last executing test programs:

2m12.893685209s ago: executing program 3 (id=36):
chdir(&(0x7f0000000340)='./cgroup\x00')
mkdir(&(0x7f00000002c0)='./file2\x00', 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

2m12.640783233s ago: executing program 3 (id=39):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="0bc3ff", 0x3}, {&(0x7f0000000540)='G', 0x1}], 0x2)

2m12.31239623s ago: executing program 3 (id=41):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2108c8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@usrjquota}, {@block_validity}, {@minixdf}, {@grpid}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2m11.433639846s ago: executing program 3 (id=49):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000001640)={[{@map_normal}, {@overriderock}, {@overriderock}, {@utf8}, {@block={'block', 0x3d, 0x800}}, {@check_strict}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@session={'session', 0x3d, 0x36}}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x5a}}, {@cruft}]}, 0x8, 0xa17, &(0x7f0000000400)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

2m10.873581666s ago: executing program 3 (id=53):
r0 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0xfffffffe}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000000))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x24, 0x27, 0x5, 0xffffffff, 0x0, r0}, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000000))

2m10.140077145s ago: executing program 3 (id=59):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0)

2m9.424221963s ago: executing program 32 (id=59):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0)

3.868223105s ago: executing program 4 (id=1202):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0)

3.562210671s ago: executing program 4 (id=1207):
r0 = getpgrp(0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, r0)
prctl$PR_SET_PTRACER(0x59616d61, r0)

3.286885376s ago: executing program 4 (id=1210):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0)

3.190549061s ago: executing program 5 (id=1212):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)

2.925090805s ago: executing program 4 (id=1215):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.81939418s ago: executing program 5 (id=1216):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f00000006c0)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@nodots}, {@fat=@quiet}, {@fat=@showexec}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@fat=@check_strict}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x206, &(0x7f0000000480)="$eJzs3cFqE0EYAOA/MW0S8dCbIAgrHvRU1CeoSAUxIFRyUPAg2JM5pZfUS/oYgk/ge/kA0lMuMhJ3k03SsNZCNrV83yX/zj+TmdllN7nkT4rcj7tfo9NpRPMgDmLSiL1oxsxZAAA3ySSl+Jlys7YP37a7JgBgs9Z9/q/4VfOSAIANe/vu/evnvd7hUZZ1Is7PRv1RP3/N8y9f9Q6fZH/slaPOR6P+rXn+abb63WGa34nbRf5ZPj6bp3cjor8bjx/m+WnuxZtetjy+HZ82vHcAAAAAAAAAAAAAAAAAAAAAANiW+5HNrK3vs7+/mu8W+fxooT7QSv2eVtxrFYdleaA0rmNTAAAAAAAAAAAAAAAAAAAA8J85Of3y+eNgcDwsg3ZELLa01vRZDXaLtzseNoqoovN1Cpoxb+kWK7/U8H/qvBw0ilO02Q1211/cywTRui5X56pBVsNc3crTm9I0WH8XzMpiVN5N1bM/Orrq4icppcH3B8OT00iVnctnRLuWJxEAAAAAAAAAAAAAAAAAALDwq+8LOmXYrHVRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCz8v//p8HFlspgHBF34q+dZ3PtRGdp7jTewoYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kX4HAAD//yhHHc4=")
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9})
utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000008c0)={{0x77359400}, {0x77359400}})

