last executing test programs:

1m51.563523383s ago: executing program 0 (id=24):
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x2}}, 0x20)

1m51.281771548s ago: executing program 0 (id=26):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x10, 0x7, 0x2, 0x0, 0x3, 0x3e, 0xfffffff9, 0x3da, 0x40, 0x8b, 0xd2c, 0x5, 0x38, 0x2, 0x78, 0x7, 0x4}, [{0x6474e551, 0x1ff, 0x8, 0xa, 0x0, 0xfffffffffffffffa, 0x8, 0xb4}, {0x5, 0xfffffffa, 0x0, 0x800, 0xe, 0x9, 0xffffffff, 0x8}]}, 0xb0)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1m51.078463289s ago: executing program 0 (id=28):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=")
chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)

1m50.449447064s ago: executing program 0 (id=31):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208012, &(0x7f0000000080), 0x1, 0x5e4, &(0x7f00000005c0)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100)
getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000)

1m49.969355911s ago: executing program 0 (id=34):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r1, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040))

1m49.215877622s ago: executing program 0 (id=38):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @remote}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

1m48.806492755s ago: executing program 32 (id=38):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @remote}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

5.61310376s ago: executing program 1 (id=637):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)

4.505671782s ago: executing program 4 (id=647):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1004010, &(0x7f0000000180)=ANY=[], 0xfc, 0x6071, &(0x7f0000011600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)

3.482360258s ago: executing program 1 (id=648):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x20002012})

3.421444612s ago: executing program 4 (id=649):
syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, 0x0, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7})

3.301994048s ago: executing program 1 (id=651):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

2.928192799s ago: executing program 4 (id=654):
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0)

2.72844735s ago: executing program 4 (id=656):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x800401, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

2.685365652s ago: executing program 2 (id=657):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0)

2.440640866s ago: executing program 2 (id=658):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.935899033s ago: executing program 1 (id=660):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@grpquota}, {@auto_da_alloc}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000000e80)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100)
write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001})

1.549933695s ago: executing program 3 (id=662):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080049f00050006700000306907864010100ac1414aa070f07ac1e0101ac14140ae00000020000000000000000000000000000000200004e2100004e22"], 0x0)
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)

1.256720341s ago: executing program 3 (id=663):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noload}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x5b85, 0x75ea, 0x800004})

824.963555ms ago: executing program 3 (id=664):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4})
unshare(0x28040680)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff00, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x9, 0x3c5b, 0x80000001, 0x24, 0xd, 0x6, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x3031d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xffe]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

824.043905ms ago: executing program 1 (id=672):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
close(r0)

646.321455ms ago: executing program 1 (id=665):
syz_usb_connect(0x5, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x5509, 0x0)

512.160572ms ago: executing program 2 (id=666):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, <r2=>0xffffffffffffffff})
dup3(r2, r1, 0x80000)
close_range(r0, 0xffffffffffffffff, 0x0)

499.262723ms ago: executing program 3 (id=667):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001fc0)=@vmx={0x100, 0x0, 0x2080, {0x58000, 0x0, {0x2}}})

395.673299ms ago: executing program 2 (id=668):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)

304.810074ms ago: executing program 4 (id=669):
sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="26a7", 0x2, 0x24040000, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)

269.758705ms ago: executing program 2 (id=670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbdf, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x48800)

244.107087ms ago: executing program 3 (id=671):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
fchdir(r0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)

120.242684ms ago: executing program 2 (id=673):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000005780)=@v3={0x3000000, [{0x5, 0x7}, {0x32e, 0x2}]}, 0x18, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff)

84.268876ms ago: executing program 3 (id=674):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185)

0s ago: executing program 4 (id=675):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x20002012})

kernel console output (not intermixed with test programs):

