.288200][ T6815] EXT4-fs: Ignoring removed oldalloc option
[  193.294627][ T6815] EXT4-fs: Ignoring removed oldalloc option
[  193.301333][ T6808] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  193.322926][ T6808] UDF-fs: Scanning with blocksize 512 failed
[  193.360983][ T6808] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  193.423960][ T6808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.434208][ T6815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  193.522752][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'.
[  193.964776][ T6833] loop4: detected capacity change from 0 to 512
[  194.054118][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  194.066183][ T6833] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  194.136926][ T6833] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.861: bg 0: block 104: invalid block bitmap
[  194.240492][ T6833] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  194.300650][ T6833] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.861: invalid indirect mapped block 1 (level 1)
[  194.375134][ T6833] EXT4-fs (loop4): 1 truncate cleaned up
[  194.407357][ T6833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  194.560769][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  194.567846][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  194.664128][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  194.691601][ T6857] loop1: detected capacity change from 0 to 256
[  194.795997][ T6857] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  194.862209][ T6857] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  194.923313][ T6857] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  194.963694][ T6857] UDF-fs: Scanning with blocksize 512 failed
[  194.996611][ T6857] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  195.045120][ T6857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.057579][ T4886] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  195.247505][ T4886] usb 5-1: Using ep0 maxpacket: 16
[  195.257005][ T4886] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.305490][ T4886] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.335083][ T4886] usb 5-1: config 0 interface 0 has no altsetting 0
[  195.356932][ T4886] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  195.374383][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'.
[  195.384050][ T4886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.396239][ T4886] usb 5-1: config 0 descriptor??
[  195.717965][ T6876] loop5: detected capacity change from 0 to 1024
[  195.768738][ T6876] EXT4-fs: Ignoring removed oldalloc option
[  195.774717][ T6876] EXT4-fs: Ignoring removed oldalloc option
[  195.824063][ T4886] hid (null): unknown global tag 0xe
[  195.897859][ T6876] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  196.056861][   T22] usb 5-1: USB disconnect, device number 7
[  196.235148][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  196.736245][ T6898] loop5: detected capacity change from 0 to 512
[  196.774003][ T6898] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  196.870066][ T6898] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.885: bg 0: block 104: invalid block bitmap
[  196.924686][ T6898] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  196.973540][ T6916] loop0: detected capacity change from 0 to 256
[  196.989909][ T6898] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.885: invalid indirect mapped block 1 (level 1)
[  197.020995][ T6916] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  197.079441][ T6898] EXT4-fs (loop5): 1 truncate cleaned up
[  197.115199][ T6898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  197.124828][ T6916] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  197.173658][ T6916] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  197.208714][ T6916] UDF-fs: Scanning with blocksize 512 failed
[  197.231371][ T6916] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  197.251992][ T6916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.300482][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  198.392327][ T6937] loop4: detected capacity change from 0 to 1024
[  198.418184][ T6937] EXT4-fs: Ignoring removed oldalloc option
[  198.444125][ T6937] EXT4-fs: Ignoring removed oldalloc option
[  198.536744][ T6937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  198.617751][ T4890] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  198.807280][ T4890] usb 1-1: Using ep0 maxpacket: 16
[  198.817063][ T4890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.846547][ T4890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.857056][ T4890] usb 1-1: config 0 interface 0 has no altsetting 0
[  198.864077][ T4890] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  198.887974][ T4890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.915705][ T4890] usb 1-1: config 0 descriptor??
[  199.016864][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  199.093640][ T6953] loop1: detected capacity change from 0 to 512
[  199.151548][ T6953] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  199.187531][ T4984] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  199.216742][ T6953] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.902: bg 0: block 104: invalid block bitmap
[  199.261841][ T6960] loop5: detected capacity change from 0 to 256
[  199.276726][ T6953] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  199.299760][ T6953] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.902: invalid indirect mapped block 1 (level 1)
[  199.344179][ T6953] EXT4-fs (loop1): 1 truncate cleaned up
[  199.345634][ T6960] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  199.350763][ T6953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  199.385023][ T4890] hid (null): unknown global tag 0xe
[  199.399674][ T4984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.437397][ T4984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  199.467945][ T4984] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  199.483627][ T6960] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  199.498172][ T4984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  199.506226][ T4984] usb 4-1: SerialNumber: syz
[  199.535942][ T6960] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  199.571646][ T6960] UDF-fs: Scanning with blocksize 512 failed
[  199.581651][ T6960] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  199.600433][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  199.601181][ T6960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.650779][ T4986] usb 1-1: USB disconnect, device number 9
[  199.748698][ T4984] usb 4-1: 0:2 : does not exist
[  199.798940][ T4984] usb 4-1: USB disconnect, device number 11
[  201.757466][ T4290] Bluetooth: hci4: command 0x0406 tx timeout
[  201.763568][ T4290] Bluetooth: hci3: command 0x0406 tx timeout
[  201.769753][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  201.947278][ T4984] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  202.131934][ T7003] loop4: detected capacity change from 0 to 32768
[  202.159939][ T7003] (syz.4.916,7003,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  202.228575][ T7003] (syz.4.916,7003,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  202.311120][ T7003] JBD2: Ignoring recovery information on journal
[  202.426307][ T7031] loop5: detected capacity change from 0 to 32768
[  202.441568][ T4984] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.453546][ T7031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.930 (7031)
[  202.466011][ T4984] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  202.477523][ T4984] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  202.486619][ T4984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  202.496672][ T4984] usb 1-1: SerialNumber: syz
[  202.507397][ T7003] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  202.510885][ T7031] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.526706][ T7031] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  202.535448][ T7031] BTRFS info (device loop5): using free space tree
[  202.714616][ T7031] BTRFS info (device loop5): enabling ssd optimizations
[  202.750811][ T4984] usb 1-1: 0:2 : does not exist
[  202.776157][ T4984] usb 1-1: USB disconnect, device number 10
[  202.845539][ T4278] ocfs2: Unmounting device (7,4) on (node local)
[  202.898698][ T7053] loop1: detected capacity change from 0 to 256
[  202.966967][ T6267] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.000353][ T4800] udevd[4800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.620997][ T7061] loop1: detected capacity change from 0 to 512
[  203.674064][ T7061] EXT4-fs: Ignoring removed nobh option
[  203.719554][ T7061] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  203.762330][ T7065] loop4: detected capacity change from 0 to 256
[  203.843015][ T7061] EXT4-fs (loop1): 1 truncate cleaned up
[  203.891461][ T7072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.940'.
[  203.913720][ T7061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  204.026730][ T7073] tun0: tun_chr_ioctl cmd 1074812117
[  204.133252][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  204.795050][ T6317] kworker/u4:8: attempt to access beyond end of device
[  204.795050][ T6317] loop4: rw=1, sector=256, nr_sectors = 288 limit=256
[  204.841778][ T4890] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  204.874306][ T6317] kworker/u4:8: attempt to access beyond end of device
[  204.874306][ T6317] loop4: rw=1, sector=608, nr_sectors = 416 limit=256
[  204.922277][ T6317] kworker/u4:8: attempt to access beyond end of device
[  204.922277][ T6317] loop4: rw=1, sector=1056, nr_sectors = 4184 limit=256
[  205.002517][ T6317] kworker/u4:8: attempt to access beyond end of device
[  205.002517][ T6317] loop4: rw=1, sector=5240, nr_sectors = 2696 limit=256
[  205.029641][ T4890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.069407][ T4890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.086989][ T6317] kworker/u4:8: attempt to access beyond end of device
[  205.086989][ T6317] loop4: rw=1, sector=7936, nr_sectors = 9672 limit=256
[  205.108181][ T4890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  205.156313][ T4890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  205.185745][ T4890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.230479][ T4890] usb 1-1: config 0 descriptor??
[  205.689244][ T4890] plantronics 0003:047F:FFFF.000B: unbalanced delimiter at end of report description
[  205.714331][ T4890] plantronics 0003:047F:FFFF.000B: parse failed
[  205.717242][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.954'.
[  205.734236][ T4890] plantronics: probe of 0003:047F:FFFF.000B failed with error -22
[  205.936008][   T26] usb 1-1: USB disconnect, device number 11
[  206.274167][ T7130] Bluetooth: MGMT ver 1.22
[  207.056839][ T7153] netlink: 'syz.1.978': attribute type 8 has an invalid length.
[  207.510214][ T7170] netlink: 'syz.0.985': attribute type 3 has an invalid length.
[  207.858196][ T7176] loop3: detected capacity change from 0 to 4096
[  207.965092][ T7184] IPv6: Can't replace route, no match found
[  208.274146][ T7181] loop0: detected capacity change from 0 to 8192
[  208.674731][ T7193] loop4: detected capacity change from 0 to 4096
[  208.784483][ T7193] ntfs: volume version 3.1.
[  208.845179][ T7193] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  208.888437][ T7203] loop1: detected capacity change from 0 to 256
[  208.917395][ T7193] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  208.998689][ T7193] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  209.109527][ T7193] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  209.248799][ T7193] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  209.273692][ T7210] Bluetooth: hci5: Frame reassembly failed (-84)
[  209.328914][ T4331] Bluetooth: hci5: Frame reassembly failed (-84)
[  209.341709][ T7193] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  209.511525][ T7218] loop0: detected capacity change from 0 to 256
[  209.620408][ T7218] FAT-fs (loop0): Directory bread(block 64) failed
[  209.661355][ T7218] FAT-fs (loop0): Directory bread(block 65) failed
[  209.680284][ T7218] FAT-fs (loop0): Directory bread(block 66) failed
[  209.720766][ T7218] FAT-fs (loop0): Directory bread(block 67) failed
[  209.752561][ T7218] FAT-fs (loop0): Directory bread(block 68) failed
[  209.775540][ T7218] FAT-fs (loop0): Directory bread(block 69) failed
[  209.795791][ T7218] FAT-fs (loop0): Directory bread(block 70) failed
[  209.847380][ T7218] FAT-fs (loop0): Directory bread(block 71) failed
[  209.877488][ T7218] FAT-fs (loop0): Directory bread(block 72) failed
[  209.904850][ T7218] FAT-fs (loop0): Directory bread(block 73) failed
[  210.817450][ T4890] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  211.019470][ T4890] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  211.020303][ T7251] loop0: detected capacity change from 0 to 256
[  211.047235][ T4890] usb 5-1: config 0 has no interface number 0
[  211.057617][ T4890] usb 5-1: config 0 interface 41 has no altsetting 0
[  211.092861][ T7251] exfat: Deprecated parameter 'namecase'
[  211.096939][ T4890] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  211.138445][ T4890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.139317][ T7251] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  211.146492][ T4890] usb 5-1: Product: syz
[  211.146515][ T4890] usb 5-1: Manufacturer: syz
[  211.146528][ T4890] usb 5-1: SerialNumber: syz
[  211.188205][ T4890] usb 5-1: config 0 descriptor??
