last executing test programs:

3m2.812637426s ago: executing program 2 (id=72):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file1\x00', 0x4000000, &(0x7f0000000140)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@sysvgroups}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x982b, &(0x7f000001c740)="$eJzs3QW8pWWheP8zMMDQoQgWICUmKSGKdCiipCghHZICIqB0KKGCIqCCAgoiSnd3Snd3d3f8P8MMNS7Q+/vfe+Gy1vo4Z58dZ59nP9/3eT37vIe9l55/8bkHBsYbGNbrp2929h63Lb/E2AtvcMxug6/dZ+dFHhx+8ajDTsafc/jpXMNP5x4YGBg0/H4GDbts8BxHHzPSwOCBof97s7FGH2OksQYGxhh+dvj9DMwy7GTMA1+/3asjxAOdbOi322nYv9cae+idDP1k2RVeXndgYGDIW75+6Lim+5cHKm3puRaY/02rN9xGGn71oDeve+108LB/Y+4/MDDmvgPvvH0Mve0ob/na/82Gfs/xphhY8rb34Hv/n2vpuRZYaAT/oWtx5OGXzTJ0jY+4Bo2NuJ3vvPha9w+fwkHDJ27wW9bLe7Hd/z+19FzzLzzwzut4YJH5Nr/v1df2m4PnHRgYPN/AwOD5BwYGL/Bee9R/T+/pxldVVVXvSXPNPePQ5+wjjfDzwJDXf66lnwvPf2n6uwYGBi8y7Hni4BVefy5YVVVVVVVVVe/P5pp7xnng+f947/b8f7KTthv/3Z//j/YePJKqqqqqqqqqeqcWmmvuGYc+1x/h+f/E7/b8/7EHDjlg2N/+zznLsK965b19EFVVVVVVVVX1rs2/ED7/n+zdnv9fePRkl/T8v6qqqqqqqur/Tou9+uqrW77ldfaGXzzN69e/9vx/YPDbnv+fcu8ty71nA66qqqqqqqqq/3KvPHziqW++5vskAyO83vtrDf+9wKDDT7/ssvdsoO+PBv3r30Ns9V6P6f9vQ52HHDzZwMC6S77XQ6n3oP8zr1Vf/yPl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7i3uH4/xuv/3/KkSu//l7wn55qxutOfPMrX3vv/8GLLPTw1u/R0N+LPqjH/wfWHDQwMNx3vDUHBgYWmWuxJaYZGBg48boZp5py4I3rZh163ewTjPzaG8S//p+JzDf+W+5t5Dc/3WryYadDN5SBD79xH4e/dv8LvbrfyINGGMRbGv/YAw5YY+lnZxrxdOp3fhwjvfHZ2Mc88Pp/yzLSCDca8g5f/Pr9v/5YRnQePvZpho592o3WWX/aDTfd7AtrrrPi6quuvuq6s80w8/QzzTbbzDNPu9qaa6863bCP7zRnk732cZ7xeRxvm7OxRpyzh+d665yN+Njeac4me/c5e+0ed79gyNden7PB/8U5m+fd52yyNYd/o/HnHGVghdfmZtDAwPjzjjKwydAz0482MDD+fMNvO/HQ235lgpEGBnZ984EOGv6OIsNuM2irobdZev7F5x62mxoYePP0zd7h/exHHT7yOYefzjX8dO5h32a8gTc3xcFzHH3MSEPn4m3TMdboY4w01sDAGMPPDr+fgdmGnYxx0uu3e4f3WR9hoK+9zMpOw/691tgDAwNjDv1kkhVP2X7o1P8vvE/7/9P///+L16yD3tgeBw3/N/w2w7zmWmChN7/Xa9Mw5/C9xdDLZhlq8t/81vZv61/GO9mQgcneZbzv8ro4r0Xb19onTrjNf9fr4tB4J36X8b7L6/i+43iXumuv+4fd1X/beEfY1y382sc5/5N93cC77+tGpjtY9eJPjriv+8Y7D/Ftu8vX52jEdyp6p33dxHtPutXQ+5/z3fd1Cw8d+yhv29eNNDAw/jyv7+uG7vjmH2Vg16FnZhh6ZoFRBg4aembG186MPnD60DNfXHm9tVcZesGC/7odTDPobX+gCets/hHW2aC3PPZBI/x95+Bhp2Pu//p7OL3DfnPQ8If1b/cVtN2O9y7jfZf3n8J5HnrZKkcMmfC/6/2nabxD3n287/R+2e843l2eOeW2/+bxvrHORnnLdC34n6yzyd6+zoY+xJHfsjL+05/DVoHbD/t84jfubeMtHnjjZ4pRRrjff/czxYLvvs7GW3OEr9tx34FB7zY3C/wnc/OJf9kHbf3WuflPf96aZoph14/8LnMz2mzLT/363Iz6X5ybBf6rczPnwMhvn5vBA/MNDAxMOXz/MP9/MjcTv/vc/KfbzRhw+2Gfr/rGRfPufPC5r8/NiHPx7+Zm/v/q3Ez2xnYz5WvXTT7SwKijDmyy4kYbbTD9sI+vn51h2Md3X4Pz/idzOd5/z1x+bPA7zeWbm+pYd12y/79Zg/+yT3/9/uf9r87lwBtzObDmiIul3q/1+z93+bvL313+7vJ3l7+7/MW9w/H/N17/f8/xZt9t+C83Rrlk0ol2eK/H+x73gT7+P9z3bcf/d5ho0ktGGnjjunc9PjvsNu/L47OzDDsZ88DXbzfi8UEe6Dsfn913tlm2+186Pvv/1Otr9T/4PVz7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4dzj+P93rfwdw7/SLPjH8QOgoD267zKLv9Xjf4z7Qx/+H+77t+P+iy2z74EgDb1z3rsf/h93Gcfz/jhfn3+X9fPz/9bXa8f/6N+XvLn93+bvL313+7vJ3l7+7f/V/v/5So/4nav27y99d/u7yd5e/uHc4/j/n638HcMghe232+t8DXDX+Tie+1+N9j/ugHv/v/f+9tf93l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5ixt+/H9ghLe3/HbbBQbH//9v9w7+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6YxX+p/DGL/3fyxyz+S+ePWfy/mz9m8f9e/pjFf5n8MYv/svljFv/l8scs/svnj1n8v58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/B/ljFv+18scs/mvnj1n81xkYGPk9GtH7Oov/uq1/zOK/Xv6YxX/9/DGL/w/zxyz+G+SPWfw3zB+z+G+UP2bx/1H+mMV/4/wxi/+P88cs/pvkj1n8N80fs/hvlj9m8f9J/pjF/6f5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8f5Y/ZvH/ef6YxX/H/DGL/075Yxb/nfPHLP675I9Z/H+RP2bx/2X+mMX/V/ljFv9d88cs/rvlj1n8f50/ZvH/Tf6YxX/3/DGL/2/zxyz+e+SPWfz3zB+z+O+VP2bx/13+mMX/9/ljFv8/5I9Z/PfOH7P475M/ZvH/Y/6Yxf9P+WMW/33zxyz+++WPWfz3zx+z+P85f8zi/5f8MYv/AfljFv8D88cs/n/NH7P4H5Q/ZvH/W/6Yxf/g/DGL/9/zxyz+/8gfs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+/8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b/0H+l/6FhvV+z+N/W+scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMS/0ED+WMW/0H5Yxb/kfLHLP4j549Z/Afnj1n8R8kfs/iPmj9m8R8tf8ziPyR/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/h/LHLP4fzh+z+E+YP2bx/0j+mMV/ovwxi//E+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8zi/6n8MYv/5K/7D3mPxvU+zeI/Resfs/hPmT9m8Z8qf8ziP3X+mMX/0/ljFv9p8scs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4fyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP5fzh+z+M+eP2bx/0r+mMX/q/ljFv858scs/l/LH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//X8MYv/N/LHLP4L549Z/L+ZP2bxXyR/zOL/rfwxi/+388cs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi/938scs/kvnj1n8v5s/ZvH/Xv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/wf5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjF/4f5Yxb/DfLHLP4b5o9Z/DfKH7P4/yh/zOK/cf6Yxf/H+WMW/03yxyz+m+aPWfw3yx+z+P8kf8zi/9P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+P8sfs/j/PH/M4r9j/pjFf6f8MYv/zvljFv9d8scs/r/IH7P4/zJ/zOL/q/wxi/+u+WMW/93yxyz+v84fs/j/Jn/M4r97/pjF/7f5Yxb/PfLHLP575o9Z/PfKH7P4/y5/zOL/+/wxi/8f8scs/nvnj1n898kfs/j/MX/M4v+n/DGL/775Yxb//fLHLP77549Z/P+cP2bx/0v+mMX/gPwxi/+B+WMW/7++3f+e//VxvU+z+B/U+scs/n/LH7P4H5w/ZvH/e/6Yxf8f+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6YxP+18v/XJP6DLsofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/mPShda/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljEv/XPs3/X7P4D8ofs/iPlD9m8R85f8ziPzh/zOI/Sv6YxX/U/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/XLn/4He43OI/ntz/nbL4j58/ZvGfIH/M4v+h/DGL/4fzxyz+E+aPWfw/kj9m8Z8of8ziP3H+mMX/o/ljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9J8scs/pPmj1n8J8sfs/h/Kn/M4j95/pjFf4r8MYv/lPljFv+p8scs/lPnj1n8P50/ZvGfJn/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+0+aPWfynyx8bdPYeowwMDHzg/afPH7Os/xnyxyz+M+aPWfxnyh+z+H8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+X84fs/jPnj9m8f9K/pjF/6v5Yxb/OfLHLP5fyx+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/1/DGL/zfyxyz+C+ePWfy/mT9m8V8kf8zi/638MYv/t/PHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/d/LHLP5L549Z/L+bP2bx/17+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/nz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6Yxf8H+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6Yxf+H+WMW/w3yxyz+G+aPWfw3yh+z+P8of8ziv3H+mMX/x/ljFv9N8scs/pvmj1n8N8sfs/j/JH/M4v/T/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/j/LH7P4/zx/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP6/sPr/mwdt8f+l1f/fZPH/Vf6YxX/X/DGL/275Yxb/X+ePWfx/kz9m8d89f8zi/9v8MYv/HvljFv8988cs/nvlj1n8f5c/ZvH/ff6Yxf8P+WMW/73zxyz+++SPWfz/mD9m8f9T/pjFf9/8MYv/fvljFv/988cs/n/OH7P4/yV/zOJ/QP6Yxf/A/DGL/1/zxyz+B+WPWfz/lj9m8T84f8zi//f8MYv/P/LHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/P/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N6H/kP+9cb1Ps/jf3PrHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fk/iPPJA/ZvEflD9m8R8pf8ziP3L+mMV/cP6YxX+U/DGL/6j5Yxb/0fLHLP5D8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+H8of8zi/+H8MYv/hPljFv+P5I9Z/CfKH7P4T5w/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6YxX+S/DGL/6T5Yxb/yfLHLP6fyh+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/T+ePWfynyR+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8zi/6X8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/h/OX/M4j97/pjF/yv5Yxb/r+aPWfznyB+z+H8tf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/9fzxyz+38gfs/gvnD9m8f9m/pjFf5H8MYv/t/LHLP7fzh+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP7fyR+z+C+dP2bx/27+mMX/e/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f9+/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/x/kj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/x/mj1n8N8gfs/hvmD9m8d8of8zi/6P8MYv/xvljFv8f549Z/DfJH7P4b5o/ZvHfLH/M4v+T/DGL/0/zxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/yx/zOL/8/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+P8if8zi/8v8MYv/r/LHLP675o9Z/HfLH7P4/zp/zOL/m/wxi//u+WMW/9/mj1n898gfs/jvmT9m8d8rf8zi/7v8MYv/7/PHLP5/yB+z+O+dP2bx3yd/zOL/x/wxi/+f8scs/vvmj1n898sfs/jvnz9m8f9z/pjF/y/5Yxb/A/LHLP4H5o9Z/P+aP2bxPyh/zOL/t/wxi//B+WMW/7/nj1n8/5E/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8/5k/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljEv/BA/ljFv9B+WMW/5Hyxyz+I+ePWfwH549Z/EfJH7P4j5o/ZvEfLX/M4j8kf8ziP3r+mMV/jPwxi/+Y5D/6/+K43qdZ/Mdq/WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6Yxf9D+WMW/w/nj1n8J8wfs/h/JH/M4j9R/pjFf+L8MYv/R/PHLP4fyx+z+H88f8zi/4n8MYv/J/PHLP6T5I9Z/CfNH7P4T5Y/ZvH/VP6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4fzp/zOI/Tf6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/y/lj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/y/ljFv/Z88cs/l/JH7P4fzV/zOI/R/6Yxf9r+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/L+eP2bx/0b+mMV/4fwxi/8388cs/ovkj1n8v5U/ZvH/dv6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvH/Tv6YxX/p/DGL/3fzxyz+38sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi//388cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+P8gf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8wf8ziv0H+mMV/w/wxi/9G+WMW/x/lj1n8N84fs/j/OH/sg+k/TPqt/pvkj30w/Yf1Vv9N88cs/pvlj1n8f5I/ZvH/af6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv+f5Y9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/X+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv9f549Z/H+TP2bx3z1/zOL/2/wxi/8e+WMW/z3zxyz+e+WPWfx/lz9m8f99/pjF/w/5Yxb/vfPHLP775I9Z/P+YP2bx/1P+mMV/3/wxi/9++WMW//3zxyz+f84fs/j/JX/M4n9A/pjF/8D8MYv/X/PHLP4H5Y9Z/P+WP2bxPzh/zOL/9/wxi/8/8scs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/8/88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf9xq//o7361xf8Jq/+/yeL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj0n8RxnIH7P4D8ofs/iPlD9m8R85f8ziPzh/zOI/Sv6YxX/U/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfw/lD9m8f9w/pjFf8L8MYv/R/LHLP4T5Y9Z/CfOH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4fzJ/zOI/Sf6YxX/S/DGL/2T5Yxb/T+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/6fzxyz+0+SPWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8f9S/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8v5w/ZvGfPX/M4v+V/DGL/1fzxyz+c+SPWfy/lj9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznz39gYMi/XmTxXyB/zOK/YP6YxX+h/DGL/9fzxyz+38gfs/gvnD9m8f9m/pjFf5H8MYv/t/LHLP7fzh+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP7fyR+z+C+dP2bx/27+mMX/e/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f9+/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/x/kj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/x/mj1n8N8gfs/hvmD9m8d8of8zi/6P8MYv/xvljFv8f549Z/DfJH7P4b5o/ZvHfLH/M4v+T/DGL/0/zxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/yx/zOL/8/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+P8if8zi/8v8MYv/r/LHLP675o9Z/HfLH7P4/zp/zOL/m/wxi//u+WMW/9/mj1n898gfs/jvmT9m8d8rf8zi/7v8MYv/7/PHLP5/yB+z+O+dP2bx3yd/zOL/x/wxi/+f8scs/vvmj1n898sfs/jvnz9m8f9z/pjF/y/5Yxb/A/LHLP4H5o9Z/P+aP2bxPyh/zOL/t/wxi//B+WMW/7/nj1n8/5E/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8/5k/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljEv9RB/LHLP6D8scs/iPlj1n8R84fs/gPzh+z+I+SP2bxHzV/zOI/Wv6YxX9I/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/w/lj1n8P5w/ZvGfMH/M4v+R/DGL/0T5Yxb/ifPHLP4fzR+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+E+SP2bxnzR/zOI/Wf6Yxf9T+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bxnzp/zOL/6fwxi/80+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8v5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv8v549Z/GfPH7P4f8XsP8o7X2Xx/6rZ/12y+M+RP2bx/1r+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/r+ePWfy/kT9m8V96lPwpi/83W/+YxX+R/DGL/7fyxyz+384fs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+38kfs/gvnT9m8f9u/pjF/3v5Yxb/ZfLHPqD+g0awHnXZ/LEPqP9rvXX9L5c/ZvFfPn/M4v/9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOHxt09qDhM/PB9l8lf8yy/lfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/D/LHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/PHLP4b5I9Z/DfMH7P4b5Q/ZvH/Uf6YxX/j/DGL/4/zxyz+m+SPWfw3zR+z+G+WP2bx/0n+mMX/p/ljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/lj9m8f95/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8f5E/ZvH/Zf6Yxf9X+WMW/13zxyz+u+WPWfx/nT9m8f9N/pjFf/f8MYv/b/PHLP575I9Z/PfMH7P475U/ZvH/Xf6Yxf/3+WMW/z/kj1n8984fs/jvkz9m8f9j/pjF/0/5Yxb/ffPHLP775Y9Z/PfPH7P4/zl/zOL/l/wxi/8B+WMW/wPzxyz+f80fs/gflD9m8f9b/pjF/+D8MYv/3/PHLP7/yB+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP7/zB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf9elf8Dg9/pmlFHOG/xv0/l/59n8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5D4wOl1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/TOI/2kD+mMV/UP6YxX+k/DGL/8j5Yxb/wfljFv9R8scs/qPmj1n8R8sfs/gPyR+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j5//8Ia87ZzFf4L8MYv/h/LHLP4fzh+z+E+YP2bx/0j+mMV/ovwxi//E+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8zi/6n8MYv/5PljFv8p8scs/lPmj1n8p8ofs/hPnT9m8f90/pjFf5r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP5fyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/5fzxyz+s+ePWfy/kj9m8f9q/pjFf478MYv/1/LHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/h/PX/M4v+N/DGL/8L5Yxb/b+aPWfwXyR+z+H8rf8zi/+38MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8zi/538MYv/0vljFv/v5o9Z/L+XP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/7+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/Qf6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Yf6YxX+D/DGL/4b5Yxb/jfLHLP4/yh+z+G+cP2bx/3H+mMV/k/wxi/+m+WMW/83yxyz+P8kfs/j/NH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zivz36t0VY/HdIG7P4/yx/zOL/8/wxi/+O+WMW/53yxyz+Ow/zf/nV92pc79Ms/ru0/jGL/y/yxyz+v8wfs/j/Kn/M4r9r/pjFf7f8MYv/r/PHLP6/yR+z+O+eP2bx/23+mMV/j/wxi/+e+WMW/73yxyz+v8sfs/j/Pn/M4v+H/DGL/975Yxb/ffLHLP5/zB+z+P8pf8ziv2/+mMV/v/wxi//++WMW/z/nj1n8/5I/ZvE/IH/M4n9g/pjF/6/5Yxb/g/LHLP5/yx+z+B+cP2bx/3v+mMX/H/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/yyr/6tbvuvVFv+zrf7/Jov/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zi/8/8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fk/gPGcgfs/gPyh+z+I+UP2bxHzl/zOI/OH/M4j9K/pjFf9T8MYv/aPljFv8h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/D+UP2bx/3D+mMV/wvwxi/9H8scs/hPlj1n8J84fs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4j9J/pjFf9L8MYv/ZPljFv9P5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/p/PHLP7T5I9Z/D+TP