last executing test programs:

5m1.370717144s ago: executing program 0 (id=1):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

5m0.012992892s ago: executing program 0 (id=6):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

4m58.57808145s ago: executing program 0 (id=7):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r0 = gettid()
tkill(r0, 0x1b)

4m56.400229171s ago: executing program 32 (id=7):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r0 = gettid()
tkill(r0, 0x1b)

3m42.325785452s ago: executing program 2 (id=385):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x22)
close(r0)

3m41.824010521s ago: executing program 2 (id=389):
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000300)={[{@eas_no}, {@umask={'umask', 0x3d, 0xffff}}, {@case_asis}, {@check_none}]}, 0x1, 0x9e15, &(0x7f000000a040)="$eJwUk1Mc34UDRZe37JZtnmzbtm375H5fG8u23VbLtm3XsrH4//wf7ut9OPfcOwc4coCjBnjXAO8e4OgB3jPAewd43wDvH+ADA3xwgA8N8OEBPjLARwf42AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+AbA3xzgG8N8O0BvjPAdwf43gDfH+AHA/xwgB8N8OMBfjLATwf42QA/H+AXAxwzwC8H+NUAvx7gNwP8doDfDfD7Af4wwB8H+NMAfx7gLwP8dYC/DfD3Af4xwLED/HOAfw3w7wH+M8B/B/jfAIcEOE6A4wY4XoDjBzhBgBMGOFGAQwMcFuDEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4PAAZwxwpgBnDnCWAGcNcLYAZw9wjgDnDHCuAOcOcJ4A5w1wvgDnD3CBABcMcKEAFw5wkQAXDXCxABcPcIkACXDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVAFcLcPUA1whwzQDXCnDtANcJcN0A1wtw/QA3CHDDADcKcOMANwlw0wA3C3DzALcIcMsAtwpw6wC3CXDbALcLcPsAdwhwxwB3CnDnAHcJcNcAdwtw9wD3CHDPAPcKcO8A9wlw3wD3C3D/AA8I8MAADwrw4AAPCfDQAA8L8PAAjwjwyACPCvDoAI8J8NgAjwvw+ABPCPDEAA3wpABPDvCUAE8N8LQATw/wjADPDHAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/giADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAEcGOCrAuwK8O8DRAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHgmAC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8Axwb4Z4B/Bfh3gP8E+G+A/wU4JMRxQhw3xPFCHD/ECUKcMMSJQhwa4rAQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhCHhzhjiDOFOHOIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIuEuGiIi4W4eIhLhEiIS4a4VIhLh7hMiMuGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIjHhnhciMeHeEKIJ4ZoiCeFeHKIp4R4aoinhXh6iGeEeGaIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EEeEeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Y4MsRRId4V4t0hjg7xnhDvDfG+EO8P8YEQHwzxoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEMeE+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hDg2xD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThTh0AiHRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEODzCGSOcKcKZI5wlwlkjnC3C2SOcI8I5I5wrwrkjnCfCeSOcL8L5I1wgwgUjXCjChSNcJMJFI1wswsUjXCJCIlwywqUiXDrCZSJcNsLlIlw+whUiXDHClSJcOcJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDbC4yI8PsITIjwxQiM8KcKTIzwlwlMjPC3C0yM8I8IzIxxEGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4IsKzIjw7wnMiPDfC8yI8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwpERjorwrgjvjnB0hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0Q4JsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCsRH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGIfGOCzGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcbhMc4Y40wxzhzjLDHOGuNsMc4e4xwxzhnjXDHOHeM8Mc4b43wxzh/jAjEuGONCMS4c4yIxLhrjYjEuHuMSMRLjkjEuFePSMS4T47IxLhfj8jGuEOOKMa4U48oxrhLjqjGuFuPqMa4R45oxrhXj2jGuE+O6Ma4X4/oxbhDjhjFuFOPGMW4S46Yxbhbj5jFuEeOWMW4V49YxbhPjtjFuN/6QIf/nu0OMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxmiMJ8V4coynxHhqjKfFeHqMZ8R4ZoyDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsYR8R4Voxnx3hOjOfGeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMV8d4TYzXxnhdjNfHeEOMN8Z4U4w3x3hLjLfGeFuMt8d4R4x3xjgyxlEx3hXj3TGOjvGeGO+N8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYx8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/EODbGP2P8K8a/Y/wnxn9j/C/GIQmOk+C4CY6X4PgJTpDghAlOlODQBIclOHGCkyQ4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4PMEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIkESXDLBpRJcOsFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDFBEzwpwZMTPCXBUxM8LcHTEzwjwTMTHCQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJzgiwbMSPDvBcxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSvDPBkQmOSvCuBO9OcHSC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJDgmwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8GxCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUx01xvBTHT3GCFCdMcaIUh6Y4LMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxeEpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpkuKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZriSSmenOIpKZ6a4mkpnp7iGSmemeIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FESmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeKdKY5McVSKd6V4d4qjU7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JiV5NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1L8NMXPUvw8xS9SHJPilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4tgU/0zxrxT/TvGfFP9N8b8Uh2Q4TobjZjhehuNnOEGGE2Y4UYZDMxyW4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDh8AxnzHCmDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIEMF8xwoQwXznCRDBfNcLEMF89wiQzJcMkMl8pw6QyXyXDZDJfLcPkMV8hwxQxXynDlDFfJcNUMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/McJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+GIDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4MR2Y4KsO7Mrw7w9EZ3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGT6W4eMZPpHhkxk+leHTGT6T4bMZPpfh8xm+kOGLGb6U4csZvpLhqxm+luHrGb6R4ZsZvpXh2xm+k+G7Gb6X4fsZfpDhhxl+lOHHGX6S4acZfpbh5xl+keGYDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwzHZvhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx4lyHJrjsBwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHIfnOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOaw4dMuT/LNbOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8Zgcj83xuByPz/GEHE/M0RxPyvHkHE/J8dQcT8vx9BzPyPHMHAc5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jmOyPGsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GO/+81ZsTYkTmO+r/LQ4YM+X9G5zhkyJAh9+Z4X4735/hAjg/+3/0hQ4Y8nOMjOT6a42M5Pp7jEzk+meNTOT6d4zM5Ppvjczk+n+MLOb6Y40s5vpzjKzm+muNrOb6e4xs5vpnjWzm+neM7Ob6b43s5vp/jBzl+mONHOX6c4yc5fprjZzl+nuMXOY7J8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yHFsjn/m+FeOf+f4T47/5vjf/5kUOE6B4xY4XoHjFzhBgRMWOFGBQwscVuDEBU5S4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4PACZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy5wkQIXLXCxAhcvcIkCKXDJApcqcOkCNxjejF22wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Clz//30FbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnligBZ5U4MkFnlLgqQWeVuDpBZ5R4JkFDgoMCgwLjAqMC0wKTAvMCswLLAosC6wKrAtsCmwL7ArsCxxR4FkFnl3gOQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngyAJHFXhXgXcXOLrAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvChxT4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeDYAv8s8K8C/y7wnwL/LfC/AoeUOE6J45Y4XonjlzhBiROWOFGJQ0scVuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4vASZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSKXHJEpcqcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEi3xpBJPLvGUEk8t8bQSTy/xjBLPLHFQYlBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl/iiBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEkeWOKrEu0q8u8TRJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHimBK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8Sx5b4Z4l/lfh3if+U+G+J/5U4pMJxKhy3wvEqHL/CCSqcsMKJKhxa4bAKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgqHVzhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVEiFS1a4VIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1ZohSdVeHKFp1R4aoWnVXh6hWdUeGaFgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7CkdUeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Y4ssJRFd5V4d0Vjq7wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCsdU+GWFX1X4dYXfVPhthd9V+H2FP1T4Y4U/Vfhzhb9U+GuFv1X4e4V/VDi2wj8r/KvCvyv8p8J/K/yvwiE1jlPjuDWOV+P4NU5Q44Q1TlTj0BqH1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOLzGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKJGalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxRms8qcaTazylxlNrPK3G02s8o8YzaxzUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4osazajy7xnNqPLfG82o8v8YLarywxotqvLjGS2q8tMbLary8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxpE1jqrxrhrvrnF0jffUeG+N99V4f40P1PhgjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9Q4psYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGsTX+WeNfNf5d4z81/lvjfzUOaXCcBsdtcLwGx29wggYnbHCiBoc2OKzBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocHhDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDdLgkg0u1eDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ3a4EkNntzgKQ2e2uBpDZ7e4BkNntngoMGgwbDBqMG4waTBtMGswbzBosGywarBusGmwbbBrsG+wRENntXg2Q2e0+C5DZ7X4PkNXtDghQ1e1ODFDV7S4KUNXtbg5Q1e0eCVDV7V4NUNXtPgtQ1e1+D1Dd7Q4I0N3tTgzQ3e0uCtDd7W4O0N3tHgnQ2ObHBUg3c1eHeDoxu8p8F7G7yvwfsbfKDBBxt8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwTENftngVw1+3eA3DX7b4HcNft/gDw3+2OBPDf7c4C8N/trgbw3+3uAfDY5t8M8G/2rw7wb/afDfBv9rcEiL47Q4bovjtTh+ixO0OGGLE7U4tMVhLU7c4iQtTtriZC1O3uIULU7Z4lQtTt3iNC1O2+J0LU7f4gwtDm9xxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2iRFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s0RZPavHkFk9p8dQWT2vx9BbPaPHMFgctBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i2OaPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9scWSLo1q8q8W7Wxzd4j0t3tvifS3e3+IDLT7Y4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtw/7/mxdafLHFl1p8ucVXWny1xddafL3FN1p8s8W3Wny7xXdafLfF91p8v8UPWvywxY9a/LjFT1r8tMXPWvy8xS9aHNPily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4tgW/2zxrxb/bvGfFv9t8b8Wh3Q4Tofjdjheh+N3OEGHE3Y4UYdDOxzW4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDh8A5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7nCRDhftcLEOF+9wiQ7pcMkOl+pw6Q6X6XDZDpfrcPmOYUOGDHHFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8w636HDLDrfqcOsOt+lw2w6363D7DnfocMcOd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOj+rw6A6P6fDYDo/r8PgOT+jwxA7t8KQOT+7wlA5P7fC0Dk/v8IwOz+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4YgOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg5Hdjiqw7s6vLvD0R3e0+G9Hd7X4f0dPtDhgx0+1OHDHT7S4aMdPtbh4x0+0eGTHT7V4dMdPtPhsx0+1+HzHb7Q4YsdvtThyx2+0uGrHb7W4esdvtHhmx2+1eHbHb7T4bsdvtfh+x1+0OGHHX7U4ccdftLhpx1+1uHnHX7R4ZgOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDsd2+GeHf3X4d4f/dPhvh/91OKTHcXoct8fxehy/xwl6nLDHiXoc2uOwHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeh/c4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiPS/RIj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9v2uF2P2/e4Q4879rhTjzv3uEuPu/a4W4+797hHj3v2uFePe/e4T4/79rhfj/v3eECPB/Z4UI8H93hIj4f2eFiPh/d4RI9H9nhUj0f3eEyPx/Z4XI/H93hCjyf2aI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x5H9HhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY+X9nhZj5f3eEWPV/Z4VY9X93hNj9f2eF2P1/d4Q4839nhTjzf3eEuPt/Z4W4+393hHj3f2OLLHUT3e1ePdPY7u8Z6e/7FID0x4HgwCRVO3qW3bvbVt27btWyO138dGbSupbdu2He3szPcXzhyHD3DEAB8a4MMDfGSAjw7wsQE+PsAnBvjkAJ8a4NMDfGaAzw7wuQE+P8AXBvjiAF8a4MsDfGWArw7wtQG+PsA3BvjmAN8a4NsDfGeA7w7wvQG+P8APBvjhAD8a4McD/GSAnw7wswF+PsAvBvjlAL8a4NcD/GaA3w7wuwF+P8AfBvjjAH8a4M8D/GWAvw7wtwH+PsA/BvjnAP8a4N8D/GeA/w7wvwGOHOCoAY4e4JgBjh3gkADHCXDcAMcLcPwAJwhwwgAnCnDiACcJcGiAkwY4WYCTBzhFgFMGOFWAUwc4TYDTBjhdgNMHOEOAMwY4U4AzBzhLgLMGOFuAswc4R4BzBjhXgHMHOE+A8wY4X4DzB7hAgAsGuFCACwe4SICLBrhYgIsHuESASwa4VIAEuHSAywS4bIDLBbh8gCsEuGKAKwW4coCrBLhqgKsFuHqAawS4ZoBrBbh2gOsEuG6A6wW4foAbBLhhgBsFuHGAmwS4aYCbBbh5gFsEuGWAWwW4dYDbBLhtgNsFuH2AOwS4Y4A7BbhzgLsEuGuAuwW4e4B7BLhngHsFuHeA+wS4b4D7Bbh/gAcEeGCABwV4cICHBHhogIcFeHiARwR4ZIBHBXh0gMcEeGyAxwV4fIAnBHhigCcFeHKABnhKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wY4LMDzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrAhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4dYDXBHhtgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCAwwMcEeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AY4McFSAowMcE+DYAIeEOE6I44Y4XojjhzhBiBOGOFGIE4c4SYhDQ5w0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyxKVCJMSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KcSTQzTEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xGEhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXiIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xKtDvCbEa0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQxwe4ogQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxZIijQhwd4pgQx4Y4JMJxIhw3wvEiHD/CCSKcMMKJIpw4wkkiHBrhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhHhkhEuFSERLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4Y4UkRnhyhEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhuREOi/C8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hFeHeE1EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjh8AhHRPhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhCMjHBXh6AjHRDg2wiExjhPjuDGOF+P4MU4Q44QxThTjxDFOEuPQGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGJeMcakYiXHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPifHYGI+L8fgYT4jxxBhPivHkGI3xlBhPjfG0GE+P8YwYz4zxrBjPjvGcGM+NcViM58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8U4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8eoYr4nx2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGIfHOCLGh2J8OMZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfG/2IcGeOoGEfHOCbGsTEOSXCcBMdNcLwEx09wggQnTHCiBCdOcJIEhyY4aYKTJTh5glMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyS4ZIJLJUiCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmuFqCqye4RoJrJrhWgmsnuE6C6ya4XoLrJ7hBghsmuFGCGye4SYKbJrhZgpsnuEWCWya4VYJbJ7hNgtsmuF2C2ye4Q4I7JrhTgjsnuEuCuya4W4K7J7hHgnsmuFeCeye4T4L7JrhfgvsneECCByZ4UIIHJ3hIgocmeFiChyd4RIJHJnhUgkcneEyCxyZ4XILHJ3hCgicmeFKCJydogqckeGqCpyV4eoJnJHhmgmcleHaC5yR4boLDEjwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJXJ3hNgtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyY4PMERCT6U4MMJPpLgowk+luDjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwn+luDvCf6R4J8J/pXg3wn+k+C/Cf6X4MgERyU4OsExCY5NcEiK46Q4borjpTh+ihOkOGGKE6U4cYqTpDg0xUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5RVM8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTHJbieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvDrFa1K8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxeEpjkjxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/03xvxRHpjgqxdEpjklxbIpDMhwnw3EzHC/D8TOcIMMJM5wow4kznCTDoRlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOH7GS6a4WIZLp7hEhkumeFSGZLh0hkuk+GyGS6X4fIZrpDhihmulOHKGa6S4aoZrpbh6hmukeGaGa6V4doZrpPhuhmul+H6GW6Q4YYZbpThxhlukuGmGW6W4eYZbpHhlhluleHWGW6T4bYZbpfh9hnukOGOGe6U4c4Z7pLhrhnuluHuGe6R4Z4Z7pXh3hnuk+G+Ge6X4f4ZHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+GwDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/KcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+HVGV6T4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxkOz3BEhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobv/e/wBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxmOzHBUhqMzHJPh2AyH5DhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOQ3OcNMfJcpw8xylynDLHqXKcOsdpcpw2x+lynD7HGXKcMceZcpw5x1lynDXH2XKcPcc5cpwzx7lynDvHeXKcN8f5cpw/xwVyXDDHhXJcOMdFclw0x8VyXDzHJXJcMselciTHpXNcJsdlc1wux+VzXCHHFXNcKceVc1wlx1VzXC3H1XNcI8c1c1wrx7VzXCfHdXNcL8f1c9wgxw1z3CjHjXPcJMdNc9wsx81z3CLHLXPcKsetc9wmx21z3C7H7XPcIccdc9wpx51z3CXHXXPcLcfdc9wjxz1z3CvHvXPcJ8d9c9wvx/1zPCDHA3M8KMeDczwkx0NzPCzHw3M8Iscjczwqx6NzPCbHY3M8LsfjczwhxxNzPCnHk3M0x1NyPDXH03I8Pcczcjwzx7NyPDvHc3I8N8dhOZ6X4/k5XpDjhTlelOPFOV6S46U5Xpbj5TlekeOVOV6V4yDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3McnuOIHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcWSOo3IcneOYHMfmOKTAcQoct8DxChy/wAkKnLDAiQqcuMBJChxa4KQFTlbg5AVOUeCUBU5V4NQFTlPgtAVOV+D0Bc5Q4IwFzlTgzAXOUuCsBc5W4OwFzlHgnAXOVeDcBc5T4LwFzlfg/AUuUOCCBS5U4MIFLlLgogUuVuDiBS5R4JIFLlUgBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5b4HEFHl/gCQWeWOBJBZ5coAWeUuCpBZ5W4OkFnlHgmQWeVeDZBZ5T4LkFDivwvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQXeWeBdBd5d4D0F3lvgfQXeX+ADBT5Y4PACRxT4UIEPF/hIgY8W+FiBjxf4RIFPFvhUgU8X+EyBzxb4XIHPF/hCgS8W+FKBLxf4SoGvFvhaga8X+EaBbxb4VoFvF/hOge8W+F6B7xf4QYEfFvhRgR8X+EmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4x//7DMW/Cvy7wH8K/LfA/wocWeCoAkcXOKbAsQUOKXGcEsctcbwSxy9xghInLHGiEicucZISh5Y4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJS5S4ZIlLlUiJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5doiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonDSjyvxPNLvKDEC0u8qMSLS7ykxEtLvKzEy0u8osQrS7yqxEGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5Y4vMQRJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/Jf5X4sgSR5U4usQxJY4tcUiF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDi0wkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrnK/C+StcoMIFK1yowoUrXKTCRStcrMLFK1yiwiUrXKpCKly6wmUqXLbC5SpcvsIVKlyxwpUqXLnCVSpctcLVKly9wjUqXLPCtSpcu8J1Kly3wvUqXL/CDSrcsMKNKty4wk0q3LTCzSrcvMItKtyywq0q3LrCbSrctsLtKty+wh0q3LHCnSrcucJdKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyo8scKTKjy5Qis8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrHFbheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwuEVjqjwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K/63wvwpHVjiqwtEVjqlwbIVDahynxnFrHK/G8WucoMYJa5yoxolrnKTGoTVOWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNVLj0jUuU+OyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTVa4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+OwGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+qcVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+PVNV5T47U1Xlfj9TXeUOONNd5U48013lLjrTXeVuPtNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzUOr3FEjQ/V+HCNj9T4aI2P1fh4jU/U+GSNT9X4dI3P1Phsjc/V+HyNL9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9T4a42/1fh7jX/U+GeNf9X4d43/1Phvjf/VOLLGUTWOrnFMjWNrHNLgOA2O2+B4DY7f4AQNTtjgRA1O3OAkDQ5tcNIGJ2tw8ganaHDKBqdqcOoGp2lw2gana3D6BmdocMYGZ2pw5gZnaXDWBmdrcPYG52hwzgbnanDuBudpcN4G52tw/gYXaHDBBhdqcOEGF2lw0QYXa3DxBpdocMkGl2qQBpducJkGl21wuQaXb3CFBldscKUGV25wlQZXbXC1BldvcI0G12xwrQbXbnCdBtdtcL0G129wgwY3bHCjBjducJMGN21wswY3b3CLBrdscKsGt25wmwa3bXC7BrdvcIcGd2xwpwZ3bnCXBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGj2/whAZPbPCkBk9u0AZPafDUBk9r8PQGz2jwzAbPavDsBs9p8NwGhzV4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGr27wmgavbfC6Bq9v8IYGb2zwpgZvbvCWBm9t8LYGb2/wjgbvbPCuBu9u8J4G723wvgbvb/CBBh9scHiDIxp8qMGHG3ykwUcbfKzBxxt8osEnG3yqwacbfKbBZxt8rsHnG3yhwRcbfKnBlxt8pcFXG3ytwdcbfKPBNxt8q8G3G3ynwXcbfK/B9xv8oMEPG/yowY8b/KTBTxv8rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBfxv8r8GRDY5qcHSDYxoc2+CQFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lxaIuTtjhZi5O3OEWLU7Y4VYtTtzhNi9O2OF2L07c4Q4sztjhTizO3OEuLs7Y4W4uztzhHi3O2OFeLc7c4T4vztjhfi/O3uECLC7a4UIsLt7hIi4u2uFiLi7e4RItLtrhUi7S4dIvLtLhsi8u1uHyLK7S4Yosrtbhyi6u0uGqLq7W4eotrtLhmi2u1uHaL67S4bovrtbh+ixu0uGGLG7W4cYubtLhpi5u1uHmLW7S4ZYtbtbh1i9u0uG2L27W4fYs7tLhjizu1uHOLu7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0eGKLJ7V4cou2eEqLp7Z4Wount3hGi2e2eFaLZ7d4TovntjisxfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxataHLQYtBi2GLUYt5i0mLaYtZi3WLRYtli1WLfYtNi22LXYt3h1i9e0eG2L17V4fYs3tHhjize1eHOLt7R4a4u3tXh7i3e0eGeLd7V4d4v3tHhvi/e1eH+LD7T4YIvDWxzR4kMtPtziIy0+2uJjLT7e4hMtPtniUy0+3eIzLT7b4nMtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+2eJXLX7d4jctftvidy1+3+IPLf7Y4k8t/tziLy3+2uJvLf7e4h8t/tniXy3+3eI/Lf7b4n8tjmxxVIujWxzT4tgWh3Q4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh0M7nLTDyTqcvMMpOpyyw6k6nLrDaTqctsPpOpy+wxk6nLHDmTqcucNZOpy1w9k6nL3DOTqcs8O5Opy7w3k6nLfD+Tqcv8MFOlyww4U6XLjDRTpctMPFOly8wyU6XLLDpTqkw6U7XKbDZTtcrsPlO1yhwxU7XKnDlTtcpcNVO1ytw9U7XKPDNTtcq8O1O1ynw3U7XK/D9TvcoMMNO9yow4073KTDTTvcrMPNO9yiwy073KrDrTvcpsNtO9yuw+073KHDHTvcqcOdO9ylw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8ocMTOzypw5M7tMNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfDYR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dqzu8psNrO7yuw+s7vKHDGzu8qcObO7ylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7HN7hiA4f6vDhDh/p8NEOH+vw8Q6f6PDJDp/q8OkOn+nw2Q6f6/D5Dl/o8MUOX+rw5Q5f6fDVDl/r8PUO3+jwzQ7f6vDtDt/p8N0O3+vw/Q4/6PDDDj/q8OMOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDv8aNsS/O/ynw387/K/DkR2O6nB0h2M6HNvhkB7H6XHcHsfrcfweJ+hxwh4n6nHiHifpcWiPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESPS/a4VI/0uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhijyf1eHKP9nhKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Y4rMfzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPw3sc0eP/kVyOTXwfjBZMmSa1bbtb27Zt295aqW3j/7NRt1Ft27btO8/c8w3OzuyLHTnAUQMcPcAxAxw7wIcG+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggCMDHBXg6ADHBDg2wIcCfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDHBniqBBHhzgmxLEhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOHICEdFODrCMRGOjfChCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2McGeOoGEfHOCbGsTE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIjExyV4OgExyQ4NsGHEnw4wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTHJniqBRHpzgmxbEpPpTiwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQxHZjgqw9EZjslwbIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/mODLHUTmOznFMjmNzfCjHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHCxxZ4KgCRxc4psCxBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiyBJHlTi6xDElji3xoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVjqxwVIWjKxxT4dgKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrHFkjaNqHF3jmBrH1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDIxsc1eDoBsc0OLbBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxzZ4qgWR7c4psWxLT7U4sMtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+xwZIejOhzd4ZgOx3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9PhgjyN7HNXj6B7H9Di25/9YtOc2vgtAgeJbtWrZtl0n27Zt2z7Ztm17v6+NbBvLNlat7T73ufe8h/Pfx26A/QCfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8McOQAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wFED/HuA/wzw3wGOHuB/AxwzwLEDHBLg0ADHCXDcAMcLcFiA4wc4QYATBjg8wIkCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQIkwCUDXCrApQNcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDNMCTAjw5wFMCPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCvDbA6wK8PsAbArwxwJsCvDnAWwK8NcDbArw9wDsCvDPAuwK8O8B7Arw3wPsCvD/ABwJ8MMCHAnw4wEcCfDTAxwJ8PMAnAhwR4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTAkQF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8Bjgrw7wD/CfDfAEcH+F+AYwIcG+CQEIeGOE6I44Y4XojDQhw/xAlCnDDE4SFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4RIiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGKIhnhTiySGeEuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeKdId4V4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHiiBAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIY4M8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CnFUiH+H+E+I/4Y4OsT/QhwT4tgQh0Q4NMJxIhw3wvEiHBbh+BFOEOGEEQ6PcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiJcMkIl4pw6QiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I1xn2/2YjwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM0wpMiPDnCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wiciHBHhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN8L8L3I/wgwg8j/CjCjyP8JMKREX4a4WcRfh7hFxF+GeFXEX4d4TcRfhvhdxF+H+EPEf4Y4U8R/hzhLxH+GuFvEf4e4R8R/hnhXxGOivDvCP+J8N8IR0f4X4RjIhwb4ZAYh8Y4TozjxjhejMNiHD9m1Nj/y+ExThTjxDFOEuOkMU4W4+QxThHjlDFOFePUMU4T47QxThfj9DHOEOOMMc4U48wxzhLjrDHOFuPsMc4R45wxzhXj3DHOE+O8Mc4X4/wxLhDjgjEuFOPCMS4S46IxLhbj4jEuESMxLhnjUjEuHeMyMS4b43IxLh/jCjGuGONKMa4c4yoxrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjFuGeNWMW4d4zYxbhvjdjFuH+MOMe4Y404x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhijMZ4U48kxnhLjqTGeFuPpMZ4R45kxnhXj2TGeE+O5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePdMd4T470x3hfj/TE+EOODMT4U48MxPhLjozE+FuPjMT4R44gYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MT4Z41MxPh3jMzE+G+NzMT4f4wsxvhjjSzG+HOMrMb4a42sxvh7jGzG+GeNbMb4d4zsxvhvjezG+H+MHMX4Y40cxfhzjJzGOjPHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4pxVIx/x/hPjP/GODrG/2IcE+PYGIckODTBcRIcN8HxEhyW4PgJTpDghAkOT3CiBCdOcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkESXDJBJdKcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE3wpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb03wtgRvT/COBO9M8K4E707wngTvTfC+BO9P8IEEH0zwoQQfTvCRBB9N8LEEH0/wiQRHJDhIMEgwTDBKME4wSTBNMEswT7BIsEywSrBOsEmwTbBLsE/wyQSfSvDpBJ9J8NkEn0vw+QRfSPDFBF9K8OUEX0nw1QRfS/D1BN9I8M0E30rw7QTfSfDdBN9L8P0EP0jwwwQ/SvDjBD9JcGSCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgqMS/DvBfxL8N8HRCf6X4JgExyY4JMWhKY6T4rgpjpfisBTHT3GCFCdMcXiKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpEiKS6a4VIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6a4UYobp7hJipumuFmKm6e4RYpbprhVilunuE2K26a4XYrbp7hDijumuFOKO6e4S4q7prhbirunuEeKe6a4V4p7p7hPivumuF+K+6d4QIoHpnhQigeneEiKh6Z4WIqHp3hEikemeFSKR6d4TIrHpnhciseneEKKJ6ZoiieleHKKp6R4aoqnpXh6imekeGaKZ6V4dornpHhuiueleH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWK16R4bYrXpXh9ijekeGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+kOCLFQYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYojU/w0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1IcleLfKf6T4r8pjk7xvxTHpDg2xSEZDs1wnAzHzXC8DIdlOH6GE2Q4YYbDM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCJDMlwyw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxQzM8KcOTMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczM8L8PzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDxzN8IsMRGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8MsOnMnw6w2cyfDbD5zJ8PsMXMnwxw5cyfDnDVzJ8NcPXMnw9wzcyfDPDtzJ8O8N3Mnw3w/cyfD/DDzL8MMOPMvw4w08yHJnhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4agM/87wnwz/zXB0hv9lOCbDsRkOyXFojuPkOG6O4+U4LMfxc5wgxwlzHJ7jRDlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOZLjkjkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rpXj2jmuk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5jlukeOWOW6V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek+OxOR6X4/E5npDjiTma40k5npzjKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5jshxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2M/fMiQ/33iqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHEfm+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z45/5Tgqx79z/CfHf3McneN/OY7JcWyOQwocWuA4BY5b4HgFDitw/AInKHDCAocXOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixe4RIEUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFXh8gScUeGKBFnhSgScXeEqBpxZ4WoGnF3hGgWcWeFaBZxd4ToHnFnhegecXeEGBFxZ4UYEXF3hJgZcWeFmBlxd4RYFXFnhVgVcXeE2B1xZ4XYHXF3hDgTcWeFOBNxd4S4G3FnhbgbcXeEeBdxZ4V4F3F3hPgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgSMKHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxQ4ssBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAUQX+XeA/Bf5b4OgC/ytwTIFjCxxS4tASxylx3BLHK3FYieOXOEGJE5Y4vMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8xCVKpMQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8ocQTS7TEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0ocUeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7EJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxJElflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJY4q8e8S/ynx3xJHl/hfiWNKHFvikAqHVjhOheNWOF6Fwyocv8IJKpywwuEVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc5U4cwVzlLhrBXOVuHsFc5R4ZwVzlXh3BXOU+G8Fc5X4fwVLlDhghUuVOHCFS5S4aIVLlbh4hUuUSEVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5Z4VEVI0cMGeIxFR5b4XEVHl/hCRWeWKEVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhiAoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFY6s8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qnBUhX9X+E+F/1Y4usL/KhxT4dgKh9Q4tMZxahy3xvFqHFbj+DVOUOOENQ6vcaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqpcckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQarfGkGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGh+u8ZEaH63xsRofr/GJGkfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6lxZI2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNo2r8u8Z/avy3xtE1/lfjmBrH1jikwaENjtPguA2O1+CwBsdvcIIGJ2xweIMTNThxg5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODMzU4c4OzNDhrg7M1OHuDczQ4Z4NzNTh3g/M0OG+D8zU4f4MLNLhggws1uHCDizS4aIOLNbh4g0s0SINLNrhUg0s3uEyDyza4XIPLN7hCgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYPbNrhdg9s3uEODOza4U4M7N7hLg7s2uFuDuze4R4N7NrhXg3s3uE+D+za4X4P7N3hAgwc2eFCDBzd4SIOHNnhYg4c3eESDRzZ4VINHN3hMg8c2eFyDxzd4QoMnNmiDJzV4coOnNHhqg6c1eHqDZzR4ZoNnNXh2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDDzX4cIOPNPhog481+HiDTzQ4osFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJgyMb/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/GhzV4N8N/tPgvw2ObvC/Bsc0OLbBIS0ObXGcFsdtcbwWh7U4fosTtDhhi8NbnKjFiVucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZW5ypxZlbnKXFWVucrcXZW5yjxTlbnKvFuVucp8V5W5yvxflbXKDFBVtcqMWFW1ykxUVbXKzFxVtcokVaXLLFpUYPdekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHPFvdqce8W92lx3xb3a3H/Fg9o8cAWD2rx4BYPafHQFg9r8fAWj2jxyBaPavHoFo9p8dgWj2vx+BZPaPHEFm3xpBZPbvGUFk9t8bQWT2/xjBbPbPGsFs9u8ZwWz23xvBbPb/GCFi9s8aIWL27xkhYvbfGyFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRZHtDhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xyRafavHpFp9p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9pcWSLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi6Na/LvFf1r8t8XRLf7X4pgWx7Y4pMOhHY7T4bgdjtfhsA7H73CCDifscHiHE3U4cYeTdDhph5N1OHmHU3Q4ZYdTdTh1h9N0OG2H03U4fYczdDhjhzN1OHOHs3Q4a4ezdTh7h3N0OGeHc3U4d4fzdDhvh/N1OH+HC3S4YIcLdbhwh4t0uGiHi3W4eIdLdEiHS3a4VIdLd7hMh8t2uFyHy3e4QocrdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Zohyd1eHKHp3R4aoendXh6h2d0eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090OKLDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h092+FSHT3f4TIfPdvhch893+EKHL3b4Uocvd/hKh692+FqHr3f4RodvdvhWh293+E6H73b4Xofvd/hBhx92+FGHH3f4SYcjO/y0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzoc1eHfHf7T4b8dju7wvw7HdDi2wyE9Du1xnB7H7XG8Hof1OH6PE/Q4YY/De5yox4l7nKTHSXucrMfJe5yixyl7nKrHqXucpsdpe5yux+l7nKHHGXucqceZe5ylx1l7nK3H2Xuco8c5e5yrx7l7nKfHeXucr8f5e1ygxwV7XKjHhXtcpMdFe1ysx8V7XKJHelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43o8vscTejyxR3s8qceTezylx1N7PK3H03s8o8czezyrx7N7PKfHc3s8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsere7ymx2t7vK7H63u8occbe7ypx5t7vKXHW3u8rcfbe7yjxzt7vKvHu3u8p8d7e7yvx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscRPQ56/J8AAAD//8P52+I=")
r0 = open(&(0x7f0000000140)='.\x00', 0xa0180, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401})

