last executing test programs:

1m1.492905969s ago: executing program 3 (id=786):
sched_setscheduler(0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1m1.299849339s ago: executing program 3 (id=788):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500))

1m0.368045636s ago: executing program 3 (id=791):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x400, 0x2, 0x0, 0x10, 0x3c, 0x0, 0xee00}, {0x0, 0xfd5, 0x0, 0x0, 0x2000000000000000, 0x1, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@mcast2, 0x1, 0x0, 0x0, 0xb7, 0x3, 0x9, 0xfffffff9}}, 0xe8)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)

1m0.127764018s ago: executing program 3 (id=794):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1)

59.859953232s ago: executing program 3 (id=797):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x22f0}, @void, @eth={@empty, @broadcast, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "5efdc2", 0x8, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[@dstopts={0x2c}]}}}}}}, 0x42)

59.50191237s ago: executing program 3 (id=804):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x660a}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

59.133430538s ago: executing program 32 (id=804):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x660a}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

26.68756705s ago: executing program 2 (id=1008):
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802)

26.350449368s ago: executing program 2 (id=1011):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
eventfd(0xfffffff9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd2c, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10007}}, 0x1c}}, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xf8, 0xff, 0x0, 0x0, 0x1, 0x1000a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)

26.232060003s ago: executing program 2 (id=1013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x24008844)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000110001002cbd700000dcdf2500000000", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x2000e844)

25.895975952s ago: executing program 2 (id=1016):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')

25.843942676s ago: executing program 2 (id=1017):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_io_uring_setup(0x6b0c, &(0x7f00000000c0)={0x0, 0xf6ad, 0x10000, 0x8000, 0x245}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1})
io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0)

25.44644864s ago: executing program 2 (id=1020):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = epoll_create(0x2)
r1 = socket(0x1, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000000})
r2 = getpgid(0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000140)={r0, r1})

25.11975436s ago: executing program 33 (id=1020):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = epoll_create(0x2)
r1 = socket(0x1, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000000})
r2 = getpgid(0x0)
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000140)={r0, r1})

6.894645072s ago: executing program 1 (id=1138):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="82382200c339", 0x6}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

6.563971802s ago: executing program 1 (id=1143):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18)

5.910620752s ago: executing program 1 (id=1150):
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sync_file_range(r0, 0x889, 0x8, 0x2)

5.534515954s ago: executing program 1 (id=1153):
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0xb, 0x214031, 0xffffffffffffffff, 0x92c82000)

3.287973761s ago: executing program 4 (id=1161):
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESHEX, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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")
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)

3.12635804s ago: executing program 0 (id=1163):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0)

2.787921521s ago: executing program 4 (id=1166):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x400, 0x7fff, 0x9, 0x4, 0x0, 0x0, 0x70d0db32, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010)

2.6294544s ago: executing program 1 (id=1167):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x2, {0x2, 0xd}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)

2.410263993s ago: executing program 4 (id=1170):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0002, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.211943056s ago: executing program 4 (id=1172):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
getrandom(&(0x7f0000000040)=""/280, 0xffffffc8, 0x3)

2.195756686s ago: executing program 5 (id=1173):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000280)={@val={0x70, 0xf7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x4, 0x54, 0x64, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x5c2e6bf19cacf817, 0x81, 0x0, 0x6, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xb, 0xf989, "8a4f034fcbae4d"}, @timestamp={0x8, 0xa, 0x5, 0x1}, @md5sig={0x13, 0x12, "367c52b9c6005bbe52f2259a801ec972"}]}}}}}}}}, 0x66)

1.886838275s ago: executing program 5 (id=1174):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd701003000000030000000800090002"], 0x3c}, 0x1, 0x0, 0x0, 0x400c805}, 0x8030)

1.663975829s ago: executing program 5 (id=1175):
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xa400)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402)

1.289990431s ago: executing program 5 (id=1176):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x604a}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

1.054762205s ago: executing program 5 (id=1177):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r2=>0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="001f88"], 0x0, 0x0, 0x0, 0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

935.079312ms ago: executing program 4 (id=1178):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x14927e, 0x2)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
write(r0, &(0x7f0000000440)="96", 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendfile(r0, r0, 0x0, 0x800000a1e)

906.968595ms ago: executing program 0 (id=1179):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

822.49409ms ago: executing program 0 (id=1180):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0xffffffff, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

822.10344ms ago: executing program 4 (id=1181):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)