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bx/1L+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfy/nD9m8Z89f8zi/5X8MYv/V/PHLP5z5I9Z/L+WP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF/+v5Yxb/b+SPWfwXzh+z+H8zf8ziv0j+mMX/W/ljFv9v549Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv/v5I9Z/JfOH7P4fzd/zOL/vfwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+H8/f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/w/yxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/zxyz+G+SPWfw3zB+z+G+UP2bx/1H+mMV/4/wxi/+P88cs/pvkj1n8N80fs/hvlj9m8f9J/pjF/6f5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8f5Y/ZvH/ef6YxX/H/DGL/075Yxb/nfPHLP675I9Z/H+RP2bx/2X+mMX/V/ljFv9d88cs/rvlj1n8f50/ZvH/Tf6YxX/3/DGL/2/zxyz+e+SPWfz3zB+z+O+VP2bx/13+mMX/9/ljFv8/5I9Z/PfOH7P475M/ZvH/Y/6Yxf9P+WMW/33zxyz+++WPWfz3zx+z+P85f8zi/5f8MYv/AfljFv8D88cs/n/NH7P4H5Q/ZvH/W/6Yxf/g/DGL/9/zxyz+/8gfs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+/8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOA/aPDAkEfyxwz+Q9f/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5YxL/0Qfyxyz+g/LHLP4j5Y9Z/EfOH7P4D84fs/iPkj9m8R81f8ziP1r+mMV/SP6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8P5Y9Z/D+cP2bxnzB/zOL/kfwxi/9E+WMW/4nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/hPkj9m8Z80f8ziP1n+mMX/U17/Ie92pcV/cq//u2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/T+ePWfynyR+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/tPljFv/pBga2fK+G9H7uA+1/90uvXzr69K1/7APt/+alo8+QP2bxnzF/zOI/U/6Yxf9L+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3L+mMV/9vwxi/9X8scs/l/NH7P4z5E/ZvH/Wv6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+v549Z/L+RP2bxXzh/zOL/zfwxi/8i+WMW/2/lj1n8v50/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8v5M/ZvFfOn/M4v/d/DGL//fyxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOL//fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP4/yB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/zB+z+G+QP2bx3zB/zOK/Uf6Yxf9H+WMW/43zxyz+P84fs/hvkj9m8d80f8ziv1n+mMX/J/ljFv+f5o9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9Z/pjF/+f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/Rf6Yxf+X+WMW/1/lj1n8d80f+yD7j/zmpaPvlj/2QfZ/6/r/df6Yxf83+WMW/93zxyz+v80fs/jvkT9m8d8zf8ziv1f+mMX/d/ljFv/f549Z/P+QP2bx3zt/zOK/T/6Yxf+P+WMW/z/lj1n8980fs/jvlz9m8d8/f8zi/+f8MYv/X/LHLP4H5I9Z/A/MH7P4/zV/zOJ/UP6Yxf9v+Y/QsNmx+B+cP2bx/3v+mMX/H/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/n/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj8m8R9jIH/M4j8of8ziP1L+mMV/5Pwxi//g/DGL/yj5Yxb/UfPHLP6j5Y9Z/Ifkj1n8R88fs/iPkf/rXfvWMxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8P5Y9Z/D+cP2bxnzB/zOL/kfwxi/9E+WMW/4nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/hPkj9m8Z80f8ziP1n+mMX/U/ljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8zi/+n8MYv/NPljFv/P5I9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/L+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/L+ePWfxnzx+z+H8lf8zi/9X8MYv/HPljFv+v5Y9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8f96/pjF/xv5Yxb/hfPHLP7fzB+z+C+SP2bx/1b+mMX/2/ljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8ziv1T+mMX/O/ljFv+l88cs/t/NH7P4fy9/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP7fzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v+D/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/D/DGL/wb5Yxb/DfPHLP4b5Y9Z/H+UP2bx3zh/zOL/4/wxi/8m+WMW/03zxyz+m+WPWfx/kj9m8f9p/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/5/lj1n8f54/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9f5I9Z/H+ZP2bx/1X+mMV/1/wxi/9u+WMW/1/nj1n8f5M/ZvHfPX/M4v/b/DGL/x75Yxb/PfPHLP575Y9Z/H+XP2bx/33+mMX/D/ljFv+988cs/vvkj1n8/5g/ZvH/U/6YxX/f/DGL/375Yxb//fPHLP5/zh+z+P8lf8zif0D+mMX/wPwxi/9f88cs/gflj1n8/5Y/ZvE/OH/M4v/3/DGL/z/yxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/z/zxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/TOI/5kD+mMV/UP6YxX+k/DGL/8j5Yxb/wfljFv9R8scs/qPmj1n8R8sfs/gPyR+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4v+h/DGL/4fzxyz+E+aPWfw/kj9m8Z8of8ziP3H+mMX/o/ljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9J8scs/pPmj1n8J8sfs/h/Kn/M4j95/pjFf4r8MYv/lPljFv+p8scs/lPnj1n8P50/ZvGfJn/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/5fyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOL/5fwxi//s+WMW/6/kj1n8v5o/ZvGfI3/M4v+1/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/l/PH7P4fyN/zOK/cP6Yxf+b+WMW/0Xyxyz+38ofs/h/O3/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8l8ofs/h/J3/M4r+01X/wu19t8f+u1f/fZPH/Xv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/wf5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjF/4f5Yxb/DfLHLP4b5o9Z/DfKH7P4/yh/zOK/cf6Yxf/H+WMW/03yxyz+m+aPWfw3yx+z+P9k4LlX8//XLP4/bf1jFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/lj9m8f95/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8f5E/ZvH/Zf6Yxf9X+WMW/13zxyz+u+WPWfx/nT9m8f9N/pjFf/f8MYv/b/PHLP575I9Z/PfMH7P475U/ZvH/Xf6Yxf/3+WMW/z/kj1n8984fs/jvkz9m8f9j/pjF/0/5Yxb/ffPHLP775Y9Z/PfPH7P4/zl/zOL/l/wxi/8B+WMW/wPzxyz+f80fs/gflD9m8f9b/pjF/+D8MYv/3/PHLP7/yB+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj73uPzBkYOCD7H9y/phl/Z+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/v/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfU/iP9t4N5/2ewn9gYMyrW/+Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePOfyTf6cc/gNjPthWgFn8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjEf6yB/DGL/6D8MYv/SPljFv+R88cs/oPzxyz+o+SPWfxHzR+z+I+WP2bxH5I/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/Q/ljFv8P549Z/CfMH7P4fyR/zOI/Uf6YxX/i/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/yfzxyz+k+SPWfwnzR+z+E+WP2bx/1T+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+H86f8ziP03+mMX/M/ljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv8v5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/8v5Yxb/2fPHLP5fyR+z+H81f8ziP0f+mMX/a/ljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfy/nj9m8f9G/pjFf+H8MYv/N/PHLP6L5I9Z/L+VP2bx/3b+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bx/07+mMV/6fwxi/9388cs/t/LH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/9/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r+K0f8/eMAW/1WN/v9BFv/V8scs/qvnj1n818gfs/ivmT9m8f9B/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9h/pjFf4P8MYv/hvljFv+N8scs/j/KH7P4b5w/ZvH/cf6YxX+T/DGL/6b5Yxb/zfLHLP4/yR+z+P80f8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/8/yxyz+P88fs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/8v8scs/r/MH7P4/yp/zOK/a/6YxX+3/DGL/6/zxyz+v8kfs/jvnj9m8f9t/pjFf4/8MYv/nvljFv+98scs/r/LH7P4/z5/zOL/h/wxi//e+WMW/33yxyz+f8wfs/j/KX/M4r9v/pjFf7/8MYv//vljFv8/549Z/P+SP2bxPyB/zOJ/YP6Yxf+v+WMW/4Pyxyz+f8sfs/gfnD9m8f97/pjF/x/5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/5/5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+b/wit8dpHi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGJ/9gD+WMW/0H5Yxb/kfLHLP4j549Z/Afnj1n8R8kfs/iPmj9m8R8tf8ziPyR/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/h/LHLP4fzh+z+E+YP2bx/0j+mMV/ovwxi//E+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8J8kfs/hPmj9m8Z8sf8zi/6n8MYv/5PljFv8p8scs/lPmj1n8p8ofs/hPnT9m8f90/pjFf5r8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP5fyh+z+M+cP2bxnyV/zOI/a/7Y2/yHXzbeezym/1+9g/9s+WOW9f/l/DGL/+z5Yxb/r+SPWfy/mj9m8Z8jf8zi/7X8MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+X88fs/h/I3/M4r9w/pjF/5v5Yxb/RfLHLP7fyh+z+H87f8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+H8nf8ziv3T+mMX/u/ljFv/v5Y9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjF//v5Yxb/FfLHLP4r/hv/G14d1v/08N5vWfxXav1jFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/8P8scs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P88cs/hvkj1n8N8wfs/hvlD9m8f9R/pjFf+P8MYv/j/PHLP6b5I9Z/DfNH7P4b5Y/ZvH/Sf6Yxf+n+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/H+WP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx/kT9m8f9l/pjF/1f5Yxb/XfPHLP675Y99UP2HjOD/6/yxD6r/wAj+v8kfs/jvnj9m8f9t/pjFf4/8MYv/nvljFv+98scs/r/LH7P4/z5/zOL/h/yHNdLbz1r8984fs/jvkz9m8f9j/pjF/0/5Yxb/ffPHLP775Y9Z/PfPH7P4/zl/zOL/l/wxi/8B+WMW/wPzxyz+f80fs/gflD9m8f9b/pjF/+D8MYv/3/PHLP7/yB+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP7/zB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/eEf23+l8e1/s0i/99rX/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/JvEfZyB/zOI/KH/M4j9S/pjFf+T8MYv/4Pwxi/8o+WMW/1Hzxyz+o+WPWfyH5I9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8f9Q/pjF/8P5Yxb/CfPHLP4fyR+z+E+UP2bxnzh/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/8k+WMW/0nzxyz+k+WPWfw/lT9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+n84fs/hPkz9m8f9M/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/0v5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvH/cv6YxX/2/DGL/1fyxyz+X80fs/jPkT9m8f9a/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/6/nj1n8v5E/ZvFfOH/M4v/N/DGL/yL5Yxb/b+WPWfy/nT9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfy/kz9m8V86f8zi/938MYv/9/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/j/IH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/MH7P4b5A/ZvHfMH/M4r9R/pjF/0f5Yxb/jfPHLP4/zh+z+G+SP2bx3zR/zOK/Wf6Yxf8n+WMW/5/mj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/1n+mMX/5/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f9F/pjF/5f5Yxb/X+WPWfx3zR+z+O+WP2bx/3X+mMX/N/ljFv/d88cs/r/NH7P475E/ZvHfM3/M4r9X/pjF/3f5Yxb/3+ePWfz/kD9m8d87f8ziv0/+mMX/j/ljFv8/5Y9Z/PfNH7P475c/ZvHfP3/M4v/n/DGL/1/yxyz+B+SPWfwPzB+z+P81f8zif1D+mMX/b/ljFv+D88cs/n/PH7P4/yN/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4/zN/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHJP7jDuSPWfwH5Y9Z/EfKH7P4j5w/ZvEfnD9m8R8lf8ziP2r+mMV/tPwxi/+Q/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv//8fO/YdrXdd3HL/5TZazj23q0oZDY67NSGQ0aiEqiscfp0w08zfqEUgQ+SEJpuJGK3VsutTNgk0sHHO2aonDzfVrRcOyZmvE1iqnuBbGmINF5vTsOnAOwdnbc3m+7Pt16/14/AHnvg/vO+V5vbxvLq6ron8oS//99Q9l6f8q/UNZ+v+0/qEs/X9G/1CW/gfoH8rS/0D9Q1n6H6R/KEv/n9U/lKX/q/UPZel/sP6hLP0P0T+Upf9r9A9l6f9z+oey9B+hfyhL/0P1D2Xp//P6h7L0H6l/KEv/w/QPZel/uP6hLP1fq38oS/9R+oey9P8F/UNZ+h+hfyhL/1/UP5Sl/+v0D2Xp/0v6h7L0/2X9Q1n6H6l/KEv/1+sfytJ/tP6hLP3foH8oS/+j9A9l6T9G/1CW/kfrH8rSf6z+oSz9f0X/UJb+4/QPZen/Rv1DWfr/qv6hLP3H6x/K0v9N+oey9H+z/qEs/X9N/1CW/m/RP5Sl/wT9Q1n6H6N/KEv/ifqHsvQ/Vv9Qlv7H6R/K0v94/UNZ+k/SP5Sl/wn6h7L0P1H/UJb+k/UPZel/kv6hLP3b9A9l6X+y/qEs/U/RP5Sl/6n6h7L0P03/UJb+7fqHsvR/q/6hLP3fpn8oS//T9Q9l6f92/UNZ+p+hfyhL/yn6h7L0P1P/UJb+Z+kfytL/HfqHsvQ/W/9Qlv7v1D+Upf85+oey9D9X/1CW/ufpH8rS/3z9Q1n6X6B/KEv/C/UPZel/kf6hLP2n6h/K0v9i/UNZ+l+ifyhL/0v1D2Xp36F/KEv/y/QPZek/Tf9Qlv7T9Q9l6T9D/1CW/u/SP5Sl/+X6h7L0n6l/KEv/WfqHsvS/Qv9Qlv6z9Q9l6X+l/qEs/efoH8rSf67+oSz95+kfytJ/vv6hLP2v0j+Upf8C/UNZ+r9b/1CW/lfrH8rSf6H+oSz9F+kfytL/Gv1DWfq/R/9Qlv7X6h/K0v86/UNZ+l+vfyhL/8X6h7L0v0H/UJb+v65/KEv/39A/lKX/Ev1DWfq/V/9Qlv6/qX8oS//36R/K0v/9+oey9L9R/1CW/jfpH8rS/2b9Q1n6/5b+oSz9l+ofytL/t1P1f76zs/PF/cos/X8nVf8XL0v/W/QPZel/q/6hLP1/V/9Qlv4f0D+Upf9t+oey9L9d/1CW/nfoH8rS//f0D2Xp//v6h7L0v1P/UJb+H9Q/lKX/h/QPZem/TP9Qlv7L9Q9l6f8H+oey9P9D/UNZ+t+lfyhL/xX6h7L0v1v/UJb+H9Y/lKX/R/QPZem/Uv9Qlv736B/K0v+P9A9l6b9K/1CW/n+sfyhL/3v1D2Xp/yf6h7L0v0//UJb+H9U/lKX/n+ofytL/Y/qHsvT/uP6hLP0/oX8oS/8/0z+Upf8n9Q9l6X+//qEs/VfrH8rS/wH9Q1n6/7n+oSz91+gfytL/Qf1DWfr/hf6hLP3/Uv9Qlv4P6R/K0v+v9A9l6f8p/UNZ+n9a/1CW/p/RP5Sl/2f1D2Xp/zn9Q1n6/7X+oSz9P69/KEv/L+gfytJ/rf6hLP2/qH8oS/+/0T+Upf86/UNZ+j+sfyhL/y/pH8rS/8v6h7L0f0T/UJb+X9E/lKX/V/UPZen/t/qHsvR/VP9Qlv5f0z+Upf/f6R/K0v/r+oey9P97/UNZ+q/XP5Sl/zf0D2Xpv0H/UJb+/6B/KEv/f9Q/lKX/N/UPZen/T/qHsvT/lv6hLP2/rX8oS//v6B/K0v8x/UNZ+v+z/qEs/R/XP5Sl/xP6h7L036h/KEv/J/UPZen/L/qHsvT/rv6hLP3/Vf9Qlv7f0z+Upf8m/UNZ+j+lfyhL/+/rH8rSf7P+oSz9/03/UJb+W/QPZen/7/qHsvR/Wv9Qlv7/oX8oS/+t+oey9N+mfyhL///UP5Sl/w/0D2Xpv13/UJb+P9Q/lKX/M/qHsvT/kf6hLP2f1T+Upf9/6R/K0v85/UNZ+j+vfyhL/079Q0n6v7KlfyhL/wH6h7L0H6h/KEv/QfqHsvQfrH8oS/8h+oey9B+qfyhL/2H6h7L0H65/KEv/l+kfytJ/H/1DWfq/XP9Qlv6v0D+Upf+++oey9P8p/UNZ+u+nf+gnrj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/NfMWLrp86syZHXN94Qtf+GLXFy/1f5kAAID/bT/+0P9S/5MAAAAAAAAAAAAAAAAAAABAXk3834m91P+OAAAAAAAAAAAAAADw/11b+7GbBw3Y46lBuz94zSMdO34eu/3s6StXPlB6fu7+9inBSw7c/UFnZ2fn8qcnTOp+OKzVanX9r72y+/Hw3sddr794xLKDdj4qEz9/x2MXTNn31Lmrbx38jeU3tz81ZMezQ1oXXTZjZscbBrZa5fghrau7Hhw1oNUqJw5p3dL1YEzXg8lDWqu6Hhy948HLWp/pevD6S2bPvLTriZMq/57BT4q29sWtQXsstrXHfw123//iEY9P7/m5j5fsebXBre79j1z9pQN7fa/HC+y/5/XLsb333+9/QeAF9W//z2zo+bmPl/wf7/8fXrd9UfS9F95/z+uX4+wf6hN8/t9jo70/9/f6/H9o8JK77o8Zvu62rv23nXnvId1PDX4xn/9//Prl+N77H7jH5/+uz/GTej7/D2u1ygl7+dsBqbS137C5r/f/vvc/+NW9bgbsvv+7v7LxFV37v+fZ1pLup4b0c/+T+nr/v7HXPyvQP23tKzp7vf/3Y/+tUcFL7tr/ptX77vj8v/G+Sw7Y7Xv92f8Jvfc/ev6sK0fPW7joyBmzpk7rmNZxxfgx444aO378uHGjd3wi2PnjXv6mQBJ79/7f2qfXzYBWq2PX/dp7b57Utf8tDy75SPdTw/u5/xP7fP8/1Ps/hEYObA0d2rp66vz5c4/a+WPPwzE7f9z5y4L99+PP/4cd0f3Lev7OcECrddCu+1EXjB/Wtf9r5pQ13U8N7ef+J/e5/4l7/l0l0D97+f5/aa+bPfZ/zKbrFnTt//Af7L+x+6n+/vn/pD73f5f3f9gbbe2tWt9Eu/Z/9LAbTq52Xdr8/R/Up4n9j9h6y7Zq1+Vk+4f6NLH/KUvffHG163KK/UN9mtj/A7MuXFrtupxq/1CfJvb/3Ku2HVztupxm/1CfJvb/6HefXFnturTbP9Snif1/8M72o6tdl7faP9Snif0fedUPJ1S7Lm+zf6hPE/u/7OVnrKp2XU63f6hPE/s/ufO4A6pdl7fbP9Snif0PuOF7i6tdlzPsH+rTxP6fmLp0drXrMsX+oT5N7H/ViFHPVLsuZ9o/1KeJ/S956o2Tq12Xs+wf6tPE/r96+7JHq12Xd9g/1KeJ/X/ivP2XVbsuZ9s/1KeJ/f9o5IP7VLsu77R/qE8T+1+/ftX91a7LOfYP9Wli/8tXDRpZ7bqca/9Qnyb2f/1J0x6pdl3Os3+oTxP7Hzvuy+dWuy7n2z/Up4n9H/S5bz1Z7bpcYP9Qnyb2f8ZDC+ZVuy4X2j/Up4n9Lzj4489Xuy4X2T/Up4n9v6Xj4OnVrstU+4f6NLH/cus+66tdl4vtH+rTxP7P2bJiYrXrcon9Q32a2P+a/b7wsWrX5VL7h/o0sf+tc64YX+26dNg/1KeJ/X/nvde/r9p1ucz+oT5N7P+2Z79eql2XafYP9Wli/5vGnHNetesy3f6hPk3sf8WpTz9c7brMsH+oTxP7X7rmsfnVrsu77B/q08T+16495fFq1+Vy+4f6NLH/w0eN3rfadZlp/1CfJvY/++wlH6p2XWbZP9Snif0ff9/tr612Xa6wf6hPE/sf/rUJn6x2XWbbP9Snif1/esL7P1Xtulxp/1CfJva/beJhR1S7LnPsH+rTxP433D/mjmrXZa79Q32a2P8HHr6z4nWZZ/9Qnyb2P+d1z22pdl3m2z/Up4n9v2nKWQurXZer7B/q08T+D7hr8herXZcF9g/1aWL/53/7+6dXuy7vtn+oTxP7P+zAiw+pdl2utn+oTxP7nz5j3U3VrstC+4f6NLH/Scs3jK12XRbZP9Snif3v98S8u6tdl2vsH+rTxP43DzrwtGrX5T32D/VpYv/3XPvQN6tdl2vtH+rTxP5vuvGjHdWuy3X2D/VpYv+f3T50a7Xrcr39AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Dc7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqJ3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAA//9QngO4")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x6, 0x0, 0x808, 0x2})