3m40.879208046s ago: executing program 2 (id=392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000004c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x34, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '![*(}$#:\'{\\\\-\']-.\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x60}}, 0x0)

3m40.188068562s ago: executing program 2 (id=395):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@gid}, {@gid}, {@fmask={'fmask', 0x3d, 0xc4}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@zero_size_dir}]}, 0x1, 0x152c, &(0x7f0000000400)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x430301, 0x78)

3m39.193716675s ago: executing program 2 (id=402):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
getsockopt(r0, 0x3, 0xe66, 0x0, 0x0)

3m38.503163677s ago: executing program 2 (id=407):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010)

3m36.871404545s ago: executing program 33 (id=407):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010)

3m21.259571042s ago: executing program 3 (id=491):
r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x40, 0x18, 0x2, "be83"}, 0x0, 0x0, 0x0, 0x0})

3m18.622458756s ago: executing program 3 (id=502):
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0)

3m18.174738713s ago: executing program 3 (id=504):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x7, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "69eb047c187e143bddcbe699ef7a74fd2c1a7c6b59dd637719d6395dda566f42", "6e8ae37dc217c78b70a4dc5eeb6f626200e45176f0c8444ad4b18c65ce5eb8dbb3b30234e8bea4116c8bf272fdef179d", "ff2a09d662def3d2eb45734d1b7067384ff2442258e9fc1dfc1701ba", {"18a017fdd03500", "7fa6bc2b0e933988c64a103320cfe3d2"}}}}}}}, 0x0)

3m17.801923333s ago: executing program 3 (id=508):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000000c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@barrier}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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")
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

3m17.062511171s ago: executing program 3 (id=512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80)

3m16.258658815s ago: executing program 3 (id=515):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160)

3m14.62932395s ago: executing program 34 (id=515):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160)

1m41.062547178s ago: executing program 7 (id=1201):
r0 = epoll_create(0x101)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4})

1m40.560176521s ago: executing program 7 (id=1204):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, 0x0, 0x1e, 0x3, 0x0, 0x0)

1m40.230001589s ago: executing program 7 (id=1207):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10)

1m39.830212837s ago: executing program 7 (id=1211):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0)

1m39.428519475s ago: executing program 7 (id=1215):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m39.017448823s ago: executing program 7 (id=1220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000010029bd7200fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="184104008f08000038001280110001006272696467655f736c61766500000000200005800400180005"], 0x58}, 0x1, 0x0, 0x0, 0x891}, 0x4000000)

1m37.750111861s ago: executing program 35 (id=1220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000010029bd7200fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="184104008f08000038001280110001006272696467655f736c61766500000000200005800400180005"], 0x58}, 0x1, 0x0, 0x0, 0x891}, 0x4000000)

5.950655881s ago: executing program 8 (id=1849):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
syz_usb_disconnect(r0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/142, 0x8e}], 0x1)

5.364977444s ago: executing program 6 (id=1855):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xd1, 0x1, 0x2, 0x404c0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x100, 0x100, 0x3, 0x1, 0x1}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file1\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)='&', 0x5e, r0}, 0x38)

5.068929044s ago: executing program 6 (id=1859):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x8, &(0x7f0000000040))

4.531183821s ago: executing program 4 (id=1862):
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%pS    \x00'}, 0x20)

4.436550772s ago: executing program 1 (id=1863):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f00000000c0), &(0x7f00000001c0)=r0}, 0x20)

4.082698485s ago: executing program 8 (id=1865):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xffffffffffffff68, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x10}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x40}}, 0x0)

4.056952089s ago: executing program 4 (id=1866):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="20060200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.980352714s ago: executing program 1 (id=1867):
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044)

3.515945737s ago: executing program 1 (id=1868):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x200)

3.513768643s ago: executing program 8 (id=1869):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

3.158840433s ago: executing program 6 (id=1871):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x13, 0x3, "8312f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

3.142590669s ago: executing program 5 (id=1872):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r0, 0x0)
listen(r0, 0x0)

3.067102416s ago: executing program 1 (id=1873):
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000340), 0x47ffdf0, 0x122442)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8000000000000009, 0x0, 0x0, 0x1d, 0x18, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff0800000000000000008218040000050000000000000900", [0x4, 0x2000000]})

2.844364198s ago: executing program 5 (id=1874):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00')
lseek(r0, 0x1, 0x0)
getdents(r0, 0x0, 0x51)

2.825621056s ago: executing program 1 (id=1875):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

2.688491358s ago: executing program 5 (id=1876):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0, 0xf5}, {&(0x7f0000000dc0)="8a", 0x1}], 0x2, 0x0, 0x0, 0x24040804}, 0x8800)

2.343118304s ago: executing program 8 (id=1877):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
r1 = io_uring_setup(0x177e, &(0x7f0000000140))
close_range(r1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

1.531172059s ago: executing program 8 (id=1878):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0)
r1 = dup(r0)
write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7ff7ffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}]}, 0x58)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.415018097s ago: executing program 4 (id=1879):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x2, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private2, 0xfffc, 0x0, 0x4e21, 0xffff, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@multicast1, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x2, 0x0, 0x0, 0x8, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4a050)

934.541984ms ago: executing program 4 (id=1880):
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[])

915.695961ms ago: executing program 8 (id=1881):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}})

780.374757ms ago: executing program 5 (id=1882):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

721.227632ms ago: executing program 6 (id=1883):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x5, r1, 0x0, &(0x7f0000ae1000/0x3000)=nil, 0x3000, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000200)={0x28, 0x2, r1, r1, 0x7, 0x3ff, 0x9c})

608.525309ms ago: executing program 4 (id=1884):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}}, 0x48004)

510.884238ms ago: executing program 6 (id=1885):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x4000800)

406.045293ms ago: executing program 5 (id=1886):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000002600)=0x5, 0x2)

403.845292ms ago: executing program 1 (id=1887):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r1=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90)

315.096134ms ago: executing program 6 (id=1888):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3010740, &(0x7f0000000200)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@dioread_lock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2004}}, {@nomblk_io_submit}, {@nodiscard}, {@usrquota}, {@nojournal_checksum}, {@noauto_da_alloc}, {@nojournal_checksum}]}, 0x1, 0x48b, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x91)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140))

63.820718ms ago: executing program 4 (id=1889):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)

0s ago: executing program 5 (id=1890):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@utf8}, {@discard}, {@umask={'umask', 0x3d, 0x8}}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fmask={'fmask', 0x3d, 0x3c}}, {@umask={'umask', 0x3d, 0x6}}, {@sys_tz}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x80)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