387.684796ms ago: executing program 0 (id=1182):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000000)={[{@eas_no}, {@eas_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e28, &(0x7f000000a040)="$eJxUk9Mf54W7BzfvZtt2TbZt27Y9ue/HRrZt1yLbtrHZbRvP63d5nj/guXjPzJi51t3wngHeO8D7Bnj/AB8Y4IMDHD7AEQMcOcBRA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXAxw9wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D3DMAP8Y4NgB/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAoQEOC3DiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkACXCpAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAA3w5ABPCfDUAE8L8PQAzwjwzADPCnAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/g2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAQ4PcESAIwMcFeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhng6AC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AMcE+EeAYwP8M8C/Avw7wH8C/DfA/wIcEuI4IY4b4nghjh/iBCFOGOJEIQ4NcViIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhkiIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4VoiCeHeEqIp4Z4Woinh3hGiGeGeFaIgxCDEMMQoxDjEJMQ0xCHjIN5iEWIZYhViHWITYhtiF2IfYhnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiFeGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+GODzEESGODHFUiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYijQ/wqxK9D/CbEb0P8LsTvQ/whxB9D/CnEn0P8JcRfQ/wtxN9DHBPiHyGODfHPEP8K8e8Q/wnx3xD/+x/TCMeJcNwIx4tw/AgniHDCCCeKcGiEwyKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwyQiJcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM8KUIjPDnCUyI8NcLTIjw9wjMiPDPCsyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YITDIxwR4cgIR0X4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYQfRvhRhB9H+EmEn0b4WYSfR/hFhF9GODrCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcIxEf4R4dgI/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYxDYxwW48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhHjkjES41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbj/+kCH/23fHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjj8BhHxDgyxlExPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMY6O8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf49xTIx/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTg0ASHJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJUwwZMgQZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEEl0hwyQRJcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE9M8KQETfDkBE9J8NQET0vw9ATPSPDMBM9KcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+DZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJDk9wRIIjExyV4EMJPpzgIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meDoBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcExyT4R4JjE/wzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4kQpDk1xWIoTpzhJipOmOFmKk6c4RYpTpjhVilOnOE2K06Y4XYrTpzhDijOmOFOKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQigunuEiKi6a4WIqLp7hEikumSIpLpbh0isukuGyKy6W4fIorpLhiiiuluHKKq6S4aoqrpbh6imukuGaKa6W4dorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6R4YoonpWiKJ6d4SoqnpnhaiqeneEaKZ6Z4VoqDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTHF4iiNSHJniqBQfSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2ZTkuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9McXSKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4pjUvwjxbEp/pniXyn+neI/Kf6b4n8pDslwnAzHzXC8DMfPcIIMJ8xwogyHZjgsw4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCLDJTMkw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyNMOTMzwlw1MzPC3D0zM8I8MzMzwrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9mODzDERmOzHBUhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYajM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98zHJPhHxmOzfDPDP/K8O8M/8nw3wz/y3BIjuPkOG6O4+U4fo4T5DhhjhPlODTHYTlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOS6ZIzkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rjV0yJD/bbFOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjuZ4co6n5HhqjqfleHqOZ+R4Zo5n5TjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/x7BzPyfHcHM/L8fwcL8jxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzv+h+v0WePvSfHe//n8pD/f8NzHJHjyBxH5fjQ/9wfMmTIIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzl+mePoHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fccx+T4R45jc/wzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFDi1wWIETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgUsWSIFLFbh0gcsUuOGMzdjlCly+wBUKXLHAlQpcucBVCvyfB6sVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEb/O9fgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYddhIcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgRZ4coGnFHhqgacVeHqBZxR4ZoFnFTgoMCgwLDAqMC4wKTAtMCswL7AosCywKrAusCmwLbArsC/w7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAocXOKLAkQWOKvChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyxwdIFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gWMK/KPAsQX+WeBfBf5d4D8F/lvgf/9rocRxShy3xPFKHL/ECUqcsMSJShxa4rASJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnLHGmEmcucZYSZy1xthJnL3GOEucsca4S5y5xnhLnLXG+EucvcYESFyxxoRIXLnGREhctcbESFy9xiRKXLJESlypx6RKXKXHZEpcrcfkSVyhxxRJXKnHlElcpcdUSVytx9RLXKHHNEtcqce0S1ylx3RLXK3H9EjcoccMSNypx4xI3KXHTEjcrcfMStyhxyxK3KnHrErcpcdsStytx+xJ3KHHHEncqcecSdylx1xJ3K3H3Evcocc8S9ypx7xL3KXHfEvcrcf8SDyjxwBIPKvHgEg8p8dASDyvx8BKPKPHIEo8q8egSjynx2BKPK/H4Ek8o8cQSTyrREk8u8ZQSTy3xtBJPL/GMEs8s8awSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JZ5dLjl0yBA8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0q8u8R7Sry3xPtKvL/EB0p8sMThJY4ocWSJo0p8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9LHF3iVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuKYEv8ocWyJf5b4V4l/l/hPif+W+F+JQyocp8JxKxyvwvErnKDCCSucqMKhFQ6rcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqpcKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoCo+u8JgKj63wuAqPr/CECk+s8KQKrfDkCk+p8NQKT6vw9ArPqPDMCs+qcFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+HZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVDq9wRIUjKxxV4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeHoCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcKx1T4R4VjK/yzwr8q/LvCfyr8t8L/KhxS4zg1jlvjeDWOX+MENU5Y40Q1Dq1xWI0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjUvWSI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9R4Yo0n1WiNJ9d4So2n1nhajafXeEaNZ9Z4Vo2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrHF4jSNqHFnjqBofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csaR9f4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1zimxj9qHFvjnzX+VePfNf5T4781/lfjkAbHaXDcBsdrcPwGJ2hwwgYnanBog8ManLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxs8rsHjGzyhwRMbPKlBGzy5wVMaPLXB0xo8vcEzGjyzwbMaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3h2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDwxsc0eDIBkc1+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNji6wa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BMQ3+0eDYBv9s8K8G/27wnwb/bfC/Boe0OE6L47Y4XovjtzhBixO2OFGLQ1sc1uLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLS7R4pIt0uJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS2e2OJJLdriyS2e0uKpLZ7W4uktntHimS2e1eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxze4ogWR7Y4qsWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+Zdj/unmxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxdEtftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y2OafGPaXBsi3+2+FeLf7f4T4v/tvhfi0M6HKfDcTscr8PxO5ygwwk7nKjDoR0O63DiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFjmFDhgxxpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQO7fDkDk/p8NQOT+vw9A7P6PDMDs/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXh1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdDu9wRIcjOxzV4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eHoDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcOx3T4R4djO/yzw786/LvDfzr8t8P/OhzS4zg9jtvjeD2O3+MEPU7Y40Q9Du1xWI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2SI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9WiPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvsez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7HF4jyN6HNnjqJ7/Y9kem/A8GAUIp7Ztm1vbtm3b3hqp/dw2atttWNu2bTc5c2bev3DNfl2HDXD4AEcMcOQARw1w9AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+Abg/GHvDnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgGMGOHaAQwIcJ8BxAxwvwPEDnCDACQOcKMCJA5wkwEkDnCzAyQOcIsApA5wqwKkDnCbAaQOcLsDpA5whwBkDnCnAmQOcJcBZA5wtwNkDnCPAOQOcK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLMDFA1wiwCUDXCrApQMkwGUCXDbA5QJcPsAVAlwxwJUCXDnAVQJcNcDVAlw9wDUCXDPAtQJcO8B1Alw3wPUCXD/ADQLcMMCNAtw4wE0C3DTAzQLcPMAtAtwywK0C3DrAbQLcNsDtAtw+wB0C3DHAnQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8McCTAjw5wFMCNMBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/AoQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAhwW4PAARwQ4MsBRAY4O8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8J8N8A/wtwTIBjAxwS4jghjhvieCGOH+IEIU4Y4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGOJMIc4c4iwhzhribCHOHuIcIc4Z4lwhzh3iPCHOG+J8Ic4f4gIhLhjiQiEuHOIiIS4a4mIhLh7iEiEuGeJSIS4dIiEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iGuEeKaIa4V4tohrhPiuiGuF+L6IW4Q4oYhbhTixiFuEuKmIW4W4uYhbhHiliFuFeLWIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiriHuFuLuIe4R4p4h7hXi3iHuE+K+Ie4X4v4hHhDigSEeFOLBIR4S4qEhHhbi4SEeEeKRIR4V4tEhHhPisSEeF+LxIZ4Q4okhnhTiySGeEqIhnhriaSGeHuIZIZ4Z4lkhnh3iOSGeG+J5IQ4N8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOLDIT4S4qMhPhbisBCHhzgixJEhjgpxdIiP/7/nEHwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhKdEaISnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6EQyM8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2E10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgswuERjohwZISjIhwd4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYlw6RmJcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M8JUZjPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYhwa4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGYTEOj3FEjCNjHBXj6Bgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpXg0gmS4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6c4CkJmuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg0ATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCQ5LcHiCIxIcmeCoBEcn+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTHGpFJdOkRSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUT0rx5BRPSdEUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FIemeH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0txWIrDUxyR4sgUR6U4OsXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2T4ToaLZbh4hktkuGSGS2W4dIZkuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoYnZnhShidneEqGZnhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52U4NMPzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYhsMyHJ7hiAxHZjgqw9EZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+/b+G383wvQzfz/CDDD/M8KMMP87wkww/zfCzDD/P8IsMv8zwqwy/zvCbDL/N8LsMv8/whwx/zPCnDH/O8JcMf83wtwx/z/CPDP/M8K8M/87wnwz/zfC/DMdkODbDITmOk+O4OY6X4/g5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5LpXj0jmS4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e/+//zfGoHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBzN8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy3FojufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfnOMgxyDHMMcoxHjPWJMc0xyzHPMcixzLHKsc6xybHNscuxz7Ha3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHchyW4/AcR+Q4MsdROY7O8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txTI5jcxxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BQ4t8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbgsAKHFziiwJEFjipwdIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBv/6/z6T4e4F/FPhngX8V+HeB/xT4b4H/FTimwLEFDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSh5Z4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYmDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK3FYicNLHFHiyBJHlTi6xMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EMSWOLXFIheNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVbh0hVS4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1d4SoVWeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVTi0wvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrHFQYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFwyocXuGICkdWOKrC0RU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6pcGyFQ2ocp8ZxaxyvxvFrnKDGCWucqMaJa5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKrGpWukxmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3PR/JpvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Ti0xvNrvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNw2ocXuOIGkfWOKrG0TU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NY6pcWyNQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcfsIhrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ2e0qANntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DQ5t8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbgsAaHNziiwZENjmpwdIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg2MaHNvgkBbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2px6RZpcZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u8ZQWbfHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2txaIvnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXtzhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFoe1OLzFES2ObHFUi6NbfLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc0+LYFod0OE6H43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh0t3SIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4coendGiHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh0M7PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h9d0eG2H13V4fYc3dHhjhzd1eHOHt3R4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3U4rMPhHY7ocGSHozoc3eHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvQ4f4R4d/dvhXh393+E+H/3b4X4djOhzb4ZAex+lx3B7H63H8HifoccIeJ+px4h4n6XHSHifrcfIep+hxyh6n6nHqHqfpcdoep+tx+h5n6HHGHmfqceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6nHhHhfpcdEeF+tx8R6X6HHJHpfqceke6XGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7fG4Ho/v8YQeT+zxpB5P7vGUHu3x1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/rcWiP5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHh/u8ZEeH+3xsR6H9Ti8xxE9juxxVI+je/6Ppnfu4fxwnG+3W2xt29apbdu2bZ/ato33y0ZtL7q7tW3bvPnmfn4PYU4yf0wyyfGZAT47wOEDHDHAkQMcNcDnBjh6gGMGOHaAzw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwIcJ8ChAY4b4HgBjh/gBAEOC3DCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQAJcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IBh/xNXBHhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKAJwVogCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDfC+AO8P8IEAHwzwoQAfDvCRAB8N8LEAHw/wiQCfDPCpAJ8O8JkAnw1weIAjAhwZ4KgAnwtwdIBjAhwb4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/Af4XjOuQEMcJcWiI44Y4XojjhzhBiMNCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyREJcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KURDPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcRbQrw1xNtCvD3EO0K8M8S7QhyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjDQxwR4sgQR4X4XIijQxwT4tgQnw/xhRBf/H+ioRBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEODTCcSMcL8LxI5wgwmERThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EZ4b4XkRnh/hBRFeGOFFEV4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEQ4iDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CO8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLhEY6IcGSEoyJ8LsLREY6JcGyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ahMY4b43gxjh/jBDEOi3HCGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3HTpkyP9x2zzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I0xpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8ZBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4PMYRMY6McVSMz8U4OsYxMY6N8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcUiC4yQ4NMFxExwvwfETnCDBYQlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgkumuBiCS6e4BIJLpkgCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6UoAmenOAp503sqQmeluDpCZ6R4JkJnpXg2Qmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BuxO8J8F7E7wvwfsTfCDBBxN8KMGHE3wkwUcTfCzBxxN8IsEnE3wqwacTfCbBZxMcnuCIBEcmOCrB5xIcneCYBMcm+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyT4ZYJfJfh1gt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgv8lOCTFcVIcmuK4KY6X4vgpTpDisBQnTHGiFCdOcZIUJ01xshQnT3GKFKdMcaoUp05xmhSnTXG6FKdPcYYUZ0xxphRnTnGWFGdNcbYUZ09xjhTnTHGuFOdOcZ4U501xvhTnT3GBFBdMcaEUF05xkRQXTXGxFBdPcYkUl0yRFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U9/kf7/1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6Y4PMURKY5McVSKz6U4OsUxKY5N8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcUiG42Q4NMNxMxwvw/EznCDDYRlOmOFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZLpkhGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvtn/DQzcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjTDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZ3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZjg8wxEZjsxwVIbPZTg6wzEZjs3w+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twSI7j5Dg0x3FzHC/H8XOcIMdhOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumSM5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npSjOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHJ3J8Msencnw6x2dyfDbH4TmOyHFkjqNyfC7H0TmOyXFsjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjkMKHKfAoQWOW+B4BY5f4AQFDitwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqcOECFylw0QIXK3DxApcocMkCKXCpApcucJkCly1wuQKXL3CFAlcscKUCVy5wlQJXLXC1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3LHCjAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAi3w5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8qcFBgUGBYYFRgXGBSYFpgVmBeYFFgWTBsyJAh1gU2BbYFdgX2Bd5d4D0F3lvgfQXeX+ADBT5Y4EMFPlzgIwU+WuBjBT5e4BMFPlngUwU+XeAzBT5b4PACRxQ4ssBRBT5X4OgCxxQ4tsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhJY5T4tASxy1xvBLHL3GCEoeVOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJi5W4eIlLlLhkiZS4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJJ5Z4UomWeHKJp5R4aomnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x7hLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8q8ekSnynx2RKHlziixJEljirxuRJHlzimHOrYEp8v8YUSXyzxpRJfLvGVEl8t8bUSX5/of7+AEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUiF41Q4tMJxKxyvwvErnKDCYRVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlkhFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5UoRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0VDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK7y7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wuEVjqhwZIWjKnyuwtEVjqlwbIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDahynxqE1jlvjeDWOX+MENQ6rccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGqlxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBqt8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqnFQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszUOr3FEjSNrHFXjczWOrnFMjWNrfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHNLgOA0ObXDcBsdrcPwGJ2hwWIMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSzZIg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1aIMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bu9u8J4G723wvgbvb/CBBh9s8KEGH27wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9tcHiDIxoc2eCoBp9rcHSDYxoc2+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+CQFsdpcWiL47Y4XovjtzhBi8NanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyRVpcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qUVbPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Why0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvDWxzR4sgWR7X/f19GtzimxbEtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+OSF+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf73f3k6HKfDoR2O2+F4HY7f4QQdDutwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA6P7vCYDo/t8LgOj+/whA5P7PCkDu3w5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+nw0g4v6/DyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDm/p8NYOb+vw9g7v6PDODu/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHQ7vcESHIzsc1eFzHY7ucEyHYzt8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfD/zoc0uM4PQ7tcdwex+tx/B4n6HFYjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI9L9kiPS/W4dI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/W4cY+b9Lhpj5v1uHmPW/S4ZY9b9bh1j9v0uG2P2/W4fY879Lhjjzv1uHOPu/S4a4+79bh7j3v0uGePe/W4d4/79Lhvj/v1uH+PB/R4YI8H9Xhwj4f0eGiPh/V4eI9H9Hhkj0f1eHSPx/R4bI/H9Xh8jyf0eGKPJ/Vojyf3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To/n9nhej+f3eEGPF/Z4UY8X93hJj5f2eFmPl/d4RY9X9nhVj1f3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V4+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7+7xnh7v7fG+Hu/v8YEeH+zxoR4f7vGRHh/t8bEeH+/xiR6f7PGpHp/u8Zken+1xeI8jehzZ46gen+txdI9jehzb/380nGPz2AcDZZM2RWrbdntq27Zt26dtatu23eb/s1HbRmobabjzzO7eb3Bn7n135uDrA/jGAL45gG8N4NsD+M4AvjuA7w3g+wP4wQB+OIAfDeDHA/jJAH46gJ8N4OcDOGIAvxjALwfwqwH8egC/GcBvB/C7Afx+AH8YwB8H8KcB/HkAfxnAXwfwtwH8fQD/GMA/B/CvAfx7AP8ZwH8HcOQA/jeAowZw9ACOGcCxAzhuAMcP4KAABwc4QYATBjgkwIkCnDjASQKcNMChAU4W4OQBThHglAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4MwBzhLgrAHOFuDsAc4R4JwBzhXg3AHOE+C8Ac4X4PwBLhDgggEuFODCAS4S4KIBLhbg4gEuEeCSAS4V4NIBLhMgAS4b4HIBLh/gCgGuGOBKAa4c4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHOApAZ4aoAGeFuDpAZ4R4LAAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQCfDnB4gAMBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBjgjwiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSA/wU4KsDRAY4JcGyA4wIcH+CgEAeHOEGIE4Y4JMSJQpw4xElCnDTEoSFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4TIiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhziKSGeGqIhnhbi6SGeEeKwEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw5xeIgDIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIY4I8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DXFkiP+FOCrE0SGOCXFsiONCHB/ioAgHRzhBhBNGOCTCiSKcOMJJIpw0wqERThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIRLhXh0hEuEyERLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBv/f5RDhxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRnhThyRGeEuGpERrhaRGeHuEZEQ6L8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QiHRzgQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hMxE+G+FzET4f4QsRvhjhSxG+HOErEb4a4WsRvh7hGxG+GeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxF+GuFnEX4e4YgIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCEdG+F+EoyIcHeGYCMdGOC7C8REOinFwjBPEOGGMQ2KcKMaJY0aO/79xaIyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxbh0jMvESIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SoynxmiMp8V4eoxnxDgsxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa/+3n0GDBl0f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HePwGAdiDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9jHBHjFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b48gY/4txVIyjYxwT49gYx8U4PsZBCQ5OcIIEJ0xwSIITJThxgpMkOGmCQxOcLMHJE5wiwSkTnCrBqROcJsFpE5wuwekTnCHBGROcKcGZE5wlwVkTnC3B2ROcI8E5E5wrwbkTnCfBeROcL8H5E1wgwQUTXCjBhRNcJMFFE1wswcUTXCLBJRNcKsGlE1wmQRJcNsHlElw+wRUSXDHBlRJcOcFVElw1wdUSXD3BNRJcM8G1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjwxwZMSPDnBUxI8NUETPC3B0xM8I8FhCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3g8AQHEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCbBZxN8LsHnE3whwRcTfCnBlxN8JcFXE3wtwdcTfCPBNxN8K8G3E3wnwXcTfC/B9xP8IMEPE/wowY8T/CTBTxP8LMHPExyR4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+DIBP9LcFSCoxMck+DYBMclOD7BQSkOTnGCFCdMcUiKE6U4cYqTpDhpikNTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJkVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5xVNSPDVFUzwtxdNTPCPFYSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4vAUB1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1MckeIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pviyBT/S3FUiqNTHJPi2BTHpTg+xUEZDs5wggwnzHBIhhNlOHGGk2Q4aYZDM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTNcIsMlM1wqw6UzXCZDMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDHDkzI8OcNTMjw1QzM8LcPTMzwjw2EZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neHwDAcyDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88zHJHhFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4cgM/8twVIajMxyT4dgMx2U4PsNBOQ7OcYIcJ8xxSI4T5ThxjpPkOGmOQ3OcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXNcKselc1wmR3JcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyPDnHU3I8NUdzPC3H03M8I8dhOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3j8BwHcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuyHDhr0v088m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e44gcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHEfm+F+Oo3IcneOYHMfmOC7H8TkOKnBwgRMUOGGBQwqcqMCJC5ykwEkLHFrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgUuWuBiBS5e4BIFLlngUgUuXeAyBVLgsgUuV+DyBa5Q4IoFrlTgygWuUuCqBa5W4OoFrlHgmgWuVeDaBa5T4LoFrlfg+gVuUOCGBW5U4MYFblLgpgVuVuDmBW5R4JYFblXg1gVuU+C2BW5X4PYF7lDgjgXuVODOBe5S4K4F7lbg7gXuUeCeBe5V4N4F7lPgvgXuV+D+BR5Q4IEFHlTgwQUeUuChBR5W4OEFHlHgkQUeVeDRBR5T4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQVa4GkFnl7gGQUOK/DMAs8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkChxc4UGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuCIAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ynw3wJHFvhfgaMKHF3gmALHFjiuwPEFDipxcIkTlDhhiUNKnKjEiUucpMRJSxxa4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiVS4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSWeVOLJJZ5S4qklWuJpJZ5e4hklDivxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKvHpEoeXOFBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+IzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iiBK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8SR5b4X4mjShxd4pgSx5Y4rsTxJQ6qcHCFE1Q4YYVDKpyowokrnKTCSSscWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeVzFi+KBBnlDhiRWeVOHJFZ5S4akVWuFpFZ5e4RkVDqvwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCodXOFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+EzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hiAq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8KR1b4X4WjKhxd4ZgKx1Y4rsLxFQ6qcXCNE9Q4YY1DapyoxolrnKTGSWscWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1UuOyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTWeUuOpNVrjaTWeXuMZNQ6r8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckan6rx6RqH1zhQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e44gav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8a/6rx7xr/qfHfGkfW+F+No2ocXeOYGsfWOK7G8TUOanBwgxM0OGGDQxqcqMGJG5ykwUkbHNrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2uBiDS7e4BINLtngUg0u3eAyDdLgsg0u1+DyDa7Q4IoNrtTgyg2u0uCqDa7W4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7U4MkNntLgqQ3a4GkNnt7gGQ0Oa/DMBs9q8OwGz2nw3AbPa/D8Bi9o8MIGL2rw4gYvafDSBi9r8PIGr2jwygavavDqBq9p8NoGr2vw+gZvaPDGBm9q8OYGb2nw1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGhzc40GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uCIBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNvhfg6MaHN3gmAbHNjiuwfENDmpxcIsTtDhhi0NanKjFiVucpMVJWxza4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lItLt3iMi3S4rItLjdmsMu3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7d4SountmiLp7V4eotntDisxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1sc3uJAi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lz7T4bIvPtfh8iy+0+GKLL7X4couvtPj/2Nhhr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBix+2+FGLH7f4SYuftvhZi5+3OKLFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xZEt/tfiqBZHtzimxbEtjvtfhxYHdTi4wwk6nLDDIR1O1OHEHU7S4aQdDu1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/oGDJo0CAP6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o8MQOT+rw5A5P6fDUDu3wtA5P7/CMDod1eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090+GSHT3X4dIfDOxzoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/vcESHX3T4ZYdfdfh1h990+G2H33X4fYc/dPhjhz91+HOHv3T4a4e/dfh7h390+GeHf3X4d4f/dPhvhyM7/K/DUR2O7nBMh2M7HNfh+A4H9Ti4xwl6nLDHIT1O1OPEPU7S46Q9Du1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx7Pjx4/frcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQeT+rx5B5P6fHUHu3xtB5P7/GMHof1eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/Dexzo8f8EAAD//9eYyt4=")
write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x8cf2826c8227b098, 0x0, {0x0, 0x11}}, 0x20)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0)

387.313806ms ago: executing program 5 (id=1183):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x6, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0})

166.372979ms ago: executing program 0 (id=1184):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1})

148.658601ms ago: executing program 1 (id=1185):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
fallocate(r1, 0x1, 0x0, 0x10000)