3m1.279739105s ago: executing program 2 (id=78):
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001280)={0xaa, 0x489})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

3m0.791494981s ago: executing program 2 (id=81):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(r1, r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000440)={0x7d, {{0x29, 0x0, 0x4000000, @rand_addr=' \x01\x00', 0x40000005}}}, 0x88)

3m0.685879836s ago: executing program 2 (id=82):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

3m0.501265286s ago: executing program 2 (id=84):
syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
r0 = syz_usbip_server_init(0x1)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35)

3m0.104291716s ago: executing program 2 (id=88):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

2m59.716869817s ago: executing program 32 (id=88):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

39.99808154s ago: executing program 4 (id=840):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

39.783291261s ago: executing program 4 (id=844):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@hyper}, @local, 0x0, 0x0, 0x421})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df})

39.583329701s ago: executing program 4 (id=848):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0x20000}, 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfffbfffd, 0xfffffffe, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x3, 0x203})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8d)

38.65642317s ago: executing program 4 (id=858):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@alloc_mode_def}, {@two_active_logs}, {@nogc_merge}, {@checkpoint_diasble}, {@noacl}, {@noinline_dentry}, {@background_gc_on}, {@jqfmt_vfsold}, {@noinline_dentry}, {@gc_merge}]}, 0xfd, 0x552d, &(0x7f000000cf00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$tun(0xffffffffffffff9c, 0x0, 0x121881, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000240), 0x4000)

36.977616797s ago: executing program 4 (id=869):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x6, 0x400000, 0x0, 'queue1\x00', 0x37fffe})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9})

35.519014523s ago: executing program 4 (id=876):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000020c0)=[@in6={0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}], 0x1c)

34.863079547s ago: executing program 33 (id=876):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000020c0)=[@in6={0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}], 0x1c)

34.697637456s ago: executing program 1 (id=880):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x5, 0xfffe}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x2, 0x141a, 0x0, 0x15f1, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x9, 0x4}]}}, {"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"}}}}, 0xfce)

33.962654804s ago: executing program 1 (id=886):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000300)={0xd5, 0x0, 0x29})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

33.523970227s ago: executing program 1 (id=889):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0xff, 0x78}, 0x2c)

33.160175775s ago: executing program 1 (id=891):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208012, &(0x7f0000000080), 0x1, 0x5e4, &(0x7f00000005c0)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100)
getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000)

32.619372673s ago: executing program 1 (id=894):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xaf, 0xb, "f3fffffeffffff38"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0xa)

31.497700742s ago: executing program 1 (id=896):
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000000080)=@udp=r0}, 0x20)
close(r1)
close(r0)

30.888444084s ago: executing program 34 (id=896):
r0 = socket(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000000080)=@udp=r0}, 0x20)
close(r1)
close(r0)

6.868370313s ago: executing program 6 (id=998):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0)

6.617367416s ago: executing program 6 (id=1000):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x4, 0x5, 0x9}, 0x10)

5.590166629s ago: executing program 6 (id=1003):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fanotify_init(0xf00, 0x1)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

5.310581764s ago: executing program 6 (id=1006):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

4.983869751s ago: executing program 6 (id=1009):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100000c0904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d02000904010102020d00000905821320000000a3090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.436382333s ago: executing program 6 (id=1029):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x8)

1.592254187s ago: executing program 0 (id=1034):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})

1.380105468s ago: executing program 3 (id=1037):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040050)

1.262343174s ago: executing program 3 (id=1039):
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x7ff, {0xffff, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0x5388, 0x5, 0x800, 0x80cb, 0x9}, {0x81, 0x1, 0x1, 0x7, 0x6, 0x1}]})
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x2])
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

1.100618073s ago: executing program 5 (id=1041):
unshare(0x22020400)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.080973964s ago: executing program 3 (id=1042):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000940)="d222", 0x2, 0xffff)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)

888.325724ms ago: executing program 5 (id=1043):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

758.44676ms ago: executing program 3 (id=1044):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

685.843294ms ago: executing program 5 (id=1045):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xfffffffffffffebe}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0)

580.24009ms ago: executing program 0 (id=1046):
r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x31)

579.86451ms ago: executing program 3 (id=1047):
unshare(0x6020400)
fsopen(&(0x7f0000000040)='cpuset\x00', 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
unshare(0x2040600)
close_range(r0, 0xffffffffffffffff, 0x0)

471.269346ms ago: executing program 5 (id=1048):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208408, &(0x7f0000000000)=ANY=[], 0x80, 0x168, &(0x7f00000002c0)="$eJzs2r9Kw0AcB/CfNFrp6OhUqFQHm6SJ1tmxuPkGpc21wYstiSDt5CZOgsI5+BKCT+AjdHTTxcGXiCQ5QkyLBinkhO9naL7wy59f7pqbruWPvTYLWkT7k7vTjy1/7NU79lGftVmPEl0iqkdhHoYPOi14S+vzkPQlJ5Rr5zM5NvaG4uSGudyxym4JAAAAAAAAAAAAAAAAAAAAAAAKatZkqI2Ed81c7rQz1aChnfU4d/ygpPZK16zLPVzEBH+MxsdeOOcq/nXFsR/Vze/X38uwOxL8PT++xoU3MYLprOV6vaEzdM4ty+6YB6Z5aBnxvYz8HZtPsieah8+mTqGU1jP7zV6L7DeT869tu+L2Mv+0YDqT869AWFOjjYKhQkQKtLH6sElEf7u8qyn2j/o3oUJKtJEJ6RKxsXRV0X5dd1RRW0+Og6rdeInWP70/5gNZjN+1SisaM/mk3NdT1osDwM++AgAA//8/aDZP")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

428.942218ms ago: executing program 0 (id=1049):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14)

356.348342ms ago: executing program 3 (id=1050):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0)

341.728152ms ago: executing program 5 (id=1051):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x400}, @generic={0x0, 0xffffffffffffff53, "d588380003c1"}]}}}}}}, 0xfd6c)

256.437227ms ago: executing program 0 (id=1052):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

80.247166ms ago: executing program 0 (id=1053):
r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x802)

47.949288ms ago: executing program 5 (id=1054):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x101, 0x28000000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084)

0s ago: executing program 0 (id=1055):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4080011, r0, 0xd8b90000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

kernel console output (not intermixed with test programs):