etected capacity change from 0 to 16
[  329.053831][ T7800] erofs (device loop5): mounted with root inode @ nid 36.
[  329.116646][ T7800] syz.5.700: attempt to access beyond end of device
[  329.116646][ T7800] loop5: rw=0, sector=16, nr_sectors = 8 limit=16
[  329.126244][ T7801] erofs (device loop6): mounted with root inode @ nid 36.
[  329.201885][ T5852] usb 2-1: unable to get BOS descriptor or descriptor too short
[  329.230026][ T5852] usb 2-1: unable to read config index 0 descriptor/start: -71
[  329.238939][ T5852] usb 2-1: can't read configurations, error -71
[  329.277091][ T7801] erofs (device loop6): readahead error at folio 6 @ nid 36
[  329.285349][ T7801] erofs (device loop6): readahead error at folio 4 @ nid 36
[  329.293652][ T7801] erofs (device loop6): invalid logical cluster 0 at nid 36
[  329.301236][ T7801] erofs (device loop6): readahead error at folio 0 @ nid 36
[  329.309156][ T7801] syz.6.699: attempt to access beyond end of device
[  329.309156][ T7801] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16
[  329.323551][ T7801] syz.6.699: attempt to access beyond end of device
[  329.323551][ T7801] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  329.339369][ T7801] syz.6.699: attempt to access beyond end of device
[  329.339369][ T7801] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16
[  329.353572][ T7801] syz.6.699: attempt to access beyond end of device
[  329.353572][ T7801] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16
[  329.367981][ T7801] erofs (device loop6): invalid logical cluster 0 at nid 36
[  329.375855][ T7801] syz.6.699: attempt to access beyond end of device
[  329.375855][ T7801] loop6: rw=0, sector=296, nr_sectors = 8 limit=16
[  329.389351][ T7801] erofs (device loop6): read error -5 @ 0 of nid 36
[  329.396428][ T7801] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  329.453580][ T7804] erofs (device loop6): invalid logical cluster 0 at nid 36
[  329.461200][ T7804] syz.6.699: attempt to access beyond end of device
[  329.461200][ T7804] loop6: rw=0, sector=296, nr_sectors = 8 limit=16
[  329.475299][ T7804] erofs (device loop6): read error -5 @ 0 of nid 36
[  329.482108][ T7804] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  329.605180][ T7808] loop5: detected capacity change from 0 to 64
[  330.222977][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  330.393644][    T9] usb 8-1: Using ep0 maxpacket: 32
[  330.417445][    T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  330.426249][    T9] usb 8-1: config 0 has no interface number 0
[  330.432519][    T9] usb 8-1: config 0 interface 184 has no altsetting 0
[  330.481266][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  330.490891][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.499236][    T9] usb 8-1: Product: syz
[  330.503656][    T9] usb 8-1: Manufacturer: syz
[  330.508416][    T9] usb 8-1: SerialNumber: syz
[  330.559261][    T9] usb 8-1: config 0 descriptor??
[  330.576741][    T9] smsc75xx v1.0.0
[  330.584923][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  330.601750][    T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22
[  330.678273][ T7830] loop4: detected capacity change from 0 to 128
[  330.779458][    T9] usb 8-1: USB disconnect, device number 2
[  330.845622][ T7830] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  330.899508][ T7830] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  331.129107][ T5797] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  331.333150][ T5852] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  331.381046][ T7847] loop4: detected capacity change from 0 to 512
[  331.503486][ T5852] usb 2-1: Using ep0 maxpacket: 8
[  331.545092][ T5852] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  331.554815][ T5852] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  331.563334][ T5852] usb 2-1: Product: syz
[  331.567669][ T5852] usb 2-1: Manufacturer: syz
[  331.572427][ T5852] usb 2-1: SerialNumber: syz
[  331.663119][ T5852] usb 2-1: config 0 descriptor??
[  331.688772][ T5852] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  331.808994][ T7854] loop6: detected capacity change from 0 to 512
[  331.868453][ T7854] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  331.929983][ T7854] EXT4-fs (loop6): 1 truncate cleaned up
[  331.939008][ T7854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.261984][ T7024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.319861][ T5852] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  332.553133][ T5852] usb 2-1: USB disconnect, device number 7
[  333.557223][ T7894] input: syz1 as /devices/virtual/input/input11
[  333.792116][ T7897] netlink: 830 bytes leftover after parsing attributes in process `syz.1.743'.
[  334.131884][ T7903] loop1: detected capacity change from 0 to 128
[  334.181513][ T7903] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  334.247749][ T7903] hpfs: filesystem error: improperly stopped
[  334.254568][ T7903] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  334.262625][ T7903] hpfs: You really don't want any checks? You are crazy...
[  334.282130][ T7903] hpfs: hpfs_map_sector(): read error
[  334.288055][ T7903] hpfs: code page support is disabled
[  334.295260][ T7903] hpfs: hpfs_map_4sectors(): unaligned read
[  334.320970][ T7903] hpfs: hpfs_map_4sectors(): unaligned read
[  334.327399][ T7903] hpfs: filesystem error: unable to find root dir
[  334.343486][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  334.513445][    T9] usb 5-1: Using ep0 maxpacket: 16
[  334.529351][    T9] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64
[  334.540042][    T9] usb 5-1: config 1 interface 0 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  334.555813][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[  334.621734][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  334.631922][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.640280][    T9] usb 5-1: Product: syz
[  334.640428][ T5852] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  334.644661][    T9] usb 5-1: Manufacturer: syz
[  334.644756][    T9] usb 5-1: SerialNumber: syz
[  334.745478][ T7899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  334.774227][ T7899] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  334.852155][ T7915] Bluetooth: MGMT ver 1.23
[  334.886495][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.898089][ T5852] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[  334.907993][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.963185][ T5852] usb 8-1: config 0 descriptor??
[  335.080984][    T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  335.121067][    T9] usb 5-1: USB disconnect, device number 3
[  335.410661][ T5852] hid (null): nested delimiters
[  335.416021][ T5852] hid (null): nested delimiters
[  335.457469][ T5852] itetech 0003:06CB:73F4.0006: nested delimiters
[  335.464204][ T5852] itetech 0003:06CB:73F4.0006: item 0 4 2 10 parsing failed
[  335.510663][ T5852] itetech 0003:06CB:73F4.0006: probe with driver itetech failed with error -22
[  335.653260][ T5852] usb 8-1: USB disconnect, device number 3
[  336.580157][ T7943] loop7: detected capacity change from 0 to 128
[  336.694365][ T7946] loop5: detected capacity change from 0 to 512
[  337.015459][ T7948] loop6: detected capacity change from 0 to 256
[  337.169309][ T7948] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d)
[  337.209340][ T7952] Zero length message leads to an empty skb
[  338.481132][ T7974] loop6: detected capacity change from 0 to 1024
[  338.498428][ T7974] EXT4-fs: Ignoring removed orlov option
[  338.551101][ T7977] pimreg: tun_chr_ioctl cmd 1074812117
[  338.599516][ T7974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.833493][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  338.861603][ T7024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.013380][ T5852] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  339.018339][    T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  339.029898][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.087838][    T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  339.097275][    T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  339.108416][    T9] usb 8-1: Manufacturer: syz
[  339.149082][    T9] usb 8-1: config 0 descriptor??
[  339.199800][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  339.211991][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.223459][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.233691][ T5852] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  339.243262][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.281998][ T7995] loop1: detected capacity change from 0 to 1024
[  339.321308][ T5852] usb 5-1: config 0 descriptor??
[  339.357988][ T7995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  339.373578][ T7995] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.413043][    T9] rc_core: IR keymap rc-hauppauge not found
[  339.419126][    T9] Registered IR keymap rc-empty
[  339.425748][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  339.438549][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input12
[  339.552917][ T7979] loop7: detected capacity change from 0 to 512
[  339.556955][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  339.580443][ T7979] EXT4-fs: Ignoring removed mblk_io_submit option
[  339.598757][ T7979] EXT4-fs (loop7): Test dummy encryption mode enabled
[  339.641290][ T7979] EXT4-fs error (device loop7): ext4_orphan_get:1392: comm syz.7.782: inode #13: comm syz.7.782: iget: illegal inode #
[  339.656977][    T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0)
[  339.740805][ T7979] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.782: couldn't read orphan inode 13 (err -117)
[  339.761821][ T5852] sony 0003:054C:024B.0007: unexpected long global item
[  339.768045][ T7979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.777800][ T5852] sony 0003:054C:024B.0007: parse failed
[  339.788508][ T5852] sony 0003:054C:024B.0007: probe with driver sony failed with error -22
[  339.894156][ T5852] usb 8-1: USB disconnect, device number 4
[  339.973649][ T5481] usb 5-1: USB disconnect, device number 4
[  339.986300][ T8006] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  340.211717][ T8010] loop6: detected capacity change from 0 to 1024
[  340.544273][ T8016] loop6: detected capacity change from 0 to 1024
[  340.577745][ T7288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.698758][ T8016] hfsplus: xattr searching failed
[  341.014213][ T3804] hfsplus: bad catalog file entry
[  341.019534][ T3804] hfsplus: b-tree write err: -5, ino 3
[  341.314656][ T5481] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  341.497137][ T5481] usb 8-1: Using ep0 maxpacket: 32
[  341.532186][ T5481] usb 8-1: config 0 has an invalid interface number: 85 but max is 0
[  341.543665][ T5481] usb 8-1: config 0 has no interface number 0
[  341.549963][ T5481] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  341.564260][ T5481] usb 8-1: config 0 interface 85 has no altsetting 0
[  341.661810][ T5481] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  341.671252][ T5481] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.679662][ T5481] usb 8-1: Product: syz
[  341.684117][ T5481] usb 8-1: Manufacturer: syz
[  341.688881][ T5481] usb 8-1: SerialNumber: syz
[  341.735258][ T5481] usb 8-1: config 0 descriptor??
[  341.998928][ T8047] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  342.093229][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  342.307687][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  342.319651][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  342.331317][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  342.343616][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  342.357614][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  342.369976][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.391398][ T5481] appletouch 8-1:0.85: Geyser mode initialized.
[  342.400165][ T5481] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input13
[  342.449319][ T8053] loop4: detected capacity change from 0 to 1024
[  342.504999][    T9] usb 7-1: config 0 descriptor??
[  342.638656][ T5481] usb 8-1: USB disconnect, device number 5
[  342.643749][ T8055] loop5: detected capacity change from 0 to 2048
[  342.711958][ T5481] appletouch 8-1:0.85: input: appletouch disconnected
[  342.730193][ T8055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.956571][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  342.964411][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  342.977037][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  342.986136][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  342.994061][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  343.001699][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  343.009540][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  343.017822][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  343.025618][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  343.143740][    T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  343.212116][    T9] usb 7-1: USB disconnect, device number 4
[  343.389509][ T3804] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  343.443231][ T3804] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  343.456341][ T3804] EXT4-fs (loop5): This should not happen!! Data will be lost
[  343.456341][ T3804] 
[  343.467663][ T3804] EXT4-fs (loop5): Total free blocks count 0
[  343.474499][ T3804] EXT4-fs (loop5): Free/Dirty block details
[  343.480683][ T3804] EXT4-fs (loop5): free_blocks=2415919504
[  343.486813][ T3804] EXT4-fs (loop5): dirty_blocks=64
[  343.492088][ T3804] EXT4-fs (loop5): Block reservation details
[  343.498491][ T3804] EXT4-fs (loop5): i_reserved_data_blocks=4
[  343.534820][   T35] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28
[  343.752544][ T8067] loop5: detected capacity change from 0 to 1024
[  344.077586][ T3759] hfsplus: b-tree write err: -5, ino 4
[  344.104363][ T8073] loop1: detected capacity change from 0 to 1024
[  344.465127][ T3804] hfsplus: b-tree write err: -5, ino 4
[  345.467664][ T8093] loop6: detected capacity change from 0 to 4096
[  345.597856][ T8102] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  346.700676][ T8109] loop1: detected capacity change from 0 to 32768
[  346.788350][ T8113] loop6: detected capacity change from 0 to 256
[  346.807240][ T8109] 
[  346.807240][ T8109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  346.807240][ T8109] 
[  346.848469][ T8113] exfat: Deprecated parameter 'namecase'
[  346.855343][ T8113] exfat: Deprecated parameter 'namecase'
[  346.866847][ T8113] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  346.898041][ T8113] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  346.956561][ T5804] 
[  346.956561][ T5804]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  346.956561][ T5804] 
[  347.020197][ T8117] netlink: 104 bytes leftover after parsing attributes in process `syz.5.840'.
[  347.034443][ T5804] 
[  347.034443][ T5804]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  347.034443][ T5804] 
[  347.454942][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  347.461568][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  347.568663][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'.
[  347.578102][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'.
[  348.354825][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.5.850'.
[  348.936992][ T8161] loop6: detected capacity change from 0 to 256
[  348.977504][ T8158] can0: slcan on ttyS3.
[  349.041656][ T8164] loop5: detected capacity change from 0 to 65
[  349.059191][ T8164] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  349.067753][ T8164] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  349.071389][ T8165] loop7: detected capacity change from 0 to 256
[  349.095926][ T8158] can0 (unregistered): slcan off ttyS3.
[  349.173273][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  349.183697][ T8165] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  349.368875][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.380334][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.457739][    T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  349.467153][    T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  349.475944][    T9] usb 5-1: Manufacturer: syz
[  349.499310][    T9] usb 5-1: config 0 descriptor??
[  350.369563][    T9] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71
[  350.379246][    T9] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71
[  350.387721][    T9] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71
[  350.396283][    T9] uclogic 0003:256C:006D.0009: failed probing parameters: -71
[  350.404439][    T9] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71
[  350.574481][ T8177] loop7: detected capacity change from 0 to 32768
[  350.586949][ T8177] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.865 (8177)
[  350.617850][ T8177] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  350.630662][ T8177] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  350.670703][    T9] usb 5-1: USB disconnect, device number 5
[  350.853993][ T8177] BTRFS info (device loop7): enabling ssd optimizations
[  350.861179][ T8177] BTRFS info (device loop7): enabling free space tree
[  350.917336][ T8177] BTRFS info (device loop7): balance: start -sprofiles=data|raid0,usage=34359738372,drange=1..0,limit=127..0
[  350.929905][ T8177] BTRFS info (device loop7): balance: ended with status: 0
[  351.083766][ T7288] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  351.673372][ T8209] loop1: detected capacity change from 0 to 128
[  351.726377][ T8209] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  351.814470][ T8209] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  352.094121][ T3839] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  353.003235][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  353.214238][    T9] usb 2-1: Using ep0 maxpacket: 8
[  353.239397][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  353.250965][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  353.261206][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  353.270720][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.464177][    T9] usb 2-1: config 0 descriptor??
[  353.490031][ T8235] loop5: detected capacity change from 0 to 32768
[  353.591466][ T8235] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  353.731652][    T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  353.814350][ T5799] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[  353.836498][ T8235] XFS (loop5): Ending clean mount
[  353.846840][ T8235] XFS (loop5): Quotacheck needed: Please wait.
[  353.888880][ T8235] XFS (loop5): Quotacheck: Done.
[  353.967594][    T9] usb 2-1: USB disconnect, device number 8
[  353.989807][ T6020] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.931559][ T8270] loop4: detected capacity change from 0 to 128
[  355.019823][ T8270] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  355.020381][ T8268] loop1: detected capacity change from 0 to 1024
[  355.077487][ T8270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  355.297325][ T3759] hfsplus: b-tree write err: -5, ino 4
[  355.722963][   T11] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  355.925190][   T11] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  355.933754][   T11] usb 7-1: config 0 has no interface number 0
[  355.986159][   T11] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  355.995912][   T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.004916][   T11] usb 7-1: Product: syz
[  356.009253][   T11] usb 7-1: Manufacturer: syz
[  356.014157][   T11] usb 7-1: SerialNumber: syz
[  356.040864][ T8295] loop4: detected capacity change from 0 to 512
[  356.070948][   T11] usb 7-1: config 0 descriptor??
[  356.081780][ T8295] EXT4-fs (loop4): Test dummy encryption mode enabled
[  356.089190][ T8295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  356.099688][ T8295] EXT4-fs (loop4): ea_inode feature is not supported for Hurd
[  356.325064][   T11] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  356.349674][   T11] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  356.364279][   T11] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  356.373852][   T11] usb 7-1: media controller created
[  356.503735][   T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  356.624771][   T11] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  356.945333][   T11] usb 7-1: USB disconnect, device number 5
[  357.004353][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'.
[  357.014717][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'.
[  357.062098][ T8305] program syz.4.915 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  357.754563][   T30] audit: type=1326 audit(1760474427.418:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8317 comm="syz.4.921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b78eec9 code=0x0
[  357.873174][ T5799] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  357.881717][ T5799] Bluetooth: hci0: Injecting HCI hardware error event
[  357.890534][ T5799] Bluetooth: hci0: hardware error 0x00
[  358.330091][ T8288] loop5: detected capacity change from 0 to 32768
[  358.364830][ T8331] loop6: detected capacity change from 0 to 16
[  358.399369][ T8331] erofs (device loop6): mounted with root inode @ nid 36.
[  358.417967][   T30] audit: type=1800 audit(1760474428.078:39): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.907" name="file1" dev="loop5" ino=7 res=0 errno=0
[  359.880073][ T8355] loop1: detected capacity change from 0 to 128
[  359.954223][ T5799] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  359.982387][ T8355] syz.1.939: attempt to access beyond end of device
[  359.982387][ T8355] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128
[  360.068374][ T8355] syz.1.939: attempt to access beyond end of device
[  360.068374][ T8355] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128
[  360.082447][ T8355] Buffer I/O error on dev loop1, logical block 79, lost async page write
[  360.091348][ T8355] syz.1.939: attempt to access beyond end of device
[  360.091348][ T8355] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128
[  360.105244][ T8355] Buffer I/O error on dev loop1, logical block 80, lost async page write
[  360.144681][ T8355] syz.1.939: attempt to access beyond end of device
[  360.144681][ T8355] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128
[  360.288916][ T8355] syz.1.939: attempt to access beyond end of device
[  360.288916][ T8355] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128