0s ago: executing program 0 (id=1186):
r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2)
r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x1, 0x3de}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x4})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T7045] EXT4-fs: inline encryption not supported
[  130.989755][ T5767] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  130.996573][    T9] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  131.015240][    T9] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  131.015591][ T7045] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003]
[  131.032071][ T7045] System zones: 0-5
[  131.038447][ T7045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.103618][    T9] usb 2-1: USB disconnect, device number 8
[  131.167954][  T968] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  131.372625][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.374114][  T968] usb 4-1: Using ep0 maxpacket: 32
[  131.400223][  T968] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  131.408845][  T968] usb 4-1: config 0 has no interface number 0
[  131.428277][  T968] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  131.437939][  T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.459445][  T968] usb 4-1: Product: syz
[  131.463651][  T968] usb 4-1: Manufacturer: syz
[  131.507739][  T968] usb 4-1: SerialNumber: syz
[  131.534200][  T968] usb 4-1: config 0 descriptor??
[  131.553846][  T968] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  131.791707][  T968] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  131.814497][  T968] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  132.080291][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.106050][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.111502][ T7059] loop1: detected capacity change from 0 to 512
[  132.163798][ T7059] EXT4-fs (loop1): 1 truncate cleaned up
[  132.179078][ T7059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.316752][ T7059] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.419: bg 0: block 465: padding at end of block bitmap is not set
[  132.323962][ T7053] loop2: detected capacity change from 0 to 32768
[  132.338691][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  132.339515][    T8] usb 4-1: USB disconnect, device number 8
[  132.367759][ T7059] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 483 with error 28
[  132.391099][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  132.410712][ T7059] EXT4-fs (loop1): This should not happen!! Data will be lost
[  132.410712][ T7059] 
[  132.422030][   T27] audit: type=1804 audit(1774482848.574:14): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.413" name="/newroot/114/file0/&" dev="loop2" ino=7 res=1 errno=0
[  132.450210][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  132.467386][ T7059] EXT4-fs (loop1): Total free blocks count 0
[  132.474926][ T7059] EXT4-fs (loop1): Free/Dirty block details
[  132.492270][ T7059] EXT4-fs (loop1): free_blocks=0
[  132.499042][    T8] quatech2 4-1:0.51: device disconnected
[  132.504868][ T7059] EXT4-fs (loop1): dirty_blocks=484
[  132.523795][ T7059] EXT4-fs (loop1): Block reservation details
[  132.529901][ T7059] EXT4-fs (loop1): i_reserved_data_blocks=484
[  132.644113][   T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  133.159124][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.165580][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  133.482495][ T7071] loop0: detected capacity change from 0 to 32768
[  133.508006][ T7071] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.431 (7071)
[  133.563548][ T7071] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  133.577202][ T7070] loop3: detected capacity change from 0 to 32768
[  133.587808][ T7071] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  133.617690][ T7071] BTRFS info (device loop0): force zlib compression, level 3
[  133.633951][ T7070] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.660876][ T7071] BTRFS info (device loop0): force clearing of disk cache
[  133.672843][ T7071] BTRFS info (device loop0): setting nodatasum
[  133.681108][ T7071] BTRFS info (device loop0): allowing degraded mounts
[  133.688176][ T7071] BTRFS info (device loop0): enabling disk space caching
[  133.708717][ T7071] BTRFS info (device loop0): disk space caching is enabled
[  133.794755][ T7070] XFS (loop3): Ending clean mount
[  133.850140][ T7071] BTRFS info (device loop0): auto enabling async discard
[  133.863662][ T7071] BTRFS info (device loop0): rebuilding free space tree
[  133.961186][ T7071] BTRFS info (device loop0): disabling free space tree
[  133.968788][ T7071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  134.008877][ T7071] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  134.021823][ T5766] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.257220][ T7071] BTRFS info (device loop0): balance: start -d -m -s
[  134.352889][ T7071] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[  134.666677][ T7071] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata
[  134.890511][ T7127] loop1: detected capacity change from 0 to 2048
[  134.953723][ T7071] BTRFS info (device loop0): balance: canceled
[  134.974514][ T7128] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.082826][ T5764] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  135.119621][ T7128] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  135.131279][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  135.148645][ T7128] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  135.168123][ T7128] Remounting filesystem read-only
[  135.198329][   T60] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  135.216619][   T60] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  135.231196][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.246356][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.256994][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.273275][   T60] NILFS (loop1): discard dirty page: offset=0, ino=3
[  135.282693][   T60] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  135.295302][   T60] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  135.317867][   T60] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  135.327057][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.343198][   T60] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  135.348682][    T8] usb 3-1: Using ep0 maxpacket: 32
[  135.352595][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.365488][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.365777][    T8] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  135.381385][   T60] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  135.406954][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.409081][    T8] usb 3-1: config 0 has no interface number 0
[  135.431184][ T7123] loop3: detected capacity change from 0 to 32768
[  135.433255][   T60] NILFS (loop1): discard dirty page: offset=131072, ino=3
[  135.448070][    T8] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  135.467695][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.487990][    T8] usb 3-1: Product: syz
[  135.488886][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.492609][    T8] usb 3-1: Manufacturer: syz
[  135.516148][    T8] usb 3-1: SerialNumber: syz
[  135.532477][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.543716][    T8] usb 3-1: config 0 descriptor??
[  135.554409][   T60] NILFS (loop1): discard dirty block: blocknr=46, size=1024
[  135.580854][   T27] audit: type=1804 audit(1774482851.744:15): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.429" name="/newroot/103/file0/&" dev="loop3" ino=7 res=1 errno=0
[  135.594006][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.604677][    T8] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  135.626835][   T60] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  135.649183][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.662038][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.675203][   T60] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  135.686188][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.704110][   T60] NILFS (loop1): discard dirty page: offset=0, ino=18
[  135.711350][   T60] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  135.723189][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.736134][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.782179][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.792968][   T60] NILFS (loop1): discard dirty page: offset=0, ino=12
[  135.793507][    T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  135.800589][   T60] NILFS (loop1): discard dirty block: blocknr=17, size=1024
[  135.817139][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.826482][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.836490][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.858167][   T60] NILFS (loop1): discard dirty page: offset=0, ino=5
[  135.859093][    T8] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  135.873939][ T7132] input: syz0 as /devices/virtual/input/input11
[  135.894861][   T60] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  135.906889][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.920450][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  135.936515][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  136.004674][   T60] NILFS (loop1): discard dirty page: offset=0, ino=4
[  136.036906][   T60] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  136.056155][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  136.096574][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  136.126691][   T60] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  136.153011][ T5765] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  136.175761][ T5765] NILFS (loop1): discard dirty page: offset=0, ino=6
[  136.184366][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.204680][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.215613][ T5765] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  136.224481][ T5765] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  136.235423][ T5765] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  136.244606][ T5765] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  136.445439][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'.
[  136.471135][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  136.479176][    T8] usb 3-1: USB disconnect, device number 6
[  136.488165][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  136.551863][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  136.566638][    T8] quatech2 3-1:0.51: device disconnected
[  136.989575][ T7152] loop1: detected capacity change from 0 to 32768
[  137.003022][ T7152] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.442 (7152)
[  137.027360][ T7152] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  137.056247][ T7152] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  137.067497][ T7152] BTRFS info (device loop1): force zlib compression, level 3
[  137.076135][ T5803] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  137.087892][ T7152] BTRFS info (device loop1): force clearing of disk cache
[  137.096481][ T7152] BTRFS info (device loop1): setting nodatasum
[  137.103071][ T7152] BTRFS info (device loop1): allowing degraded mounts
[  137.112021][ T7152] BTRFS info (device loop1): enabling disk space caching
[  137.119393][ T7152] BTRFS info (device loop1): disk space caching is enabled
[  137.171045][ T7152] BTRFS info (device loop1): auto enabling async discard
[  137.183277][ T7152] BTRFS info (device loop1): rebuilding free space tree
[  137.229994][ T7152] BTRFS info (device loop1): disabling free space tree
[  137.237401][ T7152] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  137.278742][ T7152] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  137.289319][ T5803] usb 1-1: Using ep0 maxpacket: 8
[  137.318890][ T5803] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.338667][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  137.353877][ T5803] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  137.365540][ T5803] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  137.379159][ T5803] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  137.388428][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.477658][ T7152] BTRFS info (device loop1): balance: start -d -m -s
[  137.500469][ T7152] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  137.616376][ T5803] usb 1-1: GET_CAPABILITIES returned 0
[  137.648017][ T5803] usbtmc 1-1:16.0: can't read capabilities
[  137.706052][ T7152] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[  137.880935][ T5803] usb 1-1: USB disconnect, device number 6
[  138.033557][ T7152] BTRFS info (device loop1): found 9 extents, stage: move data extents
[  138.072379][ T7152] BTRFS info (device loop1): found 1 extents, stage: update data pointers
[  138.112744][ T7152] BTRFS info (device loop1): relocating block group 1048576 flags system
[  138.157747][ T7152] BTRFS info (device loop1): found 1 extents, stage: move data extents
[  138.184285][ T7152] BTRFS info (device loop1): balance: ended with status: 0
[  138.238165][ T5765] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  138.937724][ T7191] loop0: detected capacity change from 0 to 512
[  139.059511][ T7187] loop1: detected capacity change from 0 to 4096
[  139.079758][ T7191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.109177][ T7191] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  139.672626][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.684823][ T7213] warning: `syz.2.458' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  139.841461][ T7215] loop8: detected capacity change from 0 to 7
[  139.864704][ T7215] Dev loop8: unable to read RDB block 7
[  139.878248][ T7215]  loop8: unable to read partition table
[  139.894254][ T7215] loop8: partition table beyond EOD, truncated
[  139.903997][ T7215] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  140.179326][  T970] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  140.219290][ T7229] trusted_key: syz.0.466 sent an empty control message without MSG_MORE.
[  140.373225][  T970] usb 2-1: Using ep0 maxpacket: 32
[  140.381553][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.470'.
[  140.395823][  T970] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  140.417622][  T970] usb 2-1: config 0 has no interface number 0
[  140.463127][  T970] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  140.467407][ T7234] loop0: detected capacity change from 0 to 4096
[  140.496907][ T7234] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  140.508648][  T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.524519][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.470'.
[  140.563486][  T970] usb 2-1: Product: syz
[  140.579737][  T970] usb 2-1: Manufacturer: syz
[  140.584388][  T970] usb 2-1: SerialNumber: syz
[  140.606627][ T7235] nbd: device at index 64 is going down
[  140.645481][  T970] usb 2-1: config 0 descriptor??
[  140.699398][  T970] smsc95xx v2.0.0
[  140.826741][ T5755] udevd[5755]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  141.230196][ T7252] loop3: detected capacity change from 0 to 512
[  141.238403][ T7252] ext4: Unknown parameter 'smackfstransmute'
[  141.420706][ T7257] netlink: 'syz.0.479': attribute type 3 has an invalid length.
[  141.517398][  T970] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  141.614973][ T7266] loop0: detected capacity change from 0 to 64
[  141.666070][   T27] audit: type=1800 audit(1774482857.824:16): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.482" name="file1" dev="loop0" ino=21 res=0 errno=0
[  141.699163][ T7268] loop2: detected capacity change from 0 to 1024
[  141.739342][  T970] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  141.761357][  T970] smsc95xx: probe of 2-1:0.67 failed with error -71
[  141.796839][  T970] usb 2-1: USB disconnect, device number 9
[  141.984380][   T49] hfsplus: b-tree write err: -5, ino 25
[  142.002879][   T49] hfsplus: b-tree write err: -5, ino 4
[  142.008487][   T49] hfsplus: b-tree write err: -5, ino 2
[  142.014271][   T49] hfsplus: b-tree write err: -5, ino 26
[  142.033946][   T49] hfsplus: b-tree write err: -5, ino 27
[  143.069335][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  143.152300][ T7302] loop1: detected capacity change from 0 to 128
[  143.177783][ T7302] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.262626][ T7302] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.278604][    T9] usb 1-1: Using ep0 maxpacket: 16
[  143.292393][    T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[  143.308658][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.317000][    T9] usb 1-1: Product: syz
[  143.322214][    T9] usb 1-1: Manufacturer: syz
[  143.327618][    T9] usb 1-1: SerialNumber: syz
[  143.600360][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.634090][ T7301] loop3: detected capacity change from 0 to 32768
[  143.722224][ T7301] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.862020][ T7301] XFS (loop3): Ending clean mount
[  143.886266][ T7301] XFS (loop3): Quotacheck needed: Please wait.
[  143.956708][ T7301] XFS (loop3): Quotacheck: Done.
[  143.957016][    T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  144.047368][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.178443][    T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  144.231903][ T7327] block nbd2: shutting down sockets
[  144.313252][    T9] usb 1-1: USB disconnect, device number 7
[  144.394614][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.560491][ T7331] loop2: detected capacity change from 0 to 4096
[  144.571536][ T7331] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  144.606493][ T7331] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  144.621345][ T7331] ntfs3: loop2: Failed to load $Extend (-22).
[  144.649009][ T7331] ntfs3: loop2: Failed to initialize $Extend.
[  144.696745][ T7331] ntfs3: loop2: ino=0, attr_set_size
[  144.712964][ T7331] ntfs3: loop2: ino=0, attr_set_size
[  144.728783][ T7331] ntfs3: loop2: ino=0, attr_set_size
[  144.740503][ T7331] ntfs3: loop2: no free space to extend mft
[  145.045846][ T7343] loop1: detected capacity change from 0 to 4096
[  145.075829][ T7343] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  145.117922][ T7343] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  145.130310][ T7343] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  145.235616][   T27] audit: type=1800 audit(1774482861.394:17): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.511" name="file1" dev="loop1" ino=24 res=0 errno=0
[  145.337906][  T970] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  145.409723][  T970] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  146.241950][ T7373] loop3: detected capacity change from 0 to 32768
[  146.299843][ T7373] JBD2: Ignoring recovery information on journal
[  146.344118][ T7381] loop2: detected capacity change from 0 to 128