8][ T7522] loop4: detected capacity change from 0 to 128
[  168.979521][ T5841] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  168.989400][ T5841] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  169.011659][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0
[  169.022618][ T5841] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  169.050767][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  169.092625][ T5841] usb 2-1: Product: syz
[  169.104214][ T5841] usb 2-1: Manufacturer: syz
[  169.124098][ T5841] usb 2-1: SerialNumber: syz
[  169.253905][ T5841] usb 2-1: config 0 descriptor??
[  169.279565][ T5841] hub 2-1:0.0: bad descriptor, ignoring hub
[  169.333351][ T5841] hub: probe of 2-1:0.0 failed with error -5
[  169.386491][ T5841] usb 2-1: selecting invalid altsetting 0
[  169.497870][   T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  169.570617][   T23] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  169.674010][ T5841] usb 2-1: USB disconnect, device number 11
[  169.971912][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.028264][ T7524] loop0: detected capacity change from 0 to 131072
[  170.066131][   T28] audit: type=1326 audit(2000000012.089:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea0d9c819 code=0x7ffc0000
[  170.121404][   T28] audit: type=1326 audit(2000000012.129:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea0d9c819 code=0x7ffc0000
[  170.160001][   T28] audit: type=1326 audit(2000000012.169:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faea0d3db99 code=0x7ffc0000
[  170.183327][    C0] vkms_vblank_simulate: vblank timer overrun
[  170.191871][   T28] audit: type=1326 audit(2000000012.169:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faea0d3db99 code=0x7ffc0000
[  170.217166][    C0] vkms_vblank_simulate: vblank timer overrun
[  170.223987][ T7524] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  170.240753][   T28] audit: type=1326 audit(2000000012.169:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7faea0d9c819 code=0x7ffc0000
[  170.267071][    C0] vkms_vblank_simulate: vblank timer overrun
[  170.277071][   T28] audit: type=1326 audit(2000000012.169:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea0d9c819 code=0x7ffc0000
[  170.301944][    C0] vkms_vblank_simulate: vblank timer overrun
[  170.312626][   T28] audit: type=1326 audit(2000000012.169:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea0d9c819 code=0x7ffc0000
[  170.339416][    C0] vkms_vblank_simulate: vblank timer overrun
[  170.347599][   T28] audit: type=1326 audit(2000000012.169:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea0d9c819 code=0x7ffc0000
[  170.373814][   T28] audit: type=1326 audit(2000000012.169:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faea0d3db99 code=0x7ffc0000
[  170.399302][    C0] vkms_vblank_simulate: vblank timer overrun
[  170.408208][   T28] audit: type=1326 audit(2000000012.169:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.4.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faea0d3db99 code=0x7ffc0000
[  170.431718][    C0] vkms_vblank_simulate: vblank timer overrun
[  170.544730][ T5841] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  170.568770][ T7524] XFS (loop0): Starting recovery (logdev: internal)
[  170.618036][ T7524] XFS (loop0): Ending recovery (logdev: internal)
[  170.683866][ T7524] XFS (loop0): EXPERIMENTAL online shrink feature in use. Use at your own risk!
[  170.744442][ T5821] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  170.766351][ T5841] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  170.802211][ T5841] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  170.827753][ T5786] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  170.843362][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0
[  170.894199][ T5841] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  170.906364][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  170.915628][ T5841] usb 2-1: Product: syz
[  170.922625][ T5841] usb 2-1: Manufacturer: syz
[  170.934747][ T5841] usb 2-1: SerialNumber: syz
[  170.954814][ T5821] usb 5-1: Using ep0 maxpacket: 8
[  170.966592][ T5841] usb 2-1: config 0 descriptor??
[  170.978075][ T5821] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.981169][ T5841] hub 2-1:0.0: bad descriptor, ignoring hub
[  171.028287][ T5841] hub: probe of 2-1:0.0 failed with error -5
[  171.033917][ T5821] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.047867][ T5841] usb 2-1: selecting invalid altsetting 0
[  171.090294][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0
[  171.114865][ T5821] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  171.149597][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.222437][ T5821] usb 5-1: config 0 descriptor??
[  171.485230][ T5841] usb 2-1: USB disconnect, device number 12
[  171.710704][ T5821] smartjoyplus 0003:6666:8804.000B: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0
[  171.730018][ T5821] smartjoyplus 0003:6666:8804.000B: no output reports found
[  171.807109][ T7557] loop0: detected capacity change from 0 to 256
[  171.835330][ T7557] exfat: Deprecated parameter 'utf8'
[  171.842042][ T7557] exfat: Deprecated parameter 'utf8'
[  171.867571][ T7557] exfat: Deprecated parameter 'namecase'
[  171.885799][ T7559] syzkaller1: entered promiscuous mode
[  171.904551][ T7557] exfat: Deprecated parameter 'namecase'
[  171.912004][ T7559] syzkaller1: entered allmulticast mode
[  171.945130][ T5840] usb 5-1: USB disconnect, device number 6
[  172.032037][ T7557] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  172.472873][ T7571] loop0: detected capacity change from 0 to 4096
[  172.553539][ T7572] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.644604][ T5822] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  172.863740][ T5822] usb 4-1: Using ep0 maxpacket: 32
[  172.888041][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  172.944615][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58409, setting to 1024
[  172.984497][ T5822] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  172.995634][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.009118][ T5822] usb 4-1: config 0 descriptor??
[  173.017417][ T7569] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.030095][ T5822] hub 4-1:0.0: USB hub found
[  173.057877][ T7581] loop4: detected capacity change from 0 to 512
[  173.145841][ T7581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.199759][ T7581] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.253269][ T5822] hub 4-1:0.0: 1 port detected
[  173.473319][ T6097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.270805][   T23] usb 4-1: USB disconnect, device number 8
[  174.278663][ T5822] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  174.287958][ T7608] loop4: detected capacity change from 0 to 4096
[  174.373749][ T7594] loop1: detected capacity change from 0 to 40427
[  174.404148][ T7594] F2FS-fs (loop1): invalid crc value
[  174.430416][ T7594] F2FS-fs (loop1): Found nat_bits in checkpoint
[  174.441393][ T7610] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.599181][ T7594] F2FS-fs (loop1): Start checkpoint disabled!
[  174.633736][ T7594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  174.744445][ T5822] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  174.828798][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'.
[  174.950743][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.978529][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.999937][ T5822] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  175.021886][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.069043][ T5822] usb 1-1: config 0 descriptor??
[  175.099586][   T11] kworker/u4:0: attempt to access beyond end of device
[  175.099586][   T11] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  175.129065][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  175.146862][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  175.159021][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  175.547101][ T5822] aquacomputer_d5next 0003:0C70:F0B6.000C: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0
[  175.734102][ T7629] netlink: 'syz.3.492': attribute type 3 has an invalid length.
[  175.773938][ T7629] netlink: 72 bytes leftover after parsing attributes in process `syz.3.492'.
[  175.816863][ T5840] usb 1-1: USB disconnect, device number 5
[  175.930175][ T7622] loop4: detected capacity change from 0 to 32768
[  175.988693][ T7633] netlink: 'syz.1.495': attribute type 3 has an invalid length.
[  176.013408][ T7622] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.151347][ T7622] XFS (loop4): Ending clean mount
[  176.192170][ T7622] XFS (loop4): Quotacheck needed: Please wait.
[  176.306444][ T7622] XFS (loop4): Quotacheck: Done.
[  176.426932][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  176.426945][   T28] audit: type=1800 audit(2000000018.449:33): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.491" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  176.509105][   T28] audit: type=1800 audit(2000000018.489:34): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.491" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  176.531056][    C0] vkms_vblank_simulate: vblank timer overrun
[  176.587646][ T7652] loop1: detected capacity change from 0 to 4096
[  176.614570][ T7652] EXT4-fs (loop1): Test dummy encryption mode enabled
[  176.664617][ T7652] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  176.714646][ T7652] System zones: 0-5
[  176.756323][ T7652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.779687][ T7660] loop3: detected capacity change from 0 to 2048
[  176.815020][ T6097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.863535][ T7660] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  176.883113][ T7660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.028479][    C0] vkms_vblank_simulate: vblank timer overrun
[  177.068828][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.044869][ T7676] loop3: detected capacity change from 0 to 32768
[  178.057095][ T7676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.508 (7676)
[  178.098475][ T7676] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.113110][ T7676] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  178.127900][ T7676] BTRFS info (device loop3): setting nodatacow, compression disabled
[  178.137469][ T7676] BTRFS info (device loop3): turning on flush-on-commit
[  178.150568][ T7676] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  178.161144][ T7676] BTRFS info (device loop3): use lzo compression, level 0
[  178.170279][ T7676] BTRFS info (device loop3): setting nodatasum
[  178.178107][ T7676] BTRFS info (device loop3): use no compression
[  178.194603][ T7676] BTRFS info (device loop3): trying to use backup root at mount time
[  178.215709][ T7676] BTRFS info (device loop3): max_inline at 0
[  178.223536][ T7676] BTRFS info (device loop3): using free space tree
[  178.292549][   T11] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  178.294645][ T7683] loop1: detected capacity change from 0 to 32768
[  178.332522][ T7676] BTRFS warning (device loop3): couldn't read tree root
[  178.347490][ T7683] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.511 (7683)
[  178.387738][ T7676] BTRFS warning (device loop3): try to load backup roots slot 1
[  178.414670][ T1148] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  178.450037][ T7683] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  178.464908][ T7676] BTRFS warning (device loop3): couldn't read tree root
[  178.493310][ T7676] BTRFS warning (device loop3): try to load backup roots slot 2
[  178.516646][ T7683] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  178.534282][ T1148] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  178.554726][ T7676] BTRFS warning (device loop3): couldn't read tree root
[  178.568821][ T7683] BTRFS info (device loop1): enabling auto defrag
[  178.574091][ T7676] BTRFS warning (device loop3): try to load backup roots slot 3
[  178.608003][ T7683] BTRFS info (device loop1): use no compression
[  178.638491][ T7683] BTRFS info (device loop1): force clearing of disk cache
[  178.638513][ T7676] BTRFS info (device loop3): enabling ssd optimizations
[  178.638531][ T7676] BTRFS info (device loop3): auto enabling async discard
[  178.674574][ T7683] BTRFS info (device loop1): max_inline at 4096
[  178.683536][ T7676] BTRFS info (device loop3): rebuilding free space tree
[  178.702077][ T7683] BTRFS info (device loop1): disabling free space tree
[  178.755562][ T7676] BTRFS info (device loop3): checking UUID tree
[  178.863604][   T28] audit: type=1800 audit(2000000020.879:35): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.508" name="file1" dev="loop3" ino=257 res=0 errno=0
[  178.953460][ T7683] BTRFS info (device loop1): enabling ssd optimizations
[  178.972647][ T7688] loop4: detected capacity change from 0 to 32768
[  179.014620][ T7683] BTRFS info (device loop1): auto enabling async discard
[  179.048698][ T7683] BTRFS info (device loop1): rebuilding free space tree
[  179.080865][ T7688] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  179.115630][ T7683] BTRFS info (device loop1): disabling free space tree
[  179.156428][ T7683] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  179.207347][ T7688] XFS (loop4): Ending clean mount
[  179.224642][ T7683] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  179.231707][ T7688] XFS (loop4): Quotacheck needed: Please wait.
[  179.355673][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.516455][ T7688] XFS (loop4): Quotacheck: Done.
[  179.727776][   T28] audit: type=1800 audit(2000000021.729:36): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.513" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  179.937660][ T7705] loop0: detected capacity change from 0 to 32768
[  180.012094][ T5779] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  180.080033][ T6097] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  180.220756][ T7705] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.486696][ T7705] XFS (loop0): Ending clean mount
[  180.569983][ T7705] XFS (loop0): Quotacheck needed: Please wait.
[  180.721913][ T7705] XFS (loop0): Quotacheck: Done.
[  180.854440][   T28] audit: type=1800 audit(2000000022.859:37): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.514" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  180.974227][   T28] audit: type=1800 audit(2000000022.859:38): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.514" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  181.070084][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.421202][ T7757] loop1: detected capacity change from 0 to 2048
[  181.468572][ T7757] EXT4-fs: Ignoring removed oldalloc option
[  181.544272][ T7757] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  181.576523][ T7757] System zones: 0-7
[  181.625914][ T7757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.880566][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.184925][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  182.444464][    T9] usb 4-1: Using ep0 maxpacket: 8
[  182.464264][    T9] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  182.487695][    T9] usb 4-1: config 2 has no interface number 0
[  182.514473][    T9] usb 4-1: config 2 interface 31 has no altsetting 0
[  182.544792][ T5821] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  182.566607][    T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  182.586176][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.602186][ T7764] loop0: detected capacity change from 0 to 32768
[  182.612105][    T9] usb 4-1: Product: syz
[  182.617933][    T9] usb 4-1: Manufacturer: syz
[  182.623987][    T9] usb 4-1: SerialNumber: syz
[  182.705340][ T7764] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  182.758580][ T7764] XFS (loop0): Ending clean mount
[  182.768424][ T5821] usb 5-1: Using ep0 maxpacket: 16
[  182.798120][ T5821] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  182.834263][ T5821] usb 5-1: config 0 has no interface number 0
[  182.868976][ T5821] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.890367][ T7772] loop1: detected capacity change from 0 to 32768
[  182.899622][ T5821] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  182.911205][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.917567][ T5786] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  182.935319][ T5821] usb 5-1: config 0 descriptor??
[  183.010907][ T7772] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.091110][ T7772] XFS (loop1): Ending clean mount
[  183.136166][ T7772] XFS (loop1): Quotacheck needed: Please wait.
[  183.202446][ T7772] XFS (loop1): Quotacheck: Done.
[  183.364754][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.372279][ T5821] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input2
[  183.409619][    T9] ch9200: probe of 4-1:2.31 failed with error -22
[  183.451723][    T9] usb 4-1: USB disconnect, device number 9
[  183.857580][    T9] usb 5-1: USB disconnect, device number 7
[  184.663745][ T7801] loop4: detected capacity change from 0 to 2048
[  184.708038][ T7801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.767848][   T28] audit: type=1800 audit(2000000026.789:39): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.528" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  184.829828][   T28] audit: type=1804 audit(2000000026.819:40): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.528" name="/newroot/96/file0/file1" dev="loop4" ino=1367 res=1 errno=0
[  184.844666][ T7797] loop3: detected capacity change from 0 to 32768
[  184.991295][ T7797] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.032868][ T7814] loop4: detected capacity change from 0 to 256
[  185.054960][ T7814] exfat: Deprecated parameter 'utf8'
[  185.067690][ T7814] exfat: Deprecated parameter 'namecase'
[  185.143284][ T7814] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[  185.244470][ T5821] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  185.253754][ T7797] XFS (loop3): Ending clean mount
[  185.305349][ T7797] XFS (loop3): Quotacheck needed: Please wait.
[  185.439907][ T7797] XFS (loop3): Quotacheck: Done.
[  185.448359][ T5821] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  185.459262][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.529252][ T5821] usb 1-1: config 0 descriptor??
[  185.561828][ T5821] gspca_main: cpia1-2.14.0 probing 0813:0001
[  185.646398][ T7817] loop1: detected capacity change from 0 to 32768
[  185.693047][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.718255][ T7817] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  185.755800][ T7822] loop4: detected capacity change from 0 to 256
[  185.808119][ T7822] FAT-fs (loop4): Directory bread(block 64) failed
[  185.821542][ T7817] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  185.833051][ T7822] FAT-fs (loop4): Directory bread(block 65) failed
[  185.868597][ T7822] FAT-fs (loop4): Directory bread(block 66) failed
[  185.918753][ T7822] FAT-fs (loop4): Directory bread(block 67) failed
[  185.933618][ T7822] FAT-fs (loop4): Directory bread(block 68) failed
[  185.948261][ T7822] FAT-fs (loop4): Directory bread(block 69) failed
[  185.957297][ T7822] FAT-fs (loop4): Directory bread(block 70) failed
[  185.966075][   T28] audit: type=1800 audit(2000000027.979:41): pid=7817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.532" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  186.010013][ T7822] FAT-fs (loop4): Directory bread(block 71) failed
[  186.037782][ T5821] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  186.054106][ T7822] FAT-fs (loop4): Directory bread(block 72) failed
[  186.063159][ T7822] FAT-fs (loop4): Directory bread(block 73) failed
[  186.156724][ T5779] ocfs2: Unmounting device (7,1) on (node local)
[  186.438379][ T5821] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  186.510089][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'.
[  186.653663][ T5840] usb 1-1: USB disconnect, device number 6
[  186.877949][ T7825] loop3: detected capacity change from 0 to 32768
[  186.927762][ T7825] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.004647][ T7825] XFS (loop3): Ending clean mount
[  187.039321][ T7825] XFS (loop3): Quotacheck needed: Please wait.
[  187.055362][ T7829] loop4: detected capacity change from 0 to 32768
[  187.107293][ T7829] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.152133][ T7825] XFS (loop3): Quotacheck: Done.
[  187.192987][   T28] audit: type=1800 audit(2000000029.209:42): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.533" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  187.240262][ T7829] XFS (loop4): Ending clean mount
[  187.258184][ T7829] XFS (loop4): Quotacheck needed: Please wait.
[  187.362515][ T7829] XFS (loop4): Quotacheck: Done.
[  187.411924][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.498310][ T6097] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.850063][ T7851] loop0: detected capacity change from 0 to 32768
[  187.895699][   T28] audit: type=1800 audit(2000000029.919:43): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.538" name="file1" dev="loop0" ino=4 res=0 errno=0
[  188.448441][ T7859] loop1: detected capacity change from 0 to 512
[  188.486033][ T7859] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.546: iget: bad i_size value: 38620345925642
[  188.506177][ T7859] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.546: couldn't read orphan inode 15 (err -117)