[  211.282608][ T4290] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  211.287606][ T4287] Bluetooth: hci5: command 0x1003 tx timeout
[  211.553553][ T7232] loop1: detected capacity change from 0 to 40427
[  211.617440][ T7232] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  211.669555][ T7232] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  211.809897][ T7232] F2FS-fs (loop1): Found nat_bits in checkpoint
[  211.854842][ T4890] CoreChips: probe of 5-1:0.41 failed with error -71
[  211.928120][ T4890] usb 5-1: USB disconnect, device number 8
[  211.969871][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1008'.
[  212.018828][ T7232] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  212.047469][ T7268] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1008'.
[  212.057788][ T7232] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  212.229242][ T7274] loop0: detected capacity change from 0 to 4096
[  212.234716][ T7232] syz.1.997: attempt to access beyond end of device
[  212.234716][ T7232] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.290264][ T7274] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  212.422391][ T7278] loop3: detected capacity change from 0 to 4096
[  212.492837][ T7274] ntfs3: loop0: ino=1b, "file0" directory corrupted
[  212.594020][ T7278] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  212.788659][ T7278] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  212.849857][ T7278] EXT4-fs: Cannot change journaled quota options when quota turned on
[  213.009294][ T7285] loop5: detected capacity change from 0 to 2048
[  213.070148][ T7285] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  213.086279][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  213.200043][ T7285] NILFS (loop5): mounting unchecked fs
[  213.310992][ T4367] udevd[4367]: incorrect nilfs2 checksum on /dev/loop5
[  213.323353][ T7285] NILFS (loop5): recovery complete
[  213.414378][ T7299] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.734264][ T7307] loop1: detected capacity change from 0 to 512
[  213.776107][ T7307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  213.900580][ T7307] EXT4-fs (loop1): 1 truncate cleaned up
[  213.906357][ T7307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  213.946323][ T7309] loop4: detected capacity change from 0 to 4096
[  213.973389][ T7309] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  214.150104][ T7309] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  214.316450][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  214.349780][ T7319] loop0: detected capacity change from 0 to 2048
[  214.433920][ T7319] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  214.518635][ T7319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.558293][ T7327] loop1: detected capacity change from 0 to 64
[  215.163183][ T7338] loop0: detected capacity change from 0 to 1024
[  215.205134][ T7338] EXT4-fs: Ignoring removed bh option
[  215.280569][ T7338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  215.452860][ T7345] loop1: detected capacity change from 0 to 512
[  215.497904][ T7345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  215.526355][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  215.582891][ T7345] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  215.705988][ T7345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  215.732464][ T7311] loop3: detected capacity change from 0 to 40427
[  215.736177][ T7345] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.852375][ T7311] F2FS-fs (loop3): invalid crc value
[  215.935690][ T7311] F2FS-fs (loop3): Found nat_bits in checkpoint
[  215.955382][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  216.190205][ T7311] F2FS-fs (loop3): Start checkpoint disabled!
[  216.234678][ T7311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  216.677047][ T7371] loop5: detected capacity change from 0 to 2048
[  216.758137][  T997] kworker/u4:4: attempt to access beyond end of device
[  216.758137][  T997] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  216.776199][ T7371] EXT4-fs: Ignoring removed i_version option
[  216.964792][ T7371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  217.021731][ T7371] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.525384][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  218.043481][ T7399] loop0: detected capacity change from 0 to 128
[  218.085449][ T7399] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  218.166882][ T7399] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  218.217617][ T7401] device bond1 entered promiscuous mode
[  218.700135][ T7388] loop4: detected capacity change from 0 to 32768
[  218.746771][ T7388] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1040 (7388)
[  218.799984][ T4887] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  218.836288][ T7388] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  218.900210][ T7388] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  218.959189][ T7388] BTRFS info (device loop4): enabling disk space caching
[  218.982847][ T4290] Bluetooth: hci4: hcon ffff88807ac42000 sent 1 < count 511
[  218.992684][ T7388] BTRFS info (device loop4): force clearing of disk cache
[  219.008622][ T4887] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  219.022838][ T4887] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  219.044672][ T4887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  219.063984][ T4887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  219.087325][ T7388] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  219.096794][ T7388] BTRFS info (device loop4): use zstd compression, level 3
[  219.122097][ T4887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  219.201840][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'.
[  219.228920][ T7388] BTRFS info (device loop4): disk space caching is enabled
[  219.240840][ T7434] loop0: detected capacity change from 0 to 256
[  219.247520][ T4887] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  219.276978][ T4887] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  219.305161][ T4887] usb 6-1: Product: syz
[  219.343486][ T4887] usb 6-1: Manufacturer: syz
[  219.367863][ T7434] FAT-fs (loop0): Directory bread(block 64) failed
[  219.388918][ T7434] FAT-fs (loop0): Directory bread(block 65) failed
[  219.406349][ T4887] cdc_wdm 6-1:1.0: skipping garbage
[  219.413981][ T4887] cdc_wdm 6-1:1.0: skipping garbage
[  219.426484][ T7434] FAT-fs (loop0): Directory bread(block 66) failed
[  219.447672][ T4887] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  219.457353][ T7434] FAT-fs (loop0): Directory bread(block 67) failed
[  219.477310][ T4887] cdc_wdm 6-1:1.0: Unknown control protocol
[  219.494613][ T7434] FAT-fs (loop0): Directory bread(block 68) failed
[  219.535291][ T7388] BTRFS info (device loop4): enabling ssd optimizations
[  219.555797][ T7434] FAT-fs (loop0): Directory bread(block 69) failed
[  219.582043][ T7388] BTRFS info (device loop4): rebuilding free space tree
[  219.590802][ T7434] FAT-fs (loop0): Directory bread(block 70) failed
[  219.642047][ T7434] FAT-fs (loop0): Directory bread(block 71) failed
[  219.652511][ T7388] BTRFS info (device loop4): disabling free space tree
[  219.687408][ T7434] FAT-fs (loop0): Directory bread(block 72) failed
[  219.703297][ T7388] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  219.733745][ T7434] FAT-fs (loop0): Directory bread(block 73) failed
[  219.746335][ T7388] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  219.788756][ T4887] usb 6-1: USB disconnect, device number 3
[  220.319009][ T4278] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  220.844997][ T4290] Bluetooth: hci1: link tx timeout
[  220.850251][ T4290] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  220.858446][ T4290] Bluetooth: hci1: link tx timeout
[  220.863604][ T4290] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.591829][ T7500] loop1: detected capacity change from 0 to 128
[  221.656108][ T7500] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  221.770045][ T7500] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  222.877238][ T4290] Bluetooth: hci1: command 0x0406 tx timeout
[  222.894927][ T7533] loop1: detected capacity change from 0 to 8192
[  222.982676][ T7545] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1086'.
[  223.467460][ T4884] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  223.487219][   T27] audit: type=1326 audit(2000000131.860:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.0.1083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a859ce59 code=0x7fc00000
[  223.663841][ T4884] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  223.670904][ T4287] Bluetooth: unknown link type 128
[  223.686755][ T4884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.746246][ T4884] usb 4-1: Product: syz
[  223.776973][ T4884] usb 4-1: Manufacturer: syz
[  223.785781][ T4884] usb 4-1: SerialNumber: syz
[  223.837711][ T4884] usb 4-1: config 0 descriptor??