[  146.360885][ T7373] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  146.389227][ T7381] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  146.443325][ T7381] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  146.682250][ T7381] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.529: Logical block already allocated
[  146.685477][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'.
[  146.855029][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.975530][ T7388] team0: Port device team_slave_0 removed
[  147.011222][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  147.059235][ T7393] loop2: detected capacity change from 0 to 1024
[  147.082562][ T7393] EXT4-fs: inline encryption not supported
[  147.113582][ T7393] EXT4-fs: Ignoring removed bh option
[  147.129078][ T7393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  147.168061][ T7393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.330016][ T7393] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.531: Allocating blocks 449-513 which overlap fs metadata
[  147.362847][ T7393] EXT4-fs (loop2): Remounting filesystem read-only
[  147.478280][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.889534][ T7399] loop0: detected capacity change from 0 to 32768
[  147.945360][ T7399] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.130675][ T7399] XFS (loop0): Ending clean mount
[  148.182429][ T7399] XFS (loop0): User initiated shutdown received.
[  148.200905][ T7399] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  148.222830][ T7399] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  148.255877][ T5764] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.574305][ T7406] loop2: detected capacity change from 0 to 32768
[  148.584442][ T7418] netlink: 'syz.3.538': attribute type 3 has an invalid length.
[  148.609607][ T7406] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.543 (7406)
[  148.674007][ T7406] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  148.725167][ T7406] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  148.769657][ T7406] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  148.795557][ T7406] BTRFS info (device loop2): use zstd compression, level 3
[  148.810598][ T7406] BTRFS info (device loop2): using free space tree
[  149.072273][ T7406] BTRFS info (device loop2): enabling ssd optimizations
[  149.131086][ T7406] BTRFS info (device loop2): auto enabling async discard
[  149.312522][ T7451] loop1: detected capacity change from 0 to 256
[  149.387081][ T7451] FAT-fs (loop1): Directory bread(block 64) failed
[  149.409772][ T7451] FAT-fs (loop1): Directory bread(block 65) failed
[  149.427238][ T7451] FAT-fs (loop1): Directory bread(block 66) failed
[  149.445560][ T7451] FAT-fs (loop1): Directory bread(block 67) failed
[  149.490019][ T7451] FAT-fs (loop1): Directory bread(block 68) failed
[  149.497943][ T7451] FAT-fs (loop1): Directory bread(block 69) failed
[  149.530823][ T7451] FAT-fs (loop1): Directory bread(block 70) failed
[  149.537565][ T7451] FAT-fs (loop1): Directory bread(block 71) failed
[  149.563329][ T7451] FAT-fs (loop1): Directory bread(block 72) failed
[  149.575567][ T5767] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  149.578454][ T7451] FAT-fs (loop1): Directory bread(block 73) failed
[  149.801457][   T27] audit: type=1800 audit(1774482865.944:18): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.554" name="file1" dev="loop1" ino=1048606 res=0 errno=0
[  149.822276][    C0] vkms_vblank_simulate: vblank timer overrun
[  150.328966][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  150.521554][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.542852][    T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  150.557562][    T8] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  150.576621][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.588327][    T8] usb 1-1: config 0 descriptor??
[  150.842105][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'.
[  151.061239][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.070759][ T7495] input: syz0 as /devices/virtual/input/input12
[  151.081923][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.116176][    T8] usb 1-1: USB disconnect, device number 8
[  151.205990][ T7497] loop1: detected capacity change from 0 to 4096
[  151.217307][ T7497] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  151.228876][ T7497] ntfs3: loop1: It is recommened to use chkdsk.
[  151.656894][ T7507] loop3: detected capacity change from 0 to 2048
[  151.691587][ T7507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.980483][ T7518] loop3: detected capacity change from 0 to 4096
[  152.009824][ T7518] EXT4-fs: inline encryption not supported
[  152.068102][ T7518] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  152.090017][ T7518] System zones: 0-5
[  152.125101][ T7518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.196760][   T27] audit: type=1800 audit(1774482868.354:19): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.572" name="file1" dev="loop3" ino=15 res=0 errno=0
[  152.373141][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.577'.
[  152.413357][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.117711][ T7546] loop0: detected capacity change from 0 to 32768
[  153.194229][ T7546] syz.0.591: attempt to access beyond end of device
[  153.194229][ T7546] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  153.208334][ T7546] lbmIODone: I/O error in JFS log
[  153.214737][ T7546] *** Log Format Error ! ***
[  153.220017][ T7546] lmLogInit: exit(-22)
[  153.224474][ T7546] lmLogOpen: exit(-22)
[  153.289030][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  153.290028][ T5772] Bluetooth: hci4: command 0x1003 tx timeout
[  153.428759][ T5803] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  153.620163][ T5803] usb 2-1: Using ep0 maxpacket: 16
[  153.630501][ T5803] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  153.648608][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.656835][ T5803] usb 2-1: Product: syz
[  153.661391][ T5803] usb 2-1: Manufacturer: syz
[  153.666040][ T5803] usb 2-1: SerialNumber: syz
[  153.673667][ T5803] usb 2-1: config 0 descriptor??
[  153.681563][ T5803] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  153.699664][ T5803] usb 2-1: Detected FT-X
[  153.894761][ T5803] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  153.995689][ T7562] loop0: detected capacity change from 0 to 4096
[  154.032097][ T7564] loop2: detected capacity change from 0 to 2048
[  154.072840][ T7564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.179422][ T7560] loop3: detected capacity change from 0 to 40427
[  154.199054][ T7560] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x7ffff
[  154.210467][ T7560] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  154.218726][ T7560] F2FS-fs (loop3): Image doesn't support compression
[  154.235977][ T7560] F2FS-fs (loop3): invalid crc value
[  154.268462][ T7560] F2FS-fs (loop3): Found nat_bits in checkpoint
[  154.318024][ T5803] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  154.350326][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.417167][ T7560] F2FS-fs (loop3): Start checkpoint disabled!
[  154.453757][ T7560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  154.624672][   T27] audit: type=1800 audit(1774482870.784:20): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.587" name="file1" dev="loop3" ino=10 res=0 errno=0
[  154.650394][   T23] usb 2-1: USB disconnect, device number 10
[  154.672085][   T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  154.701230][   T23] ftdi_sio 2-1:0.0: device disconnected
[  154.706305][ T7560] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50
[  154.762747][ T7560] syz.3.587: attempt to access beyond end of device
[  154.762747][ T7560] loop3: rw=2049, sector=77824, nr_sectors = 592 limit=40427
[  154.993894][   T11] kworker/u4:0: attempt to access beyond end of device
[  154.993894][   T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  155.029173][   T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  155.036431][   T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  155.368037][ T7576] loop0: detected capacity change from 0 to 32768
[  155.407069][ T7576] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.593 (7576)
[  155.426014][ T7574] loop2: detected capacity change from 0 to 32768
[  155.450167][ T7576] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  155.461975][ T7576] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  155.472444][ T7576] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  155.482724][ T7576] BTRFS info (device loop0): use zstd compression, level 3
[  155.494369][ T7576] BTRFS info (device loop0): using free space tree
[  155.507796][ T7574] JBD2: Ignoring recovery information on journal
[  155.532161][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.596'.
[  155.573649][ T7574] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  155.678892][ T7576] BTRFS info (device loop0): enabling ssd optimizations
[  155.728911][ T7576] BTRFS info (device loop0): auto enabling async discard
[  156.038036][ T5767] ocfs2: Unmounting device (7,2) on (node local)
[  156.096837][ T5764] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  156.370791][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  156.581822][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.616497][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.637474][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  156.679728][   T23] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  156.695174][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.706825][   T23] usb 2-1: config 0 descriptor??
[  156.842496][ T7621] loop3: detected capacity change from 0 to 4096
[  156.874498][ T7621] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  157.134543][   T23] steelseries 0003:1038:1410.0007: unknown main item tag 0x7
[  157.160518][   T23] steelseries 0003:1038:1410.0007: missing HID_OUTPUT_REPORT 0
[  157.176801][ T7625] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  157.337861][   T23] usb 2-1: USB disconnect, device number 11
[  157.933385][ T7632] loop2: detected capacity change from 0 to 64
[  158.213160][ T7637] loop2: detected capacity change from 0 to 4096
[  158.243051][ T7638] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.274477][   T27] audit: type=1800 audit(1774482874.434:21): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.614" name="file1" dev="loop2" ino=15 res=0 errno=0
[  158.521716][ T7645] loop0: detected capacity change from 0 to 256
[  158.627814][ T7645] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  158.701412][ T7633] loop1: detected capacity change from 0 to 32768
[  158.772683][   T27] audit: type=1800 audit(1774482874.934:22): pid=7645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.617" name="file2" dev="loop0" ino=1048608 res=0 errno=0
[  158.775560][ T7633] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.610 (7633)
[  158.868195][ T7633] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  158.894528][ T7633] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  158.937629][ T7633] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  158.959069][ T7633] BTRFS info (device loop1): use zstd compression, level 3
[  158.966346][ T7633] BTRFS info (device loop1): using free space tree
[  159.268624][ T7633] BTRFS info (device loop1): enabling ssd optimizations
[  159.275813][ T7633] BTRFS info (device loop1): auto enabling async discard
[  159.632956][ T5765] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  159.866552][ T5755] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (5755)
[  161.337550][ T7722] loop0: detected capacity change from 0 to 4096
[  161.359521][ T7722] EXT4-fs: inline encryption not supported
[  161.411964][ T7722] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  161.436577][ T7722] System zones: 0-5
[  161.461071][ T7722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.558627][ T5804] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  161.615205][   T27] audit: type=1800 audit(1774482877.774:23): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.644" name="file1" dev="loop0" ino=15 res=0 errno=0
[  161.764940][ T5804] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  161.782715][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.796096][ T5804] usb 2-1: Product: syz
[  161.797525][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.801682][ T5804] usb 2-1: Manufacturer: syz
[  161.818138][ T5804] usb 2-1: SerialNumber: syz
[  161.860478][ T5804] usb 2-1: config 0 descriptor??
[  162.162189][ T7725] loop2: detected capacity change from 0 to 40427
[  162.176152][ T7725] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  162.183717][ T7725] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  162.206781][ T7725] F2FS-fs (loop2): Found nat_bits in checkpoint
[  162.252775][ T7725] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  162.260700][ T7725] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  162.346596][ T5767] syz-executor: attempt to access beyond end of device
[  162.346596][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  162.361787][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  162.922308][ T5804] usb 2-1: Firmware version (0.0) predates our first public release.
[  162.952270][ T5804] usb 2-1: Please update to version 0.2 or newer
[  163.043416][ T5804] usb 2-1: USB disconnect, device number 12
[  163.294553][ T7757] netlink: 'syz.3.657': attribute type 2 has an invalid length.
[  163.430002][ T7749] loop0: detected capacity change from 0 to 32768
[  163.438309][ T7749] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.653 (7749)
[  163.478637][  T968] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  163.498073][ T7749] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.529540][ T7749] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  163.551595][ T7749] BTRFS info (device loop0): enabling auto defrag
[  163.558172][ T7749] BTRFS info (device loop0): use no compression
[  163.578856][ T7749] BTRFS info (device loop0): force clearing of disk cache
[  163.586085][ T7749] BTRFS info (device loop0): max_inline at 4096
[  163.602762][ T7749] BTRFS info (device loop0): disabling free space tree
[  163.701425][  T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.729281][ T7749] BTRFS info (device loop0): enabling ssd optimizations
[  163.736914][  T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.777899][ T7749] BTRFS info (device loop0): auto enabling async discard
[  163.796806][  T968] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  163.832246][ T7749] BTRFS info (device loop0): rebuilding free space tree
[  163.839602][  T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.890032][  T968] usb 3-1: config 0 descriptor??
[  163.926055][ T7749] BTRFS info (device loop0): disabling free space tree
[  163.955957][ T7749] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.986645][ T7749] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  164.088579][   T27] audit: type=1800 audit(1774482880.244:24): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.653" name="file1" dev="loop0" ino=260 res=0 errno=0
[  164.250072][ T5764] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.274545][ T7785] loop3: detected capacity change from 0 to 1024
[  164.318454][  T968] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  164.346196][  T968] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  164.366568][  T968] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0008/input/input13
[  164.474504][  T968] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  164.592017][  T968] usb 3-1: USB disconnect, device number 7
[  164.737642][ T7789] fido_id[7789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  164.828656][ T5803] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  164.935543][ T7783] loop1: detected capacity change from 0 to 32768
[  164.963316][ T7783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.661 (7783)
[  165.039900][ T7783] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.059595][ T5803] usb 1-1: Using ep0 maxpacket: 32
[  165.067245][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.069467][ T7783] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  165.097439][ T5803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.118290][ T5803] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  165.135657][ T7783] BTRFS info (device loop1): setting nodatasum
[  165.163248][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.172955][ T7783] BTRFS info (device loop1): force zlib compression, level 3
[  165.181986][ T5803] usb 1-1: config 0 descriptor??
[  165.187202][ T7783] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  165.200216][ T7783] BTRFS info (device loop1): use lzo compression, level 0
[  165.207411][ T7783] BTRFS info (device loop1): turning on flush-on-commit
[  165.249001][ T7783] BTRFS info (device loop1): enabling auto defrag
[  165.255572][ T7783] BTRFS info (device loop1): max_inline at 4096
[  165.273913][ T7783] BTRFS info (device loop1): using free space tree
[  165.383509][ T7783] BTRFS info (device loop1): enabling ssd optimizations
[  165.464965][ T7792] loop3: detected capacity change from 0 to 32768
[  165.529636][ T7792] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  165.565951][ T7792] JBD2: Ignoring recovery information on journal
[  165.656560][ T5803] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  165.682947][ T7792] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  165.886627][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.059677][ T5759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5759)
[  166.063931][ T5803] usb 1-1: USB disconnect, device number 9
[  166.095256][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  166.164362][ T7820] netlink: 71 bytes leftover after parsing attributes in process `syz.1.667'.
[  166.513453][ T7823] loop3: detected capacity change from 0 to 2048
[  166.576176][ T7827] loop1: detected capacity change from 0 to 512
[  166.590649][ T7823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.614165][ T7823] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.663965][ T7827] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.669: inode #13: comm syz.1.669: iget: illegal inode #
[  166.689854][ T7823] fs-verity: sha512 using implementation "sha512-avx2"
[  166.730380][ T7827] EXT4-fs (loop1): Remounting filesystem read-only
[  166.772446][ T7827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.783639][ T7831] loop2: detected capacity change from 0 to 4096
[  166.856750][ T7833] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.977469][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.195469][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.339284][ T7845] loop0: detected capacity change from 0 to 131072
[  168.392388][ T7845] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  168.443363][ T7845] XFS (loop0): Starting recovery (logdev: internal)
[  168.484065][ T7845] XFS (loop0): Ending recovery (logdev: internal)