2.545234634s ago: executing program 4 (id=1218):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1Z2CVnUBFFUVExEiWIKEFAJEhUUECQLDkoQUkiEhQFAUVAcs4555xzzjnnnPmeZXeVux7Q+373ffF6znme3Zmurq6p/v+6qmamerqXnGexOQcGxhgY1hQDI3fzHXMutPGOc16+9057njzFWBNMPnzy8BtMOvzipIOGfxxlYGBglOHLGT5t7EdOOHGUgcHvTP97Y4851qBxBwamG35x9uEfZxr2YeJHR8z39kiNvKKD/nZx0PbD/r3T+EO/xNBPlr7pgrMHBgYmeNfth95kmn+4o9KWnGPeef5u9Te3oVZDhn/+7n+jDfs38f0DAxPfM8CPj3fPO+gDuEtDv+YEOz4wxrofwNf+X9eSc8w730j+Q7fFUYdPm2noNj7yNmhs5Mf5TavMuvvwIXzn8TYwMHQX91+2lf8VLTnHPAsMvPd+fuChscY7/e139ptjPzMwMPazAwNjPzcwMPbzAwNjvzAwMPaLH7RL/f9rjjmnn3Po9j7i8nD2EY/lCehxsffqL+w1MDAw+rB5xn5r2PFinClGHBOqqqrq37s55px+Ljj+j/F+x/+ttp7jlo7/VVVV/3ubb445px96HB/p+D/O+x3/v3vDDWsM+93/7DMNu9VbH+ydqKqqqv9W88yHx/8J3u/4P/4O1+3X8b+qqup/b4su+M7xf5yRjv+TvN/xf43577h0+Hwjvm94812LfOf5Y8Onv/6u6aO+a/pr75o+5F3Leff8o71r+ivvmj7GwMDYjwyf/sbfJ4/9zNDb/ONyxn7p78/HmXTwu6a//K7po71r+ivD12no9NHfNf3Nd80/xt+njzP0vymGf91X32eoq6qq/m1adPp55hp41/Psh08e8cR+fF7o0UdvfecHtb5VVVVVVVVV9d/vrSdPO+vvf/P9iYF3/e3q3/6GdfjvBQYdc84113xgK/rv0aB//H3IFh/0Ov3/bajzGIdNMTCw1hIf9KrUB9D/mr9Vr/8r5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4t7j/P/f/v5/4J4v7jB81lkmu+Pexf5+y0kHVhv+2c13zLnQah/Aun8A/aee/x9YbdDAwHDfCYZaLjTHootPNTAwsNi9d0w248Dfrpt56HWzTjTqO3/MOTAw1Tv/D5n0PZY8/F0W3nlzh0n+toxj3ln+fG/vO+qgkVbiXc129n0HrrrkyzOM/PHz730//vb+Eku9tO+UI/6WZZSRZhrjPW48Yvkj7svIzsPXfaqh6z71BmuuM/X6G2/yldXWXH6VlVZZaa3pppt2hulnnGG6r80y9cqrrbHSNMP+f48xG/bWFaP+K2M2zshj9uQc7x6zke/bhCcdiGP2j+/q8V8W8c4Sz53toctGjNngf3HMRny9Ud9/zKZYbfgXmnRgyMBy7wzNoIGBSQcPGdho6IVpRx8YmHTI8HknHTrvNyYaZWBgx7/f0UHDX2x02DyDthg6z7/Z+5bMMnxENh0x38ivsz7yiv6z9y05fpxd7hjpfUv+b/V/dPz/B6+ZB/1toEa8AcLweYZ5fcDvM/EP6zvF4HcOcu+1vu/zujjvRI+vNVd9dIn/qdfFofUd533W931ex+8913eqaZ/eY9ii/sfWd6R93QLDrvxX9nUD77+vG5Vuv9KVk4+8r5v/vVfxv2zHI8Zo9JFmeq993Y7zn7v50OUPvP++boHVhr94wN/3daMMDEw66oh93dAd32hDBnYcemG6oRdGHzJwyNAL079zYcyBc4Ze+OoKa6+x4qB3XmZg+HKnGbrc2ScaNGwDuvHAVUff5e23Bw9fl5fG/q/rOvzxMcW7j+dzTDR8MIffdsRyh846YrmvbDPsutGGL/fl/8ZyR9yW1nfSM4ddN/rw5b4y0nKHvM9yR9z2H7aHqQb9lyeqwv7mA31fI9p+x3if9X2f1+HGx9s77lMu+9D/wOtwD3qv9R38/uv7Xu8b8p7r+9hlj+/zP/W64fQ4u2fvYY+VMYY/zt78bzx+R9x25P3YsBcCGbbbH+Nf2Y9N8Q/7sS1HHWWkwX5X7/V97oow//At4m9LW/GAl1cbMfZDRlruP/s+9133ZRDsxyYY6ee5QZvvMzCIxvyRNZ7f8K2d33/Mhwz8158tRoz5iNu+35iP/q+M+cfff8xH/j75vcZ8qs8Mu37ISOv/7jFfZLfZbxwx5qONtNx/Nuajv/+x4x/HfGBgCI35jpMNG7f325++15iPuO2IMR/6dWadaPDA3AMDA1MOH/PR/pUxn/R/5nE+Fsw/7POV/jbpmRkX/vKIMR95jP/ZmI/23xzzze752+N8yneu+/QoA6ONNrDR8htssN60w/4fcXG6Yf/zvuiZFYeN8/sdS9/LaMRt32+7GPyvGE3wLxkN+mdGkw1+L6O/b1qjHrjos/+n+6LB/12jc3hfdMq8w8bt/b4veq8xH3FbOg5O8q7bj/xz6Pu8fhbep3fGZ/5tR/y89+/w+lkjft79X/n6WSN+J7nayDv5+lfr9//u8neXv7v83eUv7j3O/08x4vz/2+Ps/+HhP3QOuXLmW2b/oNf3A+4/+vz/cN//cv5/9ltmvnLoj1bDr3vf87PD5vm3PD8707APEz86Yr6Rzw+OvKL/7Pzs3rtucOX/o/Oz/0eN2Fb/hZ+L2/+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3H+f9pRjwP4MHFF/re8BOhQzad9shNP+j1/YD7jz7/P9z3v5z/3/TIaTcdZeBv173v+f9h8zjO/9+34ObL/Duf/x+xrXb+v/5J+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uPc4/z/7iOcBHD7b3J8d8XyA67fbd48Pen0/4P5Tz//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ0//z8w0tskLtzjAoPz//+7ew//RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/9/DGL/w/yxyz+S+aPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/LH/M4v/z/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/yJ/zOL/y/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/1X+mMV/q/wxi/+v88cs/lvnj1n8f5M/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5o9Z/H+XP2bx3yF/zOL/+/wxi/8f8scs/jvmj1n8d8ofs/j/MX/M4r9z/pjFf5f8MYv/rvljFv8/5Y9Z/P+cP2bx3y1/zOL/l/wxi//u+WMW/z3yxyz+e+aPWfz/mj9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR/0ED+mMV/UP6YxX+U/DGL/6j5Yxb/wfljFv8h+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/h/LHLP4fzh+z+H8kf8ziP2n+mMX/o/ljFv/J8scs/h/LH7P4fzx/zOI/ef6Yxf8T+WMW/0/mj1n8p8gfs/h/Kn/M4v/p/DGL/2fyxyz+U+aPWfw/mz9m8f9c/pjF//P5Yxb/qfLHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8tf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X88fs/jPmj9m8f9G/pjFf7b8MYv/N/PHLP7fyh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/7fzxyz+c+ePWfznyR+z+M+bP2bx/07+mMV/vvwxi/9388cs/vPnj1n8F8gfs/gvmD9m8V8of8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/D/LHLP5L5o9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8sf8zi//P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/In/M4v/L/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Vf6YxX+r/DGL/6/zxyz+W+ePWfx/kz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/mj1n8f5c/ZvHfIX/M4v/7/DGL/x/yxyz+O+aPWfx3yh+z+P8xf8ziv3P+mMV/l/wxi/+u+WMW/z/lj1n8/5w/ZvHfLX/M4v+X/DGL/+75Yxb/PfLHLP575o9Z/P+aP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyr/d7fliE8s/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n83/k0/3/M4j8of8ziP0r+mMV/1Pwxi//g/DGL/5D8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/2T5Yxb/j+WPWfw/nj9m8Z88f8zi/4n8MYv/J/PHLP5T5I9Z/D+VP2bx/3T+mMX/M/ljFv8p88cs/p/NH7P4fy5/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOI/W/6Yxf+b+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/2/ljFv+588cs/vPkj1n8580fs/h/J3/M4j9f/pjF/7v5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/Xv6YxX/h/DGL/yL5YxL/eo8k/qMs1vaPWfwXzx+z+C+RP2bx/37+mMX/B/ljFv8l88cs/kvlj1n8f5g/ZvH/Uf6YxX/p/DGL/zL5Yxb/ZfPHLP4/zh+z+C+XP2bxXz5/zOL/k/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf+n+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+WP2bx/3n+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/kT9m8f9l/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Kn/M4r9V/pjF/9f5Yxb/rfPHLP6/yR+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/2/zxyz+v8sfs/jvkD9m8f99/pjF/w/5Yxb/HfPHLP475Y9Z/P+YP2bx3zl/zOK/S/6YxX/X/DGL/5/yxyz+f84fs/jvlj9m8f9L/pjFf/f8MYv/HvljFv8988cs/n/NH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH3vHf9DAf7z/W/ljlu3/7fwxif+oA/ljFv9B+WMW/1Hyxyz+o+aPWfwH549Z/Ifkj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A9T+b89/r86p8X/cJX/v57F/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePSfwHD+SPWfwH5Y9Z/EfJH7P4j5o/ZvEfnD9m8R+SP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/KH/M4v/h/DGL/0fyxyz+k+aPWfw/mj9m8Z8sf8zi/7H8MYv/x/PHLP6T549Z/D+RP2bx/2T+mMV/ivwxi/+n8scs/p/OH7P4fyZ/zOI/Zf6Yxf+z+WMW/8/lj1n8P58/ZvGfKn/M4v+F/DGL/xfzxyz+X8of+8/2H2vE1MFfzh/7z/b/W4O/kj9m8f9q/pjFf+r8MYv/NPlj/8n+Q/4+dfC0+WP/yf7v3v6nyx+z+E+fP2bxnyF/zOL/tfwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/t/MH7P4fyt/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP7fzh+z+M+dP2bxnyd/zOI/b/6Yxf87+WMW//nyxyz+380fs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/j/IH7P4L5k/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P80fs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/s/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/4v8MYv/L/PHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/1f5Yxb/rfLHLP6/zh+z+G+dP2bx/03+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx/mz9m8f9d/pjFf4f8MYv/7/PHLP5/yB+z+O+YP2bx3yl/zOL/x/wxi//O+WMW/13yxyz+u+aPWfz/lD9m8f9z/pjFf7f8MYv/X/LHLP67549Z/PfIH7P475k/ZvH/a/6YxX+v/DGL/975Yxb/ffLHLP77Sv1H/yfXW/z3k/r/syz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1Q+/rth/USv37ZvG/ru0fs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv8hA/ljFv9B+WMW/1Hyxyz+o+aPWfwH549Z/Ifkj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D8+0AOAsvg/ET9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/aAP5Yxb/QfljFv9R8scs/qPmj1n8B+ePWfyH5I9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+H8ofs/h/OH/M4v+R/DGL/6T5Yxb/j+aPWfwnyx+z+H8sf8zi//H8MYv/5PljFv9P5I9Z/D+ZP2bxnyJ/zOL/qfwxi/+n88cs/p/JH7P4T5k/ZvH/bP6Yxf9z+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv/RB/LHLP6D8scs/qPkj1n8R80fs/gPzh+z+A/JH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/lD9m8f9w/pjF/yP5Yxb/SfPHLP4fzR+z+E+WP2bx/1j+mMX/4/ljFv/J88cs/p/IH7P4fzJ/zOI/Rf6Yxf9T+WMW/0/nj1n8P5M/ZvGfMn/M4v/Z/DGL/+fyxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+ePWfx/kD9m8V8yf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/2f5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf8X+WMW/1/mj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v8scs/lvlj1n8f50/ZvHfOn/M4v+b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zZ/zOL/u/wxi/8O+WMW/9/nj1n8/5A/ZvHfMX/M4r9T/pjF/4/5Yxb/nfPHLP675I9Z/HfNH7P4/yl/zOL/5/wxi/9u+WMW/7/kj1n8d88fs/jvkT9m8d8zf8zi/9f8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/mMM5I9Z/Aflj1n8R8kfs/iPmj9m8R+cP2bxH5I/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nE/m9v/t7XWfwnFvu/Xxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/zEH8scs/oPyxyz+o+SPWfxHzR+z+A/OH7P4D8kfs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+UP2bx/3D+mMX/I/ljFv9J88cs/h/NH7P4T5Y/ZvH/WP6Yxf/j+WMW/8nzxyz+n8gfs/h/Mn/M4j9F/pjF/1P5Yxb/T+ePWfw/kz9m8Z8yf8zi/9n8MYv/5/LHLP6fzx+z+E+VP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/a/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/L+ZP2bx/1b+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/938scs/vPlj1n8v5s/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv/v5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv/v549Z/