[  223.849302][ T7565] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  223.857309][ T7565] Bluetooth: hci2: Opcode 0x200e failed: -4
[  223.891140][ T7565] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  223.907581][ T7565] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  223.937538][ T7565] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  224.013680][ T7565] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  224.038434][ T7565] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  224.096780][ T7565] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  224.114656][ T7570] loop5: detected capacity change from 0 to 256
[  224.131658][ T4373] usb 4-1: USB disconnect, device number 12
[  224.145783][ T7565] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  224.184212][ T7565] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  224.226596][ T7565] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  224.266107][ T7565] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  224.283231][ T7557] loop1: detected capacity change from 0 to 32768
[  224.309123][ T7557] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1090 (7557)
[  224.323073][ T7565] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  224.418899][ T7557] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.438045][ T7557] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  224.465299][ T7557] BTRFS info (device loop1): force clearing of disk cache
[  224.483705][ T7557] BTRFS info (device loop1): enabling auto defrag
[  224.497477][ T7557] BTRFS info (device loop1): max_inline at 0
[  224.503590][ T7557] BTRFS info (device loop1): enabling disk space caching
[  224.550806][ T7557] BTRFS info (device loop1): disk space caching is enabled
[  224.680179][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  224.954948][ T7557] BTRFS info (device loop1): enabling ssd optimizations
[  224.968322][ T7557] BTRFS info (device loop1): rebuilding free space tree
[  225.050379][ T7557] BTRFS info (device loop1): disabling free space tree
[  225.073097][ T7557] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  225.126498][ T7557] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  225.427216][ T4287] block nbd1: Receive control failed (result -32)
[  225.504497][ T4277] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.839126][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout
[  225.929580][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  226.086370][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout
[  226.237355][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout
[  226.243524][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout
[  226.647112][ T7649] loop3: detected capacity change from 0 to 2048
[  226.733137][ T7650] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.782909][   T27] audit: type=1800 audit(2000000135.160:96): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1121" name="file2" dev="loop3" ino=16 res=0 errno=0
[  226.855982][ T7649] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  226.886007][ T7649] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16)
[  226.924402][ T7649] Remounting filesystem read-only
[  226.981646][ T7652] loop4: detected capacity change from 0 to 128
[  227.060225][ T4280] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  227.207060][ T7656] loop3: detected capacity change from 0 to 256
[  227.327468][ T4980] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  227.527945][ T4980] usb 6-1: Using ep0 maxpacket: 16
[  227.551719][ T4980] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  227.571236][ T4980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.587242][ T4980] usb 6-1: Product: syz
[  227.627474][ T4980] usb 6-1: Manufacturer: syz
[  227.632150][ T4980] usb 6-1: SerialNumber: syz
[  227.825453][ T7672] loop3: detected capacity change from 0 to 256
[  227.859269][ T7674] loop1: detected capacity change from 0 to 1024
[  227.862737][ T7672] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  227.889912][ T4980] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  227.917455][ T4287] Bluetooth: hci2: command 0x200e tx timeout
[  227.920564][ T4980] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  227.931591][ T7482] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  227.974195][ T7672] syz.3.1131: attempt to access beyond end of device
[  227.974195][ T7672] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  227.995807][ T4980] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  227.997466][ T4287] Bluetooth: hci3: command 0x0406 tx timeout
[  228.006072][ T4980] usb 6-1: media controller created
[  228.022627][ T7672] syz.3.1131: attempt to access beyond end of device
[  228.022627][ T7672] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  228.054550][ T7675] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[  228.066345][ T4980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  228.071746][ T7675] exFAT-fs (loop3): Filesystem has been set read-only
[  228.074967][   T27] audit: type=1800 audit(2000000136.450:97): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1131" name="file1" dev="loop3" ino=1048692 res=0 errno=0
[  228.092510][ T7672] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[  228.118001][ T7672] exFAT-fs (loop3): error, failed to bmap (inode : ffff888054902ee0 iblock : 17, err : -5)
[  228.129112][ T7672] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[  228.129422][ T4980] zl10353_read_register: readreg error (reg=127, ret==-71)
[  228.139040][ T7482] usb 1-1: Using ep0 maxpacket: 32
[  228.149765][   T11] hfsplus: b-tree write err: -5, ino 25
[  228.155467][ T7482] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  228.155740][   T11] hfsplus: b-tree write err: -5, ino 4
[  228.164944][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  228.180140][ T7482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.182724][   T11] hfsplus: b-tree write err: -5, ino 2
[  228.191283][ T7672] syz.3.1131: attempt to access beyond end of device
[  228.191283][ T7672] loop3: rw=2049, sector=34359738488, nr_sectors = 16 limit=256
[  228.211623][ T7482] usb 1-1: config 0 descriptor??
[  228.216671][   T11] hfsplus: b-tree write err: -5, ino 20
[  228.229474][ T7482] gspca_main: sunplus-2.14.0 probing 041e:400b
[  228.276405][ T4980] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  228.317436][ T4287] Bluetooth: hci0: command 0x0406 tx timeout
[  228.346875][ T4980] usb 6-1: USB disconnect, device number 4
[  228.526290][   T27] audit: type=1326 audit(2000000136.900:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.3.1144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9528f9ce59 code=0x0
[  229.041685][ T7482] gspca_sunplus: reg_r err -71
[  229.047064][ T7482] sunplus: probe of 1-1:0.0 failed with error -71
[  229.053690][ T4373] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  229.067474][ T4980] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  229.069045][ T7482] usb 1-1: USB disconnect, device number 12
[  229.257420][ T4373] usb 5-1: Using ep0 maxpacket: 16
[  229.267580][ T4373] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  229.268855][ T4980] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  229.275753][ T4373] usb 5-1: config 0 has no interface number 0
[  229.275808][ T4373] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  229.287381][ T4980] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  229.301356][ T4373] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  229.303714][ T4980] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  229.333278][ T4980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.343791][ T4373] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  229.371487][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.382139][ T4373] usb 5-1: Product: syz
[  229.386419][ T4373] usb 5-1: Manufacturer: syz
[  229.395215][ T4373] usb 5-1: SerialNumber: syz
[  229.430922][ T4373] usb 5-1: config 0 descriptor??
[  229.436623][ T7688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  229.447921][ T7688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  229.674473][ T7688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  229.697596][ T7688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  229.767768][ T4980] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  229.802987][ T4980] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input9
[  229.839234][ T4980] input: failed to attach handler kbd to device input9, error: -5
[  229.924885][ T4980] usb 6-1: USB disconnect, device number 5
[  229.942274][ T4373] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  229.952081][ T7701] loop0: detected capacity change from 0 to 1024
[  230.165790][ T4345] hfsplus: b-tree write err: -5, ino 8
[  230.173795][ T4373] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 170
[  230.319434][ T7692] loop3: detected capacity change from 0 to 32768
[  230.350757][ T7692] 
[  230.350757][ T7692]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  230.350757][ T7692] 
[  230.472961][ T7482] usb 5-1: USB disconnect, device number 9
[  230.556174][ T4331] ERROR: (device loop3): diWrite: ixpxd invalid
[  230.556174][ T4331] 
[  230.568448][ T4331] ERROR: (device loop3): txCommit: 
[  230.568448][ T4331] 
[  230.583002][ T7708] loop1: detected capacity change from 0 to 4096
[  230.589584][ T4331] jfs_write_inode: jfs_commit_inode failed!
[  230.595614][ T4280] 
[  230.595614][ T4280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  230.595614][ T4280] 
[  230.637392][ T7708] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  230.647227][ T4280] 
[  230.647227][ T4280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  230.647227][ T4280] 
[  230.660290][ T7708] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  230.706181][ T7708] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  230.744134][ T7708] ntfs: volume version 3.1.
[  230.963476][   T46] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  231.023960][ T4277] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  231.256913][ T7725] loop1: detected capacity change from 0 to 512
[  231.331948][ T7731] loop5: detected capacity change from 0 to 64
[  231.346730][ T7725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  231.358396][ T7482] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  231.377542][ T7725] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.454291][ T7731] syz.5.1155: attempt to access beyond end of device
[  231.454291][ T7731] loop5: rw=2049, sector=412, nr_sectors = 2 limit=64
[  231.471790][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  231.474843][ T7731] Buffer I/O error on dev loop5, logical block 206, lost async page write
[  231.557382][ T7482] usb 1-1: Using ep0 maxpacket: 32
[  231.568637][ T7482] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  231.623070][ T7482] usb 1-1: config 0 has no interface number 0
[  231.634068][ T7738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.643067][ T7482] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.688675][ T7482] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.717573][ T7482] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  231.747255][ T7482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.772816][ T7482] usb 1-1: config 0 descriptor??
[  232.160950][ T7755] loop4: detected capacity change from 0 to 1024
[  232.191234][ T7755] EXT4-fs: Ignoring removed bh option
[  232.253597][ T7755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  232.405398][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  232.412094][ T7482] uclogic 0003:28BD:0094.000C: pen parameters not found
[  232.426623][ T7482] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring
[  232.622597][ T7761] loop4: detected capacity change from 0 to 1024
[  232.673251][ T7482] usb 1-1: USB disconnect, device number 13
[  232.882778][ T7766] loop5: detected capacity change from 0 to 256
[  233.089529][ T7759] loop3: detected capacity change from 0 to 32768
[  233.166942][ T7759] XFS (loop3): Mounting V5 Filesystem
[  233.290139][ T7759] XFS (loop3): Ending clean mount
[  233.304622][ T7759] XFS (loop3): Quotacheck needed: Please wait.
[  233.433139][ T7782] loop5: detected capacity change from 0 to 512
[  233.473511][ T7784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  233.504518][ T7759] XFS (loop3): Quotacheck: Done.
[  233.528229][ T7782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  233.578882][ T7782] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  233.621817][ T7784] EXT4-fs (loop4): 1 truncate cleaned up
[  233.654247][ T7782] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  233.658159][ T7784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  233.684669][ T7782] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  233.709906][ T4280] XFS (loop3): Unmounting Filesystem
[  233.744681][ T7782] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  233.798505][ T7782] EXT4-fs (loop5): orphan cleanup on readonly fs
[  233.834291][ T7782] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1170: bg 0: block 34: padding at end of block bitmap is not set
[  233.874794][ T7782] Quota error (device loop5): write_blk: dquota write failed
[  233.904535][ T7782] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  233.922760][ T7782] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1170: Failed to acquire dquot type 1
[  233.971036][ T7782] EXT4-fs (loop5): 1 truncate cleaned up
[  233.979616][ T7782] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  233.989632][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  234.081725][ T7782] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  234.115679][ T7794] block nbd4: not configured, cannot reconfigure
[  234.208258][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  234.474556][ T7800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  234.533189][ T7800] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.596837][ T7809] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  234.641532][ T7811] program syz.5.1180 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.661535][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.796429][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  235.007349][ T7482] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  235.167397][ T4980] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  235.175149][ T4984] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  235.187522][ T7482] usb 2-1: Using ep0 maxpacket: 32
[  235.198088][ T7482] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  235.206424][ T7482] usb 2-1: config 0 has no interface number 0
[  235.215851][ T7482] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  235.229294][ T7482] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  235.238568][ T7482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.246587][ T7482] usb 2-1: Product: syz
[  235.250878][ T7482] usb 2-1: Manufacturer: syz
[  235.255490][ T7482] usb 2-1: SerialNumber: syz
[  235.263197][ T7482] usb 2-1: config 0 descriptor??
[  235.269107][ T7815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  235.357376][ T4980] usb 6-1: Using ep0 maxpacket: 32
[  235.366956][ T4984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.384054][ T4984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.394210][ T4984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  235.394379][ T4980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  235.421632][ T4984] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  235.430761][ T4984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.439198][ T4980] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  235.451542][ T4984] usb 4-1: config 0 descriptor??
[  235.458214][ T4980] usb 6-1: config 0 interface 0 has no altsetting 0
[  235.471050][ T4980] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  235.480259][ T4980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.486890][ T7815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  235.489636][ T4980] usb 6-1: Product: syz
[  235.499778][ T4980] usb 6-1: Manufacturer: syz
[  235.504467][ T4980] usb 6-1: SerialNumber: syz
[  235.511436][ T4980] usb 6-1: config 0 descriptor??