[  188.525353][ T7859] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.563755][ T7859] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.546: bg 0: block 5: invalid block bitmap
[  188.677120][ T7859] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28
[  188.756671][ T7859] EXT4-fs (loop1): This should not happen!! Data will be lost
[  188.756671][ T7859] 
[  188.820357][ T7859] EXT4-fs (loop1): Total free blocks count 0
[  188.836306][ T7859] EXT4-fs (loop1): Free/Dirty block details
[  188.862368][ T7859] EXT4-fs (loop1): free_blocks=0
[  188.880626][ T7859] EXT4-fs (loop1): dirty_blocks=65
[  188.907610][ T7859] EXT4-fs (loop1): Block reservation details
[  188.934438][ T7859] EXT4-fs (loop1): i_reserved_data_blocks=65
[  189.140947][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  189.594782][   T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  189.636043][ T7870] loop4: detected capacity change from 0 to 32768
[  189.679779][ T7870] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  189.752620][ T7870] XFS (loop4): Ending clean mount
[  189.794449][   T27] usb 4-1: Using ep0 maxpacket: 32
[  189.812516][   T27] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  189.823523][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.887131][   T27] usb 4-1: config 0 descriptor??
[  189.909950][   T27] gspca_main: sunplus-2.14.0 probing 041e:400b
[  189.962667][ T6097] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  190.345057][ T7889] loop0: detected capacity change from 0 to 32768
[  190.377581][ T7889] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  190.418557][ T7889] XFS (loop0): Ending clean mount
[  190.439689][ T7889] XFS (loop0): Quotacheck needed: Please wait.
[  190.529457][ T7889] XFS (loop0): Quotacheck: Done.
[  190.581692][   T28] audit: type=1800 audit(2000000032.599:44): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.551" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  190.631866][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  190.932752][   T27] gspca_sunplus: reg_w_riv err -71
[  190.938688][   T27] sunplus: probe of 4-1:0.0 failed with error -71
[  190.950728][   T27] usb 4-1: USB disconnect, device number 10
[  192.358679][ T7904] loop3: detected capacity change from 0 to 32768
[  192.469091][   T28] audit: type=1800 audit(2000000034.489:45): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.554" name="file1" dev="loop3" ino=4 res=0 errno=0
[  193.088224][ T7919] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  193.088224][ T7919] The task syz.3.560 (7919) triggered the difference, watch for misbehavior.
[  193.340012][ T7912] loop4: detected capacity change from 0 to 40427
[  193.358863][ T7912] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  193.401337][ T7912] F2FS-fs (loop4): invalid crc value
[  193.464437][ T7912] F2FS-fs (loop4): Found nat_bits in checkpoint
[  193.599915][ T7924] loop0: detected capacity change from 0 to 512
[  193.634485][ T7912] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  193.660964][ T7924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  193.725470][ T7924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  193.777494][ T7912] syz.4.557: attempt to access beyond end of device
[  193.777494][ T7912] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  193.837670][ T7924] System zones: 1-12
[  193.900818][ T7924] EXT4-fs (loop0): 1 truncate cleaned up
[  193.939449][ T7924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.978602][ T6097] syz-executor: attempt to access beyond end of device
[  193.978602][ T6097] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  194.004716][ T6097] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  194.090276][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.241439][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'.
[  194.275190][ T5822] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  194.295186][ T7933] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  194.323043][ T7933] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  194.443235][ T7937] bond_slave_0: entered promiscuous mode
[  194.450167][ T7937] bond_slave_1: entered promiscuous mode
[  194.464720][ T5822] usb 4-1: Using ep0 maxpacket: 8
[  194.485224][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.504802][ T7937] macvlan2: entered promiscuous mode
[  194.521813][ T5822] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  194.532073][ T7937] bond0: entered promiscuous mode
[  194.546671][ T7937] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  194.550798][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.583696][ T5822] usb 4-1: config 0 descriptor??
[  194.588479][ T7937] team0: Device macvlan2 is up. Set it down before adding it as a team port
[  194.617297][ T7937] bond0: left promiscuous mode
[  194.623883][ T7937] bond_slave_0: left promiscuous mode
[  194.630806][ T7937] bond_slave_1: left promiscuous mode
[  194.801632][ T5822] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  194.945498][ T7945] loop4: detected capacity change from 0 to 256
[  194.958182][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  194.965154][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  195.010330][ T5822] usb 4-1: USB disconnect, device number 11
[  195.054918][ T7945] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.146805][ T7945] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  195.386282][ T7945] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  195.412765][   T28] audit: type=1800 audit(2000000037.429:46): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.570" name="file1" dev="loop4" ino=1048612 res=0 errno=0
[  196.501138][ T7960] loop1: detected capacity change from 0 to 32768
[  196.567942][   T28] audit: type=1800 audit(2000000038.589:47): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.574" name="file1" dev="loop1" ino=4 res=0 errno=0
[  197.083929][ T7966] loop0: detected capacity change from 0 to 4096
[  197.173687][ T7966] ntfs: volume version 3.1.
[  197.316224][ T7971] loop3: detected capacity change from 0 to 512
[  197.359446][ T7971] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.773025][ T7979] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  197.782370][ T5841] IPVS: starting estimator thread 0...
[  197.848652][ T7973] loop1: detected capacity change from 0 to 32768
[  197.855685][ T5822] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  197.896796][ T7981] IPVS: using max 35 ests per chain, 84000 per kthread
[  197.943141][ T7973] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.002274][ T7973] XFS (loop1): Ending clean mount
[  198.032034][ T7973] XFS (loop1): Quotacheck needed: Please wait.
[  198.084532][ T5822] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  198.128609][ T5822] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  198.158682][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.196190][ T5822] usb 1-1: Product: syz
[  198.200815][ T5822] usb 1-1: Manufacturer: syz
[  198.214012][ T7973] XFS (loop1): Quotacheck: Done.
[  198.248396][ T5822] usb 1-1: SerialNumber: syz
[  198.371586][   T28] audit: type=1800 audit(2000000040.389:48): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.577" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  198.489352][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.515688][ T5822] usb 1-1: selecting invalid altsetting 1
[  198.719204][ T5822] LME2510(C): Firmware Status: 06 03 47 00 00 00
[  198.719260][ T5822] usb 1-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state
[  198.765034][ T5822] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  198.782440][ T5822] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15)
[  198.815217][ T5822] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000)
[  198.834510][ T5822] usb 1-1: media controller created
[  198.861600][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  198.910889][ T7975] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  198.960462][ T5822] DVB: Unable to find symbol m88rs2000_attach()
[  198.971135][ T5822] LME2510(C): DM04/QQBOX Not Powered up or not Supported
[  198.971189][ T5822] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  198.973173][ T7997] loop4: detected capacity change from 0 to 32768
[  199.019690][ T5822] usb 1-1: USB disconnect, device number 7
[  199.059690][   T28] audit: type=1800 audit(2000000041.059:49): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.587" name="file1" dev="loop4" ino=4 res=0 errno=0
[  200.919828][ T8031] loop4: detected capacity change from 0 to 512
[  200.935664][ T8031] EXT4-fs: Ignoring removed mblk_io_submit option
[  200.971923][ T8031] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  201.001396][ T8031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.052982][ T8031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.072601][ T8031] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  201.266663][   T28] audit: type=1800 audit(2000000043.279:50): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.601" name="file2" dev="loop4" ino=16 res=0 errno=0
[  201.391189][ T6097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.562401][ T8033] loop3: detected capacity change from 0 to 32768
[  201.606985][ T8033] JBD2: Ignoring recovery information on journal
[  201.650837][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  201.749674][ T8033] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  201.804729][ T5821] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  201.864069][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.877067][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  201.888599][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  201.914702][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  201.962743][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.974133][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.983918][    T9] usb 2-1: Product: syz
[  202.001624][    T9] usb 2-1: Manufacturer: syz
[  202.010519][ T5775] ocfs2: Unmounting device (7,3) on (node local)
[  202.037798][    T9] usb 2-1: SerialNumber: syz
[  202.055842][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short
[  202.069406][ T5821] usb 5-1: not running at top speed; connect to a high speed hub
[  202.080890][    T9] cdc_mbim 2-1:1.0: skipping garbage
[  202.095353][ T5821] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  202.138176][ T5821] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  202.157302][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.160983][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  202.166453][ T5821] usb 5-1: Product: syz
[  202.172420][ T5788] Bluetooth: hci0: command 0x0406 tx timeout
[  202.177972][ T5821] usb 5-1: Manufacturer: syz
[  202.206253][ T5821] usb 5-1: SerialNumber: syz
[  202.258357][ T8046] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  202.283050][ T8043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  202.369289][ T8054] loop8: detected capacity change from 0 to 8
[  202.386590][ T6050]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11
[  202.403991][ T6050] loop8: p1 start 912119244 is beyond EOD, truncated
[  202.414645][ T6050] loop8: p2 start 2949906769 is beyond EOD, truncated
[  202.424976][ T6050] loop8: p3 start 3740906666 is beyond EOD, truncated
[  202.435336][ T6050] loop8: p4 start 2974154542 is beyond EOD, truncated
[  202.444793][ T6050] loop8: p5 start 2946449176 is beyond EOD, truncated
[  202.452789][ T6050] loop8: p6 start 1287082477 is beyond EOD, truncated
[  202.490710][ T6050] loop8: p7 start 3756907806 is beyond EOD, truncated
[  202.499373][ T6050] loop8: p8 start 974053343 is beyond EOD, truncated
[  202.511987][ T6050] loop8: p9 start 175385606 is beyond EOD, truncated
[  202.520662][ T6050] loop8: p10 start 1987014430 is beyond EOD, truncated
[  202.536936][ T6050] loop8: p11 start 1637589159 is beyond EOD, truncated
[  202.545545][ T5821] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  202.553937][ T5821] usb 5-1: MIDIStreaming interface descriptor not found
[  202.589401][ T8054]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11
[  202.602638][ T8054] loop8: p1 start 912119244 is beyond EOD, truncated
[  202.635564][ T8054] loop8: p2 start 2949906769 is beyond EOD, truncated
[  202.643384][ T8054] loop8: p3 start 3740906666 is beyond EOD, truncated
[  202.669379][ T5821] usb 5-1: USB disconnect, device number 8
[  202.714781][ T8054] loop8: p4 start 2974154542 is beyond EOD, truncated
[  202.728013][ T8054] loop8: p5 start 2946449176 is beyond EOD, truncated
[  202.754517][ T8054] loop8: p6 start 1287082477 is beyond EOD, truncated
[  202.783718][ T8054] loop8: p7 start 3756907806 is beyond EOD, truncated
[  202.802558][ T8054] loop8: p8 start 974053343 is beyond EOD, truncated
[  202.820500][ T8054] loop8: p9 start 175385606 is beyond EOD, truncated
[  202.847784][ T8054] loop8: p10 start 1987014430 is beyond EOD, truncated
[  202.869795][ T8054] loop8: p11 start 1637589159 is beyond EOD, truncated
[  202.888997][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.904713][ T8043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  203.174065][    T9] cdc_mbim 2-1:1.0: bind() failure
[  203.190744][    T9] cdc_ncm: probe of 2-1:1.1 failed with error -71
[  203.214538][    T9] cdc_mbim: probe of 2-1:1.1 failed with error -71
[  203.225350][    T9] usbtest: probe of 2-1:1.1 failed with error -71
[  203.250206][    T9] usb 2-1: USB disconnect, device number 13
[  203.444452][  T788] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  203.639829][  T788] usb 4-1: Using ep0 maxpacket: 32
[  203.658586][  T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.847803][  T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.864464][  T788] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  203.874260][  T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.928953][  T788] usb 4-1: config 0 descriptor??
[  203.952672][  T788] hub 4-1:0.0: USB hub found
[  204.154375][  T788] hub 4-1:0.0: 1 port detected
[  204.319150][ T8088] loop0: detected capacity change from 0 to 4096
[  204.351595][ T8088] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  204.485225][ T8088] ntfs: volume version 3.1.
[  204.610826][   T28] audit: type=1326 audit(2000000046.609:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.1.622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24bb99c819 code=0x0
[  204.619785][  T788] usb 4-1: USB disconnect, device number 12
[  205.492376][   T28] audit: type=1326 audit(2000000047.509:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c639c819 code=0x7ffc0000
[  205.558980][   T28] audit: type=1326 audit(2000000047.509:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c639c819 code=0x7ffc0000
[  205.685646][   T28] audit: type=1326 audit(2000000047.509:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c639c819 code=0x7ffc0000
[  205.770683][   T28] audit: type=1326 audit(2000000047.509:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c639c819 code=0x7ffc0000
[  205.903627][   T28] audit: type=1326 audit(2000000047.519:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c635d04e code=0x7ffc0000
[  205.996397][   T28] audit: type=1326 audit(2000000047.519:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c639c819 code=0x7ffc0000
[  206.101895][   T28] audit: type=1326 audit(2000000047.519:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c639c819 code=0x7ffc0000
[  206.149651][ T8139] loop3: detected capacity change from 0 to 512
[  206.200754][ T8139] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.635: inode has both inline data and extents flags
[  206.218527][   T28] audit: type=1326 audit(2000000047.519:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c639c819 code=0x7ffc0000
[  206.281268][ T8139] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.635: couldn't read orphan inode 15 (err -117)
[  206.330068][ T8139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.710413][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.167193][ T8158] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  207.275347][ T5821] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  207.495197][ T5821] usb 4-1: config 0 has an invalid interface number: 74 but max is 0
[  207.509082][ T5821] usb 4-1: config 0 has no interface number 0
[  207.528813][ T5821] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  207.544909][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.575921][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  207.585689][ T5821] usb 4-1: config 0 descriptor??
[  207.599845][ T5821] cp210x 4-1:0.74: cp210x converter detected
[  207.774619][    T9] usb 2-1: Using ep0 maxpacket: 8
[  207.793037][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  207.804514][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  207.821678][ T8166] loop4: detected capacity change from 0 to 32768
[  207.834439][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  207.861002][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  207.885243][ T8166] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.894520][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  207.914465][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.929340][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  207.939216][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.020019][ T5821] cp210x 4-1:0.74: failed to get vendor val 0x000e size 3: -32
[  208.111726][ T8166] XFS (loop4): Ending clean mount
[  208.137748][   T27] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  208.154974][   T27] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 
[  208.167636][   T27] XFS (loop4): Unmount and run xfs_repair
[  208.168936][    T9] usb 2-1: usb_control_msg returned -32
[  208.173633][   T27] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  208.187904][   T27] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  208.199627][    T9] usbtmc 2-1:16.0: can't read capabilities
[  208.206346][   T27] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10  ....... ........
[  208.206368][   T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  208.206381][   T27] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37  ...... ....@..@7
[  208.206393][   T27] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  208.258024][   T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  208.267213][ T5821] cp210x 4-1:0.74: GPIO initialisation failed: -19
[  208.271977][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  208.289527][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  208.300730][ T5821] usb 4-1: cp210x converter now attached to ttyUSB0
[  208.327078][ T8168] loop0: detected capacity change from 0 to 40427
[  208.334793][ T8166] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74
[  208.348176][ T8166] XFS (loop4): Failed to initialize disk quotas.
[  208.357517][ T8168] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  208.404604][ T8168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  208.431594][ T8168] F2FS-fs (loop0): invalid crc value
[  208.471923][ T6097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.477941][  T788] usb 4-1: USB disconnect, device number 13
[  208.578533][  T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  208.625946][  T788] cp210x 4-1:0.74: device disconnected
[  208.676938][ T8168] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  208.684563][ T8168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  208.854730][ T5786] syz-executor: attempt to access beyond end of device
[  208.854730][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.883348][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  209.375826][   T27] kernel write not supported for file /uinput (pid: 27 comm: kworker/1:1)
[  209.942166][ T8192] loop0: detected capacity change from 0 to 32768
[  210.018482][ T8192] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.434231][    T9] usb 2-1: USB disconnect, device number 14
[  210.473051][ T8192] XFS (loop0): Ending clean mount
[  210.663810][ T8192] XFS (loop0): Quotacheck needed: Please wait.
[  210.925576][ T8192] XFS (loop0): Quotacheck: Done.
[  211.047007][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  211.047037][   T28] audit: type=1800 audit(2000000053.049:76): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.649" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  211.231004][ T8196] loop3: detected capacity change from 0 to 32768
[  211.241314][ T8207] loop4: detected capacity change from 0 to 131072
[  211.352270][ T8207] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  211.388090][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  211.521210][ T8196] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  211.569743][ T8207] XFS (loop4): Starting recovery (logdev: internal)
[  211.634503][ T8207] XFS (loop4): Ending recovery (logdev: internal)
[  211.849802][ T8196] XFS (loop3): Ending clean mount
[  211.910488][ T6097] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  211.983199][ T8210] loop1: detected capacity change from 0 to 32768
[  211.996435][ T8196] XFS (loop3): Quotacheck needed: Please wait.
[  212.115032][ T8210] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  212.151180][ T8196] XFS (loop3): Quotacheck: Done.
[  212.212425][ T8238] use of bytesused == 0 is deprecated and will be removed in the future,
[  212.223854][ T8238] use the actual size instead.
[  212.292567][ T8210] XFS (loop1): Ending clean mount