H+QP2bxXzJ/zOK/VP6Yxf+H+WMW/x/lj1n8l84fs/gvkz9m8V82f8zi/+P8MYv/cvljFv/l88cs/j/JH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5o/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/Z/ljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/xf5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/6/yxyz+W+WPWfx/nT9m8d86f8zi/5v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/Nn/M4v+7/DGL/w75Yxb/3+ePWfz/kD9m8d8xf8ziv1P+mMX/j/ljFv+d88cs/rvkj1n8d80fs/j/KX/M4v/n/DGL/275Yxb/v+SPWfx3zx+z+O+RP2bx3zN/zOL/1/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+Yw3kj1n8B+WPWfxHyR+z+I+aP2bxH5w/ZvEfkj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fyh/zOL/4fwxi/9H8scs/pPmj1n8P5o/ZvGfLH/M4v+x/DGL/8fzxyz+k+ePWfw/kT9m8f9k/pjFf4r8MYv/p/LHLP6fzh+z+H8mf8ziP2X+mMX/s/ljFv/P5Y9Z/D+fP2bxnyp/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi//X8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi//X8MYv/rPljFv9v5I9Z/GfLH7P4fzN/zOL/rfwxi//s+WMW/znyxyz+c+aPWfznyh+z+H87f8ziP3f+mMV/nvwxi/+8+WMW/+/kj1n858sfs/h/N3/M4j9//pjFf4H8MYv/gvljFv+F8scs/t/LH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/PH7P4/yB/zOK/ZP6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMX/x/ljFv/l8scs/svnj1n8f5I/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/NH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P8scs/j/PH7P4b5g/ZvHfSOY/+r84n8V/Y5n/v5rFf5P8MYv/L/LHLP6/zB+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+WPWfy3yh+z+P86f8ziv3X+mMX/N/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9t/pjF/3f5Yxb/HfLHLP6/zx+z+P8hf8ziv2P+mMV/p/wxi/8f88cs/jvnj1n8d8kfs/jvmj9m8f9T/pjF/8/5Yxb/3fLHLP5/yR+z+O+eP2bx3yN/zOK/Z/6Yxf+v+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePSfzHHsgfs/gPyh+z+I+SP2bxHzV/zOI/OH/M4j8kf8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4j9Z/pjF/2P5Yxb/j+ePWfwnzx+z+H8if8zi/8n8MYv/FPljFv9P5Y9Z/D+dP2bx/0z+mMV/yvwxi/9n88cs/p/LH7P4fz5/zOI/Vf6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/6/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/6/ljFv9Z88cs/t/IH7P4z5Y/ZvH/Zv6Yxf9b+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bx/3b+mMV/7vwxi/88+WMW/3nzxyz+38kfs/jPlz9m8f9u/pjFf/78MYv/AvljFv8F88cs/gvlj1n8v5c/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v58/ZvH/Qf6YxX/J/DGL/1L5Yxb/H+aPWfx/lD9m8V86f8ziv0z+mMV/2fwxi/+P88cs/svlj1n8l88fs/j/JH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9p/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/lj1n8f54/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f5I9Z/H+ZP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/yh+z+G+VP2bx/3X+mMV/6/wxi/9v8scs/tvkj1n8t80fs/hvlz9m8d8+f8zi/9v8MYv/7/LHLP475I9Z/H+fP2bx/0P+mMV/x/wxi/9O+WMW/z/mj1n8d84fs/jvkj9m8d81f8zi/6f8MYv/n/PHLP675Y9Z/P+SP2bx3z1/zOK/R/6YxX/P/DGL/1/zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I8zkD9m8R+UP2bxHyV/zOI/av6YxX9w/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4v+h/DGL/4ff0/+tt99++//Nqv07ZvH/SNs/ZvGfNH/M4v/R/DGL/2T5Yxb/j+WPWfw/nj9m8Z88f8zi/4n8MYv/J/PHLP5T5I9Z/D+VP2bx/3T+mMX/M/ljFv8p88cs/p/NH7P4fy5/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOI/W/6Yxf+b+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/2/ljFv+588cs/vPkj1n8580fs/h/J3/M4j9f/pjF/7v5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/Xv6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/fv6Yxf8H+WMW/yXzxyz+S+WPWfx/mD9m8f9R/pjFf+n8MYv/MvljFv9l88cs/j/OH7P4L5c/ZvFfPn/M4v+T/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/6f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8f5Y/ZvH/ef6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/H+RP2bx/2X+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+P8qf8ziv1X+mMX/1/ljFv+t88cs/r/JH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/b/PHLP6/yx+z+O+QP2bx/33+mMX/D/ljFv8d88cs/jvlj1n8/5g/ZvHfOX/M4r9L/pjFf9f8MYv/n/LHLP5/zh+z+O+WP2bx/0v+mMV/9/wxi/8e+WMW/z3zxyz+f80fs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8x/aINGHgOL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHJP7jDuSPWfwH5Y9Z/EfJH7P4j5o/ZvEfnD9m8R+SP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/KH/M4v/h/DGL/0fyxyz+k+aPWfw/mj9m8Z8sf8zi/7H8MYv/x/PHLP6T549Z/D+RP2bx/2T+mMV/ivwxi/+n8scs/p/OH7P4fyZ/zOI/Zf6Yxf+z+WMW/8/lj1n8P58/ZvGfKn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/9fwxi/+s+WMW/2/kj1n8Z8sfs/h/M3/M4v+t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/7+SPWfznyx+z+H83f8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+38sfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+388fs/j/IH/M4r9k/pjFf6n8MYv/D/PHLP4/yh+z+C+dP2bxXyZ/zOK/bP6Yxf/H+WMW/+Xyxyz+y+ePWfx/kj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P80f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/yxyz+P88fs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v8scs/r/MH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f5Y9Z/LfKH7P4/zp/zOK/df6Yxf83+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/23+mMX/d/ljFv8d8scs/r/PH7P4/yF/zOK/Y/6YxX+n/DGL/x/zxyz+O+ePWfx3yR+z+O+aP2bx/1P+mMX/z/ljFv/d8scs/n/JH7P4754/ZvHfI3/M4r9n/pjF/6/5Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549J/McbyB+z+A/KH7P4j5I/ZvEfNX/M4j84f8ziPyR/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8f9Q/pjF/8P5Yxb/j+SPWfwnzR+z+H80f8ziP1n+mMX/Y/ljFv+P549Z/CfPH7P4fyJ/zOL/yfwxi/8U+WMW/0/lj1n8P50/ZvH/TP6YxX/K/DGL/2fzxyz+n8sfs/h/Pn/M4j9V/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/r+WPWfxnzB+z+M+UP2bxnzl/zOI/S/6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8f9m/pjF/1v5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/dv6YxX/u/DGL/zz5Yxb/efPHLP7fyR+z+M+XP2bx/27+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfy/lz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfx/nj9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/1/kj1n8f5k/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/r/KH7P4b5U/ZvH/df6YxX/r/DGL/2/yxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/2/wxi//v8scs/jvkj1n8f58/ZvH/Q/6YxX/H/DGL/075Yxb/P+aPWfx3zh+z+O+SP2bx3zV/zOL/p/wxi/+f88cs/rvlj1n8/5I/ZvHfPX/M4r9H/pjFf8/8MYv/X/PHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF/3Sx/5D3uc7if4bY//2y+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR//IH8MYv/oPwxi/8o+WMW/1Hzxyz+g/PHLP5D8scs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL///HHj1lgWIYUAB8bV9jfcS2bdu2bdu2bdu2bdu2bSf/OXcFuTNbmOH9Ry3/I/iPWv5H9B+1/I/kP2r5H9l/1PI/iv+o5X9U/1HL/2j+o5b/0f1HLf9j+I9a/sf0H7X8j+U/avkf23/U8j+O/6jlf1z/Ucv/eP6jlv/x/Uct/xP4j1r+J/QftfxP5D9q+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/v9p4ICi/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T8q+R9ugP+o5f8//qOW///6j1r+/+c/avkf6D9q+f+//6jlfxD/Ucv/oP6jlv/B/Ect/4P7j1r+h/AftfwP6T9q+R/Kf9TyP7T/qOV/GP9Ry/+w/qN/3T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/s3e3sXmVhR/HT9d2T3/27+YcXkMGg003cWVrVyaDzYf6WDBVx2LABLKFlVEpzD0EN1CrQYnBGCYjQUTdpm4CiTHjxTABYSVRiVPROBENcQjqIqaGiYxoXGrutndp77XNetXr2ot9Pi/a+5zyO92WfHdO2ZoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ0uZtt9ywtqOjbZMXXnjhxcCLU/07E5Daa9Gf6h8JAAAAAAAAAAAAAAAwkhzfTnSqf44AAAAAAHC6aWl9V3d11ZBT1YMP5vy8rfd906tXXr/n+cdXlt/3f/jyYS45YfBBT09Pz0vNXTP7DycVRVH6bNP7jydXjkvX7+y6fHvfUSh++2xz67btzQd3fuXrD8+dOn1Obe/Z2mLNde0dbUsmFEWori22lg4aqooiTKwttpcOGksHk2qL+0sHS3sPphQHSgcXXruhY13pxAmfGk47La2fLaqHFFsM+d1gcP+dXZt2ld+Pcsny1WqK/v7rmn+4t+JjZSP0X75+qKrsf8w/QWBEY+v/9oXl96Nc8oT7/6PtdauG+9jI/ZevHyboH9IZ5vl/SKO9z/t79s8Y4fl/7jCXHNj/9C8ru0r93/TLF+r7T9WczPN/6fP1HYXqyv4nDHn+Lz3H15Sf/ycVRagd5y8HnFZaWj/XPdr9v7L7of3XnFWxqRrc/9FVe6pL/R++64H395+qPan+B64faka5/1d95sDQHyswNi2tu3sq7v9j6L9YMMwlB/qfv/vYVaX+z9h5ZN+gj42l/9rK/hdvufETizdvu6W+/ca169vWt93U2NjQtHRZU+NFyxf3PhL0vR3nrwqcHsZ3/y+mVmyqiqJtYL/ow8teKvV/8Nx//K3/1OQx9j9x1Pv/c+7/MKzzJxQTJxZb127Zsqmh7235sLHvbd9/Nkz/J379P2L/88r/H7D8dXfpC/KB/W/e+dWPlPq/d9KqB/pPTRxj/5NG67/ztc8LRBjn/X9dxWZI/+2vfmddqf8/vXL8UP+psX79P3nU/ne5/8N4tLRW/IWf/7FS/6v/dXi4Pyc4CWGKP/+DdHL0v3XaL74Ztw5T9Q/p5Oh/6ea2yL9sG/5P/5BOjv5/taPqSNw6nKF/SCdH/1/rfnBj3DpM0z+kk6P//bMfeSpuHf5f/5BOjv6Pr59+Vdw61Okf0snR/2Vf2rs6bh2m6x/SydF/1SvTnohbhxn6h3Ry9F9fdfan4tbhdfqHdHL0f13nwy/GrcNM/UM6Ofr//M5fR36fTni9/iGdHP0/9cetO+LWYZb+IZ0c/b8wq70+bh3O1D+kk6P/+2944pG4dXiD/iGdHP0//a0PHotbh6B/SCdH/9949siauHWYrX9IJ0f/+xYe+0PcOpylf0gnR////ujVH4hbhzfqH9LJ0X/Yv/y7cetwtv4hnRz9X/HkXQ1x6zBH/5BOjv47V9x2Z9w6nKN/SCdH/03NC2fHrcO5+od0cvQ/489/vztuHebqH9LJ0f/H7ntv5b/7fZLCefqHdHL0f/OG1Y/GrcP5+od0cvS/ckbPBXHrME//kE6O/g8fve9HceswX/+QTo7+775zyRVx6/Am/UM6Ofr/wa3ndcetw5v1D+nk6P/l2jtujVuHBfqHdHL0/+Wf1SyLW4eF+od0cvT/44e+vytuHd6if0gnR/8vvu+xc+LW4QL9Qzo5+t998awvxq3DW/UP6eTo/93PbFwftw6L9A/p5Oh/8t7fH41bh3r9Qzo5+p+/6uCH4tbhQv1DOjn637Boze/i1mGx/iGdHP0/c+DpQ3HrsET/kE6O/nc89unmuHVo0D+kk6P/xy/r+E/cOjTqH9LJ0f8/m37y8bh1WKp/SCdH/2ce+vYX4tahSf+QTo7+r35w8sy4dbhI/5BOjv43XjP7e3HrsEz/kE6O/i+Z+9ClcevwNv1DOjn6f89fV9wctw4X6x/SydF/3T33PBe3Dsv1D+nk6H/etbdfE7cOl+gf0snR//Vz6p+MW4dL9Q/p5Oj/juMtC+LWYYX+IZ0c/Xfd9vy+uHVYqX9IJ0f/3Z98uS5uHd6uf0gnR/97p1x5b9w6vEP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8lx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATwEAAP///rjRtw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0x2, 0x5, 0x5)