block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.639585][ T6035] (syz.3.57,6035,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.754788][ T5983] chnl_net:caif_netlink_parms(): no params data found
[  100.763007][ T6035] JBD2: Ignoring recovery information on journal
[  100.857592][ T6035] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  101.117149][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.124746][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.132979][ T5983] bridge_slave_0: entered allmulticast mode
[  101.180229][ T5983] bridge_slave_0: entered promiscuous mode
[  101.216697][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.238104][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.265435][ T5983] bridge_slave_1: entered allmulticast mode
[  101.284332][ T5983] bridge_slave_1: entered promiscuous mode
[  101.404545][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.483094][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.514285][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[  101.602985][ T5983] team0: Port device team_slave_0 added
[  101.637333][ T5983] team0: Port device team_slave_1 added
[  101.749428][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.756442][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.815875][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.865374][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.890934][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.949333][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.126434][ T5983] hsr_slave_0: entered promiscuous mode
[  102.154264][ T5983] hsr_slave_1: entered promiscuous mode
[  102.206291][ T6063] loop3: detected capacity change from 0 to 1024
[  102.217388][ T6063] EXT4-fs: Ignoring removed bh option
[  102.279500][   T52] Bluetooth: hci3: command tx timeout
[  102.291229][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.356699][ T6063] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.463473][ T6063] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.62: Freeing blocks not in datazone - block = 0, count = 16
[  102.597013][  T134] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set
[  102.625464][  T134] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  102.648633][  T134] EXT4-fs (loop3): This should not happen!! Data will be lost
[  102.648633][  T134] 
[  102.674190][  T134] EXT4-fs (loop3): Total free blocks count 0
[  102.694521][  T134] EXT4-fs (loop3): Free/Dirty block details
[  102.713603][  T134] EXT4-fs (loop3): free_blocks=16
[  102.718779][  T134] EXT4-fs (loop3): dirty_blocks=16
[  102.729793][  T134] EXT4-fs (loop3): Block reservation details
[  102.753836][  T134] EXT4-fs (loop3): i_reserved_data_blocks=1
[  102.768572][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  102.811096][ T5983] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.826357][ T5983] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.851374][ T5983] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.899936][ T5983] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.990033][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  103.118100][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.182051][ T5983] 8021q: adding VLAN 0 to HW filter on device team0
[  103.201857][    T8] usb 3-1: Using ep0 maxpacket: 8
[  103.210655][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.218595][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.248791][    T8] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  103.258586][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.278329][    T8] usb 3-1: Product: syz
[  103.283075][    T8] usb 3-1: Manufacturer: syz
[  103.287727][    T8] usb 3-1: SerialNumber: syz
[  103.315207][    T8] usb 3-1: config 0 descriptor??
[  103.323257][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.330494][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.347112][    T8] gspca_main: se401-2.14.0 probing 047d:5003
[  103.763971][    T8] gspca_se401: ExtraFeatures: 48
[  103.789421][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.810040][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.817925][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.835627][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.843026][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.849765][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.855990][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.866096][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.875277][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.882061][    T8] gspca_se401: Frame size: 0x0 1/16th janggu
[  103.913077][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.974812][    T8] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  103.995274][ T6086] loop3: detected capacity change from 0 to 32768
[  104.045876][ T6086] (syz.3.66,6086,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  104.067922][ T6086] (syz.3.66,6086,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  104.165121][ T6086] JBD2: Ignoring recovery information on journal
[  104.225360][  T787] usb 3-1: USB disconnect, device number 3
[  104.303594][ T6086] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  104.359706][   T52] Bluetooth: hci3: command tx timeout
[  104.633861][ T6086] (syz.3.66,6086,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  104.738016][ T5983] veth0_vlan: entered promiscuous mode
[  104.767546][ T5983] veth1_vlan: entered promiscuous mode
[  104.853177][ T5983] veth0_macvtap: entered promiscuous mode
[  104.891179][ T5983] veth1_macvtap: entered promiscuous mode
[  104.945834][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[  104.987158][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.029545][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.060504][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.096943][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.123457][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.165209][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.219699][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.248416][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.270167][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.294635][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.323812][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.359028][ T5983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.400994][ T5983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.441163][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.476118][ T5983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.504171][ T5983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.527939][ T5983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.547392][ T5983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.815996][ T3444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.846576][ T3444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.965990][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.001420][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.337010][ T6147] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  106.337010][ T6147] The task syz.3.76 (6147) triggered the difference, watch for misbehavior.
[  106.441494][ T6153] pim6reg: entered allmulticast mode
[  106.476513][ T6153] team0: entered allmulticast mode
[  106.487974][ T6153] team_slave_0: entered allmulticast mode
[  106.500385][ T6153] team_slave_1: entered allmulticast mode
[  106.529020][ T6153] team0: left allmulticast mode
[  106.539832][ T6153] team_slave_0: left allmulticast mode
[  106.553268][ T6153] team_slave_1: left allmulticast mode
[  106.587125][ T6153] pim6reg: left allmulticast mode
[  106.725416][ T6159] loop4: detected capacity change from 0 to 512
[  106.737970][ T6159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.764191][ T6159] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.79: bad orphan inode 131083
[  106.792813][ T6159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.919364][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.934969][ T6133] loop1: detected capacity change from 0 to 40427
[  106.954938][ T6133] F2FS-fs (loop1): Found nat_bits in checkpoint
[  107.207103][ T6133] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  107.371577][ T6175] Zero length message leads to an empty skb
[  107.725914][ T5769] bio_check_eod: 118 callbacks suppressed
[  107.725933][ T5769] syz-executor: attempt to access beyond end of device
[  107.725933][ T5769] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.762283][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  107.949491][ T5830] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  108.153070][ T5830] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  108.179509][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.208732][ T5830] usb 4-1: config 0 descriptor??
[  108.231570][ T5830] cp210x 4-1:0.0: cp210x converter detected
[  108.328404][ T6203] macvtap0: entered promiscuous mode
[  108.338313][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'.
[  108.353956][ T6203] veth0_macvtap: left promiscuous mode
[  108.535615][ T6203] macvtap0 (unregistering): left promiscuous mode
[  108.663349][ T5830] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  108.839829][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  108.911086][ T5830] usb 4-1: cp210x converter now attached to ttyUSB0
[  109.039877][ T5812] usb 2-1: Using ep0 maxpacket: 16
[  109.049427][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.089418][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.109429][ T5812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.138937][ T5812] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  109.154787][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.157900][   T27] usb 4-1: USB disconnect, device number 2
[  109.183159][ T5812] usb 2-1: config 0 descriptor??
[  109.202847][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  109.217627][   T27] cp210x 4-1:0.0: device disconnected
[  109.685657][ T5812] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6
[  109.878378][ T5812] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  109.913948][ T5812] usb 2-1: USB disconnect, device number 2
[  110.283911][ T6247] fido_id[6247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  111.109018][ T6249] loop4: detected capacity change from 0 to 32768
[  111.133318][ T6251] loop3: detected capacity change from 0 to 32768
[  111.264299][ T6251] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  111.405639][ T6276] overlayfs: upper fs needs to support d_type.
[  111.476405][ T6282] loop1: detected capacity change from 0 to 512
[  111.483819][ T6276] overlayfs: upper fs does not support tmpfile.
[  111.545269][ T6276] read_mapping_page failed!
[  111.558796][ T6251] XFS (loop3): Ending clean mount
[  111.589963][ T6276] ERROR: (device loop4): txCommit: 
[  111.589963][ T6276] 
[  111.874043][ T6251] XFS (loop3): User initiated shutdown received.
[  111.893690][ T6251] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  111.925278][ T6251] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  112.066397][ T5771] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  112.092341][ T6294] loop1: detected capacity change from 0 to 8
[  112.652323][ T6304] syz.3.117 uses obsolete (PF_INET,SOCK_PACKET)
[  112.732141][ T6304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.117'.
[  112.899902][ T6310] loop4: detected capacity change from 0 to 512
[  112.929587][ T6310] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  112.979419][ T6310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.015379][ T6310] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.168614][ T6300] loop2: detected capacity change from 0 to 32768
[  113.231979][ T6300] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  113.404117][ T6300] XFS (loop2): Ending clean mount
[  113.471881][ T6300] XFS (loop2): Quotacheck needed: Please wait.
[  113.509943][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.623314][ T6300] XFS (loop2): Quotacheck: Done.
[  113.806416][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.457147][ T6344] loop2: detected capacity change from 0 to 8192
[  114.490331][ T6344] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  114.510148][ T6344] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  114.528847][ T6344] REISERFS (device loop2): using ordered data mode
[  114.537171][ T6344] reiserfs: using flush barriers
[  114.549980][ T6344] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  114.607902][ T6344] REISERFS (device loop2): checking transaction log (loop2)
[  114.638572][ T6344] REISERFS (device loop2): Using r5 hash to sort names
[  114.657303][ T6344] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  114.719672][ T6334] loop4: detected capacity change from 0 to 32768
[  114.847048][ T6334] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  114.861544][ T6334] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.942831][ T6334] XFS (loop4): Ending clean mount
[  114.977340][ T6334] XFS (loop4): Quotacheck needed: Please wait.
[  115.118230][ T6334] XFS (loop4): Quotacheck: Done.
[  115.247944][ T5983] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.768338][ T6360] loop3: detected capacity change from 0 to 32768
[  115.775744][ T6375] loop4: detected capacity change from 0 to 128
[  115.865417][ T6360] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  116.050296][ T6360] XFS (loop3): Ending clean mount
[  116.110782][ T6360] XFS (loop3): Quotacheck needed: Please wait.
[  116.190006][ T6389] Invalid argument reading file caps for ./file0
[  116.268842][ T6360] XFS (loop3): Quotacheck: Done.
[  116.285756][ T6394] loop2: detected capacity change from 0 to 512
[  116.314143][ T6394] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.141: iget: bad i_size value: 38620345925642
[  116.385930][ T6394] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.141: couldn't read orphan inode 15 (err -117)
[  116.417359][ T6394] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.463629][ T6394] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.141: bg 0: block 5: invalid block bitmap
[  116.497651][ T6394] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28
[  116.574396][ T6394] EXT4-fs (loop2): This should not happen!! Data will be lost
[  116.574396][ T6394] 
[  116.640111][ T6394] EXT4-fs (loop2): Total free blocks count 0
[  116.669580][ T6394] EXT4-fs (loop2): Free/Dirty block details
[  116.675575][ T6394] EXT4-fs (loop2): free_blocks=0
[  116.729407][ T6394] EXT4-fs (loop2): dirty_blocks=65
[  116.735072][ T6394] EXT4-fs (loop2): Block reservation details
[  116.789585][ T6394] EXT4-fs (loop2): i_reserved_data_blocks=65
[  116.854293][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  116.921555][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  118.229355][ T5758] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  118.439568][ T5758] usb 5-1: Using ep0 maxpacket: 8
[  118.452367][ T5758] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  118.461261][ T5758] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.496727][ T5758] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.537154][ T5758] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.557027][ T5758] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.589364][ T5758] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.592053][ T6442] loop2: detected capacity change from 0 to 1024
[  118.608946][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.650433][ T6442] EXT4-fs: Ignoring removed nobh option
[  118.656117][ T6442] EXT4-fs: Ignoring removed bh option
[  118.723732][ T6444] sctp: [Deprecated]: syz.3.157 (pid 6444) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.723732][ T6444] Use struct sctp_sack_info instead
[  118.742655][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.883271][ T5758] usb 5-1: usb_control_msg returned -32
[  118.888961][ T5758] usbtmc 5-1:16.0: can't read capabilities
[  119.027299][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.349374][ T6455] usbtmc 5-1:16.0: usb_control_msg returned -32
[  119.370437][ T5758] usb 5-1: USB disconnect, device number 2
[  119.516489][ T6465] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  119.730091][ T6472] loop1: detected capacity change from 0 to 64
[  119.799072][ T6474] loop2: detected capacity change from 0 to 16
[  119.856293][ T6474] erofs: (device loop2): mounted with root inode @ nid 36.
[  120.127239][ T6478] loop4: detected capacity change from 0 to 1024
[  120.247450][ T6483] loop8: detected capacity change from 0 to 7
[  120.283947][ T6483] Dev loop8: unable to read RDB block 7
[  120.291653][  T787] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  120.300171][ T6483]  loop8: unable to read partition table