[  360.303082][ T8355] Buffer I/O error on dev loop1, logical block 83, lost async page write
[  360.315520][ T8355] syz.1.939: attempt to access beyond end of device
[  360.315520][ T8355] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128
[  360.329221][ T8355] Buffer I/O error on dev loop1, logical block 84, lost async page write
[  360.342478][ T8355] syz.1.939: attempt to access beyond end of device
[  360.342478][ T8355] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128
[  360.406692][ T8355] syz.1.939: attempt to access beyond end of device
[  360.406692][ T8355] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128
[  360.420610][ T8355] Buffer I/O error on dev loop1, logical block 95, lost async page write
[  360.429613][ T8355] syz.1.939: attempt to access beyond end of device
[  360.429613][ T8355] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128
[  360.443355][ T8355] Buffer I/O error on dev loop1, logical block 96, lost async page write
[  360.454574][ T8355] syz.1.939: attempt to access beyond end of device
[  360.454574][ T8355] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128
[  360.517941][ T8355] Buffer I/O error on dev loop1, logical block 99, lost async page write
[  360.527460][ T8355] Buffer I/O error on dev loop1, logical block 100, lost async page write
[  360.551234][ T8355] Buffer I/O error on dev loop1, logical block 111, lost async page write
[  360.561904][ T8355] Buffer I/O error on dev loop1, logical block 112, lost async page write
[  361.242175][ T8375] loop7: detected capacity change from 0 to 2048
[  361.270779][ T8375] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.293864][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.950'.
[  361.327257][   T30] audit: type=1800 audit(1760474430.988:40): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.951" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=18685 res=0 errno=0
[  361.359108][    C0] vkms_vblank_simulate: vblank timer overrun
[  361.605897][ T8386] netlink: 388 bytes leftover after parsing attributes in process `syz.4.954'.
[  361.683722][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.1.953'.
[  361.984510][ T8392] loop7: detected capacity change from 0 to 2048
[  362.045952][ T8399] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  362.142986][ T8392] NILFS (loop7): I/O error reading b-tree node block (ino=16, blocknr=15)
[  362.143905][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.958'.
[  362.152050][ T8392] NILFS (loop7): error -5 truncating bmap (ino=16)
[  362.169435][   T30] audit: type=1800 audit(1760474431.808:41): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.955" name="file2" dev="loop7" ino=16 res=0 errno=0
[  362.264472][   T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  362.435842][   T11] usb 2-1: Using ep0 maxpacket: 32
[  362.471186][   T11] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  362.479901][   T11] usb 2-1: config 0 has no interface number 0
[  362.558505][   T11] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  362.568148][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.576622][   T11] usb 2-1: Product: syz
[  362.580952][   T11] usb 2-1: Manufacturer: syz
[  362.586029][   T11] usb 2-1: SerialNumber: syz
[  362.586287][ T8405] loop5: detected capacity change from 0 to 512
[  362.654974][   T11] usb 2-1: config 0 descriptor??
[  362.681078][   T11] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  362.705213][ T8405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.720001][ T8405] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.894011][   T11] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  362.932350][   T11] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  363.025255][ T8405] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #12: comm syz.5.962: invalid size
[  363.265452][ T8419] sp0: Synchronizing with TNC
[  363.286046][ T6020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.308231][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  363.332042][ T5481] usb 2-1: USB disconnect, device number 9
[  363.412262][ T5481] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  363.488303][ T5481] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  363.501328][ T5481] quatech2 2-1:0.51: device disconnected
[  363.622981][ T5852] kernel write not supported for file /input/event2 (pid: 5852 comm: kworker/1:4)
[  364.415018][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.978'.
[  364.835780][ T8452] loop7: detected capacity change from 0 to 256
[  364.878157][ T8450] loop5: detected capacity change from 0 to 1764
[  365.109581][ T8456] loop4: detected capacity change from 0 to 1024
[  365.155052][ T8456] EXT4-fs: Ignoring removed oldalloc option
[  365.264114][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  365.279883][ T8456] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.362273][ T8456] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.984: lblock 0 mapped to illegal pblock 0 (length 1)
[  365.391196][ T8456] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  365.404157][ T8456] EXT4-fs (loop4): This should not happen!! Data will be lost
[  365.404157][ T8456] 
[  365.630277][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  365.885959][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.993'.
[  366.574956][ T8491] loop4: detected capacity change from 0 to 1024
[  366.713725][ T8495] mkiss: ax0: crc mode is auto.
[  366.901096][ T3759] hfsplus: b-tree write err: -5, ino 4
[  367.283159][   T11] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  367.457639][   T11] usb 7-1: Using ep0 maxpacket: 32
[  367.494044][   T11] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  367.503673][   T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.617043][   T11] usb 7-1: config 0 descriptor??
[  367.663619][   T11] gspca_main: nw80x-2.14.0 probing 055f:d001
[  368.147475][ T8521] loop7: detected capacity change from 0 to 8192
[  368.235567][ T8526] program syz.4.1016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  368.272257][ T8521] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF
[  368.272805][   T11] gspca_nw80x: reg_w err -71
[  368.281202][ T8521] FAT-fs (loop7): Filesystem has been set read-only
[  368.286233][   T11] nw80x 7-1:0.0: probe with driver nw80x failed with error -71
[  368.330007][ T8527] loop1: detected capacity change from 0 to 1024
[  368.422289][   T11] usb 7-1: USB disconnect, device number 6
[  368.462042][ T8527] hfsplus: found bad thread record in catalog
[  368.602311][ T3759] hfsplus: b-tree write err: -5, ino 4
[  368.802431][ T8536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'.
[  369.227126][ T8544] sg_write: process 231 (syz.6.1024) changed security contexts after opening file descriptor, this is not allowed.
[  369.518742][ T8552] sch_fq: defrate 0 ignored.
[  369.994289][ T8566] macvtap0: entered promiscuous mode
[  370.002831][ T8564] loop6: detected capacity change from 0 to 256
[  370.005789][ T8566] macvtap0: left promiscuous mode
[  370.139964][ T8564] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  370.641842][ T8580] input: syz0 as /devices/virtual/input/input15
[  370.721331][ T8582] loop4: detected capacity change from 0 to 1024
[  370.878316][   T30] audit: type=1800 audit(1760474440.548:42): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1043" name="file1" dev="loop4" ino=20 res=0 errno=0
[  370.946980][ T8585] netlink: 'syz.5.1044': attribute type 21 has an invalid length.
[  370.955275][ T8585] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1044'.
[  371.629907][ T8597] loop4: detected capacity change from 0 to 1024
[  372.256919][ T3759] hfsplus: b-tree write err: -5, ino 4
[  372.897950][ T8616] loop4: detected capacity change from 0 to 128
[  372.940831][ T8616] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  372.979098][ T8616] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  373.203164][   T11] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  373.274617][ T5797] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  373.409770][   T11] usb 7-1: unable to get BOS descriptor or descriptor too short
[  373.439592][   T11] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1023
[  373.450367][   T11] usb 7-1: config 1 interface 0 has no altsetting 0
[  373.485251][   T11] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  373.498575][   T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.506828][   T11] usb 7-1: Product: syz
[  373.511160][   T11] usb 7-1: Manufacturer: syz
[  373.516103][   T11] usb 7-1: SerialNumber: syz
[  373.646730][ T8622] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  373.939627][   T11] usb 7-1: USB disconnect, device number 7
[  374.619393][ T8655] program syz.4.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  375.069593][   T11] IPVS: starting estimator thread 0...
[  375.163169][ T8669] IPVS: using max 240 ests per chain, 12000 per kthread
[  375.680763][ T8682] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  375.688629][ T8682] macvlan2: entered allmulticast mode
[  375.694451][ T8682] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  375.709767][ T8682] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  375.720830][ T8682] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  376.078626][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1093'.
[  376.497204][ T5799] Bluetooth: hci1: unexpected event for opcode 0x2042
[  376.767959][ T8706] input: syz1 as /devices/virtual/input/input17
[  377.126718][ T5481] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  377.248938][ T8718] loop4: detected capacity change from 0 to 512
[  377.261913][ T8718] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  377.330214][ T5481] usb 2-1: Using ep0 maxpacket: 8
[  377.341949][ T5481] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  377.353627][ T5481] usb 2-1: config 179 has no interface number 0
[  377.360102][ T5481] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  377.373046][ T5481] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  377.387866][ T5481] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  377.399974][ T5481] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  377.412161][ T5481] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  377.425980][ T5481] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  377.435497][ T5481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.593305][ T8710] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  377.866513][ T5481] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input18
[  378.104076][ T5481] usb 2-1: USB disconnect, device number 10
[  378.110323][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  378.110525][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  378.395261][ T8734] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  378.734608][ T8739] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1116'.
[  379.604287][ T8762] loop5: detected capacity change from 0 to 1024
[  380.054345][ T8772] loop7: detected capacity change from 0 to 4096
[  380.151287][ T8772] NILFS (loop7): bad btree root (ino=6): level = 0, flags = 0x9, nchildren = 0
[  380.160825][ T8772] NILFS (loop7): ifile inode (checkpoint number=2) corrupted
[  380.168784][ T8772] NILFS (loop7): error -5 while loading last checkpoint (checkpoint number=2)
[  380.338246][ T8776] netlink: 'syz.5.1134': attribute type 8 has an invalid length.
[  380.514140][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  380.523067][ T5799] Bluetooth: hci1: Injecting HCI hardware error event
[  380.543098][ T5799] Bluetooth: hci1: hardware error 0x00
[  380.672391][ T8784] loop6: detected capacity change from 0 to 1024
[  380.790889][ T8784] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  380.797864][ T8784] hfsplus: xattr searching failed
[  380.879667][ T8784] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  380.886473][ T8784] hfsplus: xattr search failed
[  381.098839][ T8792] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1142'.
[  381.214009][ T3759] hfsplus: b-tree write err: -5, ino 4
[  381.567730][ T8798] loop4: detected capacity change from 0 to 4096
[  381.712460][ T8809] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  382.070884][ T8815] loop5: detected capacity change from 0 to 1024
[  382.269877][ T8821] program syz.7.1155 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  382.299074][   T30] audit: type=1326 audit(1760474451.968:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f098eec9 code=0x7ffc0000
[  382.384509][   T30] audit: type=1326 audit(1760474452.018:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff4f098eec9 code=0x7ffc0000
[  382.410411][   T30] audit: type=1326 audit(1760474452.018:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f098eec9 code=0x7ffc0000
[  382.434049][   T30] audit: type=1326 audit(1760474452.018:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7ff4f098eec9 code=0x7ffc0000
[  382.456879][   T30] audit: type=1326 audit(1760474452.018:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f098eec9 code=0x7ffc0000
[  382.481564][   T30] audit: type=1326 audit(1760474452.018:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8814 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f098eec9 code=0x7ffc0000
[  382.597456][ T5799] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  382.728263][ T3759] hfsplus: b-tree write err: -5, ino 4
[  382.912936][   T30] audit: type=1326 audit(1760474452.578:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.4.1160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7b78eec9 code=0x0
[  383.014121][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  383.180398][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.183168][ T5481] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  383.194402][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.211629][    T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00
[  383.223939][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.275992][    T9] usb 8-1: config 0 descriptor??
[  383.407609][ T5481] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.418264][ T5481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  383.429783][ T5481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  383.441117][ T5481] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  383.536913][ T5481] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  383.549195][ T5481] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  383.557750][ T5481] usb 6-1: Manufacturer: syz
[  383.622597][ T5481] usb 6-1: config 0 descriptor??
[  383.748148][    T9] apple 0003:05AC:8102.000A: unknown main item tag 0x3
[  383.755600][    T9] apple 0003:05AC:8102.000A: unknown main item tag 0x3
[  383.782220][    T9] apple 0003:05AC:8102.000A: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.7-1/input0
[  383.948587][ T5852] usb 8-1: USB disconnect, device number 6
[  384.064252][ T5481] rc_core: IR keymap rc-hauppauge not found
[  384.070774][ T5481] Registered IR keymap rc-empty
[  384.089382][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.122111][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.145336][ T5481] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  384.160277][ T5481] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19
[  384.185665][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.219084][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.247469][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.276583][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.304050][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.325595][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.355024][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.374435][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.394458][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.420300][ T5481] mceusb 6-1:0.0: Error: mce write urb status = -71
[  384.446560][ T5481] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  384.456289][ T5481] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  384.538461][    T9] usb 6-1: USB disconnect, device number 6
[  385.163221][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'.
[  385.269539][ T8863] loop6: detected capacity change from 0 to 2048
[  385.401351][ T8863] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  385.471479][ T8863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.732986][ T7024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.379193][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  386.545326][ T8894] loop7: detected capacity change from 0 to 128
[  386.573464][    T9] usb 6-1: Using ep0 maxpacket: 32
[  386.585509][    T9] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  386.597921][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.634139][    T9] usb 6-1: config 0 descriptor??
[  386.650302][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  386.679888][ T8894] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  386.705783][ T8894] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.217050][ T7288] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  387.436989][ T8908] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma?
[  387.473319][ T5481] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  387.526671][    T9] gspca_vc032x: reg_w err -71
[  387.531529][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.537220][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.543099][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.548533][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.554132][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.559561][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.565701][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.571108][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.576649][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.582062][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.587610][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.596495][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.601921][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.608475][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.614020][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.623960][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.629402][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.636368][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[  387.641795][    T9] gspca_vc032x: Unknown sensor...
[  387.647298][    T9] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  387.664601][    T9] usb 6-1: USB disconnect, device number 7
[  388.358473][ T8910] loop6: detected capacity change from 0 to 32768
[  388.368666][ T5852] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  388.389140][ T8910] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  388.426920][ T5481] usb 2-1: unable to get BOS descriptor or descriptor too short
[  388.448367][ T5481] usb 2-1: unable to read config index 0 descriptor/start: -71
[  388.457007][ T5481] usb 2-1: can't read configurations, error -71
[  388.545907][ T8926] loop5: detected capacity change from 0 to 512
[  388.553283][ T5852] usb 5-1: Using ep0 maxpacket: 16
[  388.565703][ T5852] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.579605][ T5852] usb 5-1: config 0 interface 0 has no altsetting 0
[  388.586681][ T5852] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  388.596133][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.613092][ T8910] XFS (loop6): Ending clean mount
[  388.625668][ T5852] usb 5-1: config 0 descriptor??
[  388.639135][ T8910] XFS (loop6): Quotacheck needed: Please wait.
[  388.675427][ T8926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  388.688650][ T8926] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.715495][ T8910] XFS (loop6): Quotacheck: Done.
[  388.839169][ T7024] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  388.888665][ T6020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  389.142311][ T5852] hid (null): report_id 54409 is invalid
[  389.144781][ T8933] loop5: detected capacity change from 0 to 512
[  389.149077][ T5852] hid (null): report_id 1880715515 is invalid
[  389.161288][ T5852] hid (null): unknown global tag 0xd
[  389.167783][ T5852] hid (null): global environment stack overflow
[  389.437031][ T5852] usb 5-1: USB disconnect, device number 6
[  389.480342][ T8937] sctp: [Deprecated]: syz.1.1202 (pid 8937) Use of int in max_burst socket option deprecated.
[  389.480342][ T8937] Use struct sctp_assoc_value instead
[  389.914923][ T8945] input: syz1 as /devices/virtual/input/input20
[  390.424107][ T8958] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß‘�2.Ë>£~e’…ñŠ>/yµ™
[  390.713104][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1214'.
[  391.155802][ T3602] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.344307][ T3602] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.371677][ T8974] loop6: detected capacity change from 0 to 2048
[  391.437971][ T8974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  391.480314][ T3602] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.605021][ T3602] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.828394][ T3602] bridge_slave_1: left allmulticast mode
[  391.834459][ T3602] bridge_slave_1: left promiscuous mode
[  391.840954][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.855745][ T3602] bridge_slave_0: left allmulticast mode
[  391.861599][ T3602] bridge_slave_0: left promiscuous mode
[  391.868256][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.320440][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.342004][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.363476][ T3602] bond0 (unregistering): Released all slaves
[  392.780940][ T8985] comedi comedi3: multiq3: I/O port conflict (0x7,16)
[  392.854021][   T11] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  393.083415][   T11] usb 6-1: Using ep0 maxpacket: 8
[  393.178406][   T11] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  393.189525][   T11] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  393.200495][   T11] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  393.210789][   T11] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  393.224357][   T11] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  393.236987][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.244637][ T8982] loop6: detected capacity change from 0 to 32768
[  393.320923][ T3602] hsr_slave_0: left promiscuous mode
[  393.368178][ T3602] hsr_slave_1: left promiscuous mode