[  212.494268][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  212.507662][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  213.094901][   T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  213.305634][   T27] usb 4-1: Using ep0 maxpacket: 8
[  213.322816][   T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  213.333660][   T27] usb 4-1: config 179 has no interface number 0
[  213.352308][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  213.374770][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  213.390199][ T8245] loop0: detected capacity change from 0 to 32768
[  213.405759][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  213.418606][ T8245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.660 (8245)
[  213.433424][   T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  213.455380][   T27] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  213.475340][ T8245] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.486433][ T8245] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  213.496453][   T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  213.506240][ T8245] BTRFS info (device loop0): setting nodatacow, compression disabled
[  213.519662][ T8245] BTRFS info (device loop0): enabling auto defrag
[  213.527260][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.536982][ T8245] BTRFS info (device loop0): max_inline at 0
[  213.553096][ T8243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  213.573247][ T8245] BTRFS info (device loop0): using free space tree
[  213.903777][   T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input18
[  213.910693][ T8245] BTRFS info (device loop0): auto enabling async discard
[  214.136229][    T9] usb 4-1: USB disconnect, device number 14
[  214.136290][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  214.154546][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  214.164191][    T9] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  214.427780][ T8266] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  214.469458][ T8266] overlayfs: maximum fs stacking depth exceeded
[  214.480486][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.904445][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  214.962726][ T8274] kvm: user requested TSC rate below hardware speed
[  215.095674][ T8280] syzkaller1: entered promiscuous mode
[  215.096900][    T9] usb 5-1: Using ep0 maxpacket: 32
[  215.104478][ T8280] syzkaller1: entered allmulticast mode
[  215.126882][    T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  215.136502][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  215.152124][    T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  215.170015][    T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  215.202740][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  215.213312][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  215.227476][    T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  215.244589][    T9] usb 5-1: Product: syz
[  215.249894][    T9] usb 5-1: Manufacturer: syz
[  215.255378][    T9] usb 5-1: SerialNumber: syz
[  215.266207][    T9] usb 5-1: config 0 descriptor??
[  215.277649][    T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  215.290639][    T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  215.609396][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  215.617347][    T9] usb 5-1: USB disconnect, device number 9
[  215.629399][    T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  215.953236][ T8299] netlink: 52 bytes leftover after parsing attributes in process `syz.0.671'.
[  216.481339][ T8312] vlan2: entered allmulticast mode
[  216.497730][ T8312] bridge0: port 3(vlan2) entered blocking state
[  216.531918][ T8312] bridge0: port 3(vlan2) entered disabled state
[  216.551073][ T8312] vlan2: entered promiscuous mode
[  216.659670][ T8321] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  216.776538][ T8324] netlink: 'syz.3.681': attribute type 4 has an invalid length.
[  216.796018][ T8324] netlink: 152 bytes leftover after parsing attributes in process `syz.3.681'.
[  216.836272][ T8324] .`: renamed from bond0 (while UP)
[  217.675656][ T8326] loop0: detected capacity change from 0 to 32768
[  218.068620][   T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  218.099034][ T8326] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.238587][ T8326] XFS (loop0): Ending clean mount
[  218.280390][ T8326] XFS (loop0): Quotacheck needed: Please wait.
[  218.296370][   T27] usb 5-1: Using ep0 maxpacket: 16
[  218.313584][   T27] usb 5-1: config 0 has no interfaces?
[  218.326877][   T27] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  218.339123][   T27] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  218.348420][   T27] usb 5-1: Manufacturer: syz
[  218.369660][   T27] usb 5-1: config 0 descriptor??
[  218.507843][ T8326] XFS (loop0): Quotacheck: Done.
[  218.515947][ T8347] netlink: 'syz.1.685': attribute type 3 has an invalid length.
[  218.525870][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'.
[  218.550193][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'.
[  218.565393][ T8326] XFS (loop0): User initiated shutdown received.
[  218.626208][ T8326] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  218.658663][ T5840] usb 5-1: USB disconnect, device number 10
[  218.694523][ T8326] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  218.743896][ T8352] loop3: detected capacity change from 0 to 4096
[  218.772611][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.810674][ T8353] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.951478][   T28] audit: type=1800 audit(2000000060.969:77): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.687" name="bus" dev="loop3" ino=12 res=0 errno=0
[  218.981223][ T8352] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  219.030727][ T8352] Remounting filesystem read-only
[  219.107555][ T5775] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  219.138233][ T5775] NILFS (loop3): discard dirty page: offset=0, ino=2
[  219.166838][ T5775] NILFS (loop3): discard dirty block: blocknr=14, size=4096
[  219.177418][ T5775] NILFS (loop3): discard dirty page: offset=0, ino=6
[  219.189975][ T5775] NILFS (loop3): discard dirty block: blocknr=23, size=4096
[  219.192647][ T8356] IPv6: NLM_F_CREATE should be specified when creating new route
[  219.200119][ T5775] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  219.219414][ T5775] NILFS (loop3): discard dirty block: blocknr=24, size=4096
[  219.274562][ T5775] NILFS (loop3): discard dirty page: offset=8192, ino=6
[  219.299732][ T5775] NILFS (loop3): discard dirty block: blocknr=25, size=4096
[  219.525185][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'.
[  220.224516][ T5821] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  220.454517][ T5821] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[  220.484887][ T5821] usb 1-1: config 150 has no interface number 0
[  220.514528][ T5821] usb 1-1: config 150 interface 204 has no altsetting 0
[  220.534292][ T8383] loop1: detected capacity change from 0 to 32768
[  220.550947][ T5821] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  220.581608][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.622329][ T8396] binder: 8394:8396 ioctl c0306201 2000000001c0 returned -14
[  220.643032][ T5821] usb 1-1: Product: syz
[  220.659661][ T5821] usb 1-1: Manufacturer: syz
[  220.664868][ T5821] usb 1-1: SerialNumber: syz
[  220.685054][ T8383] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  220.764943][ T8383] XFS (loop1): Ending clean mount
[  220.780193][ T8383] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 
[  220.792992][ T8383] XFS (loop1): Unmount and run xfs_repair
[  220.804927][ T8383] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  220.818797][ T8383] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  220.864524][ T8383] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  220.879739][ T8383] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  220.904527][ T8383] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  220.923056][ T5821] xr_serial 1-1:150.204: xr_serial converter detected
[  220.931416][ T8383] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  220.959401][ T8383] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  220.996665][ T8383] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  221.007144][ T8383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  221.018152][ T8383] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74
[  221.032987][ T8383] XFS (loop1): Failed to initialize disk quotas.
[  221.059000][   T28] audit: type=1800 audit(2000000063.079:78): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.700" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  221.177216][   T28] audit: type=1800 audit(2000000063.139:79): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.700" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  221.233490][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  221.485085][ T8414] Invalid argument reading file caps for ./file0
[  221.730492][ T5821] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  221.751387][ T5821] xr_serial: probe of ttyUSB0 failed with error -71
[  221.780239][ T5821] usb 1-1: USB disconnect, device number 8
[  221.812724][ T5821] xr_serial 1-1:150.204: device disconnected
[  222.174273][ T8421] loop4: detected capacity change from 0 to 40427
[  222.189120][ T8421] F2FS-fs (loop4): invalid crc value
[  222.199925][ T8421] F2FS-fs (loop4): Found nat_bits in checkpoint
[  222.289110][ T8421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  222.498722][ T6097] syz-executor: attempt to access beyond end of device
[  222.498722][ T6097] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  222.555936][ T6097] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  222.634676][ T5090] Bluetooth: hci1: command 0x0406 tx timeout
[  223.640166][ T8465] loop0: detected capacity change from 0 to 512
[  223.698423][ T8465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.795692][ T8465] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  223.869190][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.494454][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'.
[  224.754496][  T788] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  224.954485][  T788] usb 5-1: Using ep0 maxpacket: 16
[  224.966188][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.982783][  T788] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  224.996541][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.009099][  T788] usb 5-1: config 0 descriptor??
[  225.432567][  T788] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  225.463650][  T788] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  225.472422][  T788] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0
[  225.488358][  T788] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  225.706262][ T8512] loop1: detected capacity change from 0 to 32768
[  225.761717][ T8512] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.750 (8512)
[  225.868528][ T5840] usb 5-1: USB disconnect, device number 11
[  226.347523][ T8517] loop0: detected capacity change from 0 to 131072
[  226.359764][ T8517] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  226.368019][ T8517] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  226.382046][ T8512] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  226.393807][ T8517] F2FS-fs (loop0): invalid crc value
[  226.415887][ T8512] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  226.432256][ T8512] BTRFS info (device loop1): enabling auto defrag
[  226.441173][ T8517] F2FS-fs (loop0): Found nat_bits in checkpoint
[  226.490890][ T8512] BTRFS info (device loop1): use no compression
[  226.500888][ T8512] BTRFS info (device loop1): max_inline at 4096
[  226.511147][ T8512] BTRFS info (device loop1): using free space tree
[  226.518486][ T8517] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  226.526631][ T8517] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  226.564555][   T28] audit: type=1800 audit(2000000068.579:80): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.752" name="file2" dev="loop0" ino=8 res=0 errno=0
[  226.775068][ T8512] BTRFS info (device loop1): enabling ssd optimizations
[  226.802434][ T8512] BTRFS info (device loop1): auto enabling async discard
[  227.040187][ T5779] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  227.380177][ T8544] loop1: detected capacity change from 0 to 128
[  227.417085][ T8544] EXT4-fs: Ignoring removed nobh option
[  227.497543][ T8544] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.554600][ T8544] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  227.709883][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.898643][ T8548] loop1: detected capacity change from 0 to 512
[  228.007355][ T8548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.035401][ T8548] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.172406][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.311243][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'.
[  228.527338][ T8569] loop0: detected capacity change from 0 to 16
[  228.553914][ T8569] erofs: (device loop0): mounted with root inode @ nid 36.
[  228.567654][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.618171][ T5785] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[  228.653942][ T8569] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[  228.667020][   T28] audit: type=1800 audit(2000000070.689:81): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.763" name="file2" dev="loop0" ino=89 res=0 errno=0
[  228.701061][ T8572] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[  228.739308][   T28] audit: type=1800 audit(2000000070.759:82): pid=8572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.763" name="file2" dev="loop0" ino=89 res=0 errno=0
[  228.829271][ T8574] loop0: detected capacity change from 0 to 1024
[  228.838482][ T8574] EXT4-fs: Ignoring removed bh option
[  228.859584][ T8574] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  228.895598][ T8574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.975392][ T8574] EXT4-fs error (device loop0): ext4_read_inline_dir:1591: inode #12: block 7: comm syz.0.765: path /213/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  229.053117][ T8574] EXT4-fs (loop0): Remounting filesystem read-only
[  229.130709][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.345937][ T8571] loop1: detected capacity change from 0 to 40427
[  229.364593][ T8571] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  229.371809][ T8571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  229.407614][ T8571] F2FS-fs (loop1): invalid crc value
[  229.575924][ T8571] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  229.586941][ T8571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  229.604580][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.604575][ T5821] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  229.645137][ T8592] loop0: detected capacity change from 0 to 512
[  229.657620][ T8592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  229.681357][  T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.708536][ T8592] EXT4-fs (loop0): 1 truncate cleaned up
[  229.716559][ T8592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.736671][ T5779] syz-executor: attempt to access beyond end of device
[  229.736671][ T5779] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  229.771383][ T5779] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  229.784522][   T28] audit: type=1800 audit(2000000071.789:83): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.771" name="file0" dev="loop0" ino=13 res=0 errno=0
[  229.796823][ T5821] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.858630][ T5821] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  229.884439][ T5821] usb 5-1: config 1 interface 0 has no altsetting 0
[  229.905977][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.916591][ T5821] usb 5-1: New USB device found, idVendor=046d, idProduct=c101, bcdDevice= 0.40
[  229.931527][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.964681][ T5821] usb 5-1: Product: syz
[  229.969524][ T5821] usb 5-1: Manufacturer: syz
[  229.987778][ T5821] usb 5-1: SerialNumber: syz
[  230.347831][ T8600] loop1: detected capacity change from 0 to 1024
[  230.363143][ T8600] hfsplus: invalid catalog max_key_len 715
[  230.394711][ T8600] hfsplus: failed to load catalog file
[  230.650156][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.800491][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.812324][ T1080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.823665][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.837585][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.839610][ T5821] usbhid 5-1:1.0: can't add hid device: -71
[  230.863872][ T5821] usbhid: probe of 5-1:1.0 failed with error -71
[  230.923246][ T5821] usb 5-1: USB disconnect, device number 12
[  231.418948][ T8621] loop0: detected capacity change from 0 to 8192
[  231.475638][ T8621]  loop0: AHDI p3 p4
[  231.486734][ T8621] loop0: p3 start 525312 is beyond EOD, truncated
[  231.597089][ T8625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.676014][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.789115][ T8631] loop4: detected capacity change from 0 to 1024
[  231.800854][ T8631] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  231.823509][ T8631] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  231.837584][ T8631] EXT4-fs (loop4): orphan cleanup on readonly fs
[  231.846276][ T8631] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.788: Freeing blocks not in datazone - block = 0, count = 4096
[  231.874532][ T8631] EXT4-fs (loop4): Remounting filesystem read-only
[  231.897204][ T8631] EXT4-fs (loop4): 1 orphan inode deleted
[  231.930077][ T8631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  232.034525][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  232.165887][ T6097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.240886][ T8642] loop1: detected capacity change from 0 to 256
[  232.261607][ T8640] loop3: detected capacity change from 0 to 2048
[  232.270504][ T5840] usb 1-1: Using ep0 maxpacket: 32
[  232.305492][ T5840] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  232.311355][ T8644] loop4: detected capacity change from 0 to 128
[  232.314257][ T8642] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  232.316529][ T5840] usb 1-1: config 0 has no interface number 0
[  232.370855][ T8644] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.383849][ T5840] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  232.416528][ T8640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.418456][ T5840] usb 1-1: config 0 interface 85 has no altsetting 0
[  232.439698][ T5840] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  232.451029][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.464144][ T5840] usb 1-1: Product: syz
[  232.469074][ T5840] usb 1-1: Manufacturer: syz
[  232.470826][ T8644] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  232.474159][ T5840] usb 1-1: SerialNumber: syz
[  232.537467][ T5840] usb 1-1: config 0 descriptor??
[  232.677245][ T8648] syzkaller1: entered promiscuous mode
[  232.695837][ T8648] syzkaller1: entered allmulticast mode
[  232.734192][ T6097] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.105813][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'.
[  233.229422][ T5840] appletouch 1-1:0.85: Geyser mode initialized.
[  233.256916][ T5840] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input19
[  233.520238][ T5840] usb 1-1: USB disconnect, device number 9
[  233.634860][ T5840] appletouch 1-1:0.85: input: appletouch disconnected
[  233.914954][ T5840] net_ratelimit: 8 callbacks suppressed
[  233.914975][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.052673][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.165287][ T8656] loop4: detected capacity change from 0 to 131072
[  234.173979][ T8656] XFS: ikeep mount option is deprecated.
[  234.219887][ T8656] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  234.246398][ T8682] loop1: detected capacity change from 0 to 16
[  234.261137][ T8682] erofs: (device loop1): mounted with root inode @ nid 36.
[  234.486516][ T8656] XFS (loop4): Starting recovery (logdev: internal)
[  234.502740][ T8687] warning: `syz.3.809' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  234.543415][ T8656] XFS (loop4): Ending recovery (logdev: internal)
[  234.640172][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.684064][ T6097] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  235.192605][ T8694] loop4: detected capacity change from 0 to 32768
[  235.212479][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.258219][ T8694] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.304575][ T8694] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  235.381098][ T8694] XFS (loop4): Starting recovery (logdev: internal)
[  235.450401][ T8694] XFS (loop4): Ending recovery (logdev: internal)
[  235.494378][   T28] audit: type=1800 audit(2000000077.489:84): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.812" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  235.601426][ T6097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.864041][ T8711] netlink: 'syz.3.817': attribute type 4 has an invalid length.
[  236.243654][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.725326][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.826'.