[  120.322816][  T787] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  120.331793][ T6483] loop8: partition table beyond EOD, truncated
[  120.364083][ T6483] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  120.677167][ T6492] pim6reg1: entered promiscuous mode
[  120.687447][ T6492] pim6reg1: entered allmulticast mode
[  120.899422][ T5812] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  121.105012][ T5812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.127818][ T5812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.158307][ T5812] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  121.178669][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  121.195043][ T5812] usb 5-1: SerialNumber: syz
[  121.343525][ T6489] loop1: detected capacity change from 0 to 32768
[  121.370099][ T6489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.174 (6489)
[  121.473447][ T5812] usb 5-1: 0:2 : does not exist
[  121.497992][ T6489] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.565883][ T6489] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  121.583213][ T6508] input: syz0 as /devices/virtual/input/input7
[  121.614720][ T6489] BTRFS info (device loop1): setting nodatasum
[  121.628684][ T5812] usb 5-1: USB disconnect, device number 3
[  121.660377][ T6489] BTRFS info (device loop1): force zlib compression, level 3
[  121.668721][ T6489] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  121.757968][ T6489] BTRFS info (device loop1): use lzo compression, level 0
[  121.778542][ T6489] BTRFS info (device loop1): turning on flush-on-commit
[  121.810031][ T6489] BTRFS info (device loop1): enabling auto defrag
[  121.834075][ T6489] BTRFS info (device loop1): max_inline at 4096
[  121.879711][ T6489] BTRFS info (device loop1): using free space tree
[  122.036589][ T6489] BTRFS info (device loop1): enabling ssd optimizations
[  122.396074][ T6543] loop4: detected capacity change from 0 to 512
[  122.403801][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.462892][ T6543] EXT4-fs (loop4): 1 truncate cleaned up
[  122.503437][ T6543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.810301][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.966556][ T6553] loop3: detected capacity change from 0 to 128
[  123.021826][ T6553] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.144362][ T6553] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.282717][ T6553] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop3' because it doesn't have stable inode numbers
[  123.464891][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.547836][ T6570] batadv_slave_0: entered promiscuous mode
[  123.585790][ T6569] batadv_slave_0: left promiscuous mode
[  123.936409][ T6586] loop3: detected capacity change from 0 to 256
[  124.940750][ T6618] netlink: 'syz.3.203': attribute type 10 has an invalid length.
[  125.049149][ T6618] team0: Port device dummy0 added
[  125.115121][ T6624] netlink: 'syz.3.203': attribute type 10 has an invalid length.
[  125.231712][ T6624] team0: Port device dummy0 removed
[  125.277852][ T6600] loop2: detected capacity change from 0 to 40427
[  125.283698][ T6624] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  125.317624][ T6623] loop4: detected capacity change from 0 to 8192
[  125.375179][ T6600] F2FS-fs (loop2): Found nat_bits in checkpoint
[  125.407602][ T6623] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  125.483615][ T6623] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  125.498825][ T6623] REISERFS (device loop4): using ordered data mode
[  125.506356][ T6623] reiserfs: using flush barriers
[  125.514016][ T6623] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.532462][ T6600] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  125.588098][ T6623] REISERFS (device loop4): checking transaction log (loop4)
[  125.994956][ T6623] REISERFS (device loop4): Using tea hash to sort names
[  126.035601][ T6623] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  126.669264][    C1] sched: RT throttling activated
[  126.878256][ T6637] loop3: detected capacity change from 0 to 131072
[  126.890476][ T6637] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  126.898651][ T6637] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  126.909643][ T6637] F2FS-fs (loop3): invalid crc value
[  126.935871][ T6637] F2FS-fs (loop3): Found nat_bits in checkpoint
[  127.000406][ T6637] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  127.007542][ T6637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  127.188243][   T28] audit: type=1800 audit(1776706809.251:4): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.207" name="file2" dev="loop3" ino=8 res=0 errno=0
[  127.542706][ T6666] loop4: detected capacity change from 0 to 128
[  127.556063][ T6666] EXT4-fs: Ignoring removed nobh option
[  127.660267][ T6666] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.794482][ T6666] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  128.005246][ T5983] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.049809][ T1191] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  128.189386][  T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  128.259309][ T1191] usb 2-1: Using ep0 maxpacket: 16
[  128.271660][ T1191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.313597][ T1191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.343791][ T1191] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice=e3.00
[  128.373093][ T1191] usb 2-1: New USB device strings: Mfr=30, Product=0, SerialNumber=0
[  128.389771][  T787] usb 3-1: Using ep0 maxpacket: 8
[  128.392244][ T1191] usb 2-1: Manufacturer: syz
[  128.420280][ T1191] usb 2-1: config 0 descriptor??
[  128.428625][  T787] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  128.448728][  T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  128.479220][  T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  128.523938][  T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  128.562871][  T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  128.599564][  T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  128.630004][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.907508][  T787] usb 3-1: usb_control_msg returned -32
[  128.924702][  T787] usbtmc 3-1:16.0: can't read capabilities
[  129.075305][ T1191] letsketch 0003:6161:4D15.0004: Device info: 騭
[  129.132016][ T6700] loop3: detected capacity change from 0 to 2048
[  129.229997][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.282802][ T1191] letsketch 0003:6161:4D15.0004: Device info: è‚¿
[  129.313009][ T6705] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  129.356725][ T6700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.211: bg 0: block 234: padding at end of block bitmap is not set
[  129.379946][ T6700] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 458 with error 28
[  129.394644][ T6700] EXT4-fs (loop3): This should not happen!! Data will be lost
[  129.394644][ T6700] 
[  129.406639][ T6700] EXT4-fs (loop3): Total free blocks count 0
[  129.412956][ T6700] EXT4-fs (loop3): Free/Dirty block details
[  129.419368][ T6700] EXT4-fs (loop3): free_blocks=0
[  129.425399][ T6700] EXT4-fs (loop3): dirty_blocks=464
[  129.431207][ T6700] EXT4-fs (loop3): Block reservation details
[  129.437288][ T6700] EXT4-fs (loop3): i_reserved_data_blocks=29
[  129.515332][  T787] usb 3-1: USB disconnect, device number 4
[  129.527060][ T1191] usb 2-1: Max retries (5) exceeded reading string descriptor 202
[  129.555737][ T1191] letsketch: probe of 0003:6161:4D15.0004 failed with error -71
[  129.609818][ T1191] usb 2-1: USB disconnect, device number 3
[  129.789959][ T6713] input: syz0 as /devices/virtual/input/input8
[  129.798671][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.123152][ T6721] loop4: detected capacity change from 0 to 2048
[  130.215221][ T6721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.929677][   T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  131.139397][   T27] usb 5-1: Using ep0 maxpacket: 8
[  131.155830][   T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  131.179382][   T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  131.199770][   T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  131.222208][   T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.251600][   T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  131.270694][ T6756] loop1: detected capacity change from 0 to 1024
[  131.279416][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.456085][ T6756] hfsplus: catalog searching failed
[  131.555946][   T27] usb 5-1: GET_CAPABILITIES returned 0
[  131.582130][   T27] usbtmc 5-1:16.0: can't read capabilities
[  131.612063][  T134] hfsplus: b-tree write err: -5, ino 3
[  131.786688][ T6771] warning: `syz.1.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  131.805134][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.814931][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.840163][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.849372][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.858626][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.868313][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.883045][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.892244][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.901400][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.910550][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.930436][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.939627][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.948766][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.958254][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  131.967455][    C0] vkms_vblank_simulate: vblank timer overrun
[  132.000055][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  132.009233][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  132.084319][   T27] usb 5-1: USB disconnect, device number 4
[  132.437010][ T6764] loop2: detected capacity change from 0 to 32768
[  132.469758][ T5832] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  132.501308][ T6764] 
[  132.501308][ T6764]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.501308][ T6764] 
[  132.581948][ T6764] ERROR: (device loop2): diWrite: ixpxd invalid
[  132.581948][ T6764] 
[  132.597686][ T6764] ERROR: (device loop2): txCommit: 
[  132.597686][ T6764] 
[  132.624009][ T6784] nbd0: detected capacity change from 0 to 128
[  132.644476][ T6764] 
[  132.644476][ T6764]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.644476][ T6764] 
[  132.671518][ T5832] usb 4-1: Using ep0 maxpacket: 16
[  132.701518][ T5832] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.736833][ T6764] 
[  132.736833][ T6764]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.736833][ T6764] 
[  132.761398][ T5832] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  132.774765][   T52] block nbd0: Receive control failed (result -104)
[  132.779439][ T5778] block nbd0: Receive control failed (result -32)
[  132.809425][ T5832] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  132.819198][ T5832] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  132.881323][ T5832] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.898573][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  132.919512][ T5832] usb 4-1: SerialNumber: syz
[  132.931379][ T6780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  132.941711][ T6764] ERROR: (device loop2): dtSearch: stack overrun!
[  132.941711][ T6764] 
[  132.964324][ T6780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  132.972150][ T6764] btstack dump:
[  132.975706][ T6764] bn = 0, index = 0
[  132.981584][ T5832] hub 4-1:1.0: bad descriptor, ignoring hub
[  132.987666][ T6764] bn = 30, index = 0
[  132.992310][ T5832] hub: probe of 4-1:1.0 failed with error -5
[  132.998657][ T6764] bn = 0, index = 0
[  133.023843][ T6764] bn = 30, index = 0
[  133.027974][ T6764] bn = 0, index = 0
[  133.034182][ T6793] loop1: detected capacity change from 0 to 128
[  133.042852][ T6764] bn = 30, index = 0
[  133.046886][ T6764] bn = 0, index = 0
[  133.055722][ T6764] bn = 0, index = 0
[  133.062080][ T6764] jfs_lookup: dtSearch returned -5
[  133.089832][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  133.096742][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.144438][ T6793] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  133.198094][ T6793] hpfs: filesystem error: improperly stopped
[  133.215206][ T6793] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  133.234767][ T6780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  133.254955][ T6793] hpfs: You really don't want any checks? You are crazy...
[  133.262463][ T6780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  133.304466][ T6793] hpfs: hpfs_map_sector(): read error
[  133.319844][ T6793] hpfs: code page support is disabled
[  133.326986][ T6793] hpfs: hpfs_map_4sectors(): unaligned read
[  133.339540][ T6793] hpfs: hpfs_map_4sectors(): unaligned read
[  133.345702][ T6793] hpfs: filesystem error: unable to find root dir
[  133.718536][ T5832] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  134.079738][   T27] usb 4-1: USB disconnect, device number 3
[  134.101391][   T27] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  134.468869][ T6803] loop2: detected capacity change from 0 to 32768
[  134.489498][ T6803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.243 (6803)
[  134.545700][ T6803] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.576482][ T6803] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  134.618415][ T6803] BTRFS info (device loop2): setting nodatasum
[  134.651468][ T6803] BTRFS info (device loop2): force zlib compression, level 3
[  134.658940][ T6803] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  134.702680][ T6803] BTRFS info (device loop2): use lzo compression, level 0
[  134.712427][ T6803] BTRFS info (device loop2): turning on flush-on-commit
[  134.733788][ T6803] BTRFS info (device loop2): enabling auto defrag
[  134.759171][ T6803] BTRFS info (device loop2): max_inline at 4096
[  134.781096][ T6803] BTRFS info (device loop2): using free space tree
[  134.815765][ T6807] loop4: detected capacity change from 0 to 32768
[  134.841466][ T6807] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.246 (6807)
[  134.954015][ T6807] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  135.003906][ T6803] BTRFS info (device loop2): enabling ssd optimizations
[  135.030693][ T6807] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  135.051049][ T6807] BTRFS info (device loop4): using free space tree
[  135.190916][ T6821] nbd1: detected capacity change from 0 to 128
[  135.280028][ T5778] block nbd1: Receive control failed (result -104)
[  135.289187][   T52] block nbd1: Receive control failed (result -32)
[  135.419810][ T6807] BTRFS info (device loop4): enabling ssd optimizations
[  135.463124][ T6807] BTRFS info (device loop4): auto enabling async discard
[  135.536937][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.558124][ T6862] netlink: 160 bytes leftover after parsing attributes in process `syz.3.251'.
[  135.610245][ T6862] netlink: 160 bytes leftover after parsing attributes in process `syz.3.251'.
[  135.658959][   T28] audit: type=1800 audit(1776706817.721:5): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.246" name="bus" dev="loop4" ino=263 res=0 errno=0
[  135.722467][ T6816] loop1: detected capacity change from 0 to 32768
[  135.907705][ T6816] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.042628][ T5983] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  136.200933][ T6816] XFS (loop1): Ending clean mount
[  136.312324][ T5785] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop4 scanned by udevd (5785)
[  136.357441][   T28] audit: type=1326 audit(1776706818.411:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6878 comm="syz.3.255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c6119c819 code=0x0
[  136.850260][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.268041][ T6904] nbd2: detected capacity change from 0 to 128
[  137.327050][   T52] block nbd2: Receive control failed (result -104)
[  137.334600][ T5778] block nbd2: Receive control failed (result -32)
[  137.812955][ T6906] loop4: detected capacity change from 0 to 32768
[  137.831128][ T6906] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.261 (6906)
[  137.866882][ T6906] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.886043][ T6906] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  137.896620][ T6906] BTRFS info (device loop4): setting nodatasum
[  137.905314][ T6906] BTRFS info (device loop4): force zlib compression, level 3
[  137.922892][ T6906] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  137.936218][ T6906] BTRFS info (device loop4): use lzo compression, level 0