[  168.555107][ T5764] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  169.664016][ T7896] loop3: detected capacity change from 0 to 64
[  169.689455][ T7896] syz.3.694: attempt to access beyond end of device
[  169.689455][ T7896] loop3: rw=0, sector=548, nr_sectors = 2 limit=64
[  169.690275][ T7843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  169.703948][ T7896] Buffer I/O error on dev loop3, logical block 274, async page read
[  169.723407][ T7896] syz.3.694: attempt to access beyond end of device
[  169.723407][ T7896] loop3: rw=0, sector=548, nr_sectors = 2 limit=64
[  169.737093][ T7896] Buffer I/O error on dev loop3, logical block 274, async page read
[  169.751995][   T27] audit: type=1800 audit(1774482885.904:25): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.694" name="file3" dev="loop3" ino=6 res=0 errno=0
[  169.755182][ T7896] Trying to free block not in datazone
[  169.779088][ T7896] Trying to free block not in datazone
[  169.784583][ T7896] Trying to free block not in datazone
[  169.790137][ T7896] Trying to free block not in datazone
[  169.795618][ T7896] Trying to free block not in datazone
[  169.801196][ T7896] Trying to free block not in datazone
[  169.807049][ T7896] Trying to free block not in datazone
[  169.812632][ T7896] Trying to free block not in datazone
[  169.818198][ T7896] Trying to free block not in datazone
[  169.823775][ T7896] Trying to free block not in datazone
[  169.829297][ T7896] Trying to free block not in datazone
[  169.834775][ T7896] Trying to free block not in datazone
[  169.840332][ T7896] minix_free_block (loop3:6): bit already cleared
[  169.847371][ T7896] Trying to free block not in datazone
[  169.853345][ T7896] Trying to free block not in datazone
[  169.858872][ T7896] Trying to free block not in datazone
[  169.864344][ T7896] minix_free_block (loop3:7): bit already cleared
[  169.870870][ T7896] Trying to free block not in datazone
[  169.877098][ T7896] Trying to free block not in datazone
[  169.883029][ T7896] Trying to free block not in datazone
[  169.888606][ T7896] Trying to free block not in datazone
[  169.894081][ T7896] Trying to free block not in datazone
[  169.899855][ T7896] minix_free_block (loop3:6): bit already cleared
[  170.233890][ T7900] loop3: detected capacity change from 0 to 40427
[  170.249190][ T7900] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  170.256408][ T7900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  170.268806][ T7900] F2FS-fs (loop3): invalid crc value
[  170.370059][ T7900] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  170.377334][ T7900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  170.389730][ T7843] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  170.396235][ T7843] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  170.406207][ T7843] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  170.492176][ T5766] syz-executor: attempt to access beyond end of device
[  170.492176][ T5766] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  170.512285][ T5766] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  170.656738][ T7912] loop2: detected capacity change from 0 to 2048
[  170.692244][ T7912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.708660][ T5803] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  170.758259][ T7912] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.778694][  T968] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  170.876235][ T7912] syz.2.700 (7912) used greatest stack depth: 20360 bytes left
[  170.892767][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.948734][ T5803] usb 1-1: Using ep0 maxpacket: 32
[  170.959167][ T5803] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32
[  170.968994][  T968] usb 2-1: Using ep0 maxpacket: 32
[  170.969688][ T5803] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  170.994451][  T968] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  170.997000][ T5803] usb 1-1: config 1 interface 0 has no altsetting 0
[  171.023104][  T968] usb 2-1: config 2 has no interface number 0
[  171.041883][ T5803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.050460][  T968] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  171.052008][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.067986][  T968] usb 2-1: config 2 interface 88 has no altsetting 0
[  171.071506][ T5803] usb 1-1: Product: syz
[  171.083903][  T968] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  171.085405][ T5803] usb 1-1: Manufacturer: syz
[  171.095217][  T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.101513][ T5803] usb 1-1: SerialNumber: syz
[  171.115646][  T968] usb 2-1: Product: syz
[  171.117507][ T7898] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  171.125349][  T968] usb 2-1: Manufacturer: syz
[  171.136582][  T968] usb 2-1: SerialNumber: syz
[  171.148157][ T7908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  171.207272][   T27] audit: type=1326 audit(1774482887.364:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47c419c799 code=0x7fc00000
[  171.386495][ T7908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  171.432885][ T7928] loop2: detected capacity change from 0 to 164
[  171.463308][ T7928] Unable to read rock-ridge attributes
[  171.493050][ T7928] Unable to read rock-ridge attributes
[  171.549824][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.564236][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.611246][ T5803] cdc_ether: probe of 1-1:1.0 failed with error -71
[  171.625200][ T5803] usb 1-1: USB disconnect, device number 10
[  171.779564][   T27] audit: type=1326 audit(1774482887.944:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.3.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47c413db19 code=0x7fc00000
[  171.849940][ T5771] Bluetooth: hci2: command 0x0c1a tx timeout
[  172.217626][  T968] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  172.249406][  T968] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  172.265671][  T968] asix: probe of 2-1:2.88 failed with error -71
[  172.276165][  T968] usb 2-1: USB disconnect, device number 13
[  172.335848][ T7948] loop0: detected capacity change from 0 to 4096
[  172.358644][ T5803] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  172.410035][ T5772] Bluetooth: hci1: command 0x0c1a tx timeout
[  172.416256][ T5771] Bluetooth: hci3: command 0x0c1a tx timeout
[  172.422620][   T27] audit: type=1804 audit(1774482888.564:28): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.715" name="/newroot/166/bus/file1" dev="loop0" ino=33 res=1 errno=0
[  172.561153][ T5803] usb 4-1: Using ep0 maxpacket: 16
[  172.576409][ T5803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.613502][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.639907][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.658030][ T5803] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  172.672714][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.711565][ T5803] usb 4-1: config 0 descriptor??
[  172.737741][ T7954] netlink: 484 bytes leftover after parsing attributes in process `syz.0.718'.
[  172.997777][ T7960] loop2: detected capacity change from 0 to 8192
[  173.267694][ T5803] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0
[  173.326359][ T5803] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0
[  173.369658][ T5803] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0
[  173.377108][ T5803] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0
[  173.425024][ T5803] hid-picolcd 0003:04D8:F002.000A: unknown main item tag 0x0
[  173.538805][ T5803] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf3 found
[  173.578322][ T5803] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf4 found
[  173.624897][ T5803] usb 4-1: USB disconnect, device number 9
[  173.637784][ T7964] loop0: detected capacity change from 0 to 65536
[  173.763179][ T7964] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  173.810705][ T7964] XFS (loop0): Ending clean mount
[  173.825334][ T7964] XFS (loop0): Quotacheck needed: Please wait.
[  173.887167][ T7964] XFS (loop0): Quotacheck: Done.
[  174.043450][ T5764] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  174.337304][ T7984] loop3: detected capacity change from 0 to 4096
[  174.742461][ T7982] loop2: detected capacity change from 0 to 40427
[  174.743431][ T7971] loop1: detected capacity change from 0 to 40427
[  174.772965][ T7982] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff
[  174.783702][ T7971] F2FS-fs (loop1): invalid crc value
[  174.790567][ T7982] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x724
[  174.815587][ T7982] F2FS-fs (loop2): invalid crc value
[  174.830674][ T7971] F2FS-fs (loop1): Found nat_bits in checkpoint
[  174.841136][ T7982] F2FS-fs (loop2): Found nat_bits in checkpoint
[  174.927110][ T7982] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  175.008755][ T7971] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  175.016593][ T7982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  175.067772][ T7982] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910
[  175.098328][ T7971] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SIT and SSA
[  175.142953][ T7971] F2FS-fs (loop1): Stopped filesystem due to reason: 4
[  175.160762][ T7982] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  175.282821][ T5767] syz-executor: attempt to access beyond end of device
[  175.282821][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.299999][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  175.693664][ T7988] loop3: detected capacity change from 0 to 40427
[  175.695110][ T7987] loop0: detected capacity change from 0 to 40427
[  175.730554][ T7987] F2FS-fs (loop0): invalid crc value
[  175.741206][ T7988] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  175.778801][ T7987] F2FS-fs (loop0): Found nat_bits in checkpoint
[  175.780332][ T7988] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  175.840600][ T7988] F2FS-fs (loop3): invalid crc value
[  175.884849][ T7988] F2FS-fs (loop3): Found nat_bits in checkpoint
[  175.904309][ T7987] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  175.978285][ T7987] syz.0.729: attempt to access beyond end of device
[  175.978285][ T7987] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  176.112077][ T7988] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  176.148659][ T7988] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  176.229467][ T7987] syz.0.729: attempt to access beyond end of device
[  176.229467][ T7987] loop0: rw=2049, sector=77824, nr_sectors = 2064 limit=40427
[  176.330600][ T7987] syz.0.729: attempt to access beyond end of device
[  176.330600][ T7987] loop0: rw=2049, sector=79888, nr_sectors = 1080 limit=40427
[  176.405755][ T7987] syz.0.729: attempt to access beyond end of device
[  176.405755][ T7987] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  176.683090][ T5764] syz-executor: attempt to access beyond end of device
[  176.683090][ T5764] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  176.737856][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  177.230474][ T8008] loop1: detected capacity change from 0 to 131072
[  177.266029][ T8008] F2FS-fs (loop1): invalid crc value
[  177.288306][ T8008] F2FS-fs (loop1): Found nat_bits in checkpoint
[  177.338265][ T8008] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  177.802687][ T8029] input: syz0 as /devices/virtual/input/input14
[  177.852067][ T8030] binder: 8026:8030 ioctl c0306201 200000000480 returned -14
[  178.054826][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.050098][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.750'.
[  179.078313][ T8054] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (8)
[  179.668649][    T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  179.860684][    T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  179.885937][    T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  179.904637][    T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  179.915095][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.929466][ T8062] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  179.962286][    T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  180.186613][  T968] usb 2-1: USB disconnect, device number 14
[  180.973140][ T8087] loop2: detected capacity change from 0 to 256
[  181.021968][ T8087] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  182.558404][ T8132] loop2: detected capacity change from 0 to 256
[  182.569803][ T5803] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  182.614245][ T8132] FAT-fs (loop2): Directory bread(block 64) failed
[  182.638643][ T8132] FAT-fs (loop2): Directory bread(block 65) failed
[  182.645397][ T8132] FAT-fs (loop2): Directory bread(block 66) failed
[  182.654074][ T8132] FAT-fs (loop2): Directory bread(block 67) failed
[  182.660820][ T8132] FAT-fs (loop2): Directory bread(block 68) failed
[  182.667389][ T8132] FAT-fs (loop2): Directory bread(block 69) failed
[  182.675930][ T8132] FAT-fs (loop2): Directory bread(block 70) failed
[  182.682638][ T8132] FAT-fs (loop2): Directory bread(block 71) failed
[  182.689350][ T8132] FAT-fs (loop2): Directory bread(block 72) failed
[  182.695890][ T8132] FAT-fs (loop2): Directory bread(block 73) failed
[  182.792352][ T5803] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  182.807793][ T5803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.826620][ T5803] usb 1-1: Product: syz
[  182.831143][ T5803] usb 1-1: Manufacturer: syz
[  182.835885][ T5803] usb 1-1: SerialNumber: syz
[  182.849939][ T5803] usb 1-1: config 0 descriptor??
[  183.236403][ T8147] loop1: detected capacity change from 0 to 512
[  183.276249][ T8147] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  183.387748][   T27] audit: type=1326 audit(1774482899.544:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.3.788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47c419c799 code=0x0
[  183.596069][ T8160] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  183.890109][ T5803] usb 1-1: Firmware version (0.0) predates our first public release.
[  183.902300][ T5803] usb 1-1: Please update to version 0.2 or newer
[  183.955615][ T5803] usb 1-1: USB disconnect, device number 11
[  184.606847][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'.
[  184.616434][ T8179] netlink: 'syz.2.795': attribute type 9 has an invalid length.
[  184.640433][ T8179] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.650213][ T8179] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.659259][ T8179] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.668047][ T8179] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.273521][ T3470] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.407091][ T3470] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.532229][ T3470] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.725378][ T3470] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.807936][ T5803] kernel write not supported for file /vcs (pid: 5803 comm: kworker/0:3)
[  185.887573][ T8203] loop1: detected capacity change from 0 to 128
[  185.982779][ T8203] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  186.001469][ T8203] hpfs: filesystem error: improperly stopped
[  186.007895][ T8203] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  186.023471][ T8203] hpfs: You really don't want any checks? You are crazy...
[  186.055094][ T8203] hpfs: hpfs_map_sector(): read error
[  186.073196][ T8203] hpfs: code page support is disabled
[  186.087476][ T8203] hpfs: hpfs_map_4sectors(): unaligned read
[  186.106569][ T8203] hpfs: hpfs_map_4sectors(): unaligned read
[  186.123104][ T8203] hpfs: filesystem error: unable to find root dir
[  186.408045][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  186.434045][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  186.468834][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  186.483075][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  186.494051][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  186.501591][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  186.579038][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  186.780545][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[  186.791902][    T9] usb 3-1: string descriptor 0 read error: -22
[  186.798262][    T9] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40
[  186.809164][   T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  186.811694][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.000608][   T23] usb 2-1: Using ep0 maxpacket: 32
[  187.009796][   T23] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  187.021689][   T23] usb 2-1: config 0 has no interface number 0
[  187.027886][   T23] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  187.052515][   T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  187.064022][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.074145][   T23] usb 2-1: Product: syz
[  187.079132][   T23] usb 2-1: Manufacturer: syz
[  187.083763][   T23] usb 2-1: SerialNumber: syz
[  187.101543][   T23] usb 2-1: config 0 descriptor??
[  187.107366][ T8213] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  187.259767][ T8210] chnl_net:caif_netlink_parms(): no params data found
[  187.278249][    T9] samsung 0003:0419:0001.000B: unknown main item tag 0x6
[  187.305744][    T9] samsung 0003:0419:0001.000B: item 0 0 0 8 parsing failed
[  187.325940][    T9] samsung 0003:0419:0001.000B: parse failed
[  187.348493][ T8213] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  187.361020][    T9] samsung: probe of 0003:0419:0001.000B failed with error -22
[  187.562386][  T970] usb 3-1: USB disconnect, device number 8
[  187.613662][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.622283][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.630197][ T8210] bridge_slave_0: entered allmulticast mode
[  187.638334][ T8210] bridge_slave_0: entered promiscuous mode
[  187.656582][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.664357][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.672228][ T8210] bridge_slave_1: entered allmulticast mode
[  187.681074][ T8210] bridge_slave_1: entered promiscuous mode
[  187.768411][ T8210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.793191][ T8210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.873836][ T3470] hsr_slave_0: left promiscuous mode
[  187.884358][ T3470] hsr_slave_1: left promiscuous mode
[  187.895465][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.905349][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.922271][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.935905][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.945304][ T3470] bridge_slave_1: left allmulticast mode
[  187.959065][ T3470] bridge_slave_1: left promiscuous mode
[  187.968397][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.992758][ T3470] bridge_slave_0: left allmulticast mode
[  188.004847][ T3470] bridge_slave_0: left promiscuous mode
[  188.013015][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.072742][ T3470] veth1_macvtap: left promiscuous mode
[  188.083594][ T3470] veth0_macvtap: left promiscuous mode