[  393.376944][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.384998][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.428517][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.438393][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.448739][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  393.459960][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  393.518805][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  393.553263][ T3602] veth1_macvtap: left promiscuous mode
[  393.558985][ T3602] veth0_macvtap: left promiscuous mode
[  393.568229][ T3602] veth1_vlan: left promiscuous mode
[  393.573870][ T3602] veth0_vlan: left promiscuous mode
[  393.581339][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  393.655664][   T11] usb 6-1: GET_CAPABILITIES returned 0
[  393.663841][   T11] usbtmc 6-1:16.0: can't read capabilities
[  393.689447][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  393.873638][   T11] usb 6-1: USB disconnect, device number 8
[  394.217902][ T3602] team0 (unregistering): Port device team_slave_1 removed
[  394.286997][ T3602] team0 (unregistering): Port device team_slave_0 removed
[  395.031307][ T3602] IPVS: stop unused estimator thread 0...
[  395.201897][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1231'.
[  395.412255][ T8987] chnl_net:caif_netlink_parms(): no params data found
[  395.873424][ T5799] Bluetooth: hci4: command tx timeout
[  396.021092][ T9017] ip6gretap1: entered promiscuous mode
[  396.027109][ T9017] ip6gretap1: entered allmulticast mode
[  396.672154][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.680759][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.688690][ T8987] bridge_slave_0: entered allmulticast mode
[  396.697955][ T8987] bridge_slave_0: entered promiscuous mode
[  396.788462][ T9022] loop4: detected capacity change from 0 to 32768
[  396.801163][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.812263][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.820178][ T8987] bridge_slave_1: entered allmulticast mode
[  396.829590][ T8987] bridge_slave_1: entered promiscuous mode
[  396.877691][ T9022] (syz.4.1239,9022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  396.895225][ T9022] (syz.4.1239,9022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  396.978080][ T8987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.035492][ T9022] (syz.4.1239,9022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  397.083046][ T9022] JBD2: Ignoring recovery information on journal
[  397.177823][ T8987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.231851][ T9022] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  397.246029][ T9022] (syz.4.1239,9022,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xe54c5487, computed 0xf23d69a4. Applying ECC.
[  397.260024][ T9022] (syz.4.1239,9022,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xe54c5487, computed 0x1c90b0c8
[  397.273762][ T9022] (syz.4.1239,9022,0):ocfs2_read_virt_blocks:1037 ERROR: status = -5
[  397.282054][ T9022] (syz.4.1239,9022,0):ocfs2_read_quota_block:150 ERROR: status = -5
[  397.290519][ T9022] (syz.4.1239,9022,0):ocfs2_local_check_quota_file:177 ERROR: status = -5
[  397.299447][ T9022] (syz.4.1239,9022,0):ocfs2_local_check_quota_file:179 ERROR: failed to read quota file header (type=0)
[  397.311036][ T9022] (syz.4.1239,9022,0):ocfs2_enable_quotas:943 ERROR: status = -22
[  397.319785][ T9022] (syz.4.1239,9022,0):ocfs2_fill_super:1144 ERROR: status = -22
[  397.433855][ T8987] team0: Port device team_slave_0 added
[  397.460353][ T9022] ocfs2: Unmounting device (7,4) on (node local)
[  397.541218][ T8987] team0: Port device team_slave_1 added
[  397.921928][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.929354][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.958410][ T8987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.042599][ T9044] loop6: detected capacity change from 0 to 128
[  398.043559][ T5799] Bluetooth: hci4: command tx timeout
[  398.069177][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.080598][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  398.107149][ T8987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.109265][ T9044] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  398.195278][ T9044] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  398.320455][ T8987] hsr_slave_0: entered promiscuous mode
[  398.330433][ T8987] hsr_slave_1: entered promiscuous mode
[  398.339209][ T8987] debugfs: 'hsr0' already exists in 'hsr'
[  398.348080][ T8987] Cannot create hsr debugfs directory
[  398.388459][ T9044] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes
[  398.443549][ T5848] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  398.584500][ T7024] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  398.627986][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.640840][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.651110][ T5848] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  398.666550][ T5848] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  398.678298][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.703630][ T5848] usb 6-1: config 0 descriptor??
[  398.982207][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'.
[  399.025682][ T9059] ipvlan3: entered promiscuous mode
[  399.031093][ T9059] ipvlan3: entered allmulticast mode
[  399.036812][ T9059] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  399.243254][ T5848] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  399.250940][ T5848] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  399.258839][ T5848] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x2
[  399.270518][ T5848] plantronics 0003:047F:FFFF.000C: unbalanced collection at end of report description
[  399.286488][ T5848] plantronics 0003:047F:FFFF.000C: parse failed
[  399.296238][ T5848] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22
[  399.315402][ T8987] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  399.344416][ T8987] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  399.366314][ T5852] usb 6-1: USB disconnect, device number 9
[  399.379759][ T8987] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  399.405779][ T8987] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  399.601599][ T9064] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1256'.
[  399.612507][ T9064] netem: unknown loss type 0
[  399.617883][ T9064] netem: change failed
[  399.811831][ T5852] kernel read not supported for file /sg0 (pid: 5852 comm: kworker/1:4)
[  400.037129][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.114262][ T5799] Bluetooth: hci4: command tx timeout
[  400.135735][ T8987] 8021q: adding VLAN 0 to HW filter on device team0
[  400.164042][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.171495][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.257774][ T9072] netlink: 'syz.4.1260': attribute type 4 has an invalid length.
[  400.281494][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.289073][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.858461][ T9083] loop4: detected capacity change from 0 to 512
[  400.903280][ T9083] EXT4-fs: Ignoring removed i_version option
[  400.910802][ T9083] EXT4-fs: Ignoring removed nobh option
[  400.962948][ T9083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  401.029440][ T9083] EXT4-fs (loop4): 1 truncate cleaned up
[  401.041833][ T9083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  401.227078][ T9083] EXT4-fs (loop4): shut down requested (0)
[  401.429421][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.645116][ T8987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.885091][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1272'.
[  402.137308][ T9107] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  402.193455][ T5799] Bluetooth: hci4: command tx timeout
[  402.348178][ T9107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.358832][ T9107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  402.371704][ T9107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  402.534866][ T9107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  402.546487][ T9107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.555802][ T9107] usb 2-1: Product: syz
[  402.560161][ T9107] usb 2-1: Manufacturer: syz
[  402.565261][ T9107] usb 2-1: SerialNumber: syz
[  402.618092][ T9104] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  402.657316][ T9107] cdc_mbim 2-1:1.0: skipping garbage
[  402.663070][ T9107] usb 2-1: selecting invalid altsetting 1
[  403.091535][ T9107] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS
[  403.098505][ T9107] cdc_mbim 2-1:1.0: bind() failure
[  403.224099][ T9128] vivid-004: disconnect
[  403.243338][ T9128] vivid-004: reconnect
[  403.315021][ T9107] usb 2-1: USB disconnect, device number 13
[  403.485360][   T30] audit: type=1326 audit(1760474473.158:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9134 comm="syz.6.1280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ec1d8eec9 code=0x0
[  403.619480][ T8987] veth0_vlan: entered promiscuous mode
[  403.621440][ T9137] loop6: detected capacity change from 0 to 1024
[  403.684645][ T8987] veth1_vlan: entered promiscuous mode
[  403.826962][ T8987] veth0_macvtap: entered promiscuous mode
[  403.865154][ T8987] veth1_macvtap: entered promiscuous mode
[  403.952493][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.997873][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.050078][ T3624] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.074441][ T3624] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.111553][ T3624] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.137192][ T3624] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.295197][ T9164] loop6: detected capacity change from 0 to 256
[  405.420049][ T9164] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  406.334586][   T42] kernel write not supported for file /uinput (pid: 42 comm: kworker/1:1)
[  406.495013][ T9170] loop4: detected capacity change from 0 to 40427
[  406.524992][ T9170] F2FS-fs (loop4): Image doesn't support compression
[  406.531880][ T9170] F2FS-fs (loop4): build fault injection rate: 14
[  406.542914][ T9170] F2FS-fs (loop4): build fault injection type: 0x1dff
[  406.560189][ T9170] F2FS-fs (loop4): invalid crc value
[  406.578562][ T9170] f2fs_printk: 1 callbacks suppressed
[  406.578632][ T9170] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x79b9/0xa850
[  406.595366][ T9170] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12)
[  406.883641][ T9188] loop5: detected capacity change from 0 to 8
[  408.325124][ T9201] loop6: detected capacity change from 0 to 256
[  408.569593][ T9201] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  408.662029][ T9201] exFAT-fs (loop6): failed to exfat_utf8_to_utf16 (err : -22) nls len : 256
[  408.869400][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  408.877031][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  409.474290][ T9210] loop4: detected capacity change from 0 to 1024
[  409.621132][ T3602] hfsplus: b-tree write err: -5, ino 4
[  410.004732][ T9225] loop6: detected capacity change from 0 to 512
[  410.039385][ T9225] EXT4-fs: Ignoring removed nobh option
[  410.096463][ T9225] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.1312: corrupted in-inode xattr: e_value size too large
[  410.190477][ T9225] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1312: couldn't read orphan inode 15 (err -117)
[  410.239378][ T9225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.420549][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.430087][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.521974][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.532478][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.867734][ T7024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.280103][ T9251] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1321'.
[  411.385487][ T9250] loop4: detected capacity change from 0 to 2048
[  411.524883][ T9250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  411.728303][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1326'.
[  411.737549][ T9261] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1326'.
[  411.746995][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1326'.
[  411.970992][ T9250] Process accounting resumed
[  412.024365][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.096337][ T9266] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1328'.
[  412.320971][ T9271] program syz.5.1331 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  412.734927][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1334'.
[  413.354355][ T9284] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  413.882239][ T9298] gfs2: gfs2 mount does not exist
[  414.307166][ T9309] loop6: detected capacity change from 0 to 136
[  414.969432][ T9321] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  415.327399][ T9329] loop6: detected capacity change from 0 to 1024
[  415.432024][ T9329] hfsplus: bad catalog entry type
[  415.694556][ T3495] hfsplus: b-tree write err: -5, ino 4
[  415.990210][ T9346] loop4: detected capacity change from 0 to 256
[  416.105937][ T9346] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d)
[  416.925348][ T9357] loop4: detected capacity change from 0 to 4096
[  416.984209][ T9357] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  417.884194][ T9368] loop8: detected capacity change from 0 to 32768
[  417.939854][ T9368] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  418.316491][ T9368] XFS (loop8): Ending clean mount
[  418.325476][ T9388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  418.333143][ T9388] IPv6: NLM_F_CREATE should be set when creating new route
[  418.340622][ T9388] IPv6: NLM_F_CREATE should be set when creating new route
[  418.348146][ T9388] IPv6: NLM_F_CREATE should be set when creating new route
[  418.371943][ T9368] XFS (loop8): Quotacheck needed: Please wait.
[  418.432079][ T9368] XFS (loop8): Quotacheck: Done.
[  418.606060][ T8987] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  418.666092][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1382'.
[  418.675494][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1382'.
[  419.448306][ T2158] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  419.683157][ T2158] usb 6-1: Using ep0 maxpacket: 16
[  419.722269][ T2158] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.733921][ T2158] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.744095][ T2158] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.753274][ T2158] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  419.762546][ T2158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.010298][ T9406] loop4: detected capacity change from 0 to 32768
[  420.011142][ T9410] loop6: detected capacity change from 0 to 2048
[  420.049711][ T2158] usb 6-1: config 0 descriptor??
[  420.113981][ T9410] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  420.159802][ T9410] bio_check_eod: 9 callbacks suppressed
[  420.159936][ T9410] syz.6.1392: attempt to access beyond end of device
[  420.159936][ T9410] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  420.188069][ T9413] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  420.479667][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  420.518306][ T2158] hid (null): unknown global tag 0xc
[  420.524564][ T2158] hid (null): unknown global tag 0xd
[  420.724640][   T42] usb 6-1: USB disconnect, device number 10
[  421.533096][ T9431] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1400'.
[  422.882944][ T2158] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  423.053158][ T2158] usb 6-1: Using ep0 maxpacket: 16
[  423.075855][ T2158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.087065][ T2158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  423.098653][ T2158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  423.108790][ T2158] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  423.118839][ T2158] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  423.186252][ T2158] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  423.195783][ T2158] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  423.204171][ T2158] usb 6-1: Manufacturer: syz
[  423.215572][ T2158] usb 6-1: config 0 descriptor??
[  423.501666][ T9463] netlink: 252 bytes leftover after parsing attributes in process `syz.8.1412'.
[  423.685898][ T2158] rc_core: IR keymap rc-hauppauge not found
[  423.691981][ T2158] Registered IR keymap rc-empty
[  423.698071][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  423.755174][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  423.789711][ T2158] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  423.804985][ T2158] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21
[  423.871610][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  423.907260][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  423.934570][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  423.982217][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  424.003275][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  424.024689][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  424.056026][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  424.095571][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  424.130340][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  424.155486][ T2158] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  424.185292][ T2158] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  424.202231][ T2158] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  424.275373][ T2158] usb 6-1: USB disconnect, device number 11
[  424.353319][ T9107] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  424.533270][ T9107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.544792][ T9107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  424.574610][ T9107] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  424.586486][ T9107] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  424.595759][ T9107] usb 5-1: Manufacturer: syz
[  424.606764][ T9107] usb 5-1: config 0 descriptor??
[  424.668770][ T9481] loop6: detected capacity change from 0 to 1024
[  425.055221][ T9107] pyra 0003:1E7D:2CF6.000E: unknown global tag 0xe
[  425.063508][ T9107] pyra 0003:1E7D:2CF6.000E: item 0 4 1 14 parsing failed
[  425.092406][ T9107] pyra 0003:1E7D:2CF6.000E: parse failed
[  425.103790][ T9107] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -22
[  425.297576][ T9107] usb 5-1: USB disconnect, device number 7
[  425.363519][ T9489] loop6: detected capacity change from 0 to 1024
[  425.651940][ T3759] hfsplus: b-tree write err: -5, ino 8
[  426.694454][ T9515] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.1436'.
[  426.834463][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1437'.
[  427.661257][ T9539] loop6: detected capacity change from 0 to 128
[  427.847339][ T9539] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  427.898480][ T9539] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.984192][ T9539] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes
[  428.119798][ T9552] bond0: entered promiscuous mode
[  428.125226][ T9552] bond_slave_0: entered promiscuous mode
[  428.131958][ T9552] bond_slave_1: entered promiscuous mode
[  428.212052][ T9552] bond0: left promiscuous mode
[  428.221506][ T9552] bond_slave_0: left promiscuous mode
[  428.228249][ T9552] bond_slave_1: left promiscuous mode
[  428.257594][ T7024] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  428.405160][   T42] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  428.598087][   T42] usb 9-1: Using ep0 maxpacket: 16
[  428.620814][   T42] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.632287][   T42] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.642596][   T42] usb 9-1: config 0 interface 0 has no altsetting 0
[  428.649611][   T42] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  428.660141][   T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.703770][   T42] usb 9-1: config 0 descriptor??
[  428.958537][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.969243][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.441297][   T42] usb 9-1: USB disconnect, device number 2
[  429.946957][ T9581] loop5: detected capacity change from 0 to 512
[  429.990843][ T9581] EXT4-fs: Ignoring removed nobh option
[  430.008635][ T9581] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  430.047585][ T9581] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1465: iget: bad i_size value: 38620345925642
[  430.083091][ T9581] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1465: couldn't read orphan inode 15 (err -117)
[  430.144738][ T9581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.192393][ T9581] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1465: invalid indirect mapped block 3973251072 (level 0)
[  430.263507][ T9107] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  430.399627][ T6020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.457183][ T9107] usb 5-1: Using ep0 maxpacket: 32
[  430.486699][ T9107] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  430.496324][ T9107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.553993][ T9107] usb 5-1: config 0 descriptor??
[  430.801657][ T9107] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  430.833258][ T9107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  430.850267][ T9107] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  430.858177][ T9107] usb 5-1: media controller created
[  430.917246][ T9107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  431.108347][ T9600] bridge0: port 3(syz_tun) entered blocking state
[  431.117232][ T9600] bridge0: port 3(syz_tun) entered disabled state
[  431.124666][ T9600] syz_tun: entered allmulticast mode
[  431.133279][ T9600] syz_tun: entered promiscuous mode
[  431.141547][ T9600] bridge0: port 3(syz_tun) entered blocking state
[  431.148581][ T9600] bridge0: port 3(syz_tun) entered forwarding state
[  431.438444][ T9107] az6027: usb out operation failed. (-71)
[  431.448034][ T9107] stb0899_attach: Driver disabled by Kconfig
[  431.455431][ T9107] az6027: no front-end attached
[  431.455431][ T9107] 
[  431.487587][ T9107] az6027: usb out operation failed. (-71)
[  431.495168][ T9107] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  431.505809][ T9107] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22
[  431.528723][ T9107] dvb-usb: schedule remote query interval to 400 msecs.
[  431.536412][ T9107] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  431.567560][ T9107] usb 5-1: USB disconnect, device number 8
[  431.880121][ T9107] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  432.430726][ T9613] loop6: detected capacity change from 0 to 32768
[  432.551276][ T9613] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1480 (9613)