[  235.876395][ T4984] plantronics 0003:047F:FFFF.000D: unbalanced delimiter at end of report description
[  235.905842][ T4984] plantronics 0003:047F:FFFF.000D: parse failed
[  235.913688][ T7482] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  235.923494][ T4984] plantronics: probe of 0003:047F:FFFF.000D failed with error -22
[  235.934787][ T7482] asix: probe of 2-1:0.188 failed with error -71
[  235.934944][ T4980] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  235.977445][ T7482] usb 2-1: USB disconnect, device number 12
[  236.103972][ T4373] usb 4-1: USB disconnect, device number 13
[  236.312840][ T7836] set_capacity_and_notify: 2 callbacks suppressed
[  236.312858][ T7836] loop0: detected capacity change from 0 to 2048
[  236.377322][ T7836] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  236.390261][ T4980] usb 6-1: USB disconnect, device number 6
[  236.427433][ T7836] NILFS (loop0): mounting unchecked fs
[  236.476405][ T7836] NILFS (loop0): recovery complete
[  236.518408][ T7841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.977813][ T7853] loop3: detected capacity change from 0 to 1024
[  237.225089][ T7860] loop9: detected capacity change from 0 to 7
[  237.258834][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.268113][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.277871][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.287104][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.296059][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.305347][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.326873][   T11] hfsplus: bad catalog file entry
[  237.340737][   T11] hfsplus: b-tree write err: -5, ino 3
[  237.378025][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.387314][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.451546][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.460921][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.498319][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.507609][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.523819][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.533057][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.543007][ T7860] ldm_validate_partition_table(): Disk read failed.
[  237.565488][ T7873] loop5: detected capacity change from 0 to 512
[  237.607811][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.617179][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.650904][ T7873] EXT4-fs: Ignoring removed oldalloc option
[  237.670180][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.679450][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.717940][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  237.727206][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  237.743823][ T7873] EXT4-fs (loop5): Test dummy encryption mode enabled
[  237.757282][ T7860] Dev loop9: unable to read RDB block 0
[  237.780011][ T7860]  loop9: unable to read partition table
[  237.806184][ T7860] loop9: partition table beyond EOD, truncated
[  237.848285][ T7873] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  237.870299][ T7860] loop_reread_partitions: partition scan of loop9 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  237.933304][ T7873] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  238.034526][ T7873] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  238.503481][ T7876] loop1: detected capacity change from 0 to 32768
[  238.642790][ T7876] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page
[  238.642790][ T7876] 
[  238.684855][ T7876] ERROR: (device loop1): remounting filesystem as read-only
[  238.736178][ T7876] jfs_mkdir: dtInsert returned -EIO
[  238.785792][ T7876] ERROR: (device loop1): jfs_mkdir: 
[  238.785792][ T7876] 
[  238.827795][ T7876] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page
[  238.827795][ T7876] 
[  238.856059][ T7876] ERROR: (device loop1): dbDiscardAG: -EIO
[  238.856059][ T7876] 
[  239.111320][ T7873] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  239.366890][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  239.529000][ T7919] loop1: detected capacity change from 0 to 8
[  239.620618][ T7923] loop5: detected capacity change from 0 to 64
[  239.641579][ T7919] SQUASHFS error: Failed to read block 0x26067d: -5
[  239.692696][ T7919] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  239.738484][ T7919] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  240.767445][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1226'.
[  242.283743][ T8005] loop5: detected capacity change from 0 to 1024
[  242.763112][ T7976] loop0: detected capacity change from 0 to 40427
[  242.787538][ T4984] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  242.807895][ T7976] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  242.816224][ T7976] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  242.844396][ T7976] F2FS-fs (loop0): invalid crc value
[  242.854247][ T7976] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  242.913803][ T7976] F2FS-fs (loop0): Found nat_bits in checkpoint
[  242.987290][ T4984] usb 5-1: Using ep0 maxpacket: 16
[  242.995137][ T4984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.033690][ T4984] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  243.067069][ T4984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.088761][ T7976] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  243.096194][ T4984] usb 5-1: config 0 descriptor??
[  243.107763][ T7976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  243.175567][ T7976] syz.0.1234: attempt to access beyond end of device
[  243.175567][ T7976] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  243.253464][ T7976] syz.0.1234: attempt to access beyond end of device
[  243.253464][ T7976] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  243.450469][ T4274] syz-executor: attempt to access beyond end of device
[  243.450469][ T4274] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  243.525915][ T4984] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  243.723348][ T8037] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  243.941481][ T4984] usb 5-1: USB disconnect, device number 10
[  244.243217][ T8048] loop3: detected capacity change from 0 to 512
[  244.327512][ T8048] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  244.377741][ T8048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  244.386877][ T8048] EXT4-fs (loop3): orphan cleanup on readonly fs
[  244.407304][ T8048] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1257: bad orphan inode 267
[  244.413732][ T8051] loop1: detected capacity change from 0 to 4096
[  244.459308][ T8048] EXT4-fs (loop3): Remounting filesystem read-only
[  244.503678][ T8055] loop5: detected capacity change from 0 to 4096
[  244.511277][ T8048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  244.551490][ T8051] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  244.565739][ T8048] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1257: dx entry: limit 0 != root limit 125
[  244.589051][ T8051] ntfs3: loop1: Failed to load $Extend.
[  244.647680][ T8055] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  244.671841][ T8051] ntfs3: loop1: ino=1b, "file0" directory corrupted
[  244.707765][ T8048] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1257: Corrupt directory, running e2fsck is recommended
[  244.833551][ T8055] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  244.902879][ T4277] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22.
[  244.931717][ T4277] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22.
[  245.001919][ T8055] ntfs3: loop5: ino=5, "/" directory corrupted
[  245.012317][ T8067] IPv6: NLM_F_REPLACE set, but no existing node found!
[  245.021398][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  245.211535][ T6267] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22.
[  245.273096][ T6267] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22.
[  245.283294][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'.
[  245.340143][ T8069] loop0: detected capacity change from 0 to 4096
[  245.357679][ T8075] netlink: 'syz.4.1265': attribute type 1 has an invalid length.
[  245.366308][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1265'.
[  245.811831][ T4274] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  245.811906][ T4274] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  246.375447][ T8104] loop5: detected capacity change from 0 to 256
[  246.444556][ T8104] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  246.973659][ T8083] loop3: detected capacity change from 0 to 40427
[  247.006247][ T8083] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  247.038441][ T8083] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  247.105799][ T8083] F2FS-fs (loop3): invalid crc_offset: 33558524
[  247.194558][ T8083] F2FS-fs (loop3): Found nat_bits in checkpoint
[  247.353986][ T8083] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  247.374036][ T8083] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  247.968733][ T8141] can0: slcan on ptm0.
[  248.077593][ T8140] can0 (unregistered): slcan off ptm0.
[  248.087601][ T8151] loop5: detected capacity change from 0 to 1024
[  248.198289][ T8151] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  248.338748][ T8161] EXT4-fs (loop5): shut down requested (1)
[  248.359452][ T4287] Bluetooth: unknown link type 128
[  248.518069][ T8162] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  248.542826][ T8162] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  248.569914][ T8162] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  248.596110][ T8162] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  248.615559][ T8173] loop4: detected capacity change from 0 to 128
[  248.636748][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  248.646059][ T8162] Bluetooth: hci3: Opcode 0x200e failed: -4
[  248.706099][ T8162] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  248.740113][ T8162] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  248.759191][ T8162] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  248.766684][ T8162] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  248.777681][ T8173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  248.792655][ T8173] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  248.827379][ T8162] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  248.855858][ T8162] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  249.045826][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  249.263429][ T8196] loop3: detected capacity change from 0 to 512
[  249.293517][ T8196] EXT4-fs: Ignoring removed bh option
[  249.464664][ T8196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  249.535346][ T8196] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  249.581708][ T8204] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1300'.
[  249.794838][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  250.306854][ T8226] loop5: detected capacity change from 0 to 64
[  250.322534][ T8224] relay: one or more items not logged [item size (56) > sub-buffer size (3)]
[  250.557278][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout
[  250.637586][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  250.797363][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout
[  250.803507][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout
[  250.809623][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout
[  250.966034][ T8208] loop4: detected capacity change from 0 to 32768
[  251.054250][ T8208] XFS (loop4): Mounting V5 Filesystem
[  251.210464][ T8208] XFS (loop4): Ending clean mount
[  251.434832][ T4278] XFS (loop4): Unmounting Filesystem
[  251.933787][ T8279] cifs: Unknown parameter 'f,'
[  251.984444][ T8282] loop3: detected capacity change from 0 to 256
[  252.029334][ T8282] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  252.357800][ T8284] loop4: detected capacity change from 0 to 8192
[  252.413552][ T8284] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  252.450379][ T8284] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  252.498384][ T8284] REISERFS (device loop4): using ordered data mode
[  252.505098][ T8284] reiserfs: using flush barriers
[  252.511546][ T8284] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  252.536413][ T8284] REISERFS (device loop4): checking transaction log (loop4)
[  252.637400][ T4287] Bluetooth: hci2: command 0x0406 tx timeout
[  252.717725][ T4287] Bluetooth: hci3: command 0x200e tx timeout
[  252.877386][ T4287] Bluetooth: hci0: command 0x0406 tx timeout
[  252.921393][ T8284] REISERFS (device loop4): Using tea hash to sort names
[  252.968327][ T8284] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  253.057973][ T8284] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  253.175735][ T8313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1329'.
[  253.205895][ T8313] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1329'.
[  253.317513][ T4980] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  253.520815][ T4980] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  253.544892][ T4980] usb 2-1: config 0 has no interface number 0
[  253.601120][ T4980] usb 2-1: config 0 interface 41 has no altsetting 0
[  253.623946][ T4980] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  253.657228][ T4980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.685699][ T4980] usb 2-1: Product: syz
[  253.695826][ T4980] usb 2-1: Manufacturer: syz
[  253.706213][ T4980] usb 2-1: SerialNumber: syz
[  253.718343][ T4980] usb 2-1: config 0 descriptor??