[  188.090869][ T3470] veth1_vlan: left promiscuous mode
[  188.096528][ T3470] veth0_vlan: left promiscuous mode
[  188.383604][   T23] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  188.397952][   T23] asix: probe of 2-1:0.188 failed with error -71
[  188.424791][   T23] usb 2-1: USB disconnect, device number 15
[  188.575757][ T5772] Bluetooth: hci3: command tx timeout
[  189.114102][ T3470] team0 (unregistering): Port device team_slave_1 removed
[  189.173388][ T3470] team0 (unregistering): Port device team_slave_0 removed
[  189.243240][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.301786][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.783215][ T3470] bond0 (unregistering): Released all slaves
[  189.908240][ T8210] team0: Port device team_slave_0 added
[  189.944049][ T8210] team0: Port device team_slave_1 added
[  189.966658][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.975864][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.006268][ T8210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.024439][ T8210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.031771][ T8210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.059168][ T8210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.145124][ T8210] hsr_slave_0: entered promiscuous mode
[  190.156430][ T8210] hsr_slave_1: entered promiscuous mode
[  190.508021][ T8210] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  190.521376][ T8210] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  190.534888][ T8210] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  190.545396][ T8210] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  190.630865][ T8210] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.652785][ T5772] Bluetooth: hci3: command tx timeout
[  190.676779][ T8210] 8021q: adding VLAN 0 to HW filter on device team0
[  190.697098][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.705552][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.742080][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.749288][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.077949][ T8210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.404917][ T8210] veth0_vlan: entered promiscuous mode
[  191.422943][ T8210] veth1_vlan: entered promiscuous mode
[  191.458112][ T8210] veth0_macvtap: entered promiscuous mode
[  191.471134][ T8210] veth1_macvtap: entered promiscuous mode
[  191.497219][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.511169][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.523885][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.539857][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.550204][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.561241][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.573082][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.592279][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.603447][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.614963][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.625676][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.636562][ T8210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.647643][ T8210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.660397][ T8210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.679968][ T8210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.690515][ T8210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.700877][ T8210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.710186][ T8210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.828264][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.845492][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.901338][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.909765][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.133978][ T8309] overlayfs: failed to clone upperpath
[  192.368641][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  192.574091][   T23] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  192.590760][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.599260][   T23] usb 5-1: Product: syz
[  192.603482][   T23] usb 5-1: Manufacturer: syz
[  192.613330][   T23] usb 5-1: SerialNumber: syz
[  192.620931][   T23] usb 5-1: config 0 descriptor??
[  192.729105][ T5772] Bluetooth: hci3: command tx timeout
[  193.034929][   T23] usb 5-1: Firmware: major: 182, minor: 167, hardware type: UNKNOWN (115)
[  193.236442][   T23] usb 5-1: Read permanent extended address ac:08:2e:a4:8a:62:04:56 from device
[  193.247418][   T23] usb 5-1: atusb_probe: initialization failed, error = -524
[  193.259860][   T23] atusb: probe of 5-1:0.0 failed with error -524
[  193.446606][ T5803] usb 5-1: USB disconnect, device number 2
[  194.044958][ T8367] loop1: detected capacity change from 0 to 512
[  194.082656][ T8369] loop2: detected capacity change from 0 to 1024
[  194.090506][ T8367] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  194.124577][ T8367] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  194.201231][ T8367] EXT4-fs (loop1): 1 truncate cleaned up
[  194.219673][ T8367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.581510][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.587875][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  194.744414][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.809613][ T5772] Bluetooth: hci3: command tx timeout
[  194.897568][ T8393] "syz.1.828" (8393) uses obsolete ecb(arc4) skcipher
[  195.053126][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'.
[  195.308684][  T970] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  195.502289][  T970] usb 1-1: device descriptor read/64, error -71
[  195.718844][ T8403] loop1: detected capacity change from 0 to 32768
[  195.788625][  T970] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  195.963619][ T8427] loop1: detected capacity change from 0 to 512
[  195.978794][  T970] usb 1-1: device descriptor read/64, error -71
[  196.037684][ T8427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.068724][ T8427] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.131922][  T970] usb usb1-port1: attempt power cycle
[  196.302670][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.558702][  T970] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  196.607067][  T970] usb 1-1: device descriptor read/8, error -71
[  196.710324][ T8439] loop2: detected capacity change from 0 to 32768
[  196.732134][ T8439] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.847 (8439)
[  196.754990][ T8439] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  196.766570][ T8439] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  196.777081][ T8439] BTRFS info (device loop2): force zlib compression, level 3
[  196.785273][ T8439] BTRFS info (device loop2): force clearing of disk cache
[  196.805386][ T8439] BTRFS info (device loop2): setting nodatasum
[  196.818628][ T8439] BTRFS info (device loop2): allowing degraded mounts
[  196.833545][ T8439] BTRFS info (device loop2): enabling disk space caching
[  196.849222][ T8439] BTRFS info (device loop2): disk space caching is enabled
[  196.891320][  T970] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  196.949425][  T970] usb 1-1: device descriptor read/8, error -71
[  196.962362][ T8439] BTRFS info (device loop2): auto enabling async discard
[  196.982845][ T8439] BTRFS info (device loop2): rebuilding free space tree
[  197.054153][ T8439] BTRFS info (device loop2): disabling free space tree
[  197.069313][ T8439] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.073391][  T970] usb usb1-port1: unable to enumerate USB device
[  197.090406][ T8439] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.221896][ T8443] loop1: detected capacity change from 0 to 32768
[  197.248981][ T8443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.849 (8443)
[  197.266943][ T8439] BTRFS info (device loop2): balance: start -d -m -s
[  197.279824][ T8439] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  197.328795][ T8443] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.379659][ T8443] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  197.409086][ T8443] BTRFS info (device loop1): force clearing of disk cache
[  197.415893][ T8466] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  197.440459][ T8443] BTRFS info (device loop1): metadata ratio 0
[  197.488056][ T8443] BTRFS info (device loop1): enabling ssd optimizations
[  197.509243][ T8443] BTRFS info (device loop1): using spread ssd allocation scheme
[  197.528044][ T8443] BTRFS info (device loop1): using free space tree
[  197.534684][ T8439] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  197.744419][ T8439] BTRFS info (device loop2): found 9 extents, stage: move data extents
[  197.789450][ T8443] BTRFS info (device loop1): auto enabling async discard
[  197.834843][ T8443] BTRFS info (device loop1): rebuilding free space tree
[  197.939245][ T8439] BTRFS info (device loop2): found 1 extents, stage: update data pointers
[  198.091211][   T27] audit: type=1800 audit(1774482914.244:30): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.849" name="bus" dev="loop1" ino=263 res=0 errno=0
[  198.143016][ T8439] BTRFS info (device loop2): relocating block group 1048576 flags system
[  198.226256][ T8439] BTRFS info (device loop2): balance: canceled
[  198.308948][ T5765] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  198.335182][ T5767] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  198.542612][  T970] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  198.774285][  T970] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  198.799597][  T970] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  198.842124][   T27] audit: type=1326 audit(1774482915.004:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.1.861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f934019c799 code=0x0
[  198.842283][  T970] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  198.874949][  T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.898727][ T8497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  198.926635][  T970] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  199.255603][  T970] usb 5-1: USB disconnect, device number 3
[  199.435162][ T8516] loop2: detected capacity change from 0 to 2048
[  199.456868][ T8516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.896433][ T5772] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  200.253392][ T8539] loop4: detected capacity change from 0 to 1024
[  200.267242][ T8539] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.399835][ T8539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.663538][ T8210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.755207][ T8554] loop2: detected capacity change from 0 to 512
[  200.804711][ T8554] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  200.893259][ T8554] EXT4-fs (loop2): 1 truncate cleaned up
[  200.924494][ T8554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.048294][   T27] audit: type=1326 audit(1774482917.204:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.099034][   T27] audit: type=1326 audit(1774482917.204:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.124118][   T27] audit: type=1326 audit(1774482917.204:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.162361][   T27] audit: type=1326 audit(1774482917.204:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.186079][   T27] audit: type=1326 audit(1774482917.204:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.209987][   T27] audit: type=1326 audit(1774482917.204:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.234222][   T27] audit: type=1326 audit(1774482917.204:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.257724][   T27] audit: type=1326 audit(1774482917.204:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.4.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe538b9c799 code=0x7ffc0000
[  201.303953][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.314224][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  201.328856][ T5804] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  201.502693][ T5804] usb 2-1: config 0 has no interfaces?
[  201.511470][ T5804] usb 2-1: New USB device found, idVendor=23c5, idProduct=8699, bcdDevice=f8.85
[  201.521314][    T8] usb 5-1: Using ep0 maxpacket: 16
[  201.526311][ T5804] usb 2-1: New USB device strings: Mfr=200, Product=24, SerialNumber=3
[  201.537459][ T5804] usb 2-1: Product: syz
[  201.542986][ T5804] usb 2-1: Manufacturer: syz
[  201.547748][ T5804] usb 2-1: SerialNumber: syz
[  201.549396][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.556636][ T5804] usb 2-1: config 0 descriptor??
[  201.579985][    T8] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  201.590637][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  201.602422][    T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  201.631597][    T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.647038][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.655955][    T8] usb 5-1: Product: syz
[  201.660543][    T8] usb 5-1: Manufacturer: syz
[  201.665251][    T8] usb 5-1: SerialNumber: syz
[  201.825228][ T8582] input: syz0 as /devices/virtual/input/input15
[  201.831960][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'.
[  201.858357][ T5804] usb 2-1: USB disconnect, device number 16
[  201.900300][    T8] usb 5-1: 0:2 : does not exist
[  201.939980][    T8] usb 5-1: USB disconnect, device number 4
[  201.992628][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.392272][ T8593] loop2: detected capacity change from 0 to 2048
[  202.513956][ T8593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.673790][    T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  202.734104][    T8] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  202.854232][ T3470] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  202.921878][ T3470] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28
[  202.959927][ T3470] EXT4-fs (loop2): This should not happen!! Data will be lost
[  202.959927][ T3470] 
[  202.978579][ T3470] EXT4-fs (loop2): Total free blocks count 0
[  202.996268][ T3470] EXT4-fs (loop2): Free/Dirty block details
[  203.007584][ T3470] EXT4-fs (loop2): free_blocks=4096
[  203.016492][ T3470] EXT4-fs (loop2): dirty_blocks=512
[  203.023157][ T3470] EXT4-fs (loop2): Block reservation details
[  203.037184][ T3470] EXT4-fs (loop2): i_reserved_data_blocks=32
[  203.074092][ T3470] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  204.005559][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[  204.794213][ T8676] loop1: detected capacity change from 0 to 512
[  204.830615][ T8676] EXT4-fs (loop1): 1 truncate cleaned up
[  204.837486][ T8676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.873087][ T8676] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.911: invalid indirect mapped block 4294901760 (level 0)
[  204.915800][ T8676] EXT4-fs (loop1): Remounting filesystem read-only
[  205.014138][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.031313][ T8683] loop4: detected capacity change from 0 to 1024
[  205.040630][ T8683] EXT4-fs: Ignoring removed bh option
[  205.082716][ T8683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.277078][ T8210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.520358][ T8699] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  205.961467][ T8718] bridge0: port 3(syz_tun) entered blocking state
[  205.978768][ T8718] bridge0: port 3(syz_tun) entered disabled state
[  205.989236][ T8718] syz_tun: entered allmulticast mode
[  206.015404][ T8718] syz_tun: entered promiscuous mode
[  206.024206][ T8718] bridge0: port 3(syz_tun) entered blocking state
[  206.031542][ T8718] bridge0: port 3(syz_tun) entered forwarding state
[  206.063135][ T8722] netlink: 'syz.0.922': attribute type 10 has an invalid length.
[  206.110195][ T8722] bridge0: port 3(syz_tun) entered disabled state
[  206.117121][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.168416][ T8722] bridge0: port 3(syz_tun) entered blocking state
[  206.175072][ T8722] bridge0: port 3(syz_tun) entered forwarding state
[  206.183431][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.191833][ T8722] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.199380][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.206857][ T8722] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.237718][ T8722] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  207.432724][ T8739] loop2: detected capacity change from 0 to 32768
[  207.524292][ T8739] JBD2: Ignoring recovery information on journal
[  207.694923][ T8739] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  208.160712][ T5767] ocfs2: Unmounting device (7,2) on (node local)
[  208.555926][ T8795] loop2: detected capacity change from 0 to 256
[  208.671765][ T8795] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d)
[  208.818675][ T8783] loop1: detected capacity change from 0 to 32768
[  208.874601][ T8783] JBD2: Ignoring recovery information on journal
[  208.938122][ T8807] loop2: detected capacity change from 0 to 4096
[  209.041856][ T8783] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  209.107352][ T8811] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.333080][   T27] kauditd_printk_skb: 27 callbacks suppressed
[  209.333095][   T27] audit: type=1800 audit(1774482925.494:67): pid=8816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.935" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  209.754428][ T8783] syz.1.935 (8783) used greatest stack depth: 18544 bytes left
[  209.920307][ T8838] loop2: detected capacity change from 0 to 256
[  209.972459][ T8838] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  210.010579][ T5765] ocfs2: Unmounting device (7,1) on (node local)
[  210.023362][ T8838] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  210.101758][ T8838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  210.959081][    T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  211.135116][ T8853] loop0: detected capacity change from 0 to 40427
[  211.159795][ T8853] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  211.181896][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.204343][ T8853] F2FS-fs (loop0): invalid crc value
[  211.223642][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.234701][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  211.240428][ T8853] F2FS-fs (loop0): Found nat_bits in checkpoint
[  211.255586][    T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  211.265146][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.284992][    T8] usb 2-1: config 0 descriptor??
[  211.453274][ T8853] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  211.713301][    T8] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  211.756183][    T8] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  212.361565][ T8906] netlink: 'syz.0.965': attribute type 39 has an invalid length.
[  212.512728][ T8888] loop4: detected capacity change from 0 to 32768
[  212.579658][ T8888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.960 (8888)