2.539581495s ago: executing program 5 (id=1219):
syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000180)=[{0xee, 0xb010, 0x6, &(0x7f00000001c0)="092ab68197a6"}], 0x1})

2.539148535s ago: executing program 2 (id=1220):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x802, 0x1)
write(r0, &(0x7f0000000440)="08008edf773c8000", 0x35)

2.223113092s ago: executing program 2 (id=1223):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@rodir}, {@shortname_lower}, {@shortname_mixed}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@uni_xlateno}]}, 0x29, 0x339, &(0x7f00000011c0)="$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")
r0 = open(&(0x7f00000001c0)='.\x00', 0x40480, 0x0)
getdents(r0, &(0x7f0000000280)=""/4096, 0x9005)

1.940873447s ago: executing program 1 (id=1225):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)

1.88101125s ago: executing program 0 (id=1226):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800})
poll(&(0x7f00000000c0)=[{r0, 0xe7d4c009da6c1985}], 0x1, 0x6)

1.575310326s ago: executing program 0 (id=1227):
unshare(0x2020400)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2feffff077680203c02d0c623", 0x7590)

1.529544618s ago: executing program 1 (id=1228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.432032994s ago: executing program 2 (id=1229):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x2}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

1.329826889s ago: executing program 0 (id=1230):
r0 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5<V+K\xd4A\x9e\xc6:\xd8z\x05\xe0O\xf4\x0e\x91\xc9\x82oT$9\xbb\xb5g2V\x89\xdbT5d\xa8\x86\x1b\x91\xde8v\xd4~\xd224\xec\x86\xfb8\xfb[\xbd5?\x10\x18bz\x1d(\xa0o\x00\x1aE\x96\x1d\x0f\xd7\x8b\xcd\xd9\xdfG\xab\xdf\xf8 \x1c\a\xd9\xc8\xa0@\xbal\x8c#!q>\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
fstatfs(r0, &(0x7f00000003c0)=""/146)

1.249326613s ago: executing program 1 (id=1231):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x2800, 0x0)
splice(r1, &(0x7f0000000040)=0x7fffffffffffffff, r0, 0x0, 0x9, 0x1)

1.12401699s ago: executing program 2 (id=1232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000001000000a00000a94000000060a0b0400000000000000000200000168000480240001800b000100736f636b657400001400028008000240000000120800014000000000140001800c000100636f756e74657200050002802c0001800e000100696d6d6564696174650000001800028008000140000000080c0002800700010092f457000900010073797a30000000000900020073797a32"], 0xbc}}, 0x0)

1.042605064s ago: executing program 0 (id=1233):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

945.00904ms ago: executing program 1 (id=1234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)

871.815013ms ago: executing program 5 (id=1235):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
ioctl$TCSETS2(r0, 0x402c542b, 0x0)

815.982716ms ago: executing program 4 (id=1236):
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
copy_file_range(r1, 0xffffffffffffffff, r0, 0x0, 0x9, 0x0)

811.021086ms ago: executing program 2 (id=1237):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000180)={&(0x7f00000006c0)=[{0x8, 0x1000, 0x1, 0x7}], 0x1, 0x20, 0x0, 0x6})

664.279074ms ago: executing program 0 (id=1238):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

591.428598ms ago: executing program 5 (id=1239):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
read(r0, &(0x7f0000002fc0)=""/4096, 0x1000)

461.986405ms ago: executing program 1 (id=1240):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup2(r0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0x0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588)

115.803683ms ago: executing program 2 (id=1241):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x5, 0x8}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x80000000, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4000)

75.190745ms ago: executing program 1 (id=1242):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)

60.205597ms ago: executing program 0 (id=1243):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ec0000000000000000a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYBLOB="1f59521f1378d551732c8c220c6eb12102738ed1ba67af863d446c32f8d187bba0a4fad9614a43aa11519d91a885d1d7ab964923974d8d5b6b831a2d2904b27e86061e0e1293df240a09387f2c54af202c9f3ccd096096345e5aa5dc379ad46c42b2d2b0d349063a2811d9ddc6ffd4e417128753aff6f75f96033230ee2962715b7e78f6b9534aeb4de2dc29c7e610f3168772a8e3faf8782d30a5dd98b3"], 0x1, 0x555e, &(0x7f0000005f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00')

0s ago: executing program 5 (id=1244):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8ccf"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/48)

kernel console output (not intermixed with test programs):