[  253.976606][ T8326] loop5: detected capacity change from 0 to 8192
[  254.399334][ T4980] CoreChips: probe of 2-1:0.41 failed with error -71
[  254.432062][ T4980] usb 2-1: USB disconnect, device number 13
[  255.347305][ T4984] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  255.437473][ T4886] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  255.465842][ T8377] loop3: detected capacity change from 0 to 256
[  255.539501][ T8377] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  255.559281][ T4984] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.587267][ T4984] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  255.612964][ T4984] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  255.642843][ T4984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.651181][ T4886] usb 6-1: Using ep0 maxpacket: 16
[  255.660822][ T4886] usb 6-1: config 0 has no interfaces?
[  255.667213][ T4984] usb 2-1: Product: syz
[  255.671538][ T4984] usb 2-1: Manufacturer: syz
[  255.694183][ T4984] usb 2-1: SerialNumber: syz
[  255.694712][ T4886] usb 6-1: New USB device found, idVendor=05a9, idProduct=4519, bcdDevice= 0.09
[  255.733843][ T4886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  255.746248][ T4886] usb 6-1: SerialNumber: syz
[  255.761438][ T4886] usb 6-1: config 0 descriptor??
[  255.999533][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  256.005967][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  256.038153][ T4980] usb 6-1: USB disconnect, device number 7
[  256.124892][ T4984] usb 2-1: 0:2 : does not exist
[  256.397468][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'.
[  256.461587][ T4287] Bluetooth: unknown link type 128
[  256.468016][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'.
[  256.549628][ T4984] usb 2-1: USB disconnect, device number 14
[  256.557417][ T8389] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  256.578965][ T8389] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  256.642259][ T8389] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  256.652514][ T8389] Bluetooth: hci4: Opcode 0x200e failed: -4
[  256.661799][ T8393] netlink: 'syz.5.1365': attribute type 2 has an invalid length.
[  256.670977][ T8393] netlink: 'syz.5.1365': attribute type 1 has an invalid length.
[  256.678978][ T8393] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.1365'.
[  256.706779][ T8389] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  256.712104][ T8395] loop0: detected capacity change from 0 to 512
[  256.734887][ T8389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  256.736763][ T8395] EXT4-fs: Ignoring removed nobh option
[  256.741299][ T8389] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  256.835144][ T8395] EXT4-fs (loop0): orphan cleanup on readonly fs
[  256.855287][ T8395] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.1364: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  256.893841][ T8395] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.0.1364: ea_inode dec ref err=-117
[  256.961005][ T8395] EXT4-fs (loop0): 1 orphan inode deleted
[  256.966945][ T8395] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  257.068935][ T8385] loop4: detected capacity change from 0 to 40427
[  257.097044][ T8401] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.1364: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  257.123686][ T8395] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  257.130579][ T8385] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  257.191099][ T8385] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  257.273103][ T8385] F2FS-fs (loop4): Found nat_bits in checkpoint
[  257.286025][ T8408] loop1: detected capacity change from 0 to 256
[  257.316041][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  257.375812][ T8408] exfat: Deprecated parameter 'namecase'
[  257.444831][ T8408] exfat: Deprecated parameter 'namecase'
[  257.458803][ T8385] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  257.465933][ T8385] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  257.490788][ T8408] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  257.626792][ T8385] syz.4.1361: attempt to access beyond end of device
[  257.626792][ T8385] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.727399][ T4984] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  257.925843][ T4984] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  257.947681][ T4984] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  257.971245][ T4984] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  258.024099][ T4984] usb 1-1: config 0 interface 0 has no altsetting 0
[  258.046720][ T4984] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  258.075361][ T4984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.099166][ T4984] usb 1-1: config 0 descriptor??
[  258.108043][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1375'.
[  258.133041][ T8412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  258.176548][ T8417] loop1: detected capacity change from 0 to 8192
[  258.179815][ T8422] loop4: detected capacity change from 0 to 256
[  258.230728][ T8422] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  258.261128][ T8417] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  258.274576][ T8417] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  258.285354][ T8417] REISERFS (device loop1): using ordered data mode
[  258.288208][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1375'.
[  258.292363][ T8417] reiserfs: using flush barriers
[  258.309209][ T8417] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  258.326041][ T8417] REISERFS (device loop1): checking transaction log (loop1)
[  258.468447][ T8422] exFAT-fs (loop4): error, broken FAT chain.
[  258.502001][ T8417] REISERFS (device loop1): Using tea hash to sort names
[  258.509295][ T8422] exFAT-fs (loop4): Filesystem has been set read-only
[  258.516401][ T8422] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880549055e0 iblock : 0, err : -5)
[  258.520910][ T8417] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  258.558876][ T4287] Bluetooth: hci2: command 0x0c1a tx timeout
[  258.576008][ T4984] cherry 0003:046A:0027.000F: unknown global tag 0xd
[  258.593072][ T4984] cherry 0003:046A:0027.000F: item 0 4 1 13 parsing failed
[  258.606843][ T4984] cherry: probe of 0003:046A:0027.000F failed with error -22
[  258.647309][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  258.687701][ T4886] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  258.718866][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout
[  258.778206][ T4887] usb 1-1: USB disconnect, device number 14
[  258.797301][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout
[  258.803454][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout
[  258.883250][ T4290] Bluetooth: unknown link type 128
[  258.907537][ T4886] usb 4-1: Using ep0 maxpacket: 8
[  258.931824][ T4886] usb 4-1: unable to get BOS descriptor or descriptor too short
[  258.947991][ T4886] usb 4-1: no configurations
[  258.957095][ T4886] usb 4-1: can't read configurations, error -22
[  258.979228][ T8433] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  259.007604][ T8433] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  259.027457][ T8433] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  259.055789][ T8433] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  259.069511][ T8433] Bluetooth: hci1: Opcode 0x200e failed: -4
[  259.081515][ T8433] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  259.089272][ T8433] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  259.397404][ T4984] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  259.405066][   T26] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  259.506018][ T4887] kernel write not supported for file /sequencer (pid: 4887 comm: kworker/0:13)
[  259.588872][   T26] usb 2-1: config 0 has no interfaces?
[  259.595211][ T4984] usb 6-1: unable to get BOS descriptor or descriptor too short
[  259.610042][   T26] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  259.619616][ T4984] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.647922][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.656248][ T4984] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  259.676615][   T26] usb 2-1: Product: syz
[  259.681310][ T4984] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  259.692873][   T26] usb 2-1: Manufacturer: syz
[  259.702813][   T26] usb 2-1: SerialNumber: syz
[  259.714919][   T26] usb 2-1: config 0 descriptor??
[  259.720228][ T4984] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  259.740258][ T4984] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  259.751465][ T4984] usb 6-1: config 1 interface 1 has no altsetting 0
[  259.778975][ T4984] usb 6-1: string descriptor 0 read error: -22
[  259.795698][ T4984] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  259.809852][ T4984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.034934][ T4886] usb 2-1: USB disconnect, device number 15
[  260.197722][ T8445] loop3: detected capacity change from 0 to 40427
[  260.216257][ T8453] loop4: detected capacity change from 0 to 32768
[  260.234464][ T8445] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  260.242994][ T8445] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  260.243870][ T8453] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.1387 (8453)
[  260.298067][ T8453] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  260.305470][ T8445] F2FS-fs (loop3): Found nat_bits in checkpoint
[  260.309323][ T8453] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  260.329651][ T8453] BTRFS info (device loop4): enabling ssd optimizations
[  260.336726][ T8453] BTRFS info (device loop4): not using ssd optimizations
[  260.345310][ T8453] BTRFS info (device loop4): turning off barriers
[  260.352200][ T8453] BTRFS info (device loop4): using free space tree
[  260.402191][ T8445] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  260.415249][ T8445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  260.483085][ T8445] syz.3.1384: attempt to access beyond end of device
[  260.483085][ T8445] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  260.702057][ T4984] usb 6-1: USB disconnect, device number 8
[  260.816750][ T8477] loop0: detected capacity change from 0 to 1024
[  260.819956][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1388'.
[  260.857622][ T8477] EXT4-fs: Ignoring removed bh option
[  260.902935][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1388'.
[  260.943837][ T8477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  260.957221][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[  260.978804][ T4278] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  260.991337][ T4367] udevd[4367]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  261.037675][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout
[  261.037688][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  261.052447][ T8477] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.0.1389: path /282/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  261.118024][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[  261.118112][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout
[  261.124319][ T8477] EXT4-fs (loop0): Remounting filesystem read-only
[  261.383397][ T4289] Bluetooth: unknown link type 128
[  261.597580][ T4886] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  261.618101][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  261.697545][ T8490] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  261.709885][ T8490] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  261.740894][ T8490] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  261.771023][ T8490] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  261.786473][ T8490] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  261.797007][ T4886] usb 2-1: Using ep0 maxpacket: 32
[  261.808665][ T8490] Bluetooth: hci0: Opcode 0x200e failed: -4
[  261.814792][ T4886] usb 2-1: config 0 has no interfaces?
[  261.825499][ T8490] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  261.825525][ T4886] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  261.868324][ T4886] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  261.886844][ T4886] usb 2-1: Product: syz
[  261.892722][ T4886] usb 2-1: Manufacturer: syz
[  261.915859][ T4886] usb 2-1: SerialNumber: syz
[  261.955562][ T4886] usb 2-1: config 0 descriptor??
[  261.961472][ T8493] loop3: detected capacity change from 0 to 8192
[  262.036983][ T8501] loop0: detected capacity change from 0 to 512
[  262.055883][ T8501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  262.076520][ T8501] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  262.089893][ T8505] can0: slcan on ptm0.
[  262.091931][ T8506] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.206323][ T4984] usb 2-1: USB disconnect, device number 16
[  262.212752][ T8505] can0 (unregistered): slcan off ptm0.
[  262.218742][ T8505] Falling back ldisc for ptm0.