[  137.946635][ T6906] BTRFS info (device loop4): turning on flush-on-commit
[  137.955598][ T6906] BTRFS info (device loop4): enabling auto defrag
[  137.970072][ T6906] BTRFS info (device loop4): max_inline at 4096
[  137.984041][ T6906] BTRFS info (device loop4): using free space tree
[  138.031646][ T6915] loop2: detected capacity change from 0 to 32768
[  138.069288][ T6915] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.263 (6915)
[  138.118018][ T6915] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  138.174476][ T6915] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  138.189626][ T6915] BTRFS info (device loop2): using free space tree
[  138.352815][ T6906] BTRFS info (device loop4): enabling ssd optimizations
[  138.527772][ T6915] BTRFS info (device loop2): enabling ssd optimizations
[  138.559660][ T6915] BTRFS info (device loop2): auto enabling async discard
[  138.705770][ T5983] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.730754][   T28] audit: type=1800 audit(1776706820.801:7): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="bus" dev="loop2" ino=263 res=0 errno=0
[  138.751330][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  138.947205][ T5768] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  138.981431][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  138.989936][ T5832] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  139.008147][    T8] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  139.031062][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.039387][    T8] usb 4-1: Product: syz
[  139.043606][    T8] usb 4-1: Manufacturer: syz
[  139.048451][    T8] usb 4-1: SerialNumber: syz
[  139.229513][ T5832] usb 2-1: Using ep0 maxpacket: 16
[  139.237455][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.297140][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  139.324089][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  139.361771][ T5832] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  139.382955][ T6961] loop4: detected capacity change from 0 to 128
[  139.394872][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.405478][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  139.439707][ T5832] usb 2-1: SerialNumber: syz
[  139.464697][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  139.475276][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  139.546772][ T5832] hub 2-1:1.0: bad descriptor, ignoring hub
[  139.569575][ T5832] hub: probe of 2-1:1.0 failed with error -5
[  139.731448][    T8] usb 4-1: unit 5 not found!
[  139.736187][    T8] usb 4-1: unit 3 not found!
[  139.787924][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  139.822307][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  140.150866][    T8] usb_set_interface error
[  140.156646][    T8] snd-usb-us122l: probe of 4-1:1.1 failed with error -22
[  140.200067][    T8] usb 4-1: USB disconnect, device number 4
[  140.295148][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.314944][ T5832] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[  140.598609][ T6970] loop2: detected capacity change from 0 to 32768
[  140.639687][ T6970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.272 (6970)
[  140.641658][    T8] usb 2-1: USB disconnect, device number 4
[  140.684131][    T8] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[  140.729328][ T6970] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.767422][ T6970] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  140.819597][ T6970] BTRFS info (device loop2): metadata ratio 2
[  140.829296][ T6970] BTRFS info (device loop2): force zlib compression, level 3
[  140.836759][ T6970] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  140.859404][ T6970] BTRFS info (device loop2): use lzo compression, level 0
[  140.887504][ T6970] BTRFS info (device loop2): allowing degraded mounts
[  140.907800][ T6970] BTRFS info (device loop2): max_inline at 0
[  140.938176][ T6970] BTRFS info (device loop2): using free space tree
[  141.149426][ T6970] BTRFS info (device loop2): enabling ssd optimizations
[  141.515007][ T7006] ALSA: seq fatal error: cannot create timer (-19)
[  141.664165][ T7014] loop1: detected capacity change from 0 to 64
[  141.725949][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.994960][ T7012] nbd3: detected capacity change from 0 to 128
[  142.105066][ T5778] block nbd3: Receive control failed (result -104)
[  142.112239][   T52] block nbd3: Receive control failed (result -32)
[  142.907276][ T7023] loop3: detected capacity change from 0 to 32768
[  142.934165][ T7023] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.281 (7023)
[  143.000359][ T7023] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  143.029798][ T7023] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  143.065438][ T7023] BTRFS info (device loop3): using free space tree
[  143.330348][ T7023] BTRFS info (device loop3): enabling ssd optimizations
[  143.369664][ T7023] BTRFS info (device loop3): auto enabling async discard
[  143.469473][  T787] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  143.535173][   T28] audit: type=1800 audit(1776706825.601:8): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.281" name="bus" dev="loop3" ino=263 res=0 errno=0
[  143.679375][  T787] usb 5-1: Using ep0 maxpacket: 16
[  143.701074][  T787] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.731017][  T787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  143.761441][  T787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  143.789350][  T787] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  143.836384][  T787] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.859780][  T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  143.863633][ T5771] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  143.880555][  T787] usb 5-1: SerialNumber: syz
[  143.901191][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  143.908583][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  143.945518][ T7034] loop2: detected capacity change from 0 to 32768
[  143.963620][  T787] hub 5-1:1.0: bad descriptor, ignoring hub
[  143.971223][  T787] hub: probe of 5-1:1.0 failed with error -5
[  144.125388][ T7034] overlayfs: upper fs needs to support d_type.
[  144.159051][ T7034] overlayfs: upper fs does not support tmpfile.
[  144.184289][ T7034] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  144.186923][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  144.232904][ T7051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  144.244315][ T7034] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  144.244315][ T7034] 
[  144.348825][ T7034] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  144.400749][ T7034] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  144.400749][ T7034] 
[  144.443377][ T7034] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  144.489515][ T7034] overlayfs: failed to verify upper root origin
[  144.612568][   T12] read_mapping_page failed!
[  144.624176][ T7063] loop3: detected capacity change from 0 to 256
[  144.632368][   T12] ERROR: (device loop2): txCommit: 
[  144.632368][   T12] 
[  144.658717][   T12] jfs_write_inode: jfs_commit_inode failed!
[  144.670213][ T7063] exfat: Deprecated parameter 'utf8'
[  144.684757][  T787] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  144.720484][ T7063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  144.783217][ T3444] kworker/u4:10: attempt to access beyond end of device
[  144.783217][ T3444] loop1: rw=1, sector=161, nr_sectors = 1 limit=64
[  144.815632][ T3444] buffer_io_error: 102 callbacks suppressed
[  144.815649][ T3444] Buffer I/O error on dev loop1, logical block 161, lost async page write
[  144.880571][ T3444] kworker/u4:10: attempt to access beyond end of device
[  144.880571][ T3444] loop1: rw=1, sector=162, nr_sectors = 1 limit=64
[  144.912116][ T3444] Buffer I/O error on dev loop1, logical block 162, lost async page write
[  144.934075][ T3444] kworker/u4:10: attempt to access beyond end of device
[  144.934075][ T3444] loop1: rw=1, sector=163, nr_sectors = 1 limit=64
[  144.970536][ T3444] Buffer I/O error on dev loop1, logical block 163, lost async page write
[  144.995448][ T3444] kworker/u4:10: attempt to access beyond end of device
[  144.995448][ T3444] loop1: rw=1, sector=167, nr_sectors = 1 limit=64
[  145.029795][  T787] usb 5-1: USB disconnect, device number 5
[  145.037787][  T787] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[  145.048123][ T3444] Buffer I/O error on dev loop1, logical block 167, lost async page write
[  145.070750][ T3444] kworker/u4:10: attempt to access beyond end of device
[  145.070750][ T3444] loop1: rw=1, sector=169, nr_sectors = 1 limit=64
[  145.120267][ T3444] Buffer I/O error on dev loop1, logical block 169, lost async page write
[  145.155779][ T3444] kworker/u4:10: attempt to access beyond end of device
[  145.155779][ T3444] loop1: rw=1, sector=171, nr_sectors = 1 limit=64
[  145.208633][ T3444] Buffer I/O error on dev loop1, logical block 171, lost async page write
[  145.229433][ T3444] kworker/u4:10: attempt to access beyond end of device
[  145.229433][ T3444] loop1: rw=1, sector=172, nr_sectors = 1 limit=64
[  145.270263][ T3444] Buffer I/O error on dev loop1, logical block 172, lost async page write
[  145.278899][ T3444] kworker/u4:10: attempt to access beyond end of device
[  145.278899][ T3444] loop1: rw=1, sector=173, nr_sectors = 1 limit=64
[  145.340459][ T3444] Buffer I/O error on dev loop1, logical block 173, lost async page write
[  145.363998][ T3444] kworker/u4:10: attempt to access beyond end of device
[  145.363998][ T3444] loop1: rw=1, sector=174, nr_sectors = 1 limit=64
[  145.399184][ T3444] Buffer I/O error on dev loop1, logical block 174, lost async page write
[  145.419664][ T3444] kworker/u4:10: attempt to access beyond end of device
[  145.419664][ T3444] loop1: rw=1, sector=175, nr_sectors = 1 limit=64
[  145.458324][ T3444] Buffer I/O error on dev loop1, logical block 175, lost async page write
[  145.623338][ T7076] loop3: detected capacity change from 0 to 2048
[  145.686161][ T7076] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  145.722986][ T7076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.024140][ T7101] loop2: detected capacity change from 0 to 40427
[  147.095184][ T7101] F2FS-fs (loop2): invalid crc value
[  147.173303][ T7101] F2FS-fs (loop2): Found nat_bits in checkpoint
[  147.372295][ T7122] loop1: detected capacity change from 0 to 128
[  147.404368][ T7122] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  147.441478][ T7101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.683644][ T7127] loop4: detected capacity change from 0 to 1024
[  147.839726][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  148.013618][ T7127] hfsplus: b-tree write err: -5, ino 3
[  148.145432][ T7137] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  148.200660][ T7137] netlink: 'syz.3.303': attribute type 12 has an invalid length.
[  148.208477][ T7137] netlink: 'syz.3.303': attribute type 42 has an invalid length.
[  148.933861][   T28] audit: type=1326 audit(1776706831.001:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.2.301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3afd9c819 code=0x0
[  149.804506][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.315'.
[  149.907939][ T7162] loop1: detected capacity change from 0 to 32768
[  149.937852][ T7178] loop2: detected capacity change from 0 to 512
[  149.962832][ T7162] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.016045][ T7178] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.316: inode has both inline data and extents flags
[  150.048104][ T7178] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.316: couldn't read orphan inode 15 (err -117)
[  150.062133][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.132868][ T7162] XFS (loop1): Ending clean mount
[  150.163995][ T7162] XFS (loop1): Quotacheck needed: Please wait.
[  150.250409][ T7162] XFS (loop1): Quotacheck: Done.
[  150.376744][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.436139][ T7194] loop3: detected capacity change from 0 to 1024
[  150.525787][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.668000][ T7194] hfsplus: b-tree write err: -5, ino 3
[  151.167405][ T7213] syzkaller1: entered promiscuous mode
[  151.175609][ T7213] syzkaller1: entered allmulticast mode
[  151.431770][ T7220] loop1: detected capacity change from 0 to 512
[  151.482650][ T7220] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.330: inode has both inline data and extents flags
[  151.519615][ T7220] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.330: couldn't read orphan inode 15 (err -117)
[  151.576551][ T7220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.754131][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.080036][ T7235] loop2: detected capacity change from 0 to 1024
[  152.256837][ T7235] hfsplus: b-tree write err: -5, ino 3
[  152.833102][ T7249] loop3: detected capacity change from 0 to 8192
[  152.879497][ T7249] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  152.896065][ T7249] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  152.905908][ T7249] REISERFS (device loop3): using ordered data mode
[  152.914079][ T7249] reiserfs: using flush barriers
[  152.947298][ T7249] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  153.003017][ T7249] REISERFS (device loop3): checking transaction log (loop3)
[  153.024936][ T7249] REISERFS (device loop3): Using r5 hash to sort names
[  153.032638][ T7249] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  154.060421][ T7279] netlink: 'syz.2.353': attribute type 10 has an invalid length.
[  154.069175][ T7278] loop1: detected capacity change from 0 to 1024
[  154.114426][ T7279] team0: Port device dummy0 added
[  154.140377][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  154.185799][ T7280] netlink: 'syz.2.353': attribute type 10 has an invalid length.
[  154.274542][ T7278] hfsplus: b-tree write err: -5, ino 3
[  154.300310][ T7280] team0: Port device dummy0 removed
[  154.328036][ T7280] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  154.343543][    T8] usb 4-1: Using ep0 maxpacket: 8
[  154.380191][    T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  154.388482][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.409301][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  154.419118][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  154.449310][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.498959][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  154.528537][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.701526][ T7287] loop1: detected capacity change from 0 to 512
[  154.750777][ T7287] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  154.770106][    T8] usb 4-1: usb_control_msg returned -32
[  154.775795][    T8] usbtmc 4-1:16.0: can't read capabilities
[  154.820392][ T7287] EXT4-fs (loop1): 1 truncate cleaned up
[  154.829126][ T7287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.914104][   T28] audit: type=1800 audit(1776706836.981:10): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.355" name="file0" dev="loop1" ino=13 res=0 errno=0
[  155.015452][ T7282] loop4: detected capacity change from 0 to 32768
[  155.024496][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.077945][ T7282] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  155.166148][ T7300] usbtmc 4-1:16.0: usb_control_msg returned -32
[  155.175914][ T1191] usb 4-1: USB disconnect, device number 5
[  155.204232][ T7282] XFS (loop4): Ending clean mount
[  155.242331][ T7282] XFS (loop4): Quotacheck needed: Please wait.
[  155.303206][ T7282] XFS (loop4): Quotacheck: Done.
[  155.570493][ T7303] loop2: detected capacity change from 0 to 1024
[  155.607480][ T7305] loop1: detected capacity change from 0 to 512
[  155.668626][ T7305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.722407][ T7303] hfsplus: catalog searching failed
[  155.844749][ T1143] hfsplus: b-tree write err: -5, ino 3
[  155.883559][ T5983] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  156.113208][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.177098][ T7313] loop2: detected capacity change from 0 to 8192
[  156.224217][ T7313] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  156.270468][ T7313] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  156.298043][ T7313] REISERFS (device loop2): using ordered data mode
[  156.322684][ T7313] reiserfs: using flush barriers
[  156.362814][ T7313] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  156.440154][ T7313] REISERFS (device loop2): checking transaction log (loop2)
[  156.475335][ T7313] REISERFS (device loop2): Using r5 hash to sort names
[  156.500772][ T7313] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  156.768980][ T7320] netlink: 'syz.1.363': attribute type 10 has an invalid length.