67295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  111.014774][   T27] audit: type=1326 audit(1776484238.063:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  111.097196][ T4553] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.119190][ T4755] loop2: detected capacity change from 0 to 256
[  111.134753][   T27] audit: type=1326 audit(1776484238.063:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4742 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  111.205208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  111.213267][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.273145][ T4553] 8021q: adding VLAN 0 to HW filter on device team0
[  111.308975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  111.335607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.381345][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.388623][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.478502][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.529964][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  111.558691][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  111.598487][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.605720][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.645382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  111.686475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.696714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.719285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.753805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  111.762886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  111.782884][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  111.792687][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  111.825976][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.881647][ T4553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.924523][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  111.934212][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  111.944141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.967573][ T4746] loop4: detected capacity change from 0 to 32768
[  112.315388][ T4746] XFS (loop4): Mounting V5 Filesystem
[  112.680470][ T4746] XFS (loop4): Ending clean mount
[  113.033875][ T4269] XFS (loop4): Unmounting Filesystem
[  113.345023][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.352639][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.409507][ T4553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.691360][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'.
[  114.654862][ T4850] loop2: detected capacity change from 0 to 64
[  114.956527][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.978413][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  115.074202][ T4857] loop0: detected capacity change from 0 to 1024
[  115.085109][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  115.116838][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  115.128333][ T4553] device veth0_vlan entered promiscuous mode
[  115.145966][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  115.162581][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  115.203202][ T4857] hfsplus: bad catalog entry type
[  115.209355][ T4553] device veth1_vlan entered promiscuous mode
[  115.226170][ T4859] loop2: detected capacity change from 0 to 512
[  115.255487][ T4859] EXT4-fs: Ignoring removed nobh option
[  115.375465][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  115.386991][ T4859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  115.404421][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  115.445801][ T4859] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.457910][ T1111] hfsplus: b-tree write err: -5, ino 25
[  115.464048][ T1111] hfsplus: b-tree write err: -5, ino 4
[  115.472954][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  115.494995][ T1111] hfsplus: b-tree write err: -5, ino 2
[  115.543680][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  115.613848][ T4553] device veth0_macvtap entered promiscuous mode
[  115.663611][ T4553] device veth1_macvtap entered promiscuous mode
[  115.755964][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.822617][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.846944][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.889904][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.922515][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.950870][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.981444][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.009461][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.033690][ T4553] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.042184][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  116.053713][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  116.067469][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  116.087159][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  116.138561][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.197200][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.223621][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.239257][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.252128][ T4274] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  116.261024][ T4274] Bluetooth: hci0: Injecting HCI hardware error event
[  116.270742][   T48] Bluetooth: hci0: hardware error 0x00
[  116.304725][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.315517][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.329113][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.339694][ T4553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.350555][ T4553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.364833][ T4553] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.373985][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.390553][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.405947][ T4553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.415152][ T4553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.423944][ T4553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.433556][ T4553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.653147][ T4890] sp0: Synchronizing with TNC
[  116.701856][ T4889] [U] è
[  116.707258][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.721482][   T27] audit: type=1326 audit(1776484244.263:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  116.754827][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.778131][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  116.801717][   T27] audit: type=1326 audit(1776484244.313:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  116.891783][   T27] audit: type=1326 audit(1776484244.313:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  116.934483][   T27] audit: type=1326 audit(1776484244.313:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  117.040733][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.051829][   T27] audit: type=1326 audit(1776484244.313:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  117.109219][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.148218][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  117.192550][   T27] audit: type=1326 audit(1776484244.313:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  117.314942][   T27] audit: type=1326 audit(1776484244.313:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  117.419877][   T27] audit: type=1326 audit(1776484244.323:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4899 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d7f9c819 code=0x7ffc0000
[  117.603076][ T4916] loop5: detected capacity change from 0 to 4096
[  117.693648][ T4916] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  117.719968][ T4916] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  117.756042][ T4916] ntfs: volume version 3.1.
[  117.858019][ T4928] loop1: detected capacity change from 0 to 512
[  117.952008][ T4928] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  118.045353][ T4928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.144863][ T4928] EXT4-fs (loop1): 1 truncate cleaned up
[  118.175725][ T4928] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  118.189460][ T4936] loop4: detected capacity change from 0 to 256
[  118.209125][ T4936] exfat: Deprecated parameter 'utf8'
[  118.275365][ T4936] exfat: Deprecated parameter 'utf8'
[  118.284257][ T4928] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  118.306678][ T4939] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  118.338093][ T4936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x114608e0, utbl_chksum : 0xe619d30d)
[  118.385158][ T4940] EXT4-fs error (device loop1): ext4_mb_complex_scan_group:2384: group 0, 216 free clusters as per group info. But got 218 blocks
[  118.404792][   T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  118.470481][ T4940] EXT4-fs (loop1): Remounting filesystem read-only
[  118.517447][ T4928] EXT4-fs (loop1): Remounting filesystem read-only
[  118.702744][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  118.873840][ T4947] loop2: detected capacity change from 0 to 4096
[  119.076283][ T4957] loop0: detected capacity change from 0 to 512
[  119.312494][ T4957] EXT4-fs (loop0): orphan cleanup on readonly fs
[  119.334758][ T1171] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  119.385317][ T4957] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.194: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  119.412468][ T4957] EXT4-fs error (device loop0): ext4_quota_enable:7052: comm syz.0.194: Bad quota inode: 4, type: 1
[  119.512833][ T4957] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  119.578553][ T1171] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  119.605010][ T1171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.655080][ T1171] usb 5-1: Product: syz
[  119.670880][ T1171] usb 5-1: Manufacturer: syz
[  119.701344][ T1171] usb 5-1: SerialNumber: syz
[  119.720530][ T4957] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  119.730677][ T4957] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  119.745868][ T1171] usb 5-1: config 0 descriptor??
[  119.749807][ T1171] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  119.797738][ T1171] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  119.806867][ T1171] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  119.806951][ T1171] usb 5-1: media controller created
[  119.871819][ T1171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  119.872086][ T4957] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  119.886775][ T4957] EXT4-fs warning (device loop0): ext4_multi_mount_protect:335: MMP interval 2680 higher than expected, please wait.
[  119.886775][ T4957] 
[  119.978377][ T4961] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  120.052766][ T4957] EXT4-fs warning (device loop0): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount
[  120.052766][ T4957] 
[  120.223387][ T1171] DVB: Unable to find symbol mt352_attach()
[  120.263694][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  120.428244][ T1171] DVB: Unable to find symbol nxt6000_attach()
[  120.434450][ T1171] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  120.466673][ T1171] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6
[  120.526328][ T1171] dvb-usb: schedule remote query interval to 1000 msecs.
[  120.533601][ T1171] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  120.595094][ T1171] dvb-usb: bulk message failed: -22 (7/0)
[  120.601607][ T1171] dvb-usb: bulk message failed: -22 (7/0)
[  120.686395][ T1171] usb 5-1: USB disconnect, device number 4
[  120.790111][ T4997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'.
[  120.912516][ T1171] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  121.028390][ T5003] tipc: Enabling <ib:lo> not permitted
[  121.034197][ T5003] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  121.706357][ T5031] loop4: detected capacity change from 0 to 512
[  121.726990][ T5031] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  121.916210][ T5031] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.221: bg 0: block 104: invalid block bitmap
[  121.945090][ T5031] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  121.980613][ T5031] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.221: invalid indirect mapped block 1 (level 1)
[  122.064000][ T5031] EXT4-fs (loop4): 1 truncate cleaned up
[  122.074771][ T5031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  122.276813][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  122.629864][ T5050] loop4: detected capacity change from 0 to 4096
[  122.846595][ T5057] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.921057][ T5030] loop5: detected capacity change from 0 to 32768
[  123.007109][ T5030] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.220 (5030)
[  123.116313][ T5030] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  123.145655][ T5065] loop1: detected capacity change from 0 to 256
[  123.157306][ T5030] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  123.208716][ T5030] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  123.254684][ T5030] BTRFS info (device loop5): use zstd compression, level 3