[  212.650068][ T8888] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.677800][ T8888] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  212.687427][ T8888] BTRFS info (device loop4): force clearing of disk cache
[  212.695958][ T8888] BTRFS info (device loop4): metadata ratio 0
[  212.737317][ T8888] BTRFS info (device loop4): enabling ssd optimizations
[  212.749279][ T8888] BTRFS info (device loop4): using spread ssd allocation scheme
[  212.757088][ T8888] BTRFS info (device loop4): using free space tree
[  212.861661][ T8888] BTRFS info (device loop4): auto enabling async discard
[  212.911989][ T8888] BTRFS info (device loop4): rebuilding free space tree
[  213.147342][   T27] audit: type=1800 audit(1774482929.304:68): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.960" name="bus" dev="loop4" ino=263 res=0 errno=0
[  213.308103][ T8210] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.593351][ T8944] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[  213.800232][ T8951] loop0: detected capacity change from 0 to 512
[  213.849020][ T8951] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  213.899277][    T8] usb 2-1: USB disconnect, device number 17
[  213.974331][ T8951] EXT4-fs (loop0): 1 truncate cleaned up
[  214.010523][ T8951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.228192][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.558074][ T8969] loop4: detected capacity change from 0 to 4096
[  214.703476][ T8969] ntfs3: loop4: ino=b, Correct links count -> 1.
[  214.715077][ T8969] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  214.892889][ T8977] loop0: detected capacity change from 0 to 128
[  215.719347][ T8983] loop0: detected capacity change from 0 to 32768
[  215.781580][ T8983] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  215.809545][ T8983] JBD2: Ignoring recovery information on journal
[  215.884633][ T8983] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  216.102032][   T27] audit: type=1800 audit(1774482932.264:69): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.986" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  216.263307][ T9013] loop2: detected capacity change from 0 to 256
[  216.290258][ T9013] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d)
[  216.354833][   T27] audit: type=1800 audit(1774482932.514:70): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.997" name="file1" dev="loop2" ino=1048619 res=0 errno=0
[  216.381129][ T5804] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  216.442477][ T9007] syz.0.986 (9007) used greatest stack depth: 18248 bytes left
[  216.519989][ T5764] ocfs2: Unmounting device (7,0) on (node local)
[  216.635392][ T5804] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  216.660268][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.674602][ T5804] usb 2-1: Product: syz
[  216.679025][ T5804] usb 2-1: Manufacturer: syz
[  216.683670][ T5804] usb 2-1: SerialNumber: syz
[  216.699660][ T5804] usb 2-1: config 0 descriptor??
[  217.533909][ T9034] loop4: detected capacity change from 0 to 4096
[  217.620170][ T9038] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.732994][ T5804] usb 2-1: unexpected transceiver, part 0xf6 version 0x03
[  217.934371][ T5804] usb 2-1: Firmware version (0.0) predates our first public release.
[  217.964432][ T5804] usb 2-1: Please update to version 0.2 or newer
[  217.979011][ T5804] usb 2-1: atusb_probe: initialization failed, error = -19
[  218.005486][ T5804] usb 2-1: USB disconnect, device number 18
[  218.050051][ T9042] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[  218.493620][ T1188] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  218.701429][ T1188] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.717694][ T1188] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  218.738936][ T1188] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  218.748214][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  218.777172][ T1188] usb 5-1: SerialNumber: syz
[  219.010417][ T1188] usb 5-1: 0:2 : does not exist
[  219.029555][ T1188] usb 5-1: USB disconnect, device number 5
[  219.092049][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.296756][ T9074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[  219.828005][ T9085] bridge0: port 3(syz_tun) entered disabled state
[  219.834841][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.842353][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.898655][ T1188] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  219.998717][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.012178][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.029866][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.049568][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.057419][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  220.069238][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.109545][ T1188] usb 2-1: Using ep0 maxpacket: 16
[  220.158605][ T1188] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  220.167440][ T1188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.211454][ T1188] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  220.235068][ T9095] loop4: detected capacity change from 0 to 512
[  220.250428][ T1188] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  220.274338][ T1188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.288344][ T9095] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  220.302130][ T1188] usb 2-1: Product: syz
[  220.306386][ T1188] usb 2-1: Manufacturer: syz
[  220.318843][ T9095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  220.337146][ T1188] usb 2-1: SerialNumber: syz
[  220.342137][ T9095] System zones: 1-12
[  220.346330][ T9095] EXT4-fs (loop4): orphan cleanup on readonly fs
[  220.391882][ T9095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1028: bg 0: block 361: padding at end of block bitmap is not set
[  220.460402][ T9095] EXT4-fs (loop4): Remounting filesystem read-only
[  220.477474][ T9095] EXT4-fs (loop4): 1 truncate cleaned up
[  220.485310][ T9095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  220.637513][ T9090] chnl_net:caif_netlink_parms(): no params data found
[  220.646067][ T8210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  220.773649][ T1188] usb 2-1: 0:2 : does not exist
[  221.040858][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.048023][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.068878][ T9090] bridge_slave_0: entered allmulticast mode
[  221.089675][ T9090] bridge_slave_0: entered promiscuous mode
[  221.111344][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.118693][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.126019][ T9090] bridge_slave_1: entered allmulticast mode
[  221.143400][ T9090] bridge_slave_1: entered promiscuous mode
[  221.203479][ T9090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.231703][ T9090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.316026][ T9090] team0: Port device team_slave_0 added
[  221.332135][ T9090] team0: Port device team_slave_1 added
[  221.383792][ T5804] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  221.421292][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.450103][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.479086][ T9090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.493288][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.500447][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.527158][ T9090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.584791][   T23] usb 2-1: USB disconnect, device number 19
[  221.656874][ T9090] hsr_slave_0: entered promiscuous mode
[  221.679094][ T9090] hsr_slave_1: entered promiscuous mode
[  221.679885][ T5804] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  221.694543][ T9090] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  221.705476][ T9090] Cannot create hsr debugfs directory
[  221.708686][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.733052][ T5804] usb 1-1: config 0 descriptor??
[  221.750331][ T5804] cp210x 1-1:0.0: cp210x converter detected
[  221.986619][ T9090] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  222.007054][ T9090] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  222.035125][ T9090] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  222.045809][ T9090] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  222.148678][ T5804] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  222.169042][ T5771] Bluetooth: hci1: command tx timeout
[  222.199301][ T5804] usb 1-1: cp210x converter now attached to ttyUSB0
[  222.245494][ T9090] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.294300][ T9090] 8021q: adding VLAN 0 to HW filter on device team0
[  222.311625][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.318823][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.349009][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.356177][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.394251][ T5804] usb 1-1: USB disconnect, device number 16
[  222.414060][ T5804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  222.492310][ T5804] cp210x 1-1:0.0: device disconnected
[  222.702791][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.914081][ T9090] veth0_vlan: entered promiscuous mode
[  222.925618][ T9090] veth1_vlan: entered promiscuous mode
[  222.954508][ T9090] veth0_macvtap: entered promiscuous mode
[  222.974465][ T9090] veth1_macvtap: entered promiscuous mode
[  222.998056][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.026186][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.061140][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.086668][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.108228][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.148570][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.158443][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.198682][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.224611][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.241620][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.290779][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.314130][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.336797][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.352811][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.364796][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.382198][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.394182][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.410788][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.459391][ T9090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.469223][ T9090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.478032][ T9090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.487341][ T9090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.668908][ T9131] loop0: detected capacity change from 0 to 32768
[  223.683803][ T9131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1033 (9131)
[  223.714320][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.743681][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.765581][ T9131] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.789274][ T9131] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  223.803772][ T9131] BTRFS info (device loop0): force clearing of disk cache
[  223.828843][ T9131] BTRFS info (device loop0): metadata ratio 0
[  223.835070][ T9131] BTRFS info (device loop0): enabling ssd optimizations
[  223.843070][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.867754][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.871470][ T9131] BTRFS info (device loop0): using spread ssd allocation scheme
[  223.893746][ T9131] BTRFS info (device loop0): using free space tree
[  224.083450][ T9131] BTRFS info (device loop0): auto enabling async discard
[  224.128328][ T9131] BTRFS info (device loop0): rebuilding free space tree
[  224.249152][ T5771] Bluetooth: hci1: command tx timeout
[  224.367670][   T27] audit: type=1800 audit(1774482940.504:71): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1033" name="bus" dev="loop0" ino=263 res=0 errno=0
[  224.381834][ T9147] loop1: detected capacity change from 0 to 32768
[  224.407220][ T9169] loop4: detected capacity change from 0 to 128
[  224.444633][ T9169] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  224.456443][ T9147]  loop1: p1 p3 < >
[  224.517225][ T9169] hpfs: filesystem error: improperly stopped
[  224.555430][ T5764] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.558112][ T9169] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  224.586625][ T9169] hpfs: You really don't want any checks? You are crazy...
[  224.640511][ T9169] hpfs: Code page index out of array
[  224.646871][ T9169] hpfs: code page support is disabled
[  224.686424][ T9169] hpfs: hpfs_map_4sectors(): unaligned read
[  224.717703][ T9173] overlayfs: failed to clone upperpath
[  224.718083][ T9169] hpfs: hpfs_map_4sectors(): unaligned read
[  224.769784][ T9169] hpfs: filesystem error: unable to find root dir
[  225.283067][ T5755] udevd[5755]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  225.295905][ T6298] udevd[6298]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  225.364989][ T9187] loop5: detected capacity change from 0 to 7
[  225.433729][ T9187] Dev loop5: unable to read RDB block 7
[  225.493072][ T9187]  loop5: unable to read partition table
[  225.508775][ T9187] loop5: partition table beyond EOD, truncated
[  225.559540][ T9187] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  225.849444][ T5804] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  226.019583][ T9236] IPv6: NLM_F_CREATE should be specified when creating new route
[  226.128125][ T5804] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  226.228598][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.277453][ T5804] usb 1-1: Product: syz
[  226.297691][ T5804] usb 1-1: Manufacturer: syz
[  226.326290][ T5804] usb 1-1: SerialNumber: syz
[  226.329370][ T5771] Bluetooth: hci1: command tx timeout
[  226.380178][ T5804] usb 1-1: config 0 descriptor??
[  226.801176][ T9269] loop1: detected capacity change from 0 to 1024
[  226.855667][ T9269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  226.895708][ T9269] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.118849][ T9274] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  227.214259][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  227.348870][   T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  227.450431][ T5804] usb 1-1: ATUSB: AT86RF212 version 226
[  227.564520][   T23] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  227.583904][   T23] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  227.598342][ T9287] loop1: detected capacity change from 0 to 256
[  227.604801][   T23] usb 5-1: Product: syz
[  227.609694][   T23] usb 5-1: Manufacturer: syz
[  227.614350][   T23] usb 5-1: SerialNumber: syz
[  227.624330][   T23] usb 5-1: config 0 descriptor??
[  227.635056][   T23] ch341 5-1:0.0: ch341-uart converter detected
[  227.656125][ T5804] usb 1-1: Firmware version (0.0) predates our first public release.
[  227.689580][ T5804] usb 1-1: Please update to version 0.2 or newer
[  227.707881][ T9287] FAT-fs (loop1): Directory bread(block 64) failed
[  227.715881][ T9287] FAT-fs (loop1): Directory bread(block 65) failed
[  227.730468][ T9287] FAT-fs (loop1): Directory bread(block 66) failed
[  227.750195][ T9287] FAT-fs (loop1): Directory bread(block 67) failed
[  227.757651][ T9287] FAT-fs (loop1): Directory bread(block 68) failed
[  227.764873][ T9287] FAT-fs (loop1): Directory bread(block 69) failed
[  227.772303][ T9287] FAT-fs (loop1): Directory bread(block 70) failed
[  227.783935][ T5804] usb 1-1: USB disconnect, device number 17
[  227.790897][ T9287] FAT-fs (loop1): Directory bread(block 71) failed
[  227.806314][ T9287] FAT-fs (loop1): Directory bread(block 72) failed
[  227.815003][ T9287] FAT-fs (loop1): Directory bread(block 73) failed
[  228.080498][ T9285] loop5: detected capacity change from 0 to 32768
[  228.099788][ T9285] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1062 (9285)
[  228.122403][ T9285] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  228.143832][ T9285] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  228.187276][ T9285] BTRFS info (device loop5): force zlib compression, level 3
[  228.196496][ T9285] BTRFS info (device loop5): force clearing of disk cache
[  228.207991][ T9285] BTRFS info (device loop5): setting nodatasum
[  228.219608][ T9285] BTRFS info (device loop5): allowing degraded mounts
[  228.227844][ T9285] BTRFS info (device loop5): enabling disk space caching
[  228.247772][ T9285] BTRFS info (device loop5): disk space caching is enabled
[  228.408705][ T5771] Bluetooth: hci1: command tx timeout
[  228.419113][ T9285] BTRFS info (device loop5): auto enabling async discard
[  228.448265][ T9285] BTRFS info (device loop5): rebuilding free space tree
[  228.527946][ T9285] BTRFS info (device loop5): disabling free space tree
[  228.557305][ T9285] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  228.573593][ T9285] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  228.667077][ T9285] BTRFS info (device loop5): balance: start -d -m -s
[  228.681026][   T23] usb 5-1: ch341-uart converter now attached to ttyUSB0
[  228.694116][ T9285] BTRFS info (device loop5): relocating block group 6881280 flags data|metadata
[  228.737156][ T9285] BTRFS info (device loop5): relocating block group 5242880 flags data|metadata
[  228.930941][   T23] usb 5-1: USB disconnect, device number 6
[  228.967641][   T23] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  229.020386][   T23] ch341 5-1:0.0: device disconnected
[  229.179072][ T9285] BTRFS info (device loop5): found 9 extents, stage: move data extents
[  229.295322][ T9285] BTRFS info (device loop5): found 1 extents, stage: update data pointers
[  229.346224][ T9285] BTRFS info (device loop5): relocating block group 1048576 flags system
[  229.415329][ T9319] loop1: detected capacity change from 0 to 32768
[  229.416587][ T9285] BTRFS info (device loop5): found 1 extents, stage: move data extents
[  229.470928][ T9319] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  229.487254][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  229.510310][ T9319] JBD2: Ignoring recovery information on journal
[  229.511971][ T9285] BTRFS info (device loop5): balance: ended with status: 0
[  229.628808][ T9319] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  229.678921][ T9090] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  230.497244][ T5765] ocfs2: Unmounting device (7,1) on (node local)
[  230.545823][ T9353] loop4: detected capacity change from 0 to 512
[  230.623140][ T9353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.684600][ T9353] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  230.902616][ T8210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.163504][ T9371] batadv_slave_0: entered promiscuous mode
[  231.182477][ T9370] batadv_slave_0: left promiscuous mode
[  232.006590][ T9394] overlayfs: failed to clone upperpath