[  236.931356][ T8738] loop0: detected capacity change from 0 to 256
[  236.954777][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.275387][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.300506][ T8747] loop3: detected capacity change from 0 to 256
[  237.329810][ T8747] exfat: Deprecated parameter 'namecase'
[  237.370824][ T8749] input: syz0 as /devices/virtual/input/input20
[  237.452134][ T8747] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xee17df4f, utbl_chksum : 0xe619d30d)
[  237.764788][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.121450][ T8761] syzkaller1: entered promiscuous mode
[  238.139738][ T8761] syzkaller1: entered allmulticast mode
[  238.336496][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.448371][ T8771] Context (ID=0x0) not attached to queue pair (handle=0x4db:0x0)
[  238.993057][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'.
[  239.128336][ T8795] Illegal XDP return value 4294967274 on prog  (id 52) dev syz_tun, expect packet loss!
[  239.365183][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.385707][ T8787] loop1: detected capacity change from 0 to 32768
[  239.455901][ T8787] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.470977][ T8808] loop0: detected capacity change from 0 to 256
[  239.523110][ T8808] exfat: Deprecated parameter 'namecase'
[  239.573582][ T8787] XFS (loop1): Ending clean mount
[  239.606638][ T8787] XFS (loop1): Quotacheck needed: Please wait.
[  239.637911][ T8808] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xee17df4f, utbl_chksum : 0xe619d30d)
[  239.806894][ T8787] XFS (loop1): Quotacheck: Done.
[  239.934217][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  240.002285][  T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.247828][ T8817] loop0: detected capacity change from 0 to 4096
[  240.292496][ T8817] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  240.390199][ T8817] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  240.407111][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.487614][ T8813] loop4: detected capacity change from 0 to 40427
[  240.522940][ T8817] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update
[  240.541349][ T8813] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12
[  240.584115][ T8813] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  240.616705][   T39] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  240.631735][ T8813] F2FS-fs (loop4): invalid crc value
[  240.723188][ T8830] loop3: detected capacity change from 0 to 1024
[  240.825470][ T8830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  240.859913][ T8830] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.927530][ T8830] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.864: lblock 3 mapped to illegal pblock 3 (length 3)
[  241.007865][ T8830] EXT4-fs (loop3): Remounting filesystem read-only
[  241.020683][ T8813] F2FS-fs (loop4): Start checkpoint disabled!
[  241.046516][ T8813] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  241.069232][ T8813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  241.133656][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  241.247473][ T6097] syz-executor: attempt to access beyond end of device
[  241.247473][ T6097] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  241.299570][ T6097] syz-executor: attempt to access beyond end of device
[  241.299570][ T6097] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  241.362934][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'.
[  241.414559][ T5840] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  241.442744][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.591222][ T8855] loop0: detected capacity change from 0 to 256
[  241.598355][ T5840] usb 2-1: Using ep0 maxpacket: 16
[  241.609945][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.638975][ T8855] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d)
[  241.644539][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.675366][ T5840] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice=e3.00
[  241.676941][   T59] kworker/u4:4: attempt to access beyond end of device
[  241.676941][   T59] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  241.700779][ T5840] usb 2-1: New USB device strings: Mfr=30, Product=0, SerialNumber=0
[  241.700806][ T5840] usb 2-1: Manufacturer: syz
[  241.703159][ T5840] usb 2-1: config 0 descriptor??
[  241.837704][   T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  241.882087][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.029710][ T8860] loop0: detected capacity change from 0 to 4096
[  242.065769][ T8860] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  242.107500][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.136840][ T8860] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  242.201710][ T8860] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  242.231663][ T8860] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  242.334404][ T8860] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  242.344223][ T8860] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  242.387901][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.404058][ T5840] letsketch 0003:6161:4D15.000F: Device info: 騭
[  242.434872][ T8860] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  242.475018][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.494485][ T8860] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  242.534470][ T8860] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  242.554447][ T8860] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  242.602344][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.614005][ T5840] letsketch 0003:6161:4D15.000F: Device info: 肿
[  242.624096][ T8860] ntfs: volume version 3.1.
[  242.851462][ T5840] usb 2-1: Max retries (5) exceeded reading string descriptor 202
[  242.863968][ T5840] letsketch: probe of 0003:6161:4D15.000F failed with error -71
[  242.913370][ T5840] usb 2-1: USB disconnect, device number 15
[  243.035748][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.518087][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.635321][ T8878] syzkaller1: entered promiscuous mode
[  243.641219][ T8878] syzkaller1: entered allmulticast mode
[  244.058052][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.083048][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.105043][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.115211][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.124526][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  244.132659][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.234924][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.266759][ T5822] kernel read not supported for file /sequencer (pid: 5822 comm: kworker/1:5)
[  244.564820][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.901782][    T9] IPVS: starting estimator thread 0...
[  245.025193][ T8917] IPVS: using max 25 ests per chain, 60000 per kthread
[  245.166019][ T8922] loop1: detected capacity change from 0 to 1024
[  245.233611][ T8922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.584697][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  245.604749][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.757286][ T5779] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  245.798642][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  245.819458][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  245.833425][ T5779] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  245.846404][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  245.901830][    T9] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  245.926265][    T9] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  245.953067][ T8889] chnl_net:caif_netlink_parms(): no params data found
[  245.977674][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  246.014458][    T9] usb 4-1: config 1 interface 1 has no altsetting 0
[  246.046321][ T8782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.047916][    T9] usb 4-1: string descriptor 0 read error: -22
[  246.075019][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.123396][    T9] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  246.157664][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.234545][ T5090] Bluetooth: hci1: command tx timeout
[  246.635652][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.684515][    T9] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  247.049834][   T11] hsr_slave_0: left promiscuous mode
[  247.061700][   T11] hsr_slave_1: left promiscuous mode
[  247.076572][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.094473][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.115419][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.124708][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.134492][   T11] bridge_slave_1: left allmulticast mode
[  247.140474][   T11] bridge_slave_1: left promiscuous mode
[  247.146753][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.157299][   T11] bridge_slave_0: left allmulticast mode
[  247.163440][   T11] bridge_slave_0: left promiscuous mode
[  247.170467][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.184096][    T9] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[  247.223302][   T11] veth1_macvtap: left promiscuous mode
[  247.230377][   T11] veth0_macvtap: left promiscuous mode
[  247.240774][    T9] usb 4-1: USB disconnect, device number 15
[  247.247696][   T11] veth1_vlan: left promiscuous mode
[  247.257400][   T11] veth0_vlan: left promiscuous mode
[  247.694940][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.851110][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  247.895052][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  247.906860][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  247.918515][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  247.942534][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  247.953823][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  248.097292][ T8963] loop0: detected capacity change from 0 to 32768
[  248.318270][ T5090] Bluetooth: hci1: command tx timeout
[  248.718497][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.997137][   T11] team0 (unregistering): Port device team_slave_1 removed
[  249.087193][   T11] team0 (unregistering): Port device team_slave_0 removed
[  249.128933][ T5822] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  249.129122][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.181154][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.260291][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.343158][ T5822] usb 1-1: Using ep0 maxpacket: 16
[  249.360914][ T5822] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  249.373897][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.413116][ T5822] usb 1-1: Product: syz
[  249.424191][ T5822] usb 1-1: Manufacturer: syz
[  249.432095][ T5822] usb 1-1: SerialNumber: syz
[  249.458012][ T5822] usb 1-1: config 0 descriptor??
[  249.478224][ T5822] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  249.692065][ T5822] usb 1-1: USB disconnect, device number 10
[  249.764825][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.786536][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.809585][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.822028][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.029502][   T11] bond0 (unregistering): Released all slaves
[  250.083203][ T5090] Bluetooth: hci2: command tx timeout
[  250.182233][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.190216][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.198137][ T8889] bridge_slave_0: entered allmulticast mode
[  250.212307][ T8889] bridge_slave_0: entered promiscuous mode
[  250.237502][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.295203][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.325285][ T8889] bridge_slave_1: entered allmulticast mode
[  250.333817][ T8889] bridge_slave_1: entered promiscuous mode
[  250.394607][ T5090] Bluetooth: hci1: command tx timeout
[  250.419739][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'.
[  250.516099][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.539475][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'.
[  250.585069][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.780268][ T8889] team0: Port device team_slave_0 added
[  250.845190][ T8889] team0: Port device team_slave_1 added
[  250.882121][  T968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.980939][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.016212][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.077946][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.129498][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.137540][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.172057][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.433733][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.537282][ T8889] hsr_slave_0: entered promiscuous mode
[  251.562057][ T8889] hsr_slave_1: entered promiscuous mode
[  251.640699][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.675992][ T8964] chnl_net:caif_netlink_parms(): no params data found
[  251.757803][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.878896][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.124095][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.138987][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.148896][ T8964] bridge_slave_0: entered allmulticast mode
[  252.157015][ T5090] Bluetooth: hci2: command tx timeout
[  252.176777][ T8964] bridge_slave_0: entered promiscuous mode
[  252.224067][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.252079][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.269013][ T8964] bridge_slave_1: entered allmulticast mode
[  252.280872][ T8964] bridge_slave_1: entered promiscuous mode
[  252.304471][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  252.412899][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.430484][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.454626][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  252.484844][ T5090] Bluetooth: hci1: command tx timeout
[  252.567782][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.607356][ T8964] team0: Port device team_slave_0 added
[  252.618333][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.658363][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  252.698664][ T8964] team0: Port device team_slave_1 added
[  252.707327][   T23] usb 1-1: Using ep0 maxpacket: 16
[  252.712929][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  252.726937][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.746683][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.752333][   T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.783513][    T9] usb 4-1: config 0 descriptor??
[  252.811369][   T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  252.826052][   T23] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  252.851910][   T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  252.871658][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  252.883015][   T23] usb 1-1: SerialNumber: syz
[  252.904009][   T23] hub 1-1:1.0: bad descriptor, ignoring hub
[  252.921998][   T23] hub: probe of 1-1:1.0 failed with error -5
[  252.932154][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.942625][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.945139][   T23] cdc_ether: probe of 1-1:1.0 failed with error -22
[  252.973157][ T8964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.057872][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.080935][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.121290][ T8964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.219418][    T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  253.242795][    T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  253.337148][ T9014] raw-gadget.1 gadget.0: fail, usb_ep_set_wedge returned -11
[  253.375589][ T8889] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  253.401970][ T8964] hsr_slave_0: entered promiscuous mode
[  253.416951][ T8964] hsr_slave_1: entered promiscuous mode
[  253.424116][ T8964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.432534][ T8964] Cannot create hsr debugfs directory
[  253.439842][ T8889] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  253.464731][    T9] usb 1-1: USB disconnect, device number 11
[  253.537676][ T8889] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  253.550006][ T8889] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  253.967643][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.098126][ T8889] 8021q: adding VLAN 0 to HW filter on device team0
[  254.215679][ T3489] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.225148][ T3489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.234820][ T5090] Bluetooth: hci2: command tx timeout
[  254.343048][ T3489] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.352067][ T3489] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.490972][ T8964] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  254.555462][ T8964] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  254.583824][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.595638][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.609390][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.620913][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.631100][   T11] bridge_slave_1: left allmulticast mode
[  254.638238][   T11] bridge_slave_1: left promiscuous mode
[  254.644338][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.654047][   T11] bridge_slave_0: left allmulticast mode
[  254.661185][   T11] bridge_slave_0: left promiscuous mode
[  254.667573][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.693015][   T11] veth1_macvtap: left promiscuous mode
[  254.699642][   T11] veth0_macvtap: left promiscuous mode
[  254.707936][   T11] veth1_vlan: left promiscuous mode
[  254.713442][   T11] veth0_vlan: left promiscuous mode
[  255.125220][ T9055] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  255.154104][ T9057] loop0: detected capacity change from 0 to 128
[  255.209397][ T9057] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  255.266360][ T9057] hpfs: filesystem error: improperly stopped
[  255.272974][ T9057] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  255.318140][ T9057] hpfs: You really don't want any checks? You are crazy...
[  255.333766][ T9057] hpfs: hpfs_map_sector(): read error
[  255.347505][  T788] usb 4-1: USB disconnect, device number 16
[  255.364641][ T9057] hpfs: code page support is disabled
[  255.401875][ T9057] hpfs: hpfs_map_4sectors(): unaligned read
[  255.417259][ T9057] hpfs: hpfs_map_4sectors(): unaligned read
[  255.429603][ T9057] hpfs: filesystem error: unable to find root dir
[  256.026842][   T11] team0 (unregistering): Port device team_slave_1 removed
[  256.122957][   T11] team0 (unregistering): Port device team_slave_0 removed
[  256.198121][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.280561][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.322562][ T5090] Bluetooth: hci2: command tx timeout
[  256.405467][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  256.413817][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  256.939731][   T11] bond0 (unregistering): Released all slaves
[  257.099251][ T8964] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  257.110447][ T8964] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  257.479045][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.559431][ T8964] 8021q: adding VLAN 0 to HW filter on device team0
[  257.563421][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.919'.
[  257.585499][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  257.611196][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.618573][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.713738][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.722504][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.816533][    T9] usb 4-1: Using ep0 maxpacket: 8
[  257.823763][   T11] IPVS: stop unused estimator thread 0...
[  257.844990][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  257.877390][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  257.897281][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'.
[  257.911139][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  257.960385][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.981752][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.992793][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  258.055565][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.078760][ T8964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  258.099484][ T9083] netlink: 'syz.0.921': attribute type 28 has an invalid length.
[  258.324474][    T9] usb 4-1: usb_control_msg returned -32
[  258.333409][    T9] usbtmc 4-1:16.0: can't read capabilities
[  258.555244][   T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  258.617349][ T8964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.702613][ T9103] usbtmc 4-1:16.0: usb_control_msg returned -32
[  258.728737][ T8889] veth0_vlan: entered promiscuous mode
[  258.746167][    T9] usb 4-1: USB disconnect, device number 17
[  258.791101][ T8889] veth1_vlan: entered promiscuous mode
[  258.815609][   T27] usb 1-1: Using ep0 maxpacket: 16