[  156.854319][ T7320] team0: Port device dummy0 added
[  157.000309][ T7320] netlink: 'syz.1.363': attribute type 10 has an invalid length.
[  157.056254][ T7320] team0: Port device dummy0 removed
[  157.069068][ T7320] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  157.109466][ T5812] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  157.289370][ T5812] usb 5-1: Using ep0 maxpacket: 16
[  157.296950][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.324438][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.343416][ T5812] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  157.357192][ T5812] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  157.372444][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.398114][ T5812] usb 5-1: config 0 descriptor??
[  157.435412][ T7339] loop3: detected capacity change from 0 to 512
[  157.473591][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.489350][ T5758] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  157.671895][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.695444][ T5758] usb 3-1: Using ep0 maxpacket: 8
[  157.703335][ T5758] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  157.722783][ T5758] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  157.752380][ T5758] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  157.783269][ T5758] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  157.798695][ T5758] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.812361][ T5758] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  157.839316][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.892489][ T5812] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input9
[  158.020084][ T5812] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  158.106486][ T5812] usb 5-1: USB disconnect, device number 6
[  158.113110][ T5758] usb 3-1: usb_control_msg returned -32
[  158.118776][ T5758] usbtmc 3-1:16.0: can't read capabilities
[  158.284633][ T7351] loop1: detected capacity change from 0 to 2048
[  158.304937][ T7348] fido_id[7348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  158.346549][ T7351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.507261][ T7351] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.374: bg 0: block 234: padding at end of block bitmap is not set
[  158.524669][ T7351] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1222 with error 28
[  158.538633][ T7351] EXT4-fs (loop1): This should not happen!! Data will be lost
[  158.538633][ T7351] 
[  158.569435][ T7351] EXT4-fs (loop1): Total free blocks count 0
[  158.584763][ T7351] EXT4-fs (loop1): Free/Dirty block details
[  158.591468][ T7351] EXT4-fs (loop1): free_blocks=0
[  158.592818][ T7356] usbtmc 3-1:16.0: usb_control_msg returned -32
[  158.597103][ T7351] EXT4-fs (loop1): dirty_blocks=1232
[  158.615117][ T7351] EXT4-fs (loop1): Block reservation details
[  158.623326][ T7351] EXT4-fs (loop1): i_reserved_data_blocks=77
[  158.639629][  T787] usb 3-1: USB disconnect, device number 5
[  158.774409][ T7362] loop3: detected capacity change from 0 to 2048
[  158.831985][ T7362]  loop3: p3 < > p4 < >
[  158.836293][ T7362] loop3: partition table partially beyond EOD, truncated
[  158.861471][ T7362] loop3: p3 start 4284289 is beyond EOD, truncated
[  158.913860][ T5139]  loop3: p3 < > p4 < >
[  158.918125][ T5139] loop3: partition table partially beyond EOD, truncated
[  158.944064][ T7364] netlink: 'syz.4.378': attribute type 10 has an invalid length.
[  158.944259][ T5139] loop3: p3 start 4284289 is beyond EOD, truncated
[  158.999201][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.044745][ T7364] team0: Port device dummy0 added
[  159.075304][ T7365] netlink: 'syz.4.378': attribute type 10 has an invalid length.
[  159.186962][ T6957] udevd[6957]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  159.229916][ T7365] team0: Port device dummy0 removed
[  159.256009][ T6957] udevd[6957]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  159.352622][ T7365] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  159.386912][ T7371] loop2: detected capacity change from 0 to 512
[  159.453318][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.496867][ T7374] pim6reg: entered allmulticast mode
[  159.518544][ T7374] team0: entered allmulticast mode
[  159.549381][ T7374] team_slave_0: entered allmulticast mode
[  159.599342][ T7374] team_slave_1: entered allmulticast mode
[  159.613378][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'.
[  159.648113][ T7374] team0: left allmulticast mode
[  159.685657][ T7374] team_slave_0: left allmulticast mode
[  159.706653][ T7374] team_slave_1: left allmulticast mode
[  159.716289][ T7374] pim6reg: left allmulticast mode
[  159.849834][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.186844][ T7389] loop1: detected capacity change from 0 to 1024
[  160.231591][ T7393] loop2: detected capacity change from 0 to 2048
[  160.315865][ T7393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.489621][ T7389] hfsplus: b-tree write err: -5, ino 3
[  160.571334][ T7393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.388: bg 0: block 234: padding at end of block bitmap is not set
[  160.626709][ T7393] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 190 with error 28
[  160.640085][ T7393] EXT4-fs (loop2): This should not happen!! Data will be lost
[  160.640085][ T7393] 
[  160.650243][ T7393] EXT4-fs (loop2): Total free blocks count 0
[  160.657822][ T7393] EXT4-fs (loop2): Free/Dirty block details
[  160.665303][ T7393] EXT4-fs (loop2): free_blocks=0
[  160.670877][ T7393] EXT4-fs (loop2): dirty_blocks=192
[  160.676244][ T7393] EXT4-fs (loop2): Block reservation details
[  160.687119][ T7393] EXT4-fs (loop2): i_reserved_data_blocks=12
[  160.853170][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.139588][   T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  161.237951][ T7408] netlink: 'syz.2.393': attribute type 10 has an invalid length.
[  161.284537][ T7408] bond0: (slave dummy0): Releasing backup interface
[  161.316902][ T7408] team0: Port device dummy0 added
[  161.339669][   T27] usb 2-1: Using ep0 maxpacket: 8
[  161.345539][ T7409] netlink: 'syz.2.393': attribute type 10 has an invalid length.
[  161.354823][   T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  161.365240][   T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.399655][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.427731][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  161.447984][   T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  161.467315][   T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  161.478084][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.510088][ T7409] team0: Port device dummy0 removed
[  161.533129][ T7409] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  161.719442][   T27] usb 2-1: usb_control_msg returned -32
[  161.727653][   T27] usbtmc 2-1:16.0: can't read capabilities
[  162.045809][ T7424] loop4: detected capacity change from 0 to 2048
[  162.108217][ T7427] usbtmc 2-1:16.0: usb_control_msg returned -32
[  162.143124][ T7424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.191001][    T8] usb 2-1: USB disconnect, device number 5
[  162.417291][ T7424] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.402: bg 0: block 234: padding at end of block bitmap is not set
[  162.444471][ T7424] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28
[  162.465218][ T7424] EXT4-fs (loop4): This should not happen!! Data will be lost
[  162.465218][ T7424] 
[  162.481617][ T7424] EXT4-fs (loop4): Total free blocks count 0
[  162.487799][ T7424] EXT4-fs (loop4): Free/Dirty block details
[  162.494734][ T7424] EXT4-fs (loop4): free_blocks=0
[  162.505554][ T7424] EXT4-fs (loop4): dirty_blocks=208
[  162.511001][ T7424] EXT4-fs (loop4): Block reservation details
[  162.517168][ T7424] EXT4-fs (loop4): i_reserved_data_blocks=13
[  162.652945][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.947648][ T7449] loop2: detected capacity change from 0 to 2048
[  163.043850][ T7449]  loop2: p4 < >
[  163.093935][ T7449] EXT4-fs (loop2p4): unable to read superblock
[  163.175413][   T24] block nbd0: Connection timed out, retrying (0/2 alive)
[  163.185058][   T24] block nbd0: Dead connection, failed to find a fallback
[  163.192719][   T24] block nbd0: shutting down sockets
[  163.198491][   T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.209326][   T24] buffer_io_error: 110 callbacks suppressed
[  163.209340][   T24] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.229768][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.239209][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.260485][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.270330][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.278306][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.287807][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.296015][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.308820][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.317641][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.329447][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.337459][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.346996][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.355607][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.365133][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.379439][ T5786] ldm_validate_partition_table(): Disk read failed.
[  163.387107][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.396303][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.405039][ T1058] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  163.414199][ T1058] Buffer I/O error on dev nbd0, logical block 0, async page read
[  163.422898][ T5786] Dev nbd0: unable to read RDB block 0
[  163.433255][ T5786]  nbd0: unable to read partition table
[  163.454226][ T5786] ldm_validate_partition_table(): Disk read failed.
[  163.462120][ T5786] Dev nbd0: unable to read RDB block 0
[  163.468319][ T5786]  nbd0: unable to read partition table
[  163.481530][ T5786] ldm_validate_partition_table(): Disk read failed.
[  163.489088][ T5786] Dev nbd0: unable to read RDB block 0
[  163.496402][ T5786]  nbd0: unable to read partition table
[  163.774516][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[  163.815865][ T7468] block nbd4: Unsupported socket: should be TCP or UNIX.
[  164.021235][ T1191] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  164.259486][ T1191] usb 3-1: Using ep0 maxpacket: 32
[  164.271476][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  164.299277][ T1191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58409, setting to 1024
[  164.334548][ T1191] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  164.371604][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.415397][ T1191] usb 3-1: config 0 descriptor??
[  164.434499][ T7465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  164.485549][ T1191] hub 3-1:0.0: USB hub found
[  164.556210][ T7482] loop4: detected capacity change from 0 to 2048
[  164.576385][ T7482] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  164.630159][ T7484] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.698365][   T28] audit: type=1800 audit(1776706846.761:11): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.423" name="file2" dev="loop4" ino=16 res=0 errno=0
[  164.754241][ T1191] hub 3-1:0.0: 1 port detected
[  165.091371][ T7493] Invalid argument reading file caps for ./file0
[  165.529833][ T7499] loop6: detected capacity change from 0 to 8
[  165.599330][ T7499] loop6: detected capacity change from 8 to 7
[  165.641166][ T7499] Dev loop6: unable to read RDB block 7
[  165.684277][ T7499]  loop6: unable to read partition table
[  165.706518][ T7499] loop6: partition table beyond EOD, truncated
[  165.721408][ T1058] block nbd1: Connection timed out, retrying (0/2 alive)
[  165.728971][ T1058] block nbd1: Dead connection, failed to find a fallback
[  165.737683][ T1058] block nbd1: shutting down sockets
[  165.745608][ T5772] ldm_validate_partition_table(): Disk read failed.
[  165.750419][ T7500] loop6: detected capacity change from 7 to 0
[  165.760442][ T5772] Dev nbd1: unable to read RDB block 0
[  165.767223][ T5772]  nbd1: unable to read partition table
[  165.785353][ T5772] ldm_validate_partition_table(): Disk read failed.
[  165.793395][ T5772] Dev nbd1: unable to read RDB block 0
[  165.801034][ T5772]  nbd1: unable to read partition table
[  165.802752][ T7499] loop_reread_partitions: partition scan of loop6 (ÛuêƒGŸ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð
[  165.802752][ T7499] å’�<l·k¨3"	[8­S~) failed (rc=-5)
[  165.848906][ T5758] usb 3-1: USB disconnect, device number 6
[  165.855208][ T1191] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[  165.864254][ T7502] loop1: detected capacity change from 0 to 512
[  165.909141][ T7502] EXT4-fs (loop1): 1 truncate cleaned up
[  165.941500][ T7502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.177134][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.287966][ T7506] loop4: detected capacity change from 0 to 4096
[  166.343304][ T7510] loop1: detected capacity change from 0 to 2048
[  166.390308][ T7508] loop3: detected capacity change from 0 to 4096
[  166.390497][ T7506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.447634][ T7514] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.468871][ T7510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.523675][   T28] audit: type=1400 audit(1776706848.591:12): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7505 comm="syz.4.432"
[  166.655146][ T7510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.433: bg 0: block 234: padding at end of block bitmap is not set
[  166.735571][ T7510] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 104 with error 28
[  166.748906][ T7510] EXT4-fs (loop1): This should not happen!! Data will be lost
[  166.748906][ T7510] 
[  166.758734][ T7510] EXT4-fs (loop1): Total free blocks count 0
[  166.777548][ T7510] EXT4-fs (loop1): Free/Dirty block details
[  166.788756][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.808647][ T7510] EXT4-fs (loop1): free_blocks=0
[  166.814120][ T7508] syz.3.434 (7508) used greatest stack depth: 19792 bytes left
[  166.829795][ T7510] EXT4-fs (loop1): dirty_blocks=112
[  166.846151][ T7510] EXT4-fs (loop1): Block reservation details
[  166.862654][ T7510] EXT4-fs (loop1): i_reserved_data_blocks=7
[  167.032646][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.257602][ T7530] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  167.648533][ T1058] block nbd2: Connection timed out, retrying (0/2 alive)
[  167.656031][ T1058] block nbd2: Dead connection, failed to find a fallback
[  167.663233][ T1058] block nbd2: shutting down sockets
[  167.671161][ T5784] ldm_validate_partition_table(): Disk read failed.
[  167.681552][ T5784] Dev nbd2: unable to read RDB block 0
[  167.687881][ T5784]  nbd2: unable to read partition table
[  167.698045][ T5784] ldm_validate_partition_table(): Disk read failed.
[  167.705526][ T5784] Dev nbd2: unable to read RDB block 0
[  167.711810][ T5784]  nbd2: unable to read partition table
[  167.735239][ T5784] ldm_validate_partition_table(): Disk read failed.
[  167.789328][ T5784] Dev nbd2: unable to read RDB block 0
[  167.798335][ T5784]  nbd2: unable to read partition table
[  167.818700][ T5784] ldm_validate_partition_table(): Disk read failed.
[  167.826113][ T5784] Dev nbd2: unable to read RDB block 0
[  167.833364][ T5784]  nbd2: unable to read partition table
[  167.993972][ T7549] loop3: detected capacity change from 0 to 512
[  168.029365][ T7549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  168.099553][ T7549] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.449: invalid indirect mapped block 9 (level 0)
[  168.209300][ T7549] EXT4-fs (loop3): 1 truncate cleaned up
[  168.217681][ T7549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.404206][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.744354][ T7551] loop4: detected capacity change from 0 to 40427
[  168.758409][ T7551] F2FS-fs (loop4): invalid crc value
[  168.789716][ T7551] F2FS-fs (loop4): Found nat_bits in checkpoint
[  168.867397][ T7551] F2FS-fs (loop4): Start checkpoint disabled!
[  168.886460][ T7551] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  168.969958][ T7547] loop2: detected capacity change from 0 to 32768
[  169.034753][ T7547] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.043761][ T5758] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  169.125182][   T42] bio_check_eod: 127 callbacks suppressed
[  169.125203][   T42] kworker/u4:2: attempt to access beyond end of device
[  169.125203][   T42] loop4: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  169.153276][   T42] kworker/u4:2: attempt to access beyond end of device