[  432.669529][ T9614] loop8: detected capacity change from 0 to 32768
[  432.712473][ T9613] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  432.723318][ T9613] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  432.785371][ T9614] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  432.870935][ T9613] BTRFS info (device loop6): enabling ssd optimizations
[  432.882375][ T9613] BTRFS info (device loop6): enabling free space tree
[  432.913155][ T9613] BTRFS error (device loop6): balance: invalid convert metadata profile raid1c4
[  432.987826][ T9614] XFS (loop8): Ending clean mount
[  433.019301][ T7024] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  433.089853][ T8987] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  433.128145][ T9647] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96
[  433.875874][ T9656] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1489'.
[  434.252586][    C1] sd 0:0:1:0: [sda] tag#6830 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  434.263739][    C1] sd 0:0:1:0: [sda] tag#6830 CDB: Read(6) 08 00 00 00 00 00
[  434.272085][ T9662] loop4: detected capacity change from 0 to 1024
[  434.305206][ T9662] EXT4-fs: Ignoring removed bh option
[  434.313950][ T9662] EXT4-fs: inline encryption not supported
[  434.356398][ T9662] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  434.418169][ T9662] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  434.497084][ T9662] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1491: lblock 2 mapped to illegal pblock 2 (length 1)
[  434.521587][ T9662] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  434.530393][ T9662] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1491: lblock 0 mapped to illegal pblock 48 (length 1)
[  434.547730][ T9662] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  434.557031][ T9662] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1491: Failed to acquire dquot type 0
[  434.574655][ T9662] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  434.613275][ T9662] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1491: mark_inode_dirty error
[  434.673551][ T9662] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  434.684529][ T9662] EXT4-fs (loop4): 1 orphan inode deleted
[  434.692349][ T9662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.743214][ T3495] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  434.812352][ T3495] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  434.821237][ T3495] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:10: Failed to release dquot type 0
[  434.906125][ T9662] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1491: lblock 0 mapped to illegal pblock 48 (length 1)
[  434.940940][ T9662] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  435.142892][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.173469][   T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  435.362206][   T42] usb 7-1: Using ep0 maxpacket: 8
[  435.378734][   T42] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  435.387347][   T42] usb 7-1: config 179 has no interface number 0
[  435.394149][   T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  435.405557][   T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  435.420305][   T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  435.433105][   T42] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  435.445027][   T42] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  435.459351][   T42] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  435.469077][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.687154][ T9677] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  436.003558][   T42] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input23
[  436.227429][   T42] usb 7-1: USB disconnect, device number 8
[  436.233622][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  436.233838][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  436.514944][ T9702] loop5: detected capacity change from 0 to 512
[  436.528127][ T9704] loop4: detected capacity change from 0 to 256
[  436.590392][   T30] audit: type=1800 audit(1760474506.258:51): pid=9702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1507" name="file2" dev="loop5" ino=1048671 res=0 errno=0
[  436.791256][ T9704] FAT-fs (loop4): Directory bread(block 64) failed
[  436.799436][ T9704] FAT-fs (loop4): Directory bread(block 65) failed
[  436.806525][ T9704] FAT-fs (loop4): Directory bread(block 66) failed
[  436.813388][ T9704] FAT-fs (loop4): Directory bread(block 67) failed
[  436.820229][ T9704] FAT-fs (loop4): Directory bread(block 68) failed
[  436.827131][ T9704] FAT-fs (loop4): Directory bread(block 69) failed
[  436.834978][ T9704] FAT-fs (loop4): Directory bread(block 70) failed
[  436.841677][ T9704] FAT-fs (loop4): Directory bread(block 71) failed
[  436.851360][ T9704] FAT-fs (loop4): Directory bread(block 72) failed
[  436.859046][ T9704] FAT-fs (loop4): Directory bread(block 73) failed
[  436.956960][ T9708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1510'.
[  436.966478][ T9708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1510'.
[  437.094095][ T9712] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1512'.
[  437.103659][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1512'.
[  437.294531][ T9107] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  437.458022][ T9722] loop6: detected capacity change from 0 to 128
[  437.508196][ T9107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  437.520407][ T9107] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.526831][ T9722] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  437.530647][ T9107] usb 6-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 8.00
[  437.551725][ T9107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.576613][ T9722] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  437.705041][ T9107] usb 6-1: config 0 descriptor??
[  437.916893][ T3495] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  438.176777][ T9107] sony 0003:12BA:0100.0010: unknown main item tag 0x0
[  438.187570][ T9107] sony 0003:12BA:0100.0010: unknown main item tag 0x0
[  438.196811][ T9107] sony 0003:12BA:0100.0010: unknown main item tag 0x0
[  438.207488][ T9107] sony 0003:12BA:0100.0010: unknown main item tag 0x0
[  438.215629][ T9107] sony 0003:12BA:0100.0010: unknown main item tag 0x0
[  438.223024][ T9107] sony 0003:12BA:0100.0010: unknown main item tag 0x0
[  438.230156][ T9107] sony 0003:12BA:0100.0010: unknown main item tag 0x0
[  438.248749][ T9107] sony 0003:12BA:0100.0010: hidraw0: USB HID v0.07 Device [HID 12ba:0100] on usb-dummy_hcd.5-1/input0
[  438.261777][ T9107] sony 0003:12BA:0100.0010: failed to claim input
[  438.406816][   T42] usb 6-1: USB disconnect, device number 12
[  438.467261][ T9731] loop4: detected capacity change from 0 to 2048
[  438.550187][ T9731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.564177][ T9731] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  438.650983][   T30] audit: type=1800 audit(1760474508.318:52): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1522" name="file0" dev="loop4" ino=13 res=0 errno=0
[  438.658733][ T9731] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1522: bg 0: block 345: padding at end of block bitmap is not set
[  438.700072][ T9731] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0
[  438.709654][ T9731] fs-verity (loop4, inode 13): Error -117 building Merkle tree
[  438.840986][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.503314][ T9761] loop8: detected capacity change from 0 to 128
[  440.303713][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1539'.
[  440.327893][ T9777] bond0: entered promiscuous mode
[  440.336066][ T9777] bond_slave_0: entered promiscuous mode
[  440.344124][ T9777] bond_slave_1: entered promiscuous mode
[  440.417927][ T9777] bond0: left promiscuous mode
[  440.423329][ T9777] bond_slave_0: left promiscuous mode
[  440.429883][ T9777] bond_slave_1: left promiscuous mode
[  440.604185][ T9774] loop8: detected capacity change from 0 to 4096
[  441.358555][ T9783] loop6: detected capacity change from 0 to 32768
[  441.466040][ T9783] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  441.476294][ T9783] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  441.570391][ T9783] XFS (loop6): Ending clean mount
[  441.585748][ T9783] XFS (loop6): Quotacheck needed: Please wait.
[  441.673856][ T9783] XFS (loop6): Quotacheck: Done.
[  441.796417][ T7024] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  442.513950][ T9804] loop4: detected capacity change from 0 to 32768
[  442.578893][ T9804] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  442.578893][ T9804] 
[  442.592427][ T9804] ERROR: (device loop4): remounting filesystem as read-only
[  443.697916][ T9832] bridge0: port 3(syz_tun) entered blocking state
[  443.704968][ T9832] bridge0: port 3(syz_tun) entered disabled state
[  443.713855][ T9832] syz_tun: entered allmulticast mode
[  443.722153][ T9832] syz_tun: entered promiscuous mode
[  443.729507][ T9832] bridge0: port 3(syz_tun) entered blocking state
[  443.736437][ T9832] bridge0: port 3(syz_tun) entered forwarding state
[  443.794135][ T9833] sit0: entered promiscuous mode
[  443.827383][ T9833] netlink: 'syz.1.1560': attribute type 1 has an invalid length.
[  443.838376][ T9833] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1560'.
[  444.179690][ T9839] Set syz0 is full, maxelem 0 reached
[  444.489726][ T9848] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1568'.
[  445.341232][ T9859] syz.6.1573 (9859) used greatest stack depth: 2440 bytes left
[  445.665851][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'.
[  445.675715][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'.
[  445.703334][ T9877] macvlan4: entered allmulticast mode
[  445.708910][ T9877] veth1_vlan: entered allmulticast mode
[  445.870791][ T9879] loop8: detected capacity change from 0 to 64
[  446.068697][ T9885] loop4: detected capacity change from 0 to 128
[  446.133354][   T30] audit: type=1800 audit(1760474515.798:53): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1585" name="file2" dev="loop4" ino=1048675 res=0 errno=0
[  446.134139][ T9885] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  446.162973][ T9885] FAT-fs (loop4): Filesystem has been set read-only
[  446.171309][ T9885] syz.4.1585: attempt to access beyond end of device
[  446.171309][ T9885] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  446.185743][ T9885] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  446.195278][ T9885] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  446.213597][ T9885] syz.4.1585: attempt to access beyond end of device
[  446.213597][ T9885] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  446.265570][ T9885] syz.4.1585: attempt to access beyond end of device
[  446.265570][ T9885] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  446.313862][ T9885] syz.4.1585: attempt to access beyond end of device
[  446.313862][ T9885] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  446.338587][ T9885] syz.4.1585: attempt to access beyond end of device
[  446.338587][ T9885] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  446.369940][ T9885] syz.4.1585: attempt to access beyond end of device
[  446.369940][ T9885] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  446.452108][ T9889] syz.4.1585: attempt to access beyond end of device
[  446.452108][ T9889] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128
[  446.467013][ T9889] buffer_io_error: 2 callbacks suppressed
[  446.467087][ T9889] Buffer I/O error on dev loop4, logical block 2065, async page read
[  446.482467][ T9889] syz.4.1585: attempt to access beyond end of device
[  446.482467][ T9889] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128
[  446.501399][ T9889] Buffer I/O error on dev loop4, logical block 2066, async page read
[  446.513134][ T9889] syz.4.1585: attempt to access beyond end of device
[  446.513134][ T9889] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128
[  446.527902][ T9889] Buffer I/O error on dev loop4, logical block 2067, async page read
[  446.536519][ T9889] syz.4.1585: attempt to access beyond end of device
[  446.536519][ T9889] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128
[  446.550182][ T9889] Buffer I/O error on dev loop4, logical block 2068, async page read
[  446.558617][ T9889] Buffer I/O error on dev loop4, logical block 2069, async page read
[  446.567171][ T9889] Buffer I/O error on dev loop4, logical block 2070, async page read
[  446.578715][ T9889] Buffer I/O error on dev loop4, logical block 2071, async page read
[  446.588267][ T9889] Buffer I/O error on dev loop4, logical block 2072, async page read
[  446.597678][ T9889] Buffer I/O error on dev loop4, logical block 2065, async page read
[  446.609251][ T9889] Buffer I/O error on dev loop4, logical block 2066, async page read
[  447.260361][ T9905] loop8: detected capacity change from 0 to 16
[  447.310342][ T9905] erofs (device loop8): mounted with root inode @ nid 36.
[  448.305108][ T9909] loop5: detected capacity change from 0 to 32768
[  448.480110][ T9909] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  448.627572][ T9909] XFS (loop5): Ending clean mount
[  448.737322][ T6020] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  449.377624][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1604'.
[  449.388418][ T9938] netlink: 'syz.6.1604': attribute type 5 has an invalid length.
[  449.585417][ T9942] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1605'.
[  450.319216][ T9952] loop4: detected capacity change from 0 to 4096
[  450.717284][ T9958] loop6: detected capacity change from 0 to 4096
[  451.024779][ T3759] ntfs3(loop4): ino=5, mi_enum_attr
[  451.498580][ T9976] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  451.512390][ T9977] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 1
[  451.535032][ T9978] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 2
[  451.562519][ T9980] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 3
[  451.624542][ T9979] tap0: tun_chr_ioctl cmd 1074025675
[  451.630331][ T9979] tap0: persist enabled
[  451.997639][ T9989] vlan2: entered allmulticast mode
[  452.039612][   T42] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  452.097403][ T9992] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1625'.
[  452.245494][   T42] usb 7-1: Using ep0 maxpacket: 32
[  452.279074][   T42] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  452.290628][   T42] usb 7-1: config 0 interface 0 has no altsetting 0
[  452.297743][   T42] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  452.307253][   T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.395080][   T42] usb 7-1: config 0 descriptor??
[  452.980442][T10005] loop4: detected capacity change from 0 to 512
[  453.023966][T10005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.188316][   T42] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0
[  453.202289][   T42] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0
[  453.210191][   T42] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0
[  453.213757][T10005] EXT4-fs warning (device loop4): ext4_begin_enable_verity:135: inode #13: comm syz.4.1631: verity is only allowed on extent-based files
[  453.217978][   T42] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0
[  453.241613][   T42] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x0
[  453.267809][   T42] corsair-psu 0003:1B1C:1C09.0011: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0
[  453.485800][T10016] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1635'.
[  453.487328][ T5797] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.593419][   T42] corsair-psu 0003:1B1C:1C09.0011: unable to initialize device (-110)
[  453.638671][   T42] corsair-psu 0003:1B1C:1C09.0011: probe with driver corsair-psu failed with error -110
[  453.705260][   T42] usb 7-1: USB disconnect, device number 9
[  453.965715][T10020] loop4: detected capacity change from 0 to 4096
[  454.171071][T10020] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  454.278097][   T30] audit: type=1800 audit(1760474523.948:54): pid=10020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1637" name="file1" dev="loop4" ino=30 res=0 errno=0
[  454.915070][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.225048][T10034] loop6: detected capacity change from 0 to 4096
[  455.593742][T10038] loop8: detected capacity change from 0 to 40427
[  455.635278][T10038] F2FS-fs (loop8): invalid crc value
[  455.950007][T10038] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  455.997989][T10038] F2FS-fs (loop8): Start checkpoint disabled!
[  456.013341][T10038] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  456.023882][T10038] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  457.243047][   T30] audit: type=1800 audit(1760474526.908:55): pid=10034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1644" name="file1" dev="loop6" ino=33 res=0 errno=0
[  457.633876][   T42] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  457.843268][   T42] usb 6-1: Using ep0 maxpacket: 16
[  457.867318][   T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.878736][   T42] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  457.888150][   T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.958931][   T42] usb 6-1: config 0 descriptor??
[  458.430231][   T42] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  458.837495][   T42] usb 6-1: USB disconnect, device number 13
[  459.964543][T10087] loop4: detected capacity change from 0 to 32768
[  460.026409][T10087] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  460.039102][T10087] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  460.039592][ T9107] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  460.067328][T10087] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  460.222128][ T9107] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  460.230685][ T9107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.241716][ T9107] usb 2-1: config 0 has no interface number 0
[  460.248137][ T9107] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 51712, setting to 64
[  460.257287][T10087] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  460.259621][ T9107] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  460.279945][ T9107] usb 2-1: config 0 interface 52 has no altsetting 0
[  460.542095][ T9107] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  460.551846][ T9107] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  460.560404][ T9107] usb 2-1: Manufacturer: syz
[  460.684953][ T9107] usb 2-1: config 0 descriptor??
[  460.748066][ T9107] hub 2-1:0.52: bad descriptor, ignoring hub
[  460.754584][ T9107] hub 2-1:0.52: probe with driver hub failed with error -5
[  460.968157][ T9107] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input24
[  461.217261][T10109] loop4: detected capacity change from 0 to 512
[  461.264520][T10109] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  461.303756][ T9107] usb 2-1: USB disconnect, device number 14
[  461.373385][T10109] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  461.719584][T10122] loop6: detected capacity change from 0 to 256
[  461.725373][T10119] loop4: detected capacity change from 0 to 2048
[  461.761779][T10119] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  461.771833][T10119] NILFS (loop4): mounting unchecked fs
[  461.854234][T10119] NILFS (loop4): recovery complete
[  461.883062][T10125] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  461.911410][T10124] VFS: Can't find a romfs filesystem on dev nullb0.
[  461.911410][T10124] 
[  462.072191][T10122] FAT-fs (loop6): Directory bread(block 64) failed
[  462.079187][T10122] FAT-fs (loop6): Directory bread(block 65) failed
[  462.086440][T10122] FAT-fs (loop6): Directory bread(block 66) failed
[  462.093343][T10122] FAT-fs (loop6): Directory bread(block 67) failed
[  462.100166][T10122] FAT-fs (loop6): Directory bread(block 68) failed
[  462.107231][T10122] FAT-fs (loop6): Directory bread(block 69) failed
[  462.114219][T10122] FAT-fs (loop6): Directory bread(block 70) failed
[  462.120903][T10122] FAT-fs (loop6): Directory bread(block 71) failed
[  462.127959][T10122] FAT-fs (loop6): Directory bread(block 72) failed
[  462.134893][T10122] FAT-fs (loop6): Directory bread(block 73) failed
[  462.338219][T10122] bio_check_eod: 1716 callbacks suppressed
[  462.338292][T10122] syz.6.1683: attempt to access beyond end of device
[  462.338292][T10122] loop6: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  463.601921][T10136] loop4: detected capacity change from 0 to 40427
[  463.621071][T10136] F2FS-fs (loop4): invalid crc value
[  463.876228][T10136] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  463.893596][T10136] F2FS-fs (loop4): Start checkpoint disabled!
[  463.988760][T10136] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  464.012402][T10136] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  464.135779][T10153] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  464.156991][T10154] kernel read not supported for file /eth0 (pid: 10154 comm: syz.1.1697)
[  464.224048][   T30] audit: type=1800 audit(1760474533.838:56): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1697" name="eth0" dev="mqueue" ino=26767 res=0 errno=0
[  464.429852][T10156] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  464.480181][T10159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1701'.
[  465.552414][T10167] loop6: detected capacity change from 0 to 32768
[  465.592568][T10167] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  465.935671][T10167] XFS (loop6): Ending clean mount
[  465.947380][T10167] XFS (loop6): Quotacheck needed: Please wait.
[  466.018854][T10167] XFS (loop6): Quotacheck: Done.
[  466.214633][ T7024] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  466.519818][ T5799] Bluetooth: hci4: link tx timeout
[  466.525590][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  466.548512][ T5799] Bluetooth: hci4: link tx timeout
[  466.554147][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  466.562163][ T5799] Bluetooth: hci4: link tx timeout
[  466.569867][ T5799] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  467.763959][T10217] loop8: detected capacity change from 0 to 1024
[  467.818100][T10217] EXT4-fs: Ignoring removed orlov option
[  467.854423][T10223] binder: 10221:10223 ioctl c018620b 0 returned -14
[  467.965226][T10217] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.168137][ T8987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.247659][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'.
[  468.289330][T10234] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  468.595646][ T5799] Bluetooth: hci4: command 0x0406 tx timeout