[  258.835901][   T27] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  258.853620][   T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.871919][   T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  258.884215][ T8889] veth0_macvtap: entered promiscuous mode
[  258.898269][ T8889] veth1_macvtap: entered promiscuous mode
[  258.908185][   T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  258.932096][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.957470][   T27] usb 1-1: Product: syz
[  258.959439][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.962525][   T27] usb 1-1: Manufacturer: syz
[  258.994412][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.004342][   T27] usb 1-1: SerialNumber: syz
[  259.023453][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.057489][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.085949][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.150158][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.171414][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.182105][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.198287][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.212246][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.300865][ T8889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.328315][ T8889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.360240][ T8889] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.381913][ T8889] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.485452][   T27] usb 1-1: 0:2 : does not exist
[  259.711775][ T8964] veth0_vlan: entered promiscuous mode
[  259.761944][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.800540][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.892637][ T8964] veth1_vlan: entered promiscuous mode
[  259.939670][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.964422][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.037370][ T8964] veth0_macvtap: entered promiscuous mode
[  260.069975][ T8964] veth1_macvtap: entered promiscuous mode
[  260.146938][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.164440][   T27] usb 1-1: USB disconnect, device number 12
[  260.183798][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.212392][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.218442][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.265361][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.290151][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.303091][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.322328][ T9133] netlink: 'syz.5.877': attribute type 1 has an invalid length.
[  260.336028][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.361753][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.395475][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.409140][ T9135] Invalid argument reading file caps for ./file0
[  260.432090][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.465626][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.481136][ T8964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.513648][ T8964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.536194][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.593410][ T8964] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.628754][ T8964] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.644621][   T28] kauditd_printk_skb: 13 callbacks suppressed
[  260.644639][   T28] audit: type=1326 audit(2000000102.639:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.5.927" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cf979c819 code=0x0
[  260.701595][ T8964] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.742435][ T8964] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.803369][ T9139] loop3: detected capacity change from 0 to 32768
[  260.815800][ T9139] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.928 (9139)
[  260.841605][ T9139] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.853164][ T9139] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  260.862732][ T9139] BTRFS info (device loop3): using free space tree
[  260.913516][ T9139] BTRFS info (device loop3): enabling ssd optimizations
[  260.923566][ T9139] BTRFS info (device loop3): auto enabling async discard
[  260.939287][ T9159] loop0: detected capacity change from 0 to 256
[  260.985032][   T28] audit: type=1800 audit(2000000102.999:86): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.928" name="file1" dev="loop3" ino=260 res=0 errno=0
[  261.105844][ T9159] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  261.236406][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.281680][ T5775] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.288148][   T28] audit: type=1800 audit(2000000103.299:87): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.929" name="file1" dev="loop0" ino=1048633 res=0 errno=0
[  261.316364][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.462143][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.485834][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.837020][ T9173] loop0: detected capacity change from 0 to 1024
[  261.935653][ T9173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.245593][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.295723][ T9183] syzkaller1: entered promiscuous mode
[  262.301615][ T9183] syzkaller1: entered allmulticast mode
[  262.920963][ T9199] loop3: detected capacity change from 0 to 512
[  262.967225][ T9167] loop5: detected capacity change from 0 to 40427
[  262.988517][ T9199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.031939][ T9167] F2FS-fs (loop5): Image doesn't support compression
[  263.072843][ T9199] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.078160][ T9204] netlink: 'syz.6.940': attribute type 12 has an invalid length.
[  263.098676][ T9167] F2FS-fs (loop5): invalid crc value
[  263.134403][ T9167] F2FS-fs (loop5): Found nat_bits in checkpoint
[  263.162575][ T9204] netlink: 'syz.6.940': attribute type 29 has an invalid length.
[  263.194420][ T9204] netlink: 148 bytes leftover after parsing attributes in process `syz.6.940'.
[  263.262549][ T9204] netlink: 'syz.6.940': attribute type 1 has an invalid length.
[  263.294889][ T9167] F2FS-fs (loop5): Start checkpoint disabled!
[  263.340610][ T9167] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  263.362696][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.455413][   T28] audit: type=1800 audit(2000000105.479:88): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.931" name="bus" dev="loop5" ino=10 res=0 errno=0
[  263.478828][   T28] audit: type=1804 audit(2000000105.489:89): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.931" name="/newroot/2/bus/bus" dev="loop5" ino=10 res=1 errno=0
[  263.501913][   T28] audit: type=1800 audit(2000000105.509:90): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.931" name="bus" dev="loop5" ino=10 res=0 errno=0
[  263.973117][ T9226] loop6: detected capacity change from 0 to 4096
[  264.071445][ T9226] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  264.130753][ T3469] kworker/u4:12: attempt to access beyond end of device
[  264.130753][ T3469] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  264.226300][ T3469] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  264.282766][ T3469] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  264.929436][ T9226] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  265.010775][ T9231] loop3: detected capacity change from 0 to 131072
[  265.020248][ T9231] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  265.028979][ T9231] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  265.040424][ T9231] F2FS-fs (loop3): invalid crc value
[  265.052019][ T9231] F2FS-fs (loop3): Found nat_bits in checkpoint
[  265.103914][ T9231] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  265.111421][ T9231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  265.249343][ T9226] ntfs3: loop6: ino=1e, "file1" failed to parse mft record
[  265.288353][ T9226] ntfs3: loop6: ino=1e, "file1" attr_set_size
[  265.361284][ T9228] loop0: detected capacity change from 0 to 32768
[  265.388746][ T9228] XFS: attr2 mount option is deprecated.
[  265.542552][ T9228] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  265.766538][ T9228] XFS (loop0): Ending clean mount
[  265.826145][ T9228] XFS (loop0): Quotacheck needed: Please wait.
[  266.069000][ T9228] XFS (loop0): Quotacheck: Done.
[  266.242390][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  267.059579][ T5770] udevd[5770]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system
[  267.223531][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system
[  267.387656][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system
[  267.611542][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system
[  267.719868][ T9317] syzkaller1: entered promiscuous mode
[  267.738101][ T9317] syzkaller1: entered allmulticast mode
[  267.962601][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system
[  268.080668][ T9328] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  268.096924][ T5822] IPVS: starting estimator thread 0...
[  268.167535][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system
[  268.204491][ T9333] IPVS: using max 20 ests per chain, 48000 per kthread
[  268.224500][   T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  268.298534][ T9340] netlink: 'syz.5.976': attribute type 4 has an invalid length.
[  268.306714][ T9340] netlink: 32 bytes leftover after parsing attributes in process `syz.5.976'.
[  268.336900][ T9337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.974'.
[  268.438057][   T27] usb 7-1: Using ep0 maxpacket: 32
[  268.484822][   T27] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  268.493437][   T27] usb 7-1: config 0 has no interface number 0
[  268.526036][ T5768] udevd[5768]: symlink '../../loop3' '/dev/disk/by-diskseq/466.tmp-b7:3' failed: Read-only file system
[  268.549639][   T27] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  268.564435][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.588211][   T27] usb 7-1: Product: syz
[  268.604448][   T27] usb 7-1: Manufacturer: syz
[  268.621016][   T27] usb 7-1: SerialNumber: syz
[  268.642128][   T27] usb 7-1: config 0 descriptor??
[  268.665196][   T27] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  268.889908][   T27] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  268.933035][   T27] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  268.979889][ T9360] capability: warning: `syz.0.983' uses 32-bit capabilities (legacy support in use)
[  269.295481][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  269.306254][   T27] usb 7-1: USB disconnect, device number 2
[  269.337329][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  269.382971][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  269.440673][   T27] quatech2 7-1:0.51: device disconnected
[  269.563641][ T9348] loop3: detected capacity change from 0 to 32768
[  269.658692][ T9348] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.826293][ T9348] XFS (loop3): Ending clean mount
[  269.909231][ T9348] XFS (loop3): Quotacheck needed: Please wait.
[  269.911808][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/468.tmp-b7:3' failed: Read-only file system
[  269.943741][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  270.006179][ T9399] netlink: 7 bytes leftover after parsing attributes in process `syz.0.990'.
[  270.059957][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.990'.
[  270.078525][ T9348] XFS (loop3): Quotacheck: Done.
[  270.084601][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.990'.
[  270.142505][ T9348] XFS (loop3): User initiated shutdown received.
[  270.143168][   T28] audit: type=1800 audit(2000000112.159:91): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.979" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  270.180874][ T9348] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  270.218178][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/468.tmp-b7:3' failed: Read-only file system
[  270.294224][ T9348] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  270.399393][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  270.620664][ T9396] loop6: detected capacity change from 0 to 32768
[  270.722397][ T9396] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  270.776694][ T9396] (syz.6.991,9396,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  270.853340][ T9396] (syz.6.991,9396,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  270.983052][ T8964] ocfs2: Unmounting device (7,6) on (node local)
[  272.033733][ T9421] loop3: detected capacity change from 0 to 32768
[  272.123255][ T9421] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.296900][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/472.tmp-b7:3' failed: Read-only file system
[  272.341548][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  272.359816][ T9430] loop0: detected capacity change from 0 to 40427
[  272.390294][ T9430] F2FS-fs (loop0): invalid crc value
[  272.390514][ T9421] XFS (loop3): Ending clean mount
[  272.442669][ T9430] F2FS-fs (loop0): Found nat_bits in checkpoint
[  272.601177][ T6050] udevd[6050]: symlink '../../loop6' '/dev/disk/by-diskseq/471.tmp-b7:6' failed: Read-only file system
[  272.617977][ T5768] udevd[5768]: symlink '../../loop0' '/dev/disk/by-diskseq/473.tmp-b7:0' failed: Read-only file system
[  272.654958][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.730558][ T5768] udevd[5768]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system
[  272.755847][ T9430] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  272.800748][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/472.tmp-b7:3' failed: Read-only file system
[  272.856387][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  272.937270][ T6050] udevd[6050]: symlink '../../loop6' '/dev/disk/by-diskseq/471.tmp-b7:6' failed: Read-only file system
[  273.095272][ T5786] syz-executor: attempt to access beyond end of device
[  273.095272][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  273.099560][ T5768] udevd[5768]: symlink '../../loop0' '/dev/disk/by-diskseq/473.tmp-b7:0' failed: Read-only file system
[  273.174517][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  273.237040][ T5768] udevd[5768]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system
[  273.594568][ T5840] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  273.796535][ T5840] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.819146][ T5840] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  273.861153][ T5840] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.891763][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.919845][ T5840] usb 7-1: Product: syz
[  273.933623][ T5840] usb 7-1: Manufacturer: syz
[  273.962299][ T5840] usb 7-1: SerialNumber: syz
[  274.097802][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1008'.
[  275.037292][ T5840] cdc_ncm 7-1:1.0: bind() failure
[  275.095337][ T5840] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  275.123563][ T5840] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  275.157470][ T5840] usbtest: probe of 7-1:1.1 failed with error -71
[  275.198231][ T5840] usb 7-1: USB disconnect, device number 3
[  277.208387][ T9608] loop3: detected capacity change from 0 to 512
[  277.254083][ T9608] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1042: inode has both inline data and extents flags
[  277.270764][ T9608] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1042: couldn't read orphan inode 15 (err -117)
[  277.286071][ T9608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.308553][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/476.tmp-b7:3' failed: Read-only file system
[  277.378358][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  277.400585][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.493324][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/476.tmp-b7:3' failed: Read-only file system
[  277.528440][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  277.573549][ T5768] udevd[5768]: symlink '../../loop0' '/dev/disk/by-diskseq/475.tmp-b7:0' failed: Read-only file system
[  277.590948][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/476.tmp-b7:3' failed: Read-only file system
[  277.621028][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/476.tmp-b7:3' failed: Read-only file system
[  277.772292][ T6051] udevd[6051]: symlink '../../loop0' '/dev/disk/by-diskseq/475.tmp-b7:0' failed: Read-only file system
[  277.837507][ T6051] udevd[6051]: symlink '../../loop3' '/dev/disk/by-diskseq/477.tmp-b7:3' failed: Read-only file system
[  277.949845][ T6051] udevd[6051]: symlink '../../loop0' '/dev/disk/by-diskseq/475.tmp-b7:0' failed: Read-only file system
[  278.134574][ T5822] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  278.219768][ T9650] loop0: detected capacity change from 0 to 64
[  278.305582][ T3469] ------------[ cut here ]------------
[  278.312174][ T3469] kernel BUG at fs/hfs/inode.c:449!
[  278.334736][ T3469] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  278.341140][ T3469] CPU: 0 PID: 3469 Comm: kworker/u4:12 Not tainted syzkaller #0
[  278.349239][ T3469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  278.359597][ T3469] Workqueue: writeback wb_workfn (flush-7:0)
[  278.366138][ T3469] RIP: 0010:hfs_write_inode+0x87a/0x880
[  278.372793][ T3469] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49
[  278.395015][ T3469] RSP: 0018:ffffc9000d097340 EFLAGS: 00010293
[  278.401334][ T3469] RAX: ffffffff825b5f5a RBX: ffff88807820c2a8 RCX: ffff88802e8f3c00
[  278.410788][ T3469] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000
[  278.419551][ T3469] RBP: ffffc9000d0974d0 R08: ffff88802e8f3c00 R09: 0000000000000003
[  278.427784][ T3469] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  278.436114][ T3469] R13: 1ffff92001a12e6c R14: ffff88807820c258 R15: 0000000000000000
[  278.444688][ T3469] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  278.453800][ T3469] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  278.461010][ T3469] CR2: 0000200000002000 CR3: 000000002fc99000 CR4: 00000000003506f0
[  278.469682][ T3469] Call Trace:
[  278.473166][ T3469]  <TASK>
[  278.476307][ T3469]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  278.482069][ T3469]  ? __rwlock_init+0x150/0x150
[  278.487199][ T3469]  __writeback_single_inode+0x705/0xec0
[  278.493039][ T3469]  writeback_sb_inodes+0x7cd/0xf50
[  278.498256][ T3469]  ? queue_io+0x550/0x550
[  278.502937][ T3469]  ? rcu_is_watching+0x15/0xb0
[  278.508061][ T3469]  wb_writeback+0x46a/0xbf0
[  278.512723][ T3469]  ? queue_io+0x351/0x550
[  278.517497][ T3469]  ? percpu_ref_tryget+0x250/0x250
[  278.522985][ T3469]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  278.529341][ T3469]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.534980][ T3469]  wb_workfn+0x400/0xe60
[  278.539675][ T3469]  ? try_to_wake_up+0x70a/0x1190
[  278.545263][ T3469]  ? inode_wait_for_writeback+0x230/0x230
[  278.552537][ T3469]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  278.559489][ T3469]  ? read_lock_is_recursive+0x20/0x20
[  278.565303][ T3469]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.570971][ T3469]  ? process_scheduled_works+0x96f/0x15d0
[  278.577329][ T3469]  ? process_scheduled_works+0x96f/0x15d0
[  278.583262][ T3469]  process_scheduled_works+0xa5d/0x15d0
[  278.589084][ T3469]  ? worker_attach_to_pool+0x380/0x380
[  278.594815][ T3469]  ? assign_work+0x3d2/0x5d0
[  278.599772][ T3469]  worker_thread+0xa55/0xfc0
[  278.604725][ T3469]  kthread+0x2fa/0x390
[  278.609222][ T3469]  ? pr_cont_work+0x560/0x560
[  278.614484][ T3469]  ? kthread_blkcg+0xd0/0xd0
[  278.619104][ T3469]  ret_from_fork+0x48/0x80
[  278.623845][ T3469]  ? kthread_blkcg+0xd0/0xd0
[  278.628722][ T3469]  ret_from_fork_asm+0x11/0x20
[  278.633841][ T3469]  </TASK>
[  278.636936][ T3469] Modules linked in:
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  278.652734][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.685311][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.705159][ T3469] ---[ end trace 0000000000000000 ]---
[  278.736229][ T3469] RIP: 0010:hfs_write_inode+0x87a/0x880
[  278.742645][ T3469] Code: c7 c1 00 f3 30 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 f3 30 97 e8 20 fa 83 ff e9 62 fe ff ff e8 a6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49
[  278.744384][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  278.773566][ T3469] RSP: 0018:ffffc9000d097340 EFLAGS: 00010293
[  278.788798][ T5822] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  278.830333][ T3469] 
[  278.832881][ T3469] RAX: ffffffff825b5f5a RBX: ffff88807820c2a8 RCX: ffff88802e8f3c00
[  278.841843][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.865332][ T3469] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000
[  278.887251][ T5822] usb 4-1: config 0 descriptor??
[  278.915525][ T3469] RBP: ffffc9000d0974d0 R08: ffff88802e8f3c00 R09: 0000000000000003
[  278.923882][ T3469] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  278.974633][ T3469] R13: 1ffff92001a12e6c R14: ffff88807820c258 R15: 0000000000000000
[  278.983609][ T3469] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  278.993751][ T3469] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  279.001619][ T3469] CR2: 0000561c34319f70 CR3: 0000000030bb5000 CR4: 00000000003506e0
[  279.011205][ T3469] Kernel panic - not syncing: Fatal exception
[  279.018784][ T3469] Kernel Offset: disabled
[  279.023709][ T3469] Rebooting in 86400 seconds..