[  232.229657][ T9398] loop0: detected capacity change from 0 to 128
[  232.265324][ T9398] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  232.502712][ T9398] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8)
[  232.533596][ T9398] FAT-fs (loop0): Filesystem has been set read-only
[  232.574732][ T9407] loop5: detected capacity change from 0 to 256
[  232.574892][ T9398] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522)
[  232.670174][ T9407] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  233.090133][ T9415] netlink: 'syz.0.1106': attribute type 6 has an invalid length.
[  233.248812][ T5804] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  233.450119][ T5804] usb 2-1: Using ep0 maxpacket: 8
[  233.464643][ T5804] usb 2-1: config 1 interface 0 has no altsetting 0
[  233.493918][ T5804] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  233.517285][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.530098][ T5804] usb 2-1: Product: syz
[  233.534532][ T5804] usb 2-1: Manufacturer: syz
[  233.535424][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.539867][ T5804] usb 2-1: SerialNumber: syz
[  233.548631][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.601134][ T9427] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.608334][ T9427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.616048][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.623400][ T9427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.668928][ T9427] bridge0: entered promiscuous mode
[  233.674313][ T9427] bridge0: entered allmulticast mode
[  233.836958][ T5804] usbhid 2-1:1.0: can't add hid device: -71
[  233.851219][ T5804] usbhid: probe of 2-1:1.0 failed with error -71
[  233.877052][ T5804] usb 2-1: USB disconnect, device number 20
[  234.618054][ T9435] loop4: detected capacity change from 0 to 32768
[  234.651772][ T9449] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1120'.
[  234.673466][ T9436] loop0: detected capacity change from 0 to 32768
[  234.691650][ T9436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1113 (9436)
[  234.723487][ T9435] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  234.795224][ T9436] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  234.842318][ T9436] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  234.873973][ T9436] BTRFS info (device loop0): setting nodatasum
[  234.894352][ T9436] BTRFS info (device loop0): force zlib compression, level 3
[  234.897659][ T9435] XFS (loop4): Ending clean mount
[  234.937092][ T9436] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  234.988263][ T9436] BTRFS info (device loop0): use lzo compression, level 0
[  235.014302][ T9436] BTRFS info (device loop0): turning on flush-on-commit
[  235.048820][ T9436] BTRFS info (device loop0): enabling auto defrag
[  235.059493][ T9436] BTRFS info (device loop0): max_inline at 4096
[  235.078698][ T9436] BTRFS info (device loop0): using free space tree
[  235.228932][ T9436] BTRFS info (device loop0): enabling ssd optimizations
[  235.386725][ T8210] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.481547][ T9486] loop1: detected capacity change from 0 to 512
[  235.514012][ T9486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  235.686020][ T9486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.728912][ T9486] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.787970][ T5764] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.101805][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.064069][ T9516] loop0: detected capacity change from 0 to 4096
[  237.091325][ T9516] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  237.891425][ T9532] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  237.892321][ T9535] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  237.908807][ T9532] overlayfs: failed to set xattr on upper
[  237.922488][ T9532] overlayfs: ...falling back to redirect_dir=nofollow.
[  237.944362][ T9532] overlayfs: ...falling back to index=off.
[  237.968628][ T9532] overlayfs: ...falling back to xino=off.
[  237.978752][ T9532] overlayfs: conflicting lowerdir path
[  238.556199][ T9541] IPVS: You probably need to specify IP address on multicast interface.
[  238.567294][ T9541] IPVS: Error connecting to the multicast addr
[  238.579358][ T1188] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  238.743811][ T9562] loop1: detected capacity change from 0 to 128
[  238.769047][ T9562] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  238.781116][ T1188] usb 6-1: Using ep0 maxpacket: 8
[  238.793310][ T1188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  238.823098][ T1188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  238.856332][ T1188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  238.887248][ T1188] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  238.915245][ T9562] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8)
[  238.925453][ T1188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  238.925934][ T9562] FAT-fs (loop1): Filesystem has been set read-only
[  238.945143][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.946276][ T9562] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522)
[  239.692570][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1155'.
[  239.749921][ T9576] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.759426][ T9576] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.768197][ T9576] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.777157][ T9576] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.796798][ T9576] vxlan0: entered promiscuous mode
[  240.965278][ T9567] loop0: detected capacity change from 0 to 262144
[  240.975499][ T9567] F2FS-fs (loop0): invalid crc value
[  240.988631][ T1188] usb 6-1: usb_control_msg returned -32
[  240.999069][ T1188] usbtmc 6-1:16.0: can't read capabilities
[  241.011040][ T9567] F2FS-fs (loop0): Found nat_bits in checkpoint
[  241.069089][ T9567] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  241.158637][   T27] audit: type=1800 audit(1774482957.304:72): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1152" name="file1" dev="loop0" ino=7 res=0 errno=0
[  241.367774][   T23] usb 6-1: USB disconnect, device number 2
[  241.544019][ T9598] loop4: detected capacity change from 0 to 2048
[  241.595805][ T9598] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  241.636836][ T9598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.691698][ T9601] ip6gre1: entered promiscuous mode
[  241.697193][ T9601] ip6gre1: entered allmulticast mode
[  242.299707][ T9615] loop5: detected capacity change from 0 to 512
[  242.338611][ T1188] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  242.522720][ T1188] usb 2-1: Using ep0 maxpacket: 8
[  242.543741][ T1188] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  242.568756][ T1188] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  242.598641][ T1188] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  242.623343][ T1188] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  242.648592][ T1188] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  242.682224][ T1188] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  242.703869][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.821582][ T9621] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1174'.
[  242.952237][ T1188] usb 2-1: usb_control_msg returned -32
[  242.958307][ T1188] usbtmc 2-1:16.0: can't read capabilities
[  243.677017][ T9633] usbtmc 2-1:16.0: usb_control_msg returned -71
[  243.879054][   T23] usb 2-1: USB disconnect, device number 21
[  244.119421][ T5804] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  244.234370][ T9645] loop0: detected capacity change from 0 to 128
[  244.272996][ T9645] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  244.288035][ T9645] hpfs: filesystem error: improperly stopped
[  244.295357][ T9645] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  244.303640][ T9645] hpfs: You really don't want any checks? You are crazy...
[  244.311346][ T9645] hpfs: Code page index out of array
[  244.317614][ T9645] hpfs: code page support is disabled
[  244.323425][ T9645] hpfs: hpfs_map_4sectors(): unaligned read
[  244.330381][ T9645] hpfs: hpfs_map_4sectors(): unaligned read
[  244.336390][ T9645] hpfs: filesystem error: unable to find root dir
[  244.344486][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.355570][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.373600][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  244.409257][ T5804] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  244.425256][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.450477][ T5804] usb 5-1: config 0 descriptor??
[  244.528603][ T1188] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  244.543525][ T9651] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  244.736527][ T1188] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  244.756362][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.785255][ T1188] usb 6-1: config 0 descriptor??
[  244.882600][ T5804] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  244.902325][ T5804] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  244.972168][ T9650] loop1: detected capacity change from 0 to 32768
[  245.013569][ T9650] (syz.1.1185,9650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  245.057429][ T9650] (syz.1.1185,9650,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  245.108261][ T9650] JBD2: Ignoring recovery information on journal
[  245.166980][ T9650] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  245.306715][ T9650] 
[  245.309072][ T9650] ======================================================
[  245.316183][ T9650] WARNING: possible circular locking dependency detected
[  245.323263][ T9650] syzkaller #0 Not tainted
[  245.327772][ T9650] ------------------------------------------------------
[  245.334878][ T9650] syz.1.1185/9650 is trying to acquire lock:
[  245.341131][ T9650] ffff88805a149538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770
[  245.350484][ T9650] 
[  245.350484][ T9650] but task is already holding lock:
[  245.357839][ T9650] ffff88805cf288e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  245.368108][ T9650] 
[  245.368108][ T9650] which lock already depends on the new lock.
[  245.368108][ T9650] 
[  245.378510][ T9650] 
[  245.378510][ T9650] the existing dependency chain (in reverse order) is:
[  245.387711][ T9650] 
[  245.387711][ T9650] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  245.396233][ T9650]        down_read+0x46/0x2e0
[  245.400904][ T9650]        ocfs2_start_trans+0x3a8/0x6f0
[  245.406879][ T9650]        ocfs2_mknod+0xf1d/0x2300
[  245.411890][ T9650]        ocfs2_create+0x196/0x430
[  245.416922][ T9650]        path_openat+0x12a0/0x3230
[  245.422144][ T9650]        do_filp_open+0x1f5/0x430
[  245.427179][ T9650]        do_sys_openat2+0x134/0x1d0
[  245.432550][ T9650]        __x64_sys_openat+0x139/0x160
[  245.437947][ T9650]        do_syscall_64+0x55/0xa0
[  245.442904][ T9650]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.449316][ T9650] 
[  245.449316][ T9650] -> #2 (sb_internal#6){.+.+}-{0:0}:
[  245.456804][ T9650]        ocfs2_start_trans+0x2a9/0x6f0
[  245.462268][ T9650]        ocfs2_create_refcount_tree+0x34b/0x1280
[  245.468589][ T9650]        ocfs2_reflink_remap_blocks+0x2ff/0x1a20
[  245.474993][ T9650]        ocfs2_remap_file_range+0x4b6/0x740
[  245.480997][ T9650]        vfs_copy_file_range+0xfeb/0x15c0
[  245.486729][ T9650]        __se_sys_copy_file_range+0x324/0x470
[  245.492796][ T9650]        do_syscall_64+0x55/0xa0
[  245.497734][ T9650]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.504134][ T9650] 
[  245.504134][ T9650] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  245.514766][ T9650]        down_write+0x97/0x200
[  245.519605][ T9650]        ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  245.526008][ T9650]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  245.532851][ T9650]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  245.538998][ T9650]        ocfs2_xattr_set+0xc3f/0x13e0
[  245.544359][ T9650]        __vfs_setxattr+0x431/0x470
[  245.549556][ T9650]        __vfs_setxattr_noperm+0x12d/0x5e0
[  245.555358][ T9650]        vfs_setxattr+0x16b/0x2f0
[  245.560371][ T9650]        path_setxattr+0x3f3/0x5d0
[  245.565482][ T9650]        __x64_sys_setxattr+0xbb/0xd0
[  245.571018][ T9650]        do_syscall_64+0x55/0xa0
[  245.575947][ T9650]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.582379][ T9650] 
[  245.582379][ T9650] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  245.590198][ T9650]        __lock_acquire+0x2df1/0x7d40
[  245.595569][ T9650]        lock_acquire+0x19e/0x420
[  245.600586][ T9650]        down_read+0x46/0x2e0
[  245.605252][ T9650]        ocfs2_init_acl+0x30a/0x770
[  245.610615][ T9650]        ocfs2_mknod+0x140f/0x2300
[  245.615732][ T9650]        ocfs2_mkdir+0x196/0x430
[  245.620660][ T9650]        vfs_mkdir+0x296/0x440
[  245.625521][ T9650]        do_mkdirat+0x1dc/0x450
[  245.630355][ T9650]        __x64_sys_mkdirat+0x89/0xa0
[  245.635712][ T9650]        do_syscall_64+0x55/0xa0
[  245.640647][ T9650]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.647254][ T9650] 
[  245.647254][ T9650] other info that might help us debug this:
[  245.647254][ T9650] 
[  245.657477][ T9650] Chain exists of:
[  245.657477][ T9650]   &oi->ip_xattr_sem --> sb_internal#6 --> &journal->j_trans_barrier
[  245.657477][ T9650] 
[  245.671392][ T9650]  Possible unsafe locking scenario:
[  245.671392][ T9650] 
[  245.678828][ T9650]        CPU0                    CPU1
[  245.684177][ T9650]        ----                    ----
[  245.690055][ T9650]   rlock(&journal->j_trans_barrier);
[  245.695421][ T9650]                                lock(sb_internal#6);
[  245.702173][ T9650]                                lock(&journal->j_trans_barrier);
[  245.710052][ T9650]   rlock(&oi->ip_xattr_sem);
[  245.714737][ T9650] 
[  245.714737][ T9650]  *** DEADLOCK ***
[  245.714737][ T9650] 
[  245.722873][ T9650] 8 locks held by syz.1.1185/9650:
[  245.727963][ T9650]  #0: ffff888030c7a418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  245.737188][ T9650]  #1: ffff88805a149818 (&type->i_mutex_dir_key#15/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480
[  245.748059][ T9650]  #2: ffff88805a1042d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  245.761720][ T9650]  #3: ffff88805a101818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  245.775467][ T9650]  #4: ffff88805a103498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  245.789397][ T9650]  #5: ffff888030c7a608 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300
[  245.798708][ T9650]  #6: ffff88805cf288e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  245.809395][ T9650]  #7: ffff8880769c2990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0
[  245.819255][ T9650] 
[  245.819255][ T9650] stack backtrace:
[  245.825151][ T9650] CPU: 0 PID: 9650 Comm: syz.1.1185 Not tainted syzkaller #0
[  245.832597][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  245.842998][ T9650] Call Trace:
[  245.846284][ T9650]  <TASK>
[  245.849214][ T9650]  dump_stack_lvl+0x18c/0x250
[  245.854060][ T9650]  ? load_image+0x400/0x400
[  245.858560][ T9650]  ? show_regs_print_info+0x20/0x20
[  245.863783][ T9650]  ? print_circular_bug+0x12b/0x1a0
[  245.868990][ T9650]  check_noncircular+0x2fc/0x400
[  245.873944][ T9650]  ? print_deadlock_bug+0x5d0/0x5d0
[  245.879139][ T9650]  ? _find_first_zero_bit+0xd3/0x100
[  245.884429][ T9650]  ? add_lock_to_list+0x191/0x280
[  245.889482][ T9650]  __lock_acquire+0x2df1/0x7d40
[  245.894394][ T9650]  ? verify_lock_unused+0x140/0x140
[  245.899679][ T9650]  ? __ocfs2_journal_access+0x648/0x840
[  245.905236][ T9650]  lock_acquire+0x19e/0x420
[  245.909827][ T9650]  ? ocfs2_init_acl+0x30a/0x770
[  245.914749][ T9650]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  245.920404][ T9650]  ? __might_sleep+0xe0/0xe0
[  245.925364][ T9650]  ? read_lock_is_recursive+0x20/0x20
[  245.930741][ T9650]  ? do_raw_spin_lock+0x11f/0x2c0
[  245.935779][ T9650]  down_read+0x46/0x2e0
[  245.939931][ T9650]  ? ocfs2_init_acl+0x30a/0x770
[  245.944951][ T9650]  ocfs2_init_acl+0x30a/0x770
[  245.949636][ T9650]  ? ocfs2_acl_chmod+0x330/0x330
[  245.954568][ T9650]  ? dquot_alloc_inode+0x8ac/0xa40
[  245.959833][ T9650]  ? ocfs2_journal_access+0x40/0x40
[  245.965725][ T9650]  ? ocfs2_block_signals+0x9b/0xe0
[  245.970851][ T9650]  ? ocfs2_metadata_cache_get_super+0x46/0x90
[  245.977024][ T9650]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  245.983026][ T9650]  ocfs2_mknod+0x140f/0x2300
[  245.987753][ T9650]  ? ocfs2_mkdir+0x430/0x430
[  245.992671][ T9650]  ? verify_lock_unused+0x140/0x140
[  245.997884][ T9650]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  246.003599][ T9650]  ? __lock_acquire+0x7d40/0x7d40
[  246.008650][ T9650]  ? do_raw_spin_lock+0x11f/0x2c0
[  246.013709][ T9650]  ? ocfs2_inode_unlock_tracker+0x270/0x2e0
[  246.019594][ T9650]  ? __lock_acquire+0x7d40/0x7d40
[  246.024626][ T9650]  ? __rwlock_init+0x150/0x150
[  246.029413][ T9650]  ? do_raw_spin_unlock+0x121/0x230
[  246.034605][ T9650]  ? put_pid+0xde/0x120
[  246.038756][ T9650]  ocfs2_mkdir+0x196/0x430
[  246.043250][ T9650]  ? make_kgid+0x660/0x660
[  246.047657][ T9650]  ? apparmor_path_mkdir+0x1b0/0x230
[  246.052930][ T9650]  ? ocfs2_symlink+0x2700/0x2700
[  246.057869][ T9650]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  246.062890][ T9650]  ? inode_permission+0xf3/0x480
[  246.067826][ T9650]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  246.072840][ T9650]  ? security_inode_mkdir+0xb7/0x100
[  246.078481][ T9650]  vfs_mkdir+0x296/0x440
[  246.082756][ T9650]  do_mkdirat+0x1dc/0x450
[  246.087072][ T9650]  ? vfs_mkdir+0x440/0x440
[  246.091475][ T9650]  __x64_sys_mkdirat+0x89/0xa0
[  246.096231][ T9650]  do_syscall_64+0x55/0xa0
[  246.100673][ T9650]  ? clear_bhb_loop+0x40/0x90
[  246.105339][ T9650]  ? clear_bhb_loop+0x40/0x90
[  246.110009][ T9650]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.115892][ T9650] RIP: 0033:0x7f934019b607
[  246.120312][ T9650] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.140063][ T9650] RSP: 002b:00007f9340f85e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  246.148835][ T9650] RAX: ffffffffffffffda RBX: 00007f9340f85ee0 RCX: 00007f934019b607
[  246.156925][ T9650] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c
[  246.164898][ T9650] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000
[  246.173049][ T9650] R10: 0000200000000080 R11: 0000000000000246 R12: 00002000000005c0
[  246.181022][ T9650] R13: 00007f9340f85ea0 R14: 0000000000000000 R15: 0000000000000000
[  246.189011][ T9650]  </TASK>
[  246.198523][    C1] plantronics 0003:047F:FFFF.000E: usb_submit_urb(ctrl) failed: -1
[  246.256450][ T5765] ocfs2: Unmounting device (7,1) on (node local)
[  246.809402][ T1188] usb 6-1: Cannot set autoneg
[  246.814590][ T1188] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71
[  246.824970][ T1188] usb 6-1: USB disconnect, device number 3
[  247.019027][ T9141] usb 5-1: USB disconnect, device number 7