[  469.849509][T10269] loop6: detected capacity change from 0 to 512
[  469.881106][T10269] EXT4-fs: Ignoring removed bh option
[  469.894341][T10269] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  469.955158][T10269] EXT4-fs (loop6): 1 truncate cleaned up
[  469.963204][T10269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.132487][ T7024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.201049][T10279] loop8: detected capacity change from 0 to 128
[  470.309127][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  470.315966][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  471.115807][T10295] loop4: detected capacity change from 0 to 1024
[  471.543555][T10301] netlink: 324 bytes leftover after parsing attributes in process `syz.8.1758'.
[  471.544683][T10298] loop6: detected capacity change from 0 to 4096
[  471.679173][T10306] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  472.488212][T10321] loop6: detected capacity change from 0 to 256
[  472.614781][T10321] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066cf1, utbl_chksum : 0xe619d30d)
[  472.695171][T10321] exFAT-fs (loop6): error, data size is invalid(150994954)
[  472.702590][T10321] exFAT-fs (loop6): Filesystem has been set read-only
[  472.766315][T10321] exFAT-fs (loop6): error, data size is invalid(150994954)
[  473.306152][T10336] loop6: detected capacity change from 0 to 1024
[  473.420357][T10336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  473.435888][T10336] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.563932][T10336] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.1773: lblock 3 mapped to illegal pblock 3 (length 3)
[  473.708323][ T7024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  473.753202][   T42] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  473.929919][   T42] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  473.942218][   T42] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.952852][   T42] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  473.966375][   T42] usb 2-1: config 0 interface 0 has no altsetting 0
[  473.973410][   T42] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  473.982865][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.117194][   T42] usb 2-1: config 0 descriptor??
[  474.344363][T10351] loop4: detected capacity change from 0 to 4096
[  474.415918][T10357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  474.574992][   T42] hid-alps 0003:044E:120C.0013: item fetching failed at offset 5/8
[  474.607998][   T42] hid-alps 0003:044E:120C.0013: parse failed
[  474.614866][   T42] hid-alps 0003:044E:120C.0013: probe with driver hid-alps failed with error -22
[  474.775106][   T42] usb 2-1: USB disconnect, device number 15
[  475.121123][T10363] erspan0: entered promiscuous mode
[  475.348319][T10365] loop8: detected capacity change from 0 to 256
[  475.448276][T10365] exfat: Deprecated parameter 'namecase'
[  475.456240][T10365] exfat: Deprecated parameter 'namecase'
[  475.499966][T10359] loop5: detected capacity change from 0 to 40427
[  475.514798][T10359] F2FS-fs (loop5): build fault injection rate: 14
[  475.521414][T10359] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  475.536808][T10359] F2FS-fs (loop5): invalid crc value
[  475.573910][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010
[  475.608708][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010
[  475.767363][T10365] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  475.859303][T10359] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  475.872007][T10359] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  475.906258][T10359] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  475.997219][T10359] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0
[  476.016963][T10371] loop6: detected capacity change from 0 to 2048
[  476.103042][ T6020] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x12a2/0x2fc0
[  476.113940][T10371] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  476.115677][ T6020] F2FS-fs (loop5): inconsistent node block, node_type:3, nid:12, node_footer[nid:12,ino:3,ofs:191576,cpver:0,blkaddr:0]
[  476.134899][T10371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  476.222966][    C0] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of bio_endio+0xeb4/0x1010
[  476.233074][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(none) 
[  476.233205][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  476.233281][    C0] Call Trace:
[  476.233326][    C0]  <TASK>
[  476.233380][    C0]  __dump_stack+0x26/0x30
[  476.233527][    C0]  dump_stack_lvl+0x1df/0x270
[  476.233680][    C0]  dump_stack+0x1e/0x25
[  476.233814][    C0]  f2fs_handle_critical_error+0xa6f/0xc20
[  476.234036][    C0]  f2fs_stop_checkpoint+0x65/0x80
[  476.234169][    C0]  f2fs_write_end_io+0x101c/0x1bc0
[  476.234346][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  476.234484][    C0]  bio_endio+0xeb4/0x1010
[  476.234630][    C0]  blk_update_request+0xf4c/0x1a90
[  476.234800][    C0]  blk_mq_end_request+0x50/0xb0
[  476.234927][    C0]  blk_flush_complete_seq+0xb1d/0x1940
[  476.235083][    C0]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  476.235293][    C0]  flush_end_io+0x12c3/0x17b0
[  476.235462][    C0]  ? __pfx_flush_end_io+0x10/0x10
[  476.235586][    C0]  __blk_mq_end_request+0x600/0x9e0
[  476.235732][    C0]  blk_mq_end_request+0x6e/0xb0
[  476.235859][    C0]  lo_complete_rq+0x188/0x3a0
[  476.236030][    C0]  ? __pfx_lo_complete_rq+0x10/0x10
[  476.236196][    C0]  blk_done_softirq+0x112/0x1f0
[  476.236360][    C0]  ? __pfx_blk_done_softirq+0x10/0x10
[  476.236530][    C0]  handle_softirqs+0x169/0x6e0
[  476.236721][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  476.236851][    C0]  run_ksoftirqd+0x29/0x50
[  476.236974][    C0]  smpboot_thread_fn+0x56c/0xa30
[  476.237164][    C0]  kthread+0xd5c/0xf00
[  476.237277][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  476.237471][    C0]  ? __pfx_kthread+0x10/0x10
[  476.237588][    C0]  ret_from_fork+0x1f5/0x4c0
[  476.237750][    C0]  ? __pfx_kthread+0x10/0x10
[  476.237870][    C0]  ret_from_fork_asm+0x1a/0x30
[  476.238059][    C0]  </TASK>
[  476.238108][    C0] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  476.447950][ T6020] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint
[  476.872244][T10383] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1793'.
[  477.104150][   T42] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  477.280244][   T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  477.292004][   T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.304651][   T42] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  477.314292][   T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.415196][   T42] usb 9-1: config 0 descriptor??
[  477.589387][T10395] loop6: detected capacity change from 0 to 512
[  477.879680][T10395] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  477.894455][   T42] isku 0003:1E7D:319C.0014: unknown main item tag 0x2
[  477.901714][   T42] isku 0003:1E7D:319C.0014: unbalanced collection at end of report description
[  477.999237][T10395] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended
[  478.023915][   T42] isku 0003:1E7D:319C.0014: parse failed
[  478.029983][   T42] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -22
[  478.060173][T10395] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.1797: inode #15: comm syz.6.1797: iget: illegal inode #
[  478.126737][   T42] usb 9-1: USB disconnect, device number 3
[  478.168747][T10395] EXT4-fs (loop6): Remounting filesystem read-only
[  478.177798][T10395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  478.295293][T10395] EXT4-fs (loop6): shut down requested (1)
[  478.513914][ T7024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.791308][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1803'.
[  478.816414][T10414] vlan2: entered promiscuous mode
[  478.821664][T10414] batadv0: entered promiscuous mode
[  479.713037][T10429] loop8: detected capacity change from 0 to 2048
[  479.764349][T10433] loop6: detected capacity change from 0 to 128
[  479.794858][T10429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.821119][T10433] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  479.844146][T10433] hpfs: filesystem error: improperly stopped
[  479.850366][T10433] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  479.861307][T10433] hpfs: You really don't want any checks? You are crazy...
[  479.906290][T10433] hpfs: hpfs_map_sector(): read error
[  479.911945][T10433] hpfs: code page support is disabled
[  479.967449][T10433] hpfs: hpfs_map_4sectors(): unaligned read
[  479.993983][T10433] hpfs: hpfs_map_4sectors(): unaligned read
[  480.000153][T10433] hpfs: filesystem error: unable to find root dir
[  480.274708][T10443] program syz.8.1816 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  480.605743][T10455] loop4: detected capacity change from 0 to 64
[  481.153167][   T42] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  481.160110][T10466] loop4: detected capacity change from 0 to 256
[  481.265905][T10466] FAT-fs (loop4): Directory bread(block 64) failed
[  481.272857][T10466] FAT-fs (loop4): Directory bread(block 65) failed
[  481.279774][T10466] FAT-fs (loop4): Directory bread(block 66) failed
[  481.286745][T10466] FAT-fs (loop4): Directory bread(block 67) failed
[  481.295273][T10466] FAT-fs (loop4): Directory bread(block 68) failed
[  481.301981][T10466] FAT-fs (loop4): Directory bread(block 69) failed
[  481.310078][T10466] FAT-fs (loop4): Directory bread(block 70) failed
[  481.318182][T10466] FAT-fs (loop4): Directory bread(block 71) failed
[  481.325539][T10466] FAT-fs (loop4): Directory bread(block 72) failed
[  481.332229][T10466] FAT-fs (loop4): Directory bread(block 73) failed
[  481.384925][   T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  481.397541][   T42] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  481.455352][   T42] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  481.465047][   T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  481.476260][   T42] usb 9-1: SerialNumber: syz
[  481.531815][   T42] usb 9-1: 0:2 : does not exist
[  481.922984][ T9107] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  482.044348][ T2158] usb 9-1: USB disconnect, device number 4
[  482.116296][ T9107] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  482.127515][ T9107] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  482.143606][ T9107] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  482.260169][T10475] loop4: detected capacity change from 0 to 1024
[  482.293965][ T9107] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  482.303661][ T9107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.311855][ T9107] usb 6-1: Product: syz
[  482.318901][ T9107] usb 6-1: Manufacturer: syz
[  482.324643][ T9107] usb 6-1: SerialNumber: syz
[  482.394156][ T9107] usb 6-1: config 0 descriptor??
[  482.402486][T10471] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  482.419722][T10471] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  482.430890][ T9107] usb 6-1: ucan: probing device on interface #0
[  482.666897][ T3839] hfsplus: b-tree write err: -5, ino 4
[  483.013715][T10483] loop8: detected capacity change from 0 to 512
[  483.024948][T10483] EXT4-fs: Ignoring removed nobh option
[  483.065102][ T9107] ucan 6-1:0.0: probe with driver ucan failed with error -22
[  483.136645][T10483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.149881][T10483] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  483.269460][ T9107] usb 6-1: USB disconnect, device number 14
[  483.419793][ T8987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.460633][T10496] loop4: detected capacity change from 0 to 64
[  484.128133][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1845'.
[  484.593415][ T9107] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  484.712581][T10526] syzkaller0: tun_chr_ioctl cmd 1074025677
[  484.719028][T10526] syzkaller0: linktype set to 768
[  484.798388][ T9107] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  484.808801][ T9107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.817722][ T9107] usb 9-1: Product: syz
[  484.822051][ T9107] usb 9-1: Manufacturer: syz
[  484.827064][ T9107] usb 9-1: SerialNumber: syz
[  484.878099][ T9107] usb 9-1: config 0 descriptor??
[  485.105521][ T9107] usb 9-1: USB disconnect, device number 5
[  485.370126][T10538] loop4: detected capacity change from 0 to 1024
[  485.411469][T10534] loop5: detected capacity change from 0 to 4096
[  485.459236][   T30] audit: type=1800 audit(1760474555.118:57): pid=10538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1860" name="file1" dev="loop4" ino=20 res=0 errno=0
[  486.322098][T10552] C: renamed from veth0_to_batadv (while UP)
[  486.369191][T10552] netlink: 'syz.5.1864': attribute type 2 has an invalid length.
[  486.377351][T10552] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1864'.
[  486.386918][T10552] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  486.552931][ T9107] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  486.793116][ T9107] usb 5-1: Using ep0 maxpacket: 16
[  486.806178][ T9107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  486.838983][ T9107] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  486.850713][ T9107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.860080][ T9107] usb 5-1: Product: syz
[  486.864679][ T9107] usb 5-1: Manufacturer: syz
[  486.869450][ T9107] usb 5-1: SerialNumber: syz
[  486.924152][ T9107] usb 5-1: config 0 descriptor??
[  486.949718][ T9107] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  486.962621][ T9107] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  487.423864][ T2158] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  487.572289][ T9107] em28xx 5-1:0.0: chip ID is em2765
[  487.583364][ T2158] usb 7-1: Using ep0 maxpacket: 32
[  487.615547][ T2158] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  487.624212][ T2158] usb 7-1: config 0 has no interface number 0
[  487.630712][ T2158] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  487.644495][ T2158] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  487.656885][ T5848] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  487.824886][ T2158] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  487.834292][ T2158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.844790][ T2158] usb 7-1: Product: syz
[  487.849138][ T2158] usb 7-1: Manufacturer: syz
[  487.854794][ T2158] usb 7-1: SerialNumber: syz
[  487.879611][ T5848] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  487.889124][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.897878][ T5848] usb 2-1: Product: syz
[  487.902247][ T5848] usb 2-1: Manufacturer: syz
[  487.907183][ T5848] usb 2-1: SerialNumber: syz
[  487.949978][ T9107] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  487.958431][ T9107] em28xx 5-1:0.0: board has no eeprom
[  487.973485][ T2158] usb 7-1: config 0 descriptor??
[  488.094454][ T5848] usb 2-1: config 0 descriptor??
[  488.159579][ T9107] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  488.168516][ T9107] em28xx 5-1:0.0: dvb set to bulk mode.
[  488.179513][ T5854] em28xx 5-1:0.0: Binding DVB extension
[  488.300966][ T2158] radio-si470x 7-1:0.35: this is not a si470x device.
[  488.318722][ T9107] usb 5-1: USB disconnect, device number 9
[  488.327508][ T9107] em28xx 5-1:0.0: Disconnecting em28xx
[  488.367960][ T2158] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  488.414871][ T5848] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  488.533569][ T5854] em28xx 5-1:0.0: Registering input extension
[  488.552421][ T9107] em28xx 5-1:0.0: Closing input extension
[  488.580217][ T2158] radio-raremono 7-1:0.35: V4L2 device registered as radio48
[  488.601224][ T9107] em28xx 5-1:0.0: Freeing device
[  488.776748][   T42] usb 7-1: USB disconnect, device number 10
[  488.784906][   T42] radio-raremono 7-1:0.35: Thanko's Raremono disconnected
[  489.042304][ T5848] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  489.100683][ T5848] usb 2-1: USB disconnect, device number 16
[  489.314002][T10585] loop4: detected capacity change from 0 to 256
[  489.380029][   T30] audit: type=1800 audit(1760474559.048:58): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1880" name="file1" dev="loop4" ino=1048685 res=0 errno=0
[  489.533522][   T42] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  489.714374][   T42] usb 9-1: Using ep0 maxpacket: 32
[  489.756868][   T42] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  489.767233][   T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.798117][   T42] usb 9-1: config 0 descriptor??
[  490.003573][T10600] loop6: detected capacity change from 0 to 512
[  490.029514][   T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  490.030133][T10600] EXT4-fs: Ignoring removed nomblk_io_submit option
[  490.074175][   T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  490.086987][   T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  490.089021][T10600] EXT4-fs error (device loop6): __ext4_iget:5435: inode #11: block 1: comm syz.6.1888: invalid block
[  490.094455][   T42] usb 9-1: media controller created
[  490.133368][T10600] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1888: couldn't read orphan inode 11 (err -117)
[  490.192521][   T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  490.215652][T10600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.245794][T10586] =====================================================
[  490.253520][T10586] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[  490.260933][T10586]  _copy_to_user+0xcc/0x120
[  490.265721][T10586]  i2cdev_ioctl_smbus+0x586/0x660
[  490.270884][T10586]  i2cdev_ioctl+0xa14/0xf40
[  490.276251][T10586]  __se_sys_ioctl+0x23c/0x400
[  490.281101][T10586]  __x64_sys_ioctl+0x97/0xe0
[  490.286013][T10586]  x64_sys_call+0x1cbc/0x3e30
[  490.290986][T10586]  do_syscall_64+0xd9/0xfa0
[  490.295994][T10586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.303478][T10586] 
[  490.305891][T10586] Uninit was stored to memory at:
[  490.311128][T10586]  __i2c_smbus_xfer+0x2561/0x2f60
[  490.317615][T10586]  i2c_smbus_xfer+0x31d/0x4d0
[  490.322496][T10586]  i2cdev_ioctl_smbus+0x4a1/0x660
[  490.328617][T10586]  i2cdev_ioctl+0xa14/0xf40
[  490.333844][T10586]  __se_sys_ioctl+0x23c/0x400
[  490.338713][T10586]  __x64_sys_ioctl+0x97/0xe0
[  490.343841][T10586]  x64_sys_call+0x1cbc/0x3e30
[  490.348860][T10586]  do_syscall_64+0xd9/0xfa0
[  490.354324][T10586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.360385][T10586] 
[  490.363480][T10586] Local variable msgbuf1.i created at:
[  490.369022][T10586]  __i2c_smbus_xfer+0x86a/0x2f60
[  490.374401][T10586]  i2c_smbus_xfer+0x31d/0x4d0
[  490.379243][T10586] 
[  490.381625][T10586] Byte 0 of 1 is uninitialized
[  490.386638][T10586] Memory access of size 1 starts at ffff88810470bcf6
[  490.393544][T10586] Data copied to user address 0000200000000040
[  490.399793][T10586] 
[  490.403639][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.8.1881 Not tainted syzkaller #0 PREEMPT(none) 
[  490.413631][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  490.424029][T10586] =====================================================
[  490.431849][T10586] Disabling lock debugging due to kernel taint
[  490.439276][T10586] Kernel panic - not syncing: kmsan.panic set ...
[  490.445840][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.8.1881 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[  490.456966][T10586] Tainted: [B]=BAD_PAGE
[  490.461212][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  490.471388][T10586] Call Trace:
[  490.474760][T10586]  <TASK>
[  490.477781][T10586]  __dump_stack+0x26/0x30
[  490.482293][T10586]  dump_stack_lvl+0x53/0x270
[  490.487074][T10586]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  490.493074][T10586]  dump_stack+0x1e/0x25
[  490.497429][T10586]  vpanic+0x435/0xd30
[  490.501640][T10586]  panic+0x15d/0x160
[  490.505756][T10586]  kmsan_report+0x31c/0x320
[  490.510427][T10586]  ? kmsan_internal_check_memory+0x1e1/0x230
[  490.516618][T10586]  ? kmsan_copy_to_user+0xf1/0x190
[  490.521881][T10586]  ? _copy_to_user+0xcc/0x120
[  490.526720][T10586]  ? i2cdev_ioctl_smbus+0x586/0x660
[  490.532068][T10586]  ? i2cdev_ioctl+0xa14/0xf40
[  490.536935][T10586]  ? __se_sys_ioctl+0x23c/0x400
[  490.541975][T10586]  ? __x64_sys_ioctl+0x97/0xe0
[  490.547011][T10586]  ? x64_sys_call+0x1cbc/0x3e30
[  490.552057][T10586]  ? do_syscall_64+0xd9/0xfa0
[  490.556930][T10586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.563175][T10586]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[  490.568672][T10586]  ? __i2c_transfer+0x11cd/0x3110
[  490.573900][T10586]  ? kmsan_get_metadata+0xfb/0x160
[  490.579178][T10586]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  490.585721][T10586]  ? kmsan_get_metadata+0xfb/0x160
[  490.591006][T10586]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  490.596996][T10586]  ? __i2c_smbus_xfer+0x1e93/0x2f60
[  490.602378][T10586]  ? kmsan_get_metadata+0xfb/0x160
[  490.607651][T10586]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  490.613648][T10586]  kmsan_internal_check_memory+0x1e1/0x230
[  490.619698][T10586]  kmsan_copy_to_user+0xf1/0x190
[  490.624809][T10586]  _copy_to_user+0xcc/0x120
[  490.629500][T10586]  i2cdev_ioctl_smbus+0x586/0x660
[  490.634712][T10586]  i2cdev_ioctl+0xa14/0xf40
[  490.639438][T10586]  ? kmsan_get_metadata+0x9/0x160
[  490.644640][T10586]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  490.649880][T10586]  __se_sys_ioctl+0x23c/0x400
[  490.654773][T10586]  __x64_sys_ioctl+0x97/0xe0
[  490.659577][T10586]  x64_sys_call+0x1cbc/0x3e30
[  490.664457][T10586]  do_syscall_64+0xd9/0xfa0
[  490.669155][T10586]  ? irqentry_exit+0x16/0x60
[  490.673927][T10586]  ? clear_bhb_loop+0x40/0x90
[  490.678857][T10586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.684927][T10586] RIP: 0033:0x7fcb4098eec9
[  490.689473][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.709241][T10586] RSP: 002b:00007fcb41804038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  490.717820][T10586] RAX: ffffffffffffffda RBX: 00007fcb40be5fa0 RCX: 00007fcb4098eec9
[  490.725911][T10586] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004
[  490.733985][T10586] RBP: 00007fcb40a11f91 R08: 0000000000000000 R09: 0000000000000000
[  490.742058][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  490.750129][T10586] R13: 00007fcb40be6038 R14: 00007fcb40be5fa0 R15: 00007ffcdcdc5ac8
[  490.758248][T10586]  </TASK>
[  490.761648][T10586] Kernel Offset: disabled
[  490.766014][T10586] Rebooting in 86400 seconds..