[  169.153276][   T42] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  169.193487][ T7547] XFS (loop2): Ending clean mount
[  169.196741][   T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  169.207126][   T42] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  169.227793][ T7547] XFS (loop2): Quotacheck needed: Please wait.
[  169.252853][ T5758] usb 4-1: Using ep0 maxpacket: 16
[  169.278991][ T5758] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  169.312782][ T5758] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  169.348688][ T5758] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.375629][ T5758] usb 4-1: config 1 interface 0 has no altsetting 0
[  169.387756][ T7547] XFS (loop2): Quotacheck: Done.
[  169.404465][ T5758] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[  169.419353][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.427651][ T5758] usb 4-1: Product: syz
[  169.432345][ T5758] usb 4-1: Manufacturer: syz
[  169.436993][ T5758] usb 4-1: SerialNumber: syz
[  169.663372][ T5758] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[  169.731995][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.875002][ T5758] usb 4-1: USB disconnect, device number 6
[  170.076094][ T7557] usblp0: removed
[  170.114318][ T7571] loop1: detected capacity change from 0 to 8192
[  170.197410][ T7578] loop4: detected capacity change from 0 to 1024
[  170.235969][ T7571]  loop1: AHDI p3 p4
[  170.253909][ T7578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.258952][ T7571] loop1: p3 start 525312 is beyond EOD, truncated
[  170.325877][ T7578] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.373904][   T28] audit: type=1800 audit(1776706852.441:13): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.458" name="file1" dev="loop4" ino=15 res=0 errno=0
[  170.395884][ T7578] EXT4-fs (loop4): shut down requested (2)
[  170.409331][   T28] audit: type=1800 audit(1776706852.471:14): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.458" name="file1" dev="loop4" ino=15 res=0 errno=0
[  170.456248][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  170.631804][ T7587] loop1: detected capacity change from 0 to 1024
[  170.707418][ T7587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.759441][ T7587] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.795882][ T7593] loop3: detected capacity change from 0 to 256
[  170.895737][ T7593] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d)
[  170.969458][   T28] audit: type=1804 audit(1776706853.031:15): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.461" name="/newroot/96/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  171.020315][ T7587] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.461: lblock 3 mapped to illegal pblock 3 (length 3)
[  171.110395][ T7587] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  171.143931][ T7587] EXT4-fs (loop1): This should not happen!! Data will be lost
[  171.143931][ T7587] 
[  171.204288][ T7587] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm syz.1.461: lblock 8 mapped to illegal pblock 8 (length 8)
[  171.265699][ T7597] loop4: detected capacity change from 0 to 64
[  171.276572][ T7587] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  171.323939][ T7599] loop3: detected capacity change from 0 to 128
[  171.336049][ T7585] loop2: detected capacity change from 0 to 32768
[  171.354280][ T7587] EXT4-fs (loop1): This should not happen!! Data will be lost
[  171.354280][ T7587] 
[  171.391546][ T7599] EXT4-fs (loop3): Test dummy encryption mode enabled
[  171.398657][ T7585] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  171.491358][ T7599] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.509115][ T7599] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  171.564631][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  171.612280][ T7585] XFS (loop2): Ending clean mount
[  171.905851][ T5768] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  172.131995][ T7620] EXT4-fs: Ignoring removed nobh option
[  172.146468][   T24] block nbd3: Connection timed out, retrying (0/2 alive)
[  172.154081][   T24] block nbd3: Dead connection, failed to find a fallback
[  172.161381][   T24] block nbd3: shutting down sockets
[  172.166632][   T24] blk_print_req_error: 159 callbacks suppressed
[  172.166647][   T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.182487][   T24] buffer_io_error: 159 callbacks suppressed
[  172.182500][   T24] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.196752][ T7467] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.206139][ T7467] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.214775][ T7467] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.224836][ T7467] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.232894][ T7467] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.242199][ T7467] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.288131][ T1058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.299067][ T1058] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.308838][ T7599] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  172.331877][ T1058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.344530][ T1058] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.353819][ T1058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.366203][ T1058] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.374817][ T1058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.385432][ T1058] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.394601][ T5785] ldm_validate_partition_table(): Disk read failed.
[  172.401835][ T1058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.411965][ T1058] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.420355][ T1058] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  172.429704][ T1058] Buffer I/O error on dev nbd3, logical block 0, async page read
[  172.437891][ T5785] Dev nbd3: unable to read RDB block 0
[  172.444286][ T5785]  nbd3: unable to read partition table
[  172.457462][ T5785] ldm_validate_partition_table(): Disk read failed.
[  172.479477][ T5785] Dev nbd3: unable to read RDB block 0
[  172.485701][ T5785]  nbd3: unable to read partition table
[  172.732656][ T7620] EXT4-fs (loop1): Test dummy encryption mode enabled
[  172.753860][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  172.775433][ T7620] EXT4-fs error (device loop1): __ext4_iget:5078: inode #11: block 1: comm syz.1.470: invalid block
[  172.797606][ T7620] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.470: couldn't read orphan inode 11 (err -117)
[  172.865372][ T7620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.088455][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.221315][   T28] audit: type=1326 audit(1776706855.291:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6119c819 code=0x7ffc0000
[  173.287058][   T28] audit: type=1326 audit(1776706855.291:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6119c819 code=0x7ffc0000
[  173.348890][   T28] audit: type=1326 audit(1776706855.321:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4c6119c819 code=0x7ffc0000
[  173.437582][   T28] audit: type=1326 audit(1776706855.321:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6119c819 code=0x7ffc0000
[  173.527169][   T28] audit: type=1326 audit(1776706855.321:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4c6119c819 code=0x7ffc0000
[  173.599398][   T28] audit: type=1326 audit(1776706855.321:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6119c819 code=0x7ffc0000
[  173.672530][   T28] audit: type=1326 audit(1776706855.321:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f4c6119c819 code=0x7ffc0000
[  173.698739][ T7637] set_capacity_and_notify: 1 callbacks suppressed
[  173.698755][ T7637] loop2: detected capacity change from 0 to 32768
[  173.728581][ T7637] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.474 (7637)
[  173.791989][ T7637] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  173.829656][ T7637] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  173.838512][ T7637] BTRFS info (device loop2): enabling auto defrag
[  173.873487][ T5832] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  173.906636][ T7637] BTRFS info (device loop2): use no compression
[  173.928864][ T7637] BTRFS info (device loop2): max_inline at 4096
[  173.939274][ T7637] BTRFS info (device loop2): using free space tree
[  174.069521][ T5832] usb 4-1: Using ep0 maxpacket: 32
[  174.077136][ T5832] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  174.089180][ T5832] usb 4-1: config 0 has no interface number 0
[  174.100766][ T5832] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  174.110231][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.118426][ T5832] usb 4-1: Product: syz
[  174.123438][ T5832] usb 4-1: Manufacturer: syz
[  174.128109][ T5832] usb 4-1: SerialNumber: syz
[  174.140500][ T5832] usb 4-1: config 0 descriptor??
[  174.171021][ T5832] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  174.180161][ T7637] BTRFS info (device loop2): enabling ssd optimizations
[  174.193302][ T7637] BTRFS info (device loop2): auto enabling async discard
[  174.304925][ T7648] loop4: detected capacity change from 0 to 32768
[  174.351732][ T7648] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.478 (7648)
[  174.390909][ T5832] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  174.432875][ T7648] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  174.447937][ T5832] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  174.471043][ T7648] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  174.504561][ T7648] BTRFS info (device loop4): using free space tree
[  174.631961][ T7652] loop1: detected capacity change from 0 to 32768
[  174.689963][ T7648] BTRFS info (device loop4): enabling ssd optimizations
[  174.697081][ T7648] BTRFS info (device loop4): auto enabling async discard
[  174.707131][ T5768] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.752842][ T7652] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  174.804366][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  174.812601][ T5832] usb 4-1: USB disconnect, device number 7
[  174.836432][ T5832] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  174.859294][ T5832] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  174.949139][ T5832] quatech2 4-1:0.51: device disconnected
[  175.009631][ T7652] XFS (loop1): Ending clean mount
[  175.056793][ T5983] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  175.115163][ T7652] XFS (loop1): User initiated shutdown received.
[  175.234210][ T7652] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  175.249840][ T7652] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  175.411747][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  175.702152][ T7700] loop2: detected capacity change from 0 to 16
[  175.786418][ T7700] erofs: (device loop2): mounted with root inode @ nid 36.
[  175.836550][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  175.836565][   T28] audit: type=1800 audit(1776706857.901:24): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.481" name="file1" dev="loop2" ino=86 res=0 errno=0
[  175.865411][ T7700] syz.2.481: attempt to access beyond end of device
[  175.865411][ T7700] loop2: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  176.299577][ T7696] loop4: detected capacity change from 0 to 40427
[  176.322934][ T7709] loop1: detected capacity change from 0 to 256
[  176.333435][ T7696] F2FS-fs (loop4): heap/no_heap options were deprecated
[  176.357912][ T7696] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff
[  176.405517][ T7709] FAT-fs (loop1): Directory bread(block 64) failed
[  176.412577][ T7696] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x77e8c
[  176.429082][ T7696] F2FS-fs (loop4): invalid crc value
[  176.437697][ T7709] FAT-fs (loop1): Directory bread(block 65) failed
[  176.445739][ T7709] FAT-fs (loop1): Directory bread(block 66) failed
[  176.474769][ T7709] FAT-fs (loop1): Directory bread(block 67) failed
[  176.497685][ T7709] FAT-fs (loop1): Directory bread(block 68) failed
[  176.507403][ T7709] FAT-fs (loop1): Directory bread(block 69) failed
[  176.516988][ T7709] FAT-fs (loop1): Directory bread(block 70) failed
[  176.527791][ T7709] FAT-fs (loop1): Directory bread(block 71) failed
[  176.532810][ T7696] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0
[  176.549780][ T7709] FAT-fs (loop1): Directory bread(block 72) failed
[  176.556485][ T7709] FAT-fs (loop1): Directory bread(block 73) failed
[  176.591640][ T7696] F2FS-fs (loop4): Found nat_bits in checkpoint
[  176.707095][ T7696] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  176.802033][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40
[  176.872379][ T1117] kworker/u4:6: attempt to access beyond end of device
[  176.872379][ T1117] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256
[  176.899373][ T7696] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  177.027929][ T7696] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  177.063757][ T7715] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[  177.115787][ T7696] syz.4.482: attempt to access beyond end of device
[  177.115787][ T7696] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  177.151766][ T7696] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x1cf6/0x1ea0
[  177.176294][ T7696] syz.4.482: attempt to access beyond end of device
[  177.176294][ T7696] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  177.204760][ T7707] loop2: detected capacity change from 0 to 32768
[  177.263230][ T7707] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.372792][ T5983] syz-executor: attempt to access beyond end of device
[  177.372792][ T5983] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  177.456530][ T5983] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  177.466866][ T7707] XFS (loop2): Ending clean mount
[  177.526073][ T7707] XFS (loop2): Quotacheck needed: Please wait.
[  177.663318][ T7707] XFS (loop2): Quotacheck: Done.
[  177.757835][ T7717] loop1: detected capacity change from 0 to 32768
[  177.985081][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  178.182742][ T7725] loop3: detected capacity change from 0 to 32768
[  178.254770][   T28] audit: type=1800 audit(1776706860.321:25): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.490" name="file1" dev="loop3" ino=7 res=0 errno=0
[  178.786638][ T7734] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  178.899843][ T7736] loop1: detected capacity change from 0 to 512
[  178.926950][ T7736] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  178.986308][ T7736] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.493: Invalid inode bitmap blk 4 in block_group 0
[  179.017246][ T7736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.048690][ T7742] Invalid argument reading file caps for ./file0
[  179.353612][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.522412][ T5832] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  180.720249][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.732443][ T5812] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  180.746576][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.758324][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  180.777916][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.787881][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.881111][ T5832] usb 4-1: config 0 descriptor??
[  180.939633][ T5812] usb 2-1: Using ep0 maxpacket: 8
[  180.958659][ T5812] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  180.974385][ T5812] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  180.989665][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.006348][ T5812] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  181.017375][ T5812] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.038299][ T5812] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  181.048426][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.319172][ T5832] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  181.419897][ T5832] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  182.075061][ T7749] loop2: detected capacity change from 0 to 262144
[  182.128426][ T7749] F2FS-fs (loop2): invalid crc value
[  182.212802][ T7749] F2FS-fs (loop2): Found nat_bits in checkpoint
[  182.871132][ T5832] usb 4-1: USB disconnect, device number 8
[  182.956342][ T7773] fido_id[7773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  182.980308][ T7781] usbtmc 2-1:16.0: simple usb_control_msg returned 0
[  183.183202][   T27] usb 2-1: USB disconnect, device number 6
[  183.425256][ T7793] syzkaller1: entered promiscuous mode
[  183.439381][ T7793] syzkaller1: entered allmulticast mode
[  183.916404][ T7800] Bluetooth: MGMT ver 1.22
[  183.945301][ T7803] loop4: detected capacity change from 0 to 64