[  123.282434][ T5030] BTRFS info (device loop5): using free space tree
[  123.313862][ T5065] FAT-fs (loop1): Directory bread(block 64) failed
[  123.353981][ T5065] FAT-fs (loop1): Directory bread(block 65) failed
[  123.379931][ T5065] FAT-fs (loop1): Directory bread(block 66) failed
[  123.414206][ T5065] FAT-fs (loop1): Directory bread(block 67) failed
[  123.439033][ T5065] FAT-fs (loop1): Directory bread(block 68) failed
[  123.468529][ T5072] netlink: 52 bytes leftover after parsing attributes in process `syz.2.234'.
[  123.475216][ T5065] FAT-fs (loop1): Directory bread(block 69) failed
[  123.486467][ T5065] FAT-fs (loop1): Directory bread(block 70) failed
[  123.493069][ T5065] FAT-fs (loop1): Directory bread(block 71) failed
[  123.501257][ T5065] FAT-fs (loop1): Directory bread(block 72) failed
[  123.508286][ T5065] FAT-fs (loop1): Directory bread(block 73) failed
[  123.601266][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[  123.855065][ T5030] BTRFS info (device loop5): enabling ssd optimizations
[  124.232957][ T5098] loop1: detected capacity change from 0 to 1024
[  124.285521][ T5098] EXT4-fs: Ignoring removed bh option
[  124.308104][ T4553] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  124.357404][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  124.486311][ T5098] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  124.615010][ T5109] EXT4-fs error (device loop1): empty_inline_dir:1895: inode #12: block 7: comm syz.1.237: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  124.732291][ T5109] EXT4-fs (loop1): Remounting filesystem read-only
[  124.831688][ T5109] EXT4-fs warning (device loop1): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  125.059761][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  125.482854][ T5063] loop0: detected capacity change from 0 to 32768
[  125.502325][ T5135] loop1: detected capacity change from 0 to 256
[  125.551080][ T5063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.230 (5063)
[  125.571014][ T5094] loop4: detected capacity change from 0 to 32768
[  125.599314][ T5135] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  125.670606][ T5135] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x4400851b, utbl_chksum : 0xe619d30d)
[  125.784951][ T5063] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.885000][ T5063] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  125.922774][ T5063] BTRFS info (device loop0): using free space tree
[  126.456776][ T5063] BTRFS error (device loop0): open_ctree failed: -12
[  126.635671][ T5126] loop5: detected capacity change from 0 to 32768
[  128.853955][ T5228] loop1: detected capacity change from 0 to 64
[  129.338555][ T5243] loop4: detected capacity change from 0 to 4096
[  129.360243][ T5246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'.
[  129.399443][ T5242] loop2: detected capacity change from 0 to 4096
[  129.414704][ T4530] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  129.616566][ T4530] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  129.644703][ T4530] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  129.687378][ T4530] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  129.734837][ T4530] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  129.761519][ T4530] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  129.825085][ T4530] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  129.862100][ T4530] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  129.880465][ T4530] usb 6-1: Product: syz
[  129.900514][ T4530] usb 6-1: Manufacturer: syz
[  129.923839][ T4530] cdc_wdm 6-1:1.0: skipping garbage
[  129.937763][ T5243] EXT4-fs (loop4): Test dummy encryption mode enabled
[  129.945054][ T4530] cdc_wdm 6-1:1.0: skipping garbage
[  129.964119][ T4530] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  129.983161][ T5243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  129.992439][ T4530] cdc_wdm 6-1:1.0: Unknown control protocol
[  130.173308][ T4530] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  130.293726][ T5243] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  130.364698][ T4530] usb 2-1: Using ep0 maxpacket: 16
[  130.371897][ T4530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.424501][ T4530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.445449][ T4530] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.468878][ T4530] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  130.495573][ T4530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.516464][ T4530] usb 2-1: config 0 descriptor??
[  130.541104][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  130.541472][   T22] usb 6-1: USB disconnect, device number 2
[  130.952017][ T4530] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  131.000418][ T4530] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input7
[  131.120564][ T4530] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  131.177104][ T5284] loop4: detected capacity change from 0 to 1024
[  131.194963][ T4530] usb 2-1: USB disconnect, device number 3
[  131.219659][ T5282] loop5: detected capacity change from 0 to 4096
[  131.292022][ T5282] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  131.454531][ T4337] hfsplus: b-tree write err: -5, ino 25
[  131.462154][ T4337] hfsplus: b-tree write err: -5, ino 4
[  131.492307][ T4337] hfsplus: b-tree write err: -5, ino 2
[  131.507295][ T5282] ntfs3: loop5: ntfs_sync_inode r=1e failed, -22.
[  131.542361][ T5282] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  131.643907][ T5285] fido_id[5285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  131.715376][ T5287] ntfs3: loop5: ino=1f, "file2" failed to open parent directory r=5 to update
[  131.950392][ T5268] loop0: detected capacity change from 0 to 32768
[  131.958997][   T11] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22.
[  131.973494][   T11] ntfs3: loop5: ino=1f, failed to open parent directory r=5 to update
[  131.996434][ T4553] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22.
[  132.094845][ T5117] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  132.214251][ T5299] loop5: detected capacity change from 0 to 256
[  132.297035][ T5117] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.298946][ T5299] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 000000e5)
[  132.323387][ T5117] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.366137][ T5299] FAT-fs (loop5): error, invalid access to FAT (entry 0x000000e5)
[  132.377909][ T5117] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  132.414775][ T5117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  132.443454][ T5117] usb 3-1: SerialNumber: syz
[  132.689474][ T5117] usb 3-1: 0:2 : does not exist
[  132.746866][ T5117] usb 3-1: USB disconnect, device number 2
[  132.994725][   T22] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  133.027963][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.076785][ T5310] loop0: detected capacity change from 0 to 512
[  133.131659][ T5310] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  133.152216][ T5314] netlink: 79 bytes leftover after parsing attributes in process `syz.1.302'.
[  133.213092][ T5310] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #17: comm syz.0.296: inode has both inline data and extents flags
[  133.229726][   T22] usb 6-1: unable to get BOS descriptor or descriptor too short
[  133.261396][   T22] usb 6-1: not running at top speed; connect to a high speed hub
[  133.286027][ T5310] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.296: couldn't read orphan inode 17 (err -117)
[  133.313618][ T5310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.352214][ T5319] loop4: detected capacity change from 0 to 512
[  133.375832][   T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.411103][   T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.440691][ T5319] EXT4-fs: Ignoring removed nobh option
[  133.459595][   T22] usb 6-1: string descriptor 0 read error: -22
[  133.474988][   T22] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.489368][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.504536][ T5319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  133.548102][   T22] usb 6-1: 0:2 : does not exist
[  133.570151][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  133.624249][ T5319] EXT4-fs (loop4): 1 truncate cleaned up
[  133.674505][ T5319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  133.757596][ T5328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'.
[  133.899896][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  134.162267][ T5339] loop4: detected capacity change from 0 to 1024
[  134.172989][   T22] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  134.197513][   T22] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  134.230115][ T5339] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  134.245040][   T22] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  134.383825][   T22] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  134.444477][   T22] usb 6-1: USB disconnect, device number 3
[  134.478305][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'.
[  134.553603][ T4447] udevd[4447]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.679038][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'.
[  135.001031][ T5364] loop0: detected capacity change from 0 to 512
[  135.073950][ T5364] FAT-fs (loop0): Directory bread(block 199916) failed
[  135.086851][ T5360] loop5: detected capacity change from 0 to 4096
[  135.098977][ T5364] FAT-fs (loop0): Directory bread(block 199917) failed
[  135.116618][ T5364] FAT-fs (loop0): Directory bread(block 199918) failed
[  135.123585][ T5364] FAT-fs (loop0): Directory bread(block 199919) failed
[  135.130953][ T5364] FAT-fs (loop0): Directory bread(block 199920) failed
[  135.137958][ T5360] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  135.205203][ T5364] FAT-fs (loop0): Directory bread(block 199921) failed
[  135.229964][ T5364] FAT-fs (loop0): Directory bread(block 199922) failed
[  135.259945][ T5364] FAT-fs (loop0): Directory bread(block 199923) failed
[  135.311152][ T5360] ntfs3: loop5: ino=1f, "file2" failed to open parent directory r=5 to update
[  135.337034][ T5364] FAT-fs (loop0): Directory bread(block 199916) failed
[  135.387037][ T5364] FAT-fs (loop0): Directory bread(block 199917) failed
[  135.496908][   T11] ntfs3: loop5: ino=1f, failed to open parent directory r=5 to update
[  135.567700][ T5339] loop4: detected capacity change from 0 to 32768
[  135.616180][ T5339] JFS: Invalid value of umask
[  135.866436][ T5376] loop0: detected capacity change from 0 to 64
[  136.145265][   T56] kworker/u4:4: attempt to access beyond end of device
[  136.145265][   T56] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64
[  136.184923][   T56] Buffer I/O error on dev loop0, logical block 134217734, lost async page write
[  136.271222][ T5357] loop1: detected capacity change from 0 to 40427
[  136.326496][ T5357] F2FS-fs (loop1): invalid crc value
[  136.367774][ T5357] F2FS-fs (loop1): Found nat_bits in checkpoint
[  136.492734][ T5385] program syz.0.328 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.548997][ T5357] F2FS-fs (loop1): recover fsync data on readonly fs
[  136.588883][ T5357] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  136.627199][ T5357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  136.652709][ T5372] loop2: detected capacity change from 0 to 32768
[  136.752671][ T5372] JBD2: Ignoring recovery information on journal
[  136.977593][ T5372] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  137.130235][ T5372] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  137.156627][ T5372] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  137.184949][ T5372] OCFS2: File system is now read-only.
[  137.204089][ T5372] (syz.2.322,5372,0):ocfs2_trim_mainbm:7610 ERROR: status = -30
[  137.357128][ T5382] loop4: detected capacity change from 0 to 32768
[  137.370453][ T4271] ocfs2: Unmounting device (7,2) on (node local)
[  137.515553][ T5399] loop1: detected capacity change from 0 to 2048
[  137.636371][ T5399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  137.654070][ T5382] UFO tlock:0xffffc9000286a168
[  137.859706][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  138.683861][ T5404] loop0: detected capacity change from 0 to 32768
[  138.781591][ T5404] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  138.812863][ T5406] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  138.861638][ T5426] netlink: 'syz.1.343': attribute type 12 has an invalid length.
[  138.874044][ T5426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.343'.
[  138.904903][ T4615] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  138.955135][ T5406] JBD2: Ignoring recovery information on journal
[  139.007496][ T4268] ocfs2: Unmounting device (7,0) on (node local)
[  139.094897][ T4615] usb 6-1: Using ep0 maxpacket: 8
[  139.105908][ T4615] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  139.151422][ T4615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.180278][ T4615] usb 6-1: Product: syz
[  139.184538][ T4615] usb 6-1: Manufacturer: syz
[  139.198654][ T4615] usb 6-1: SerialNumber: syz