[  262.429848][ T8503] loop4: detected capacity change from 0 to 8192
[  262.474873][ T8503] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  262.556025][ T8503] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  262.622021][ T8503] REISERFS (device loop4): using ordered data mode
[  262.653745][ T8503] reiserfs: using flush barriers
[  262.702175][ T8503] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  262.729299][ T8503] REISERFS (device loop4): checking transaction log (loop4)
[  263.015841][ T8503] REISERFS (device loop4): Using tea hash to sort names
[  263.035012][ T8503] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  263.389731][ T8518] can0: slcan on ptm0.
[  263.480615][ T8518] can0 (unregistered): slcan off ptm0.
[  263.507301][ T8518] Falling back ldisc for ptm0.
[  263.757408][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout
[  263.763540][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  263.769695][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[  263.837431][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[  263.843539][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[  264.107320][ T4984] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  264.292818][ T8542] loop1: detected capacity change from 0 to 4096
[  264.309289][ T4984] usb 5-1: config 0 has no interfaces?
[  264.332456][ T4984] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  264.345295][ T8542] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  264.365186][ T4984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.410846][ T4984] usb 5-1: Product: syz
[  264.431983][ T4984] usb 5-1: Manufacturer: syz
[  264.437387][ T4984] usb 5-1: SerialNumber: syz
[  264.451756][   T27] audit: type=1800 audit(2000000019.760:99): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1412" name="file1" dev="loop1" ino=30 res=0 errno=0
[  264.478061][ T4984] usb 5-1: config 0 descriptor??
[  264.667417][ T4290] Bluetooth: unknown link type 128
[  264.753258][ T8555] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  264.767563][ T8555] Bluetooth: hci2: Opcode 0x200e failed: -4
[  264.817399][ T8555] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  264.834425][ T8555] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  264.852953][ T4886] usb 5-1: USB disconnect, device number 11
[  264.894668][ T8555] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  264.933133][ T8555] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  264.964078][ T8555] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  265.275491][ T8544] mkiss: ax0: crc mode is auto.
[  265.818045][ T8569] loop5: detected capacity change from 0 to 4096
[  266.203283][ T6267] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  266.210033][ T4886] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  266.224443][ T6267] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  266.430947][ T4886] usb 5-1: unable to get BOS descriptor or descriptor too short
[  266.467865][ T4886] usb 5-1: unable to read config index 0 descriptor/start: -71
[  266.491335][ T4886] usb 5-1: can't read configurations, error -71
[  266.549441][ T8594] loop3: detected capacity change from 0 to 256
[  266.797305][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[  266.877187][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout
[  266.957411][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[  266.963530][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout
[  267.037380][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[  267.512812][ T8615] loop0: detected capacity change from 0 to 4096
[  267.515531][ T8618] loop4: detected capacity change from 0 to 1024
[  267.593822][ T8615] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  267.654513][ T8615] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  267.698636][ T8615] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  267.750864][ T8615] ntfs: volume version 3.1.
[  267.809927][ T4323] hfsplus: b-tree write err: -5, ino 8
[  267.854710][ T8601] loop5: detected capacity change from 0 to 32768
[  267.883911][ T8624] loop1: detected capacity change from 0 to 16
[  267.905695][ T8624] erofs: (device loop1): mounted with root inode @ nid 36.
[  267.956493][   T40] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  268.012168][ T8601] XFS (loop5): Mounting V5 Filesystem
[  268.054316][ T4274] ntfs: (device loop0): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  268.126945][ T8601] XFS (loop5): Ending clean mount
[  268.145920][ T8601] XFS (loop5): Quotacheck needed: Please wait.
[  268.260699][ T8601] XFS (loop5): Quotacheck: Done.
[  268.485237][ T8641] loop4: detected capacity change from 0 to 2048
[  268.573653][ T6267] XFS (loop5): Unmounting Filesystem
[  268.585512][ T8645] device bond0 entered promiscuous mode
[  268.602476][ T8645] device bond_slave_0 entered promiscuous mode
[  268.612981][ T8645] device bond_slave_1 entered promiscuous mode
[  268.613999][ T8646] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.627551][ T8645] device bridge_slave_1 entered promiscuous mode
[  268.684392][ T8645] device batadv0 entered promiscuous mode
[  268.702010][   T27] audit: type=1800 audit(2000000023.980:100): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1438" name="file2" dev="loop4" ino=16 res=0 errno=0
[  268.715659][ T8641] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  268.753378][ T5980] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  268.754063][ T8645] 8021q: adding VLAN 0 to HW filter on device hsr1
[  268.776886][ T8641] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16)
[  268.789001][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  268.826066][ T8641] Remounting filesystem read-only
[  268.885680][ T4290] Bluetooth: hci2: command 0x200e tx timeout
[  268.952315][ T4278] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  268.977409][ T5980] usb 2-1: Using ep0 maxpacket: 16
[  268.988627][ T5980] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  269.086757][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.113587][ T5980] usb 2-1: Product: syz
[  269.136018][ T5980] usb 2-1: Manufacturer: syz
[  269.147183][ T5980] usb 2-1: SerialNumber: syz
[  269.326849][ T8660] loop0: detected capacity change from 0 to 2048
[  269.377323][ T8660] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  269.393840][ T5980] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  269.421247][ T8660] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  269.436648][ T5980] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  269.457479][ T5980] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  269.465854][ T8660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.477255][ T5980] usb 2-1: media controller created
[  269.526983][ T5980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  269.550018][   T27] audit: type=1800 audit(2000000024.860:101): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1451" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1369 res=0 errno=0
[  269.808250][ T5980] zl10353_read_register: readreg error (reg=127, ret==-110)
[  269.816589][ T8670] loop0: detected capacity change from 0 to 512
[  269.853064][ T8670] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  269.899103][ T5980] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  269.916242][ T8670] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.1454: corrupted in-inode xattr
[  269.952586][ T8670] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1454: couldn't read orphan inode 15 (err -117)
[  269.956980][ T5980] usb 2-1: USB disconnect, device number 17
[  269.971940][ T8670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  270.095117][ T8670] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  270.173958][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  270.729684][ T8686] loop4: detected capacity change from 0 to 2048
[  270.756535][ T8686] EXT4-fs: Ignoring removed i_version option
[  270.813257][ T8686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  270.947539][ T8686] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.051905][ T8696] loop5: detected capacity change from 0 to 1024
[  271.098261][ T8696] EXT4-fs: Ignoring removed bh option
[  271.119912][ T8692] loop1: detected capacity change from 0 to 4096
[  271.209546][ T8696] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  271.222654][ T8692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  271.240535][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  271.435743][ T8692] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  271.467337][ T8692] EXT4-fs: Cannot change journaled quota options when quota turned on
[  271.575997][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  271.801756][ T8707] loop5: detected capacity change from 0 to 256
[  271.814216][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  271.902562][ T8707] FAT-fs (loop5): Directory bread(block 64) failed
[  271.922200][ T8707] FAT-fs (loop5): Directory bread(block 65) failed
[  271.971931][ T8707] FAT-fs (loop5): Directory bread(block 66) failed
[  272.004241][ T8707] FAT-fs (loop5): Directory bread(block 67) failed
[  272.047403][ T8707] FAT-fs (loop5): Directory bread(block 68) failed
[  272.084162][ T8707] FAT-fs (loop5): Directory bread(block 69) failed
[  272.131932][ T8707] FAT-fs (loop5): Directory bread(block 70) failed
[  272.183980][ T8707] FAT-fs (loop5): Directory bread(block 71) failed
[  272.219626][ T8707] FAT-fs (loop5): Directory bread(block 72) failed
[  272.233081][ T8707] FAT-fs (loop5): Directory bread(block 73) failed
[  272.704143][ T8723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1475'.
[  272.757242][ T4984] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  272.879820][ T8729] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1478'.
[  272.966071][ T4984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.013345][ T4984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.023610][ T4984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  273.057303][ T4984] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  273.082935][ T4984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.108396][ T4984] usb 5-1: config 0 descriptor??
[  273.529015][ T4984] plantronics 0003:047F:FFFF.0010: unbalanced delimiter at end of report description
[  273.557882][ T4984] plantronics 0003:047F:FFFF.0010: parse failed
[  273.564216][ T4984] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22
[  273.749730][ T4373] usb 5-1: USB disconnect, device number 14
[  274.092329][ T8739] loop0: detected capacity change from 0 to 32768
[  274.204170][ T8739] XFS (loop0): Mounting V5 Filesystem
[  274.276578][ T8739] XFS (loop0): Ending clean mount
[  274.310520][ T8739] XFS (loop0): Quotacheck needed: Please wait.
[  274.460510][ T8739] XFS (loop0): Quotacheck: Done.
[  274.550212][ T8766] loop5: detected capacity change from 0 to 512
[  274.595045][ T8768] loop4: detected capacity change from 0 to 512
[  274.649271][ T8770] loop9: detected capacity change from 0 to 7
[  274.657048][ T8766] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1493: inode has both inline data and extents flags
[  274.672803][ T8768] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  274.701784][ T8766] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1493: couldn't read orphan inode 15 (err -117)
[  274.712174][ T8768] EXT4-fs (loop4): orphan file too big: 4294967295
[  274.726149][    C1] blk_print_req_error: 9 callbacks suppressed
[  274.726168][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.733044][ T8768] EXT4-fs (loop4): mount failed
[  274.741572][    C1] buffer_io_error: 9 callbacks suppressed
[  274.741591][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.750966][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.769454][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.799516][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.806172][ T8766] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  274.808799][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.863991][ T4274] XFS (loop0): Unmounting Filesystem
[  274.903864][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.913176][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  274.977852][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.987164][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  275.032956][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.042262][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  275.057598][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.066838][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  275.075995][ T8770] ldm_validate_partition_table(): Disk read failed.