[  184.175731][ T7809] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  184.380960][ T7789] loop2: detected capacity change from 0 to 32768
[  184.410792][ T7789] (syz.2.512,7789,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  184.460037][ T7789] (syz.2.512,7789,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  184.495923][ T5983] Trying to free block not in datazone
[  184.596760][ T7789] JBD2: Ignoring recovery information on journal
[  184.756100][ T7789] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  185.299486][ T7826] syzkaller1: entered promiscuous mode
[  185.305047][ T7826] syzkaller1: entered allmulticast mode
[  185.312586][ T5768] ocfs2: Unmounting device (7,2) on (node local)
[  186.916512][ T7862] GUP no longer grows the stack in syz.3.541 (7862): 200000004000-200000006000 (200000002000)
[  186.959431][ T7862] CPU: 0 PID: 7862 Comm: syz.3.541 Not tainted syzkaller #0
[  186.966888][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  186.977013][ T7862] Call Trace:
[  186.980349][ T7862]  <TASK>
[  186.983416][ T7862]  dump_stack_lvl+0x18c/0x250
[  186.988168][ T7862]  ? show_regs_print_info+0x20/0x20
[  186.993445][ T7862]  ? load_image+0x420/0x420
[  186.997982][ T7862]  ? find_vma+0x134/0x1b0
[  187.002365][ T7862]  __get_user_pages+0xf0e/0x1380
[  187.007357][ T7862]  ? populate_vma_page_range+0x380/0x380
[  187.013075][ T7862]  get_user_pages_remote+0x3ea/0xbd0
[  187.018400][ T7862]  ? __might_sleep+0xb0/0xe0
[  187.023033][ T7862]  ? get_dump_page+0x200/0x200
[  187.027893][ T7862]  __access_remote_vm+0x1fd/0x570
[  187.033147][ T7862]  ? generic_access_phys+0x650/0x650
[  187.038518][ T7862]  ? alloc_pages+0x4dc/0x740
[  187.043181][ T7862]  ? do_raw_spin_unlock+0x121/0x230
[  187.048544][ T7862]  proc_pid_cmdline_read+0x453/0x840
[  187.053884][ T7862]  ? schedule+0xc7/0x170
[  187.058180][ T7862]  ? comm_show+0x150/0x150
[  187.062722][ T7862]  ? common_file_perm+0x170/0x1f0
[  187.067784][ T7862]  ? fsnotify_perm+0x271/0x5e0
[  187.072603][ T7862]  do_iter_read+0x4fa/0xc90
[  187.077176][ T7862]  ? comm_show+0x150/0x150
[  187.081636][ T7862]  ? vfs_iter_read+0xa0/0xa0
[  187.086265][ T7862]  ? __import_iovec+0x5f2/0x850
[  187.091149][ T7862]  ? import_iovec+0x73/0xa0
[  187.095684][ T7862]  do_preadv+0x236/0x390
[  187.099968][ T7862]  ? do_writev+0x480/0x480
[  187.104443][ T7862]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  187.110467][ T7862]  ? lock_chain_count+0x20/0x20
[  187.115369][ T7862]  ? lockdep_hardirqs_on+0x98/0x150
[  187.120601][ T7862]  do_syscall_64+0x55/0xa0
[  187.125063][ T7862]  ? clear_bhb_loop+0x40/0x90
[  187.129791][ T7862]  ? clear_bhb_loop+0x40/0x90
[  187.134543][ T7862]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  187.140492][ T7862] RIP: 0033:0x7f4c6119c819
[  187.144948][ T7862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.164632][ T7862] RSP: 002b:00007f4c62064028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  187.173131][ T7862] RAX: ffffffffffffffda RBX: 00007f4c61415fa0 RCX: 00007f4c6119c819
[  187.181344][ T7862] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003
[  187.189370][ T7862] RBP: 00007f4c61232c91 R08: 00000000fffffff9 R09: 0000000000000000
[  187.197411][ T7862] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  187.205525][ T7862] R13: 00007f4c61416038 R14: 00007f4c61415fa0 R15: 00007fffdcc8b638
[  187.213555][ T7862]  </TASK>
[  188.663395][ T7895] loop2: detected capacity change from 0 to 1024
[  188.688535][ T7895] EXT4-fs: Ignoring removed nobh option
[  188.717140][ T7895] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  188.769151][ T7895] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c01c, mo2=0003]
[  188.778437][ T7895] System zones: 0-1, 3-8
[  188.796770][ T7895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  188.813106][ T7895] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.949984][ T7895] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.555: lblock 3 mapped to illegal pblock 3 (length 1)
[  189.036664][ T7895] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  189.071547][ T7895] EXT4-fs (loop2): This should not happen!! Data will be lost
[  189.071547][ T7895] 
[  189.108938][ T7901] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.555: lblock 3 mapped to illegal pblock 3 (length 1)
[  189.164837][ T7884] loop4: detected capacity change from 0 to 131072
[  189.176883][ T7884] F2FS-fs (loop4): invalid crc value
[  189.186128][ T7901] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  189.198943][ T7901] EXT4-fs (loop2): This should not happen!! Data will be lost
[  189.198943][ T7901] 
[  189.229421][ T7884] F2FS-fs (loop4): Found nat_bits in checkpoint
[  189.289657][ T7884] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  189.363580][ T1117] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  189.419449][ T1117] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  189.440610][ T1117] EXT4-fs (loop2): This should not happen!! Data will be lost
[  189.440610][ T1117] 
[  189.484244][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  189.852565][ T7914] loop2: detected capacity change from 0 to 4096
[  190.249398][   T28] audit: type=1800 audit(1776706872.311:26): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.558" name="file1" dev="loop2" ino=33 res=0 errno=0
[  190.954057][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'.
[  191.097193][ T7941] netlink: 80 bytes leftover after parsing attributes in process `syz.4.572'.
[  191.193823][ T7943] batadv_slave_0: entered promiscuous mode
[  191.214211][ T7942] batadv_slave_0: left promiscuous mode
[  191.260715][ T7928] syz.3.567 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  191.397303][ T7947] loop1: detected capacity change from 0 to 512
[  191.404727][ T7947] EXT4-fs: Ignoring removed nobh option
[  191.414278][ T7947] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  191.443288][ T7947] EXT4-fs (loop1): 1 truncate cleaned up
[  191.450709][ T7947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.583410][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.228171][ T7970] loop2: detected capacity change from 0 to 512
[  192.325070][ T7955] loop1: detected capacity change from 0 to 32768
[  192.505729][ T7955] MetaData crosses page boundary!!
[  192.511212][ T7955] lblock = 6300000010, size  = -820051968
[  192.528789][ T7955] CPU: 1 PID: 7955 Comm: syz.1.577 Not tainted syzkaller #0
[  192.536146][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  192.546248][ T7955] Call Trace:
[  192.549586][ T7955]  <TASK>
[  192.552568][ T7955]  dump_stack_lvl+0x18c/0x250
[  192.557313][ T7955]  ? show_regs_print_info+0x20/0x20
[  192.562590][ T7955]  ? load_image+0x420/0x420
[  192.567161][ T7955]  ? folio_unlock+0x118/0x2e0
[  192.571896][ T7955]  __get_metapage+0xaac/0xfa0
[  192.576642][ T7955]  dtSearch+0x591/0x21b0
[  192.580930][ T7955]  ? security_inode_init_security+0x1af/0x380
[  192.587099][ T7955]  jfs_mkdir+0x30f/0xac0
[  192.591415][ T7955]  ? jfs_symlink+0xfa0/0xfa0
[  192.596184][ T7955]  ? make_vfsuid+0x51/0xb0
[  192.600673][ T7955]  ? generic_permission+0x1f3/0x590
[  192.605955][ T7955]  ? inode_permission+0xf3/0x480
[  192.610960][ T7955]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  192.616028][ T7955]  ? security_inode_mkdir+0xb7/0x100
[  192.621376][ T7955]  vfs_mkdir+0x296/0x440
[  192.625684][ T7955]  do_mkdirat+0x1dc/0x450
[  192.630090][ T7955]  ? vfs_mkdir+0x440/0x440
[  192.634577][ T7955]  __x64_sys_mkdirat+0x89/0xa0
[  192.639391][ T7955]  do_syscall_64+0x55/0xa0
[  192.643852][ T7955]  ? clear_bhb_loop+0x40/0x90
[  192.648576][ T7955]  ? clear_bhb_loop+0x40/0x90
[  192.653311][ T7955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.659263][ T7955] RIP: 0033:0x7ffad6d9b687
[  192.663730][ T7955] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.683481][ T7955] RSP: 002b:00007ffad7d29e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  192.692046][ T7955] RAX: ffffffffffffffda RBX: 00007ffad7d29ee0 RCX: 00007ffad6d9b687
[  192.700070][ T7955] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c
[  192.708099][ T7955] RBP: 0000200000000300 R08: 00002000000000c0 R09: 0000000000000000
[  192.716123][ T7955] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280
[  192.724152][ T7955] R13: 00007ffad7d29ea0 R14: 0000000000000000 R15: 0000000000000000
[  192.732198][ T7955]  </TASK>
[  192.735353][    C1] vkms_vblank_simulate: vblank timer overrun
[  192.849841][ T7955] bread failed!
[  192.853535][ T7955] jfs_mkdir: dtSearch returned -5
[  192.922106][ T7955] MetaData crosses page boundary!!
[  192.931942][ T7955] lblock = 6300000010, size  = -820051968
[  192.937825][ T7955] CPU: 1 PID: 7955 Comm: syz.1.577 Not tainted syzkaller #0
[  192.945172][ T7955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  192.955282][ T7955] Call Trace:
[  192.958611][ T7955]  <TASK>
[  192.961593][ T7955]  dump_stack_lvl+0x18c/0x250
[  192.966343][ T7955]  ? __wake_up_bit+0x210/0x210
[  192.971175][ T7955]  ? show_regs_print_info+0x20/0x20
[  192.976446][ T7955]  ? load_image+0x420/0x420
[  192.981015][ T7955]  ? folio_unlock+0x118/0x2e0
[  192.985837][ T7955]  __get_metapage+0xaac/0xfa0
[  192.990591][ T7955]  dtReadFirst+0xd5/0x920
[  192.995153][ T7955]  jfs_readdir+0x919/0x3bb0
[  192.999754][ T7955]  ? mark_lock+0x94/0x320
[  193.004158][ T7955]  ? asm_sysvec_call_function_single+0x1a/0x20
[  193.010374][ T7955]  ? lockdep_hardirqs_on+0x98/0x150
[  193.015736][ T7955]  ? asm_sysvec_call_function_single+0x1a/0x20
[  193.021964][ T7955]  ? lock_acquire+0x208/0x420
[  193.026687][ T7955]  ? dtInitRoot+0x670/0x670
[  193.031260][ T7955]  ? __up_read+0x2b6/0x6b0
[  193.035733][ T7955]  ? down_write+0x16e/0x200
[  193.040383][ T7955]  ? down_read_killable+0x340/0x340
[  193.045706][ T7955]  ? end_current_label_crit_section+0x149/0x170
[  193.052015][ T7955]  ? dtInitRoot+0x670/0x670
[  193.056571][ T7955]  wrap_directory_iterator+0x92/0xd0
[  193.061925][ T7955]  iterate_dir+0x1c2/0x580
[  193.066402][ T7955]  __se_sys_getdents64+0xf6/0x270
[  193.071496][ T7955]  ? __x64_sys_getdents64+0x80/0x80
[  193.076761][ T7955]  ? filldir+0x660/0x660
[  193.081080][ T7955]  ? lockdep_hardirqs_on+0x98/0x150
[  193.086347][ T7955]  do_syscall_64+0x55/0xa0
[  193.090818][ T7955]  ? clear_bhb_loop+0x40/0x90
[  193.095557][ T7955]  ? clear_bhb_loop+0x40/0x90
[  193.100306][ T7955]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.106252][ T7955] RIP: 0033:0x7ffad6d9c819
[  193.110716][ T7955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.130382][ T7955] RSP: 002b:00007ffad7d2a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  193.138856][ T7955] RAX: ffffffffffffffda RBX: 00007ffad7015fa0 RCX: 00007ffad6d9c819
[  193.146893][ T7955] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004
[  193.154932][ T7955] RBP: 00007ffad6e32c91 R08: 0000000000000000 R09: 0000000000000000
[  193.162955][ T7955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.170983][ T7955] R13: 00007ffad7016038 R14: 00007ffad7015fa0 R15: 00007fff9b924248
[  193.179033][ T7955]  </TASK>
[  193.182215][    C1] vkms_vblank_simulate: vblank timer overrun
[  193.269390][ T7980] loop3: detected capacity change from 0 to 512
[  193.279293][ T7955] bread failed!
[  193.282823][ T7955] jfs_readdir: unexpected rc = -5 from dtReadNext
[  193.607632][ T7988] loop2: detected capacity change from 0 to 512
[  193.626632][ T7988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  193.666093][ T7988] EXT4-fs (loop2): 1 truncate cleaned up
[  193.675160][ T7988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.771944][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.849441][ T7986] loop3: detected capacity change from 0 to 4096
[  194.205692][ T7986] ntfs3: loop3: ino=5, "/" directory corrupted
[  194.414458][ T7995] sctp: [Deprecated]: syz.1.593 (pid 7995) Use of struct sctp_assoc_value in delayed_ack socket option.
[  194.414458][ T7995] Use struct sctp_sack_info instead
[  194.435444][ T7999] loop3: detected capacity change from 0 to 128
[  194.457112][ T7999] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  194.526269][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.526401][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.792341][ T8008] input: syz1 as /devices/virtual/input/input11
[  194.949639][ T5812] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  195.161976][ T5812] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  195.179351][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0
[  195.194851][ T5812] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  195.208611][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  195.237626][ T5812] usb 4-1: Product: syz
[  195.243897][ T5812] usb 4-1: Manufacturer: syz
[  195.262794][ T5812] usb 4-1: SerialNumber: syz
[  195.295445][ T5812] usb 4-1: config 0 descriptor??
[  195.315692][ T5812] usb 4-1: selecting invalid altsetting 0
[  195.337299][ T8026] loop4: detected capacity change from 0 to 256
[  195.768558][ T5812] usb 4-1: USB disconnect, device number 9
[  196.385772][ T8051] binder: 8050:8051 ioctl c0306201 2000000001c0 returned -14
[  196.576153][ T8055] loop2: detected capacity change from 0 to 4096
[  196.604144][ T8055] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  196.935434][ T8067] capability: warning: `syz.3.626' uses 32-bit capabilities (legacy support in use)
[  197.293935][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'.
[  197.343748][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'.
[  197.839957][ T8092] loop4: detected capacity change from 0 to 512
[  197.854100][ T8092] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  197.892013][ T8092] EXT4-fs (loop4): 1 truncate cleaned up
[  197.946081][ T8092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.111300][  T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  198.186596][ T5983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.309432][  T787] usb 2-1: Using ep0 maxpacket: 8
[  198.323774][  T787] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  198.344923][  T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  198.355412][  T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  198.379383][  T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  198.390323][  T787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.403928][  T787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  198.413415][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.449577][ T1191] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  198.644514][  T787] usb 2-1: usb_control_msg returned -32
[  198.655110][  T787] usbtmc 2-1:16.0: can't read capabilities
[  198.669582][ T1191] usb 4-1: Using ep0 maxpacket: 16
[  198.682185][ T1191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 150, changing to 11
[  198.707154][ T1191] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  198.724878][ T1191] usb 4-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00
[  198.734502][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.745541][ T1191] usb 4-1: config 0 descriptor??
[  198.801649][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  198.991690][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short
[  199.013992][ T5830] usb 3-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[  199.023245][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.036745][ T5830] usb 3-1: Product: syz
[  199.041146][ T5830] usb 3-1: Manufacturer: syz
[  199.045798][ T5830] usb 3-1: SerialNumber: syz
[  199.090221][ T8116] usbtmc 2-1:16.0: control status returned 0
[  199.173809][ T1191] apple 0003:05AC:021C.0007: unknown main item tag 0x0
[  199.189806][ T1191] apple 0003:05AC:021C.0007: unknown main item tag 0x0
[  199.197133][ T1191] apple 0003:05AC:021C.0007: unknown main item tag 0x0
[  199.208451][ T1191] apple 0003:05AC:021C.0007: unknown main item tag 0x0
[  199.218726][ T1191] apple 0003:05AC:021C.0007: unknown main item tag 0x0
[  199.230011][ T1191] apple 0003:05AC:021C.0007: unknown main item tag 0x0
[  199.237052][ T1191] apple 0003:05AC:021C.0007: unknown main item tag 0x0
[  199.253764][ T1191] apple 0003:05AC:021C.0007: unexpected long global item
[  199.272754][ T1191] apple 0003:05AC:021C.0007: parse failed
[  199.278862][ T1191] apple: probe of 0003:05AC:021C.0007 failed with error -22
[  199.292212][ T5812] usb 2-1: USB disconnect, device number 7
[  199.413059][ T8115] loop4: detected capacity change from 0 to 32768
[  199.441442][ T1191] usb 4-1: USB disconnect, device number 10
[  199.482414][   T28] audit: type=1800 audit(1776706881.551:27): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.647" name="file1" dev="loop4" ino=4 res=0 errno=0
[  199.675608][ T5830] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  199.697782][ T5830] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  199.761159][ T5830] usb 3-1: USB disconnect, device number 7