[  139.201359][ T5406] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  139.370111][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  139.377186][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  139.549887][ T5414] set_capacity_and_notify: 1 callbacks suppressed
[  139.549904][ T5414] loop4: detected capacity change from 0 to 32768
[  139.641516][ T4615] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  139.655921][ T4615] mxuport: probe of 6-1:254.0 failed with error -5
[  139.800431][ T4271] ocfs2: Unmounting device (7,2) on (node local)
[  139.862828][ T4615] usb 6-1: USB disconnect, device number 4
[  139.917050][ T5439] loop1: detected capacity change from 0 to 4096
[  139.974085][ T5439] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  140.018719][ T5446] loop0: detected capacity change from 0 to 512
[  140.143010][ T5446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  140.193042][ T5446] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.316174][ T5104] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  140.396749][ T5446] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  140.522174][ T5104] usb 3-1: Using ep0 maxpacket: 32
[  140.530724][ T5104] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  140.585489][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.627567][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  140.642126][ T5104] gspca_main: nw80x-2.14.0 probing 055f:d001
[  140.894515][ T5464] loop1: detected capacity change from 0 to 512
[  140.962231][ T5464] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.354: bg 0: block 255: padding at end of block bitmap is not set
[  141.028379][ T5464] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  141.039074][ T5464] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.354: invalid indirect mapped block 1 (level 1)
[  141.056941][ T5113] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  141.117302][ T5464] EXT4-fs (loop1): 1 truncate cleaned up
[  141.129020][ T5464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  141.138086][ T5467] tipc: Started in network mode
[  141.143026][ T5467] tipc: Node identity , cluster identity 4711
[  141.179979][ T5470] loop0: detected capacity change from 0 to 256
[  141.190321][ T5464] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 1057052516 > max in inode 18
[  141.224331][ T5470] exfat: Deprecated parameter 'utf8'
[  141.254260][ T5104] gspca_nw80x: reg_w err -71
[  141.265508][ T5104] nw80x: probe of 3-1:3.0 failed with error -71
[  141.274292][ T5470] exfat: Deprecated parameter 'utf8'
[  141.285203][ T5470] exfat: Deprecated parameter 'utf8'
[  141.296603][ T5113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  141.332698][ T5104] usb 3-1: USB disconnect, device number 3
[  141.338797][ T5113] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  141.370381][ T5470] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  141.394767][ T5113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  141.435077][ T5113] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  141.454403][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  141.480439][ T5113] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  141.518587][ T5113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.561047][ T5113] usb 5-1: Product: syz
[  141.585467][ T5113] usb 5-1: Manufacturer: syz
[  141.614967][ T5113] usb 5-1: SerialNumber: syz
[  141.653167][ T5476] netlink: 388 bytes leftover after parsing attributes in process `syz.1.358'.
[  141.658462][ T5113] usb 5-1: config 0 descriptor??
[  141.718549][ T5113] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  141.974953][ T5113] scsi host1: usb-storage 5-1:0.0
[  142.012605][ T5113] usb 5-1: USB disconnect, device number 5
[  142.178435][ T5492] loop5: detected capacity change from 0 to 1024
[  142.228810][ T5492] EXT4-fs: Ignoring removed oldalloc option
[  142.257096][ T5492] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  142.312720][ T5492] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  142.953922][ T4553] EXT4-fs (loop5): unmounting filesystem.
[  143.394164][ T5525] CUSE: info not properly terminated
[  143.461386][ T5528] loop2: detected capacity change from 0 to 1024
[  143.854267][ T5537] loop4: detected capacity change from 0 to 2048
[  143.944501][ T5537] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.090608][   T27] kauditd_printk_skb: 21 callbacks suppressed
[  144.090626][   T27] audit: type=1800 audit(1776484271.633:19): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.379" name="bus" dev="loop4" ino=1367 res=0 errno=0
[  144.158299][ T5544] loop2: detected capacity change from 0 to 4096
[  144.362797][ T5544] ntfs3: loop2: ino=5, "/" directory corrupted
[  145.180946][ T5546] loop5: detected capacity change from 0 to 32768
[  145.311037][ T5542] loop1: detected capacity change from 0 to 40427
[  145.379327][ T5542] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  145.405332][ T5542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  145.475736][ T5542] F2FS-fs (loop1): invalid crc value
[  145.546823][ T5542] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  145.755291][ T5549] loop0: detected capacity change from 0 to 40427
[  145.801982][ T5549] F2FS-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value
[  145.884748][ T5542] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  145.926886][ T5542] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  145.953446][ T5549] F2FS-fs (loop0): invalid crc value
[  146.027885][ T5549] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.289172][ T4270] syz-executor: attempt to access beyond end of device
[  146.289172][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  146.901521][ T5610] loop0: detected capacity change from 0 to 512
[  146.929189][ T5610] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  147.071150][ T5610] EXT4-fs (loop0): orphan cleanup on readonly fs
[  147.084029][ T5607] loop1: detected capacity change from 0 to 4096
[  147.151489][ T5610] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  147.235160][ T5610] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  147.316765][ T5610] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  147.413103][ T5610] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  147.539426][ T5610] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.402: corrupted inode contents
[  147.622407][ T5610] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #12: comm syz.0.402: mark_inode_dirty error
[  147.701787][ T5610] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.402: corrupted inode contents
[  147.773586][ T5610] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.402: mark_inode_dirty error
[  147.833661][ T5610] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.402: corrupted inode contents
[  147.894878][ T5610] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  147.917884][ T5610] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.402: corrupted inode contents
[  147.976270][ T5610] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.402: mark_inode_dirty error
[  148.034459][ T5610] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  148.082707][ T5610] EXT4-fs (loop0): 1 truncate cleaned up
[  148.109744][ T5610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  148.376147][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  148.445873][ T5648] loop5: detected capacity change from 0 to 256
[  148.499777][ T5648] exfat: Deprecated parameter 'utf8'
[  148.587435][ T5648] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  149.251268][ T5666] netem: change failed
[  149.280176][ T5631] loop2: detected capacity change from 0 to 40427
[  149.323727][ T5668] mmap: syz.0.424 (5668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  149.324492][ T5631] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  149.426242][ T5631] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  149.484703][ T5631] F2FS-fs (loop2): invalid crc value
[  149.548115][ T5631] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  149.817474][ T5631] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  149.826997][ T5685] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.864190][ T5631] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  149.924322][ T5685] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  150.019869][ T5689] Illegal XDP return value 4294967274 on prog  (id 26) dev N/A, expect packet loss!
[  150.300754][ T4271] syz-executor: attempt to access beyond end of device
[  150.300754][ T4271] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.948259][ T5708] loop0: detected capacity change from 0 to 4096
[  151.007867][ T5708] NILFS: invalid option "cp=0x00": invalid checkpoint number 0
[  151.077444][ T5708] overlayfs: unrecognized mount option "\strict" or missing value
[  151.152487][ T5715] loop5: detected capacity change from 0 to 736
[  151.303436][ T5718] loop4: detected capacity change from 0 to 24
[  151.355691][ T5718] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  151.380528][ T5718] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  151.528551][ T5724] loop2: detected capacity change from 0 to 64
[  151.823592][ T5725] loop0: detected capacity change from 0 to 4096
[  151.897856][ T5730] loop4: detected capacity change from 0 to 1024
[  151.961500][ T5730] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  152.012941][ T5730] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  152.078224][ T5730] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #5: comm syz.4.445: unexpected bad inode w/o EXT4_IGET_BAD
[  152.175510][ T5730] EXT4-fs (loop4): no journal found
[  152.204788][ T5730] EXT4-fs (loop4): can't get journal size
[  152.216211][ T5730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  152.246195][ T5736] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  152.253373][ T5736] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  152.367965][ T5736] vhci_hcd vhci_hcd.0: Device attached
[  152.502693][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  152.509794][ T4400] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  152.624726][ T4530] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  152.722961][ T4400] usb 3-1: config 0 has no interfaces?
[  152.730325][ T4400] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  152.783134][ T4400] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  152.822210][ T4400] usb 3-1: Manufacturer: syz
[  152.840404][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'.
[  152.857786][ T4400] usb 3-1: config 0 descriptor??
[  153.133364][ T4400] usb 3-1: USB disconnect, device number 4
[  153.140035][ T5738] vhci_hcd: connection closed
[  153.173619][   T41] vhci_hcd: stop threads
[  153.224528][   T41] vhci_hcd: release socket
[  153.269483][ T4530] usb 37-1: device descriptor read/64, error -71
[  153.285204][   T41] vhci_hcd: disconnect device
[  153.488170][ T4530] vhci_hcd: vhci_device speed not set
[  153.557209][ T5774] tipc: Started in network mode
[  153.562217][ T5774] tipc: Node identity 2e0000000000400002, cluster identity 4711
[  153.865998][ T5788] loop2: detected capacity change from 0 to 256
[  154.581951][ T5813] loop1: detected capacity change from 0 to 1024
[  154.705021][ T5813] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  154.731562][ T5813] hfsplus: xattr searching failed
[  154.738133][   T27] audit: type=1800 audit(1776484282.283:20): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.474" name="file1" dev="loop1" ino=20 res=0 errno=0
[  155.088667][ T5823] loop1: detected capacity change from 0 to 4096
[  155.162012][ T5823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  155.340564][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  155.470487][ T5828] loop4: detected capacity change from 0 to 16384
[  155.508750][ T5839] program syz.1.481 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.636568][ T5842] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.920735][ T5885] loop5: detected capacity change from 0 to 256
[  157.046723][ T5885] FAT-fs (loop5): Directory bread(block 64) failed
[  157.057750][ T5885] FAT-fs (loop5): Directory bread(block 65) failed
[  157.095962][ T5885] FAT-fs (loop5): Directory bread(block 66) failed
[  157.138729][ T5885] FAT-fs (loop5): Directory bread(block 67) failed
[  157.175183][ T5885] FAT-fs (loop5): Directory bread(block 68) failed
[  157.181842][ T5885] FAT-fs (loop5): Directory bread(block 69) failed
[  157.234786][ T5885] FAT-fs (loop5): Directory bread(block 70) failed
[  157.241435][ T5885] FAT-fs (loop5): Directory bread(block 71) failed
[  157.304227][ T5885] FAT-fs (loop5): Directory bread(block 72) failed
[  157.304275][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'.
[  157.335238][ T5885] FAT-fs (loop5): Directory bread(block 73) failed
[  157.362713][ T5900] process 'syz.2.505' launched '/dev/fd/3' with NULL argv: empty string added
[  157.637981][ T5911] loop0: detected capacity change from 0 to 256
[  157.677104][ T5911] exfat: Deprecated parameter 'utf8'
[  157.701249][ T5911] exfat: Deprecated parameter 'namecase'
[  157.774926][   T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  157.793483][ T5911] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  157.964840][   T22] usb 2-1: Using ep0 maxpacket: 32