[  275.077980][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  275.091548][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.100798][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  275.146002][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.155380][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  275.168239][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  275.177566][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  275.203157][ T8770] Dev loop9: unable to read RDB block 0
[  275.250884][ T8770]  loop9: unable to read partition table
[  275.256791][ T8770] loop9: partition table beyond EOD, truncated
[  275.307336][ T8770] loop_reread_partitions: partition scan of loop9 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  275.351568][ T8781] loop5: detected capacity change from 0 to 512
[  275.396641][ T8781] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  275.464372][ T8781] EXT4-fs (loop5): 1 truncate cleaned up
[  275.502094][ T8781] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  275.784699][ T6267] EXT4-fs (loop5): unmounting filesystem.
[  276.343441][ T8785] loop4: detected capacity change from 0 to 32768
[  276.437372][ T4373] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  276.639489][ T4373] usb 4-1: Using ep0 maxpacket: 16
[  276.650448][ T4373] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  276.683456][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.712149][ T4373] usb 4-1: Product: syz
[  276.730283][ T4373] usb 4-1: Manufacturer: syz
[  276.743634][ T4373] usb 4-1: SerialNumber: syz
[  276.992306][ T4373] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  277.024584][ T4373] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  277.069975][ T4373] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  277.095068][ T4373] usb 4-1: media controller created
[  277.149824][ T4373] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  277.411518][ T4373] zl10353_read_register: readreg error (reg=127, ret==-32)
[  277.517902][ T4373] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5
[  277.560173][ T4373] usb 4-1: USB disconnect, device number 16
[  277.700376][ T4290] Bluetooth: unknown link type 128
[  277.787476][ T8816] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  277.805380][ T8816] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  277.820083][ T8816] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  277.836657][ T8816] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  277.856862][ T8816] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  277.883444][ T8816] Bluetooth: hci0: Opcode 0x200e failed: -4
[  277.914358][ T8816] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[  278.827062][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'.
[  278.937282][ T4887] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  279.132952][ T4887] usb 4-1: Using ep0 maxpacket: 8
[  279.140073][ T4887] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  279.175528][ T4887] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  279.212466][ T4887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  279.233123][ T4887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  279.255806][ T4887] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.296705][ T4887] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  279.325149][ T4887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.569278][ T4887] usb 4-1: GET_CAPABILITIES returned 0
[  279.575057][ T4887] usbtmc 4-1:16.0: can't read capabilities
[  279.757402][ T4290] Bluetooth: hci2: command 0x0c1a tx timeout
[  279.781122][ T4887] usb 4-1: USB disconnect, device number 17
[  279.837342][ T4290] Bluetooth: hci1: command 0x0c1a tx timeout
[  279.843481][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout
[  279.849828][ T4287] Bluetooth: hci3: command 0x0c1a tx timeout
[  279.917361][ T4290] Bluetooth: hci0: command 0x0c1a tx timeout
[  280.112173][ T8856] loop1: detected capacity change from 0 to 256
[  280.407430][ T4984] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  280.627363][ T4984] usb 6-1: Using ep0 maxpacket: 16
[  280.640940][ T4984] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  280.653352][ T4984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.662075][ T4354] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  280.670446][ T4984] usb 6-1: Product: syz
[  280.675001][ T4984] usb 6-1: Manufacturer: syz
[  280.680798][ T4984] usb 6-1: SerialNumber: syz
[  280.857265][ T4354] usb 2-1: Using ep0 maxpacket: 32
[  280.874390][ T4354] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  280.891855][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.925505][ T4984] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  280.936122][ T4354] usb 2-1: config 0 descriptor??
[  280.968636][ T4984] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  280.984725][ T4984] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  280.993957][ T4984] usb 6-1: media controller created
[  281.019223][ T4984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  281.158703][ T4354] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  281.187558][ T4354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  281.198380][ T4354] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  281.205627][ T4354] usb 2-1: media controller created
[  281.234741][ T4354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  281.267208][ T4984] zl10353_read_register: readreg error (reg=127, ret==-110)
[  281.310221][ T4984] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  281.323069][ T4984] usb 6-1: USB disconnect, device number 9
[  281.367056][ T4354] az6027: usb out operation failed. (-71)
[  281.381322][ T4354] az6027: usb out operation failed. (-71)
[  281.387508][ T4354] stb0899_attach: Driver disabled by Kconfig
[  281.393527][ T4354] az6027: no front-end attached
[  281.393527][ T4354] 
[  281.401947][ T4354] az6027: usb out operation failed. (-71)
[  281.407928][ T4354] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  281.425531][ T4354] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  281.444934][ T4354] dvb-usb: schedule remote query interval to 400 msecs.
[  281.452705][ T4354] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  281.473376][ T4354] usb 2-1: USB disconnect, device number 18
[  281.515495][ T4354] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  281.997665][ T4290] Bluetooth: hci0: command 0x200e tx timeout
[  282.447212][ T4886] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  282.637254][ T4886] usb 2-1: Using ep0 maxpacket: 32
[  282.646821][ T4886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.687213][ T4886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  282.730825][ T4886] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  282.759949][ T4886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.790398][ T4886] usb 2-1: config 0 descriptor??
[  282.888088][ T8896] loop0: detected capacity change from 0 to 136
[  283.018299][ T8883] netlink: 'syz.1.1550': attribute type 1 has an invalid length.
[  283.027827][ T4887] usb 2-1: USB disconnect, device number 19
[  283.184521][ T8898] loop5: detected capacity change from 0 to 128
[  283.305353][ T8898] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  283.377759][ T8898] hpfs: filesystem error: improperly stopped
[  283.383848][ T8898] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  283.421521][ T8902] loop4: detected capacity change from 0 to 512
[  283.436663][ T8898] hpfs: You really don't want any checks? You are crazy...
[  283.458757][ T8902] EXT4-fs: Ignoring removed nobh option
[  283.474397][ T8902] EXT4-fs (loop4): orphan cleanup on readonly fs
[  283.491544][ T8902] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.1546: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  283.494164][ T8898] hpfs: hpfs_map_sector(): read error
[  283.535066][ T8898] hpfs: code page support is disabled
[  283.538566][ T8902] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.1546: ea_inode dec ref err=-117
[  283.543626][ T8898] hpfs: hpfs_map_4sectors(): unaligned read
[  283.560983][ T8898] hpfs: hpfs_map_4sectors(): unaligned read
[  283.567349][ T8898] hpfs: filesystem error: unable to find root dir
[  283.607588][ T8902] EXT4-fs (loop4): 1 orphan inode deleted
[  283.613615][ T8902] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  283.686945][ T8902] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  283.741942][ T8902] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1546: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  283.753537][ T8898] hpfs: hpfs_map_4sectors(): unaligned read
[  283.795353][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1551'.
[  283.810448][ T8902] overlayfs: failed to look up (284) for ino (-117)
[  283.811528][ T8898] hpfs: hpfs_map_sector(): read error
[  283.833495][ T8898] hpfs: hpfs_map_sector(): read error
[  283.898198][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  284.017370][ T4886] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  284.143289][ T8915] loop4: detected capacity change from 0 to 4096
[  284.207179][ T4886] usb 4-1: Using ep0 maxpacket: 32
[  284.214712][ T4886] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  284.232375][ T8918] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.234370][ T4886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.265060][ T8906] loop0: detected capacity change from 0 to 32768
[  284.330317][ T4886] usb 4-1: config 0 descriptor??
[  284.377022][ T8906] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[  284.377022][ T8906] 
[  284.381331][ T8920] loop1: detected capacity change from 0 to 512
[  284.406038][ T8906] ERROR: (device loop0): remounting filesystem as read-only
[  284.469938][ T4290] Bluetooth: hci1: link tx timeout
[  284.475136][ T4290] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  284.482918][ T4290] Bluetooth: hci1: link tx timeout
[  284.498027][ T4290] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  284.544195][ T4886] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  284.570903][ T4886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  284.597794][ T4886] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  284.605023][ T4886] usb 4-1: media controller created
[  284.614443][ T8920] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  284.649112][ T8927] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  284.681382][ T4886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  284.704415][ T8927] FAT-fs (loop1): Filesystem has been set read-only
[  284.743374][ T8920] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548)
[  284.771399][ T4886] az6027: usb out operation failed. (-71)
[  284.783484][ T4886] az6027: usb out operation failed. (-71)
[  284.797630][ T4886] stb0899_attach: Driver disabled by Kconfig
[  284.827391][ T4886] az6027: no front-end attached
[  284.827391][ T4886] 
[  284.848596][ T4886] az6027: usb out operation failed. (-71)
[  284.872863][ T4886] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  284.904897][ T4886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  284.956758][ T4886] dvb-usb: schedule remote query interval to 400 msecs.