[  199.843915][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.745092][ T8122] loop1: detected capacity change from 0 to 32768
[  200.810096][ T8122] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.842217][ T8144] trusted_key: syz.2.657 sent an empty control message without MSG_MORE.
[  200.892005][ T8122] XFS (loop1): Ending clean mount
[  200.937431][ T8122] XFS (loop1): Quotacheck needed: Please wait.
[  201.038564][ T8122] XFS (loop1): Quotacheck: Done.
[  201.112760][   T28] audit: type=1800 audit(1776706883.181:28): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.651" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  201.240817][ T1191] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  201.427102][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  201.444443][ T1191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.469192][ T1191] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  201.478950][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.498694][ T1191] usb 3-1: config 0 descriptor??
[  201.530030][ T1191] pwc: Askey VC010 type 2 USB webcam detected.
[  201.883766][ T8156] loop3: detected capacity change from 0 to 128
[  201.932616][ T8158] loop1: detected capacity change from 0 to 512
[  201.941544][ T1191] pwc: recv_control_msg error -32 req 02 val 2b00
[  201.956126][ T8158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  201.973211][ T1191] pwc: recv_control_msg error -32 req 02 val 2700
[  202.003048][ T8158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.031594][ T8158] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  202.197980][ T1191] pwc: recv_control_msg error -71 req 04 val 1000
[  202.215626][ T1191] pwc: recv_control_msg error -71 req 04 val 1300
[  202.222992][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.226932][ T8163] loop3: detected capacity change from 0 to 512
[  202.240796][ T1191] pwc: recv_control_msg error -71 req 04 val 1400
[  202.253453][ T1191] pwc: recv_control_msg error -71 req 02 val 2000
[  202.261930][ T1191] pwc: recv_control_msg error -71 req 02 val 2100
[  202.268958][ T1191] pwc: recv_control_msg error -71 req 04 val 1500
[  202.278798][ T8163] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  202.337507][ T1191] pwc: recv_control_msg error -71 req 02 val 2500
[  202.340605][ T8163] EXT4-fs (loop3): 1 truncate cleaned up
[  202.362546][ T8163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.387519][ T1191] pwc: recv_control_msg error -71 req 02 val 2400
[  202.416777][ T1191] pwc: recv_control_msg error -71 req 02 val 2600
[  202.447840][ T1191] pwc: recv_control_msg error -71 req 02 val 2900
[  202.485413][ T1191] pwc: recv_control_msg error -71 req 02 val 2800
[  202.492780][ T1191] pwc: recv_control_msg error -71 req 04 val 1100
[  202.508233][ T1191] pwc: recv_control_msg error -71 req 04 val 1200
[  202.539443][ T1191] pwc: Registered as video103.
[  202.553418][ T1191] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  202.579878][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.599973][ T1191] usb 3-1: USB disconnect, device number 8
[  203.079321][    T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  203.169366][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'.
[  203.187607][ T8182] netlink: 'syz.4.669': attribute type 18 has an invalid length.
[  203.197985][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'.
[  203.315251][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.336203][    T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  203.379345][    T8] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[  203.388463][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.439058][    T8] usb 2-1: config 0 descriptor??
[  203.639602][ T5758] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  203.695258][ T8187] loop2: detected capacity change from 0 to 32768
[  203.735569][ T8187] JBD2: Ignoring recovery information on journal
[  203.775027][ T8187] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  203.848465][ T5758] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  203.862316][ T8172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.863457][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.888202][ T8172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.896269][ T5758] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  203.913885][ T5758] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  203.920736][   T28] audit: type=1800 audit(1776706885.971:29): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.673" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  203.923544][ T5758] usb 4-1: Manufacturer: syz
[  203.952215][ T5830] usb 2-1: USB disconnect, device number 8
[  203.961137][ T8194] 
[  203.963520][ T8194] ======================================================
[  203.970566][ T8194] WARNING: possible circular locking dependency detected
[  203.977632][ T8194] syzkaller #0 Not tainted
[  203.982091][ T8194] ------------------------------------------------------
[  203.989139][ T8194] syz.2.673/8194 is trying to acquire lock:
[  203.995069][ T8194] ffff88805cc3ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  204.008392][ T8194] 
[  204.008392][ T8194] but task is already holding lock:
[  204.015805][ T8194] ffff88805f482378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  204.025363][ T8194] 
[  204.025363][ T8194] which lock already depends on the new lock.
[  204.025363][ T8194] 
[  204.035802][ T8194] 
[  204.035802][ T8194] the existing dependency chain (in reverse order) is:
[  204.044858][ T8194] 
[  204.044858][ T8194] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  204.052766][ T8194]        down_read+0x46/0x2e0
[  204.057507][ T8194]        ocfs2_init_acl+0x30a/0x770
[  204.062758][ T8194]        ocfs2_mknod+0x140f/0x2300
[  204.067969][ T8194]        ocfs2_mkdir+0x196/0x430
[  204.073122][ T8194]        vfs_mkdir+0x296/0x440
[  204.077942][ T8194]        do_mkdirat+0x1dc/0x450
[  204.082824][ T8194]        __x64_sys_mkdirat+0x89/0xa0
[  204.088149][ T8194]        do_syscall_64+0x55/0xa0
[  204.093093][ T8194]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.099521][ T8194] 
[  204.099521][ T8194] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  204.108048][ T8194]        down_read+0x46/0x2e0
[  204.112740][ T8194]        ocfs2_start_trans+0x3a8/0x6f0
[  204.118216][ T8194]        ocfs2_modify_bh+0xe4/0x4c0
[  204.123451][ T8194]        ocfs2_local_read_info+0x1445/0x1800
[  204.129474][ T8194]        dquot_load_quota_sb+0x757/0xb80
[  204.135233][ T8194]        dquot_load_quota_inode+0x2dc/0x5d0
[  204.141170][ T8194]        ocfs2_enable_quotas+0x1c9/0x490
[  204.146822][ T8194]        ocfs2_fill_super+0x417d/0x5010
[  204.152378][ T8194]        mount_bdev+0x221/0x2d0
[  204.157240][ T8194]        legacy_get_tree+0xea/0x180
[  204.162451][ T8194]        vfs_get_tree+0x8c/0x280
[  204.167399][ T8194]        do_new_mount+0x24b/0xa40
[  204.172618][ T8194]        __se_sys_mount+0x2e7/0x3d0
[  204.177862][ T8194]        do_syscall_64+0x55/0xa0
[  204.182849][ T8194]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.189313][ T8194] 
[  204.189313][ T8194] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  204.196826][ T8194]        ocfs2_start_trans+0x2a9/0x6f0
[  204.202313][ T8194]        ocfs2_mknod+0xf1d/0x2300
[  204.207399][ T8194]        ocfs2_mkdir+0x196/0x430
[  204.212369][ T8194]        vfs_mkdir+0x296/0x440
[  204.217228][ T8194]        do_mkdirat+0x1dc/0x450
[  204.222106][ T8194]        __x64_sys_mkdirat+0x89/0xa0
[  204.227425][ T8194]        do_syscall_64+0x55/0xa0
[  204.232398][ T8194]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.238839][ T8194] 
[  204.238839][ T8194] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  204.249649][ T8194]        down_write+0x97/0x200
[  204.254439][ T8194]        ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  204.261162][ T8194]        ocfs2_reserve_clusters_with_limit+0x1ba/0xc20
[  204.268058][ T8194]        ocfs2_mknod+0xebb/0x2300
[  204.273133][ T8194]        ocfs2_mkdir+0x196/0x430
[  204.278111][ T8194]        vfs_mkdir+0x296/0x440
[  204.282958][ T8194]        do_mkdirat+0x1dc/0x450
[  204.287818][ T8194]        __x64_sys_mkdirat+0x89/0xa0
[  204.293204][ T8194]        do_syscall_64+0x55/0xa0
[  204.298203][ T8194]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.304746][ T8194] 
[  204.304746][ T8194] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  204.315514][ T8194]        __lock_acquire+0x2df1/0x7d40
[  204.321047][ T8194]        lock_acquire+0x19e/0x420
[  204.326146][ T8194]        down_write+0x97/0x200
[  204.330969][ T8194]        ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  204.337438][ T8194]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  204.344363][ T8194]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  204.350553][ T8194]        ocfs2_xattr_set+0xc3f/0x13e0
[  204.355958][ T8194]        __vfs_setxattr+0x431/0x470
[  204.361190][ T8194]        __vfs_setxattr_noperm+0x12d/0x5e0
[  204.367031][ T8194]        vfs_setxattr+0x16b/0x2f0
[  204.372128][ T8194]        path_setxattr+0x3f3/0x5d0
[  204.377292][ T8194]        __x64_sys_setxattr+0xbb/0xd0
[  204.382709][ T8194]        do_syscall_64+0x55/0xa0
[  204.387655][ T8194]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.394103][ T8194] 
[  204.394103][ T8194] other info that might help us debug this:
[  204.394103][ T8194] 
[  204.404338][ T8194] Chain exists of:
[  204.404338][ T8194]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  204.404338][ T8194] 
[  204.421318][ T8194]  Possible unsafe locking scenario:
[  204.421318][ T8194] 
[  204.428794][ T8194]        CPU0                    CPU1
[  204.434166][ T8194]        ----                    ----
[  204.439559][ T8194]   lock(&oi->ip_xattr_sem);
[  204.444160][ T8194]                                lock(&journal->j_trans_barrier);
[  204.452158][ T8194]                                lock(&oi->ip_xattr_sem);
[  204.459297][ T8194]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  204.466601][ T8194] 
[  204.466601][ T8194]  *** DEADLOCK ***
[  204.466601][ T8194] 
[  204.474794][ T8194] 3 locks held by syz.2.673/8194:
[  204.479861][ T8194]  #0: ffff888018ae4418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  204.489170][ T8194]  #1: ffff88805f482658 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0
[  204.499706][ T8194]  #2: ffff88805f482378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  204.509735][ T8194] 
[  204.509735][ T8194] stack backtrace:
[  204.515657][ T8194] CPU: 1 PID: 8194 Comm: syz.2.673 Not tainted syzkaller #0
[  204.523038][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  204.533176][ T8194] Call Trace:
[  204.536484][ T8194]  <TASK>
[  204.539433][ T8194]  dump_stack_lvl+0x18c/0x250
[  204.544255][ T8194]  ? load_image+0x420/0x420
[  204.548895][ T8194]  ? show_regs_print_info+0x20/0x20
[  204.554172][ T8194]  ? print_circular_bug+0x12b/0x1a0
[  204.559441][ T8194]  check_noncircular+0x2fc/0x400
[  204.564531][ T8194]  ? print_deadlock_bug+0x5d0/0x5d0
[  204.569779][ T8194]  ? lockdep_lock+0xf5/0x230
[  204.574432][ T8194]  ? _find_first_zero_bit+0xd3/0x100
[  204.579771][ T8194]  __lock_acquire+0x2df1/0x7d40
[  204.584694][ T8194]  ? __lock_acquire+0x7d40/0x7d40
[  204.589773][ T8194]  ? verify_lock_unused+0x140/0x140
[  204.595059][ T8194]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  204.600753][ T8194]  ? do_raw_spin_lock+0x11f/0x2c0
[  204.605841][ T8194]  ? mutex_unlock+0x10/0x10
[  204.610409][ T8194]  lock_acquire+0x19e/0x420
[  204.614968][ T8194]  ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  204.621094][ T8194]  ? ocfs2_get_system_file_inode+0x202/0x850
[  204.627130][ T8194]  ? __might_sleep+0xe0/0xe0
[  204.631785][ T8194]  ? read_lock_is_recursive+0x20/0x20
[  204.637210][ T8194]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  204.643421][ T8194]  ? verify_lock_unused+0x140/0x140
[  204.648765][ T8194]  ? check_noncircular+0x18a/0x400
[  204.653941][ T8194]  down_write+0x97/0x200
[  204.658250][ T8194]  ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  204.664364][ T8194]  ? down_read_killable+0x340/0x340
[  204.669620][ T8194]  ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  204.675578][ T8194]  ? mark_lock+0x94/0x320
[  204.679977][ T8194]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  204.686019][ T8194]  ? lock_chain_count+0x20/0x20
[  204.690931][ T8194]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  204.696980][ T8194]  ? lockdep_hardirqs_on+0x98/0x150
[  204.702224][ T8194]  ? ocfs2_block_group_search+0x470/0x470
[  204.707968][ T8194]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  204.713904][ T8194]  ? _raw_spin_unlock+0x40/0x40
[  204.718782][ T8194]  ? stack_trace_save+0xaa/0x100
[  204.723751][ T8194]  ? stack_trace_snprint+0xf0/0xf0
[  204.728993][ T8194]  ? __stack_depot_save+0x560/0x630
[  204.734232][ T8194]  ? kasan_set_track+0x5f/0x70
[  204.739032][ T8194]  ? kasan_set_track+0x4e/0x70
[  204.743816][ T8194]  ? __kasan_kmalloc+0x8f/0xa0
[  204.748593][ T8194]  ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0
[  204.755116][ T8194]  ? ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  204.761118][ T8194]  ? ocfs2_xattr_set+0xc3f/0x13e0
[  204.766183][ T8194]  ? __vfs_setxattr+0x431/0x470
[  204.771065][ T8194]  ? __vfs_setxattr_noperm+0x12d/0x5e0
[  204.776581][ T8194]  ? vfs_setxattr+0x16b/0x2f0
[  204.781311][ T8194]  ? path_setxattr+0x3f3/0x5d0
[  204.786125][ T8194]  ? __x64_sys_setxattr+0xbb/0xd0
[  204.791203][ T8194]  ? do_syscall_64+0x55/0xa0
[  204.795844][ T8194]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.802081][ T8194]  ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  204.808434][ T8194]  ? ocfs2_init_steal_slots+0x160/0x160
[  204.813994][ T8194]  ? ocfs2_xattr_block_set+0x2e30/0x2e30
[  204.819760][ T8194]  ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  204.825454][ T8194]  ? ocfs2_xattr_set+0xc05/0x13e0
[  204.830761][ T8194]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  204.836869][ T8194]  ? ocfs2_truncate_log_needs_flush+0x130/0x310
[  204.843136][ T8194]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  204.849161][ T8194]  ? down_write+0x16e/0x200
[  204.853711][ T8194]  ? down_read_killable+0x340/0x340
[  204.858982][ T8194]  ? up_write+0x1c3/0x410
[  204.863339][ T8194]  ocfs2_xattr_set+0xc3f/0x13e0
[  204.868323][ T8194]  ? __ocfs2_xattr_set_handle+0xf40/0xf40
[  204.874087][ T8194]  ? verify_lock_unused+0x140/0x140
[  204.879431][ T8194]  ? path_setxattr+0x3f3/0x5d0
[  204.884317][ T8194]  ? __x64_sys_setxattr+0xbb/0xd0
[  204.889418][ T8194]  ? evm_protected_xattr_common+0x170/0x190
[  204.895347][ T8194]  ? ocfs2_xattr_security_get+0x40/0x40
[  204.900935][ T8194]  __vfs_setxattr+0x431/0x470
[  204.905664][ T8194]  __vfs_setxattr_noperm+0x12d/0x5e0
[  204.910972][ T8194]  vfs_setxattr+0x16b/0x2f0
[  204.915524][ T8194]  ? xattr_permission+0x470/0x470
[  204.920580][ T8194]  ? __mnt_want_write+0x223/0x2a0
[  204.925675][ T8194]  ? path_setxattr+0x3a1/0x5d0
[  204.930506][ T8194]  path_setxattr+0x3f3/0x5d0
[  204.935170][ T8194]  ? simple_xattrs_free+0x150/0x150
[  204.940448][ T8194]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  204.946464][ T8194]  ? lock_chain_count+0x20/0x20
[  204.951419][ T8194]  __x64_sys_setxattr+0xbb/0xd0
[  204.956330][ T8194]  do_syscall_64+0x55/0xa0
[  204.960774][ T8194]  ? clear_bhb_loop+0x40/0x90
[  204.965508][ T8194]  ? clear_bhb_loop+0x40/0x90
[  204.970248][ T8194]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  204.976199][ T8194] RIP: 0033:0x7fd3afd9c819
[  204.980655][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.000299][ T8194] RSP: 002b:00007fd3adfd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  205.008732][ T8194] RAX: ffffffffffffffda RBX: 00007fd3b0016090 RCX: 00007fd3afd9c819
[  205.016722][ T8194] RDX: 0000200000005780 RSI: 0000200000000180 RDI: 0000200000000140
[  205.024723][ T8194] RBP: 00007fd3afe32c91 R08: 0000000000000001 R09: 0000000000000000
[  205.032742][ T8194] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000
[  205.040766][ T8194] R13: 00007fd3b0016128 R14: 00007fd3b0016090 R15: 00007ffc483b0568
[  205.048774][ T8194]  </TASK>
[  205.061259][ T5758] usb 4-1: config 0 descriptor??
[  205.144413][ T5768] ocfs2: Unmounting device (7,2) on (node local)
[  205.159631][ T5758] rc_core: IR keymap rc-hauppauge not found
[  205.165600][ T5758] Registered IR keymap rc-empty
[  205.172378][ T5758] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  205.185621][ T5758] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13
[  205.503841][ T5832] usb 4-1: USB disconnect, device number 11
[  206.841676][ T5084] Bluetooth: hci1: command 0x0406 tx timeout
[  206.841682][ T5779] Bluetooth: hci2: command 0x0406 tx timeout
[  207.079475][ T5778] Bluetooth: hci0: command 0x0406 tx timeout