[  157.972292][   T22] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  158.014959][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.065980][   T22] gspca_main: nw80x-2.14.0 probing 055f:d001
[  158.679240][   T22] usb 2-1: USB disconnect, device number 4
[  159.193268][ T5958] netlink: 'syz.4.524': attribute type 1 has an invalid length.
[  159.461711][ T5964] loop4: detected capacity change from 0 to 4096
[  160.646980][ T5999] netlink: 4348 bytes leftover after parsing attributes in process `syz.1.543'.
[  160.967385][ T6011] loop0: detected capacity change from 0 to 128
[  160.994489][ T6011] FAT-fs (loop0): Directory bread(block 524322) failed
[  161.012046][ T6011] FAT-fs (loop0): Directory bread(block 524323) failed
[  161.049105][ T6011] FAT-fs (loop0): Directory bread(block 524324) failed
[  161.079296][ T6011] FAT-fs (loop0): Directory bread(block 524325) failed
[  161.104442][ T6011] FAT-fs (loop0): Directory bread(block 524326) failed
[  161.118954][ T5989] loop5: detected capacity change from 0 to 32768
[  161.132834][ T6011] FAT-fs (loop0): Directory bread(block 524327) failed
[  161.140399][ T6011] FAT-fs (loop0): Directory bread(block 524328) failed
[  161.152567][ T6011] FAT-fs (loop0): Directory bread(block 524329) failed
[  161.168401][ T6011] FAT-fs (loop0): Directory bread(block 524322) failed
[  161.175788][ T6011] FAT-fs (loop0): Directory bread(block 524323) failed
[  161.227235][ T6019] loop4: detected capacity change from 0 to 1024
[  161.261226][ T5989] XFS (loop5): Mounting V5 Filesystem
[  161.321793][ T6019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  161.366103][ T6013] loop1: detected capacity change from 0 to 4096
[  161.390966][ T6013] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  161.461179][ T6013] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  161.504442][ T5989] XFS (loop5): Ending clean mount
[  161.776238][ T5989] syz.5.539 (5989) used greatest stack depth: 19184 bytes left
[  161.795729][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  162.007131][ T4553] XFS (loop5): Unmounting Filesystem
[  162.284650][ T5113] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  162.301720][ T6041] loop1: detected capacity change from 0 to 512
[  162.345549][ T6041] EXT4-fs: Ignoring removed bh option
[  162.383575][ T6041] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  162.446633][ T6041] EXT4-fs (loop1): 1 truncate cleaned up
[  162.452743][ T6041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  162.484923][ T5113] usb 5-1: Using ep0 maxpacket: 16
[  162.492070][ T5113] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.503718][ T5113] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.516146][ T5113] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.525563][ T5113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.533614][ T5113] usb 5-1: Product: syz
[  162.538363][ T5113] usb 5-1: Manufacturer: syz
[  162.543024][ T5113] usb 5-1: SerialNumber: syz
[  162.679251][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  162.759465][ T5113] usb 5-1: 0:2 : does not exist
[  162.795303][ T5113] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  162.872826][ T5113] usb 5-1: USB disconnect, device number 6
[  163.146516][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.299579][ T6060] loop0: detected capacity change from 0 to 256
[  163.375367][ T6060] exfat: Deprecated parameter 'utf8'
[  163.470200][ T6064] loop4: detected capacity change from 0 to 16
[  163.489067][ T6060] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  163.532329][ T6064] erofs: (device loop4): mounted with root inode @ nid 36.
[  163.636043][   T27] audit: type=1800 audit(1776484291.183:21): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="file1" dev="loop0" ino=1048631 res=0 errno=0
[  163.677482][ T6067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.569'.
[  163.924278][ T6072] loop0: detected capacity change from 0 to 512
[  164.029707][ T6072] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  164.042269][ T6072] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  164.053139][ T6072] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.571: Corrupt directory, running e2fsck is recommended
[  164.070770][ T6072] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  164.079753][ T6072] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.571: corrupted in-inode xattr
[  164.092478][ T6072] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.571: couldn't read orphan inode 15 (err -117)
[  164.131426][ T6072] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  164.239470][ T6077] device vlan2 entered promiscuous mode
[  164.249553][ T6072] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  164.260365][ T6077] device macvlan0 entered promiscuous mode
[  164.294922][ T6072] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  164.329496][ T6072] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.571: Corrupt directory, running e2fsck is recommended
[  164.396603][ T6072] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.571: path /112/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  164.508826][ T6072] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 22: comm syz.0.571: path /112/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0
[  164.539625][ T6062] loop2: detected capacity change from 0 to 32768
[  164.569051][ T6072] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 8: comm syz.0.571: path /112/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  164.621847][ T6062] XFS (loop2): Mounting V5 Filesystem
[  164.696621][ T6062] XFS (loop2): Ending clean mount
[  164.800966][ T6062] XFS (loop2): Quotacheck needed: Please wait.
[  164.820731][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  164.880477][ T6095] loop4: detected capacity change from 0 to 512
[  164.982531][ T6062] XFS (loop2): Quotacheck: Done.
[  164.994188][ T6095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002]
[  165.004831][ T6095] System zones: 1-12
[  165.035428][ T6095] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.578: corrupted in-inode xattr
[  165.108598][ T6095] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.578: couldn't read orphan inode 15 (err -117)
[  165.170270][ T6095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  165.297092][ T4271] XFS (loop2): Unmounting Filesystem
[  165.356208][ T6101] device batadv0 entered promiscuous mode
[  165.373959][ T6101] device macvtap1 entered promiscuous mode
[  165.403953][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  165.411179][ T6101] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  165.461809][ T6101] device batadv0 left promiscuous mode
[  165.909129][ T6103] loop4: detected capacity change from 0 to 8192
[  165.963262][ T6103] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  165.984864][ T6103] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  166.026208][ T6103] REISERFS (device loop4): using ordered data mode
[  166.032814][ T6103] reiserfs: using flush barriers
[  166.053360][ T6091] loop5: detected capacity change from 0 to 40427
[  166.069735][ T6091] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  166.079355][ T6091] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  166.091569][ T6091] F2FS-fs (loop5): invalid crc value
[  166.109456][ T6103] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  166.131717][ T6103] REISERFS (device loop4): checking transaction log (loop4)
[  166.151580][ T6091] F2FS-fs (loop5): Found nat_bits in checkpoint
[  166.293761][   T27] audit: type=1326 audit(1776484293.833:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  166.419368][ T6091] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  166.422811][   T27] audit: type=1326 audit(1776484293.883:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  166.430670][ T6091] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  166.492346][ T6103] REISERFS (device loop4): Using tea hash to sort names
[  166.575844][   T27] audit: type=1326 audit(1776484293.883:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  166.582106][ T6103] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  166.692554][   T27] audit: type=1326 audit(1776484293.883:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  166.760968][   T27] audit: type=1326 audit(1776484293.883:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  166.804317][   T27] audit: type=1326 audit(1776484293.883:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  166.853930][   T27] audit: type=1326 audit(1776484293.953:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  166.912180][   T27] audit: type=1326 audit(1776484293.953:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9947f9c819 code=0x7ffc0000
[  167.033571][    T9] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  167.084008][    T9] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  167.352763][ T6105] loop0: detected capacity change from 0 to 32768
[  167.522471][ T6131] netlink: 194188 bytes leftover after parsing attributes in process `syz.4.590'.
[  167.534886][ T6131] netlink: zone id is out of range
[  167.546094][ T6131] netlink: zone id is out of range
[  167.546103][ T6105] XFS (loop0): Mounting V5 Filesystem
[  167.587712][ T6105] XFS (loop0): Ending clean mount
[  167.605083][ T6131] netlink: zone id is out of range
[  167.625615][ T6131] netlink: zone id is out of range
[  167.639095][ T6131] netlink: zone id is out of range
[  167.670310][ T6131] netlink: zone id is out of range
[  167.687325][ T6131] netlink: zone id is out of range
[  167.730370][ T6131] netlink: zone id is out of range
[  167.755390][ T6131] netlink: zone id is out of range
[  167.760610][ T6131] netlink: zone id is out of range
[  167.838903][ T4268] XFS (loop0): Unmounting Filesystem
[  168.078351][ T6138] loop2: detected capacity change from 0 to 64
[  168.281028][ T6141] Bluetooth: MGMT ver 1.22
[  168.554141][ T6146] loop2: detected capacity change from 0 to 64
[  168.658534][ T6146] hfs: bad catalog folder thread
[  169.100203][ T6160] Bluetooth: MGMT ver 1.22
[  169.320854][ T6170] loop5: detected capacity change from 0 to 164
[  169.355257][ T4400] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  169.367414][ T6170] Unable to read rock-ridge attributes
[  169.382602][ T6170] Unable to read rock-ridge attributes
[  169.494808][ T4314] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  169.558831][ T4400] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  169.588519][ T4400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.601596][ T4400] usb 5-1: Product: syz
[  169.620110][ T4400] usb 5-1: Manufacturer: syz
[  169.634019][ T4400] usb 5-1: SerialNumber: syz
[  169.666544][ T4400] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  169.704815][ T4314] usb 2-1: Using ep0 maxpacket: 8
[  169.716506][ T4314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.742023][ T4314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  169.757934][ T4314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  169.771478][ T4314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  169.793445][ T4314] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  169.822665][ T4400] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  169.836465][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.877871][ T4314] hub 2-1:1.0: bad descriptor, ignoring hub
[  169.883993][ T4314] hub: probe of 2-1:1.0 failed with error -5
[  169.891571][ T4314] cdc_wdm 2-1:1.0: skipping garbage
[  169.900128][ T4314] cdc_wdm 2-1:1.0: skipping garbage
[  169.913285][ T4314] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  169.922767][ T4314] cdc_wdm 2-1:1.0: Unknown control protocol
[  170.024025][ T6183] loop2: detected capacity change from 0 to 64
[  170.407298][ T4314] usb 2-1: USB disconnect, device number 5
[  170.485997][   T14] usb 5-1: USB disconnect, device number 7
[  170.752712][ T6188] loop2: detected capacity change from 0 to 32768
[  170.793961][ T6188] XFS (loop2): Mounting V5 Filesystem
[  170.808452][ T6196] loop5: detected capacity change from 0 to 8192
[  170.852674][ T6196] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  170.866519][ T6196] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  170.876943][ T6196] REISERFS (device loop5): using ordered data mode
[  170.883544][ T6196] reiserfs: using flush barriers
[  170.914407][ T6196] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  170.931430][ T6196] REISERFS (device loop5): checking transaction log (loop5)
[  170.943768][ T6196] REISERFS (device loop5): Using r5 hash to sort names
[  170.951554][ T6196] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  170.970701][ T6196] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  171.018896][ T6188] XFS (loop2): Ending clean mount
[  171.042412][ T4314] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 
[  171.071545][ T4314] XFS (loop2): Unmount and run xfs_repair
[  171.115203][ T4314] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  171.122716][ T4314] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  171.136141][ T4400] usb 5-1: Service connection timeout for: 256
[  171.142472][ T4400] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  