[  284.980764][  T106] BUG: Bad page state in process jfsCommit  pfn:28a32
[  285.003183][  T106] page:ffffea0000a28c80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x28a32
[  285.013873][ T4886] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  285.042836][  T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  285.056685][ T4886] usb 4-1: USB disconnect, device number 18
[  285.104249][ T8933] loop1: detected capacity change from 0 to 256
[  285.106677][  T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000
[  285.156381][  T106] raw: 000000000000001c ffff88802e8a56c8 00000000ffffffff 0000000000000000
[  285.182233][ T4886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  285.193402][  T106] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  285.212111][ T8933] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d)
[  285.214186][  T106] page_owner tracks the page as allocated
[  285.255722][  T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8906, tgid 8905 (syz.0.1548), ts 284343006688, free_ts 284284304924
[  285.282619][  T106]  post_alloc_hook+0x173/0x1a0
[  285.290261][  T106]  get_page_from_freelist+0x1a1e/0x1ab0
[  285.295886][  T106]  __alloc_pages+0x1ec/0x4f0
[  285.304133][  T106]  folio_alloc+0x1c/0x60
[  285.310911][  T106]  filemap_alloc_folio+0xdb/0x480
[  285.316361][  T106]  do_read_cache_folio+0x1bb/0x760
[  285.326188][  T106]  do_read_cache_page+0x32/0x220
[  285.334327][  T106]  __get_metapage+0x316/0xfa0
[  285.339666][  T106]  diRead+0x6f7/0xbb0
[  285.343795][  T106]  jfs_iget+0x89/0x3f0
[  285.348273][  T106]  jfs_fill_super+0x70e/0xad0
[  285.360248][  T106]  mount_bdev+0x287/0x3c0
[  285.364676][  T106]  legacy_get_tree+0xe6/0x180
[  285.369627][  T106]  vfs_get_tree+0x88/0x270
[  285.374172][  T106]  do_new_mount+0x24a/0xa40
[  285.379241][  T106]  __se_sys_mount+0x2e3/0x3d0
[  285.383964][  T106] page last free stack trace:
[  285.389123][  T106]  free_unref_page_prepare+0x8b4/0x9a0
[  285.394724][  T106]  free_unref_page_list+0xbb/0x8e0
[  285.400207][  T106]  release_pages+0x1fa6/0x2220
[  285.405023][  T106]  tlb_flush_mmu+0x105/0x220
[  285.409906][  T106]  tlb_finish_mmu+0xf5/0x220
[  285.414543][  T106]  exit_mmap+0x384/0x960
[  285.420538][  T106]  __mmput+0x118/0x3c0
[  285.424770][  T106]  exit_mm+0x25a/0x360
[  285.429140][  T106]  do_exit+0x905/0x2480
[  285.436962][  T106]  do_group_exit+0x217/0x2d0
[  285.445272][  T106]  get_signal+0x1272/0x1350
[  285.457300][  T106]  arch_do_signal_or_restart+0xc4/0x1350
[  285.465654][  T106]  exit_to_user_mode_loop+0x70/0x110
[  285.474043][  T106]  exit_to_user_mode_prepare+0xee/0x180
[  285.480331][  T106]  syscall_exit_to_user_mode+0x16/0x40
[  285.485822][  T106]  do_syscall_64+0x58/0xa0
[  285.503472][  T106] Modules linked in:
[  285.507719][  T106] CPU: 1 PID: 106 Comm: jfsCommit Not tainted syzkaller #0
[  285.516004][  T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  285.526088][  T106] Call Trace:
[  285.529386][  T106]  <TASK>
[  285.532333][  T106]  dump_stack_lvl+0x188/0x24e
[  285.537016][  T106]  ? show_regs_print_info+0x12/0x12
[  285.542216][  T106]  ? swiotlb_print_info+0x60/0x60
[  285.547268][  T106]  bad_page+0x14b/0x170
[  285.551441][  T106]  free_unref_page_prepare+0x42a/0x9a0
[  285.556925][  T106]  free_unref_page+0x2e/0x3f0
[  285.561604][  T106]  ? __folio_put+0xf1/0x210
[  285.566131][  T106]  txUnlock+0x27e/0xcb0
[  285.570312][  T106]  ? lockdep_hardirqs_on+0x94/0x140
[  285.575536][  T106]  jfs_lazycommit+0x56a/0xa70
[  285.580231][  T106]  ? txFreelock+0x5a0/0x5a0
[  285.584755][  T106]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  285.590660][  T106]  ? do_task_dead+0xd0/0xd0
[  285.595202][  T106]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  285.601094][  T106]  ? __kthread_parkme+0x162/0x1c0
[  285.606135][  T106]  kthread+0x29d/0x330
[  285.610218][  T106]  ? txFreelock+0x5a0/0x5a0
[  285.614748][  T106]  ? kthread_blkcg+0xd0/0xd0
[  285.619341][  T106]  ret_from_fork+0x1f/0x30
[  285.623768][  T106]  </TASK>
[  285.627677][  T106] Disabling lock debugging due to kernel taint
[  285.633885][  T106] page:ffffea0000a28c80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x28a32
[  285.647486][  T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  285.658868][  T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000
[  285.667569][  T106] raw: 000000000000001c ffff88802e8a56c8 00000000ffffffff 0000000000000000
[  285.676163][  T106] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  285.686700][  T106] page_owner tracks the page as allocated
[  285.692494][  T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8906, tgid 8905 (syz.0.1548), ts 284343006688, free_ts 284284304924
[  285.710775][  T106]  post_alloc_hook+0x173/0x1a0
[  285.716232][  T106]  get_page_from_freelist+0x1a1e/0x1ab0
[  285.721850][  T106]  __alloc_pages+0x1ec/0x4f0
[  285.726464][  T106]  folio_alloc+0x1c/0x60
[  285.730775][  T106]  filemap_alloc_folio+0xdb/0x480
[  285.735938][  T106]  do_read_cache_folio+0x1bb/0x760
[  285.741161][  T106]  do_read_cache_page+0x32/0x220
[  285.746124][  T106]  __get_metapage+0x316/0xfa0
[  285.750905][  T106]  diRead+0x6f7/0xbb0
[  285.754935][  T106]  jfs_iget+0x89/0x3f0
[  285.759212][  T106]  jfs_fill_super+0x70e/0xad0
[  285.763956][  T106]  mount_bdev+0x287/0x3c0
[  285.768355][  T106]  legacy_get_tree+0xe6/0x180
[  285.773066][  T106]  vfs_get_tree+0x88/0x270
[  285.777574][  T106]  do_new_mount+0x24a/0xa40
[  285.782115][  T106]  __se_sys_mount+0x2e3/0x3d0
[  285.786793][  T106] page last free stack trace:
[  285.791535][  T106]  free_unref_page_prepare+0x8b4/0x9a0
[  285.797035][  T106]  free_unref_page_list+0xbb/0x8e0
[  285.802187][  T106]  release_pages+0x1fa6/0x2220
[  285.806976][  T106]  tlb_flush_mmu+0x105/0x220
[  285.811623][  T106]  tlb_finish_mmu+0xf5/0x220
[  285.816236][  T106]  exit_mmap+0x384/0x960
[  285.820513][  T106]  __mmput+0x118/0x3c0
[  285.824605][  T106]  exit_mm+0x25a/0x360
[  285.828732][  T106]  do_exit+0x905/0x2480
[  285.832915][  T106]  do_group_exit+0x217/0x2d0
[  285.837675][  T106]  get_signal+0x1272/0x1350
[  285.842207][  T106]  arch_do_signal_or_restart+0xc4/0x1350
[  285.847968][  T106]  exit_to_user_mode_loop+0x70/0x110
[  285.853277][  T106]  exit_to_user_mode_prepare+0xee/0x180
[  285.858864][  T106]  syscall_exit_to_user_mode+0x16/0x40
[  285.864365][  T106]  do_syscall_64+0x58/0xa0
[  285.869065][  T106] ------------[ cut here ]------------
[  285.874571][  T106] kernel BUG at include/linux/mm.h:1146!
[  285.880261][  T106] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  285.886359][  T106] CPU: 1 PID: 106 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  285.895043][  T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  285.905101][  T106] RIP: 0010:put_metapage+0x24f/0x340
[  285.910407][  T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 7b a4 e0 fe e9 25 ff ff ff e8 d1 9c 8f fe 48 8b 3c 24 48 c7 c6 40 3d c6 8a e8 41 b8 ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a a0 8f
[  285.930024][  T106] RSP: 0018:ffffc90002d37ce0 EFLAGS: 00010246
[  285.936100][  T106] RAX: 9241d7c644db6800 RBX: ffff88802e8a56c8 RCX: 9241d7c644db6800
[  285.944077][  T106] RDX: 0000000000000000 RSI: ffffffff8adf2040 RDI: ffffffff8adf2000
[  285.952059][  T106] RBP: 000000000000007f R08: ffffffff8e2029ef R09: 1ffffffff1c4053d
[  285.960052][  T106] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: ffff88802e8a56f0
[  285.968030][  T106] R13: ffffea0000a28cb4 R14: 1ffff11005d14ade R15: 1ffff11005d14aeb
[  285.976004][  T106] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  285.984941][  T106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.991535][  T106] CR2: 00007f1722bea2f8 CR3: 000000005cabd000 CR4: 00000000003506e0
[  285.999519][  T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  286.007496][  T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  286.015476][  T106] Call Trace:
[  286.018779][  T106]  <TASK>
[  286.021716][  T106]  txUnlock+0x427/0xcb0
[  286.025887][  T106]  jfs_lazycommit+0x56a/0xa70
[  286.030579][  T106]  ? txFreelock+0x5a0/0x5a0
[  286.035092][  T106]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  286.040993][  T106]  ? do_task_dead+0xd0/0xd0
[  286.045510][  T106]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  286.051414][  T106]  ? __kthread_parkme+0x162/0x1c0
[  286.056452][  T106]  kthread+0x29d/0x330
[  286.060534][  T106]  ? txFreelock+0x5a0/0x5a0
[  286.065062][  T106]  ? kthread_blkcg+0xd0/0xd0
[  286.069661][  T106]  ret_from_fork+0x1f/0x30
[  286.074098][  T106]  </TASK>
[  286.077123][  T106] Modules linked in:
[  286.087091][  T106] ---[ end trace 0000000000000000 ]---
[  286.092636][  T106] RIP: 0010:put_metapage+0x24f/0x340
[  286.098081][  T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 7b a4 e0 fe e9 25 ff ff ff e8 d1 9c 8f fe 48 8b 3c 24 48 c7 c6 40 3d c6 8a e8 41 b8 ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 8a a0 8f
[  286.117887][  T106] RSP: 0018:ffffc90002d37ce0 EFLAGS: 00010246
[  286.123999][  T106] RAX: 9241d7c644db6800 RBX: ffff88802e8a56c8 RCX: 9241d7c644db6800
[  286.132016][  T106] RDX: 0000000000000000 RSI: ffffffff8adf2040 RDI: ffffffff8adf2000
[  286.140079][  T106] RBP: 000000000000007f R08: ffffffff8e2029ef R09: 1ffffffff1c4053d
[  286.148120][  T106] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: ffff88802e8a56f0
[  286.156113][  T106] R13: ffffea0000a28cb4 R14: 1ffff11005d14ade R15: 1ffff11005d14aeb
[  286.164306][  T106] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  286.173557][  T106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  286.180324][  T106] CR2: 00007f1722bea2f8 CR3: 000000005cabd000 CR4: 00000000003506e0
[  286.189691][  T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  286.197761][  T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  286.205761][  T106] Kernel panic - not syncing: Fatal exception
[  286.212112][  T106] Kernel Offset: disabled
[  286.216497][  T106] Rebooting in 86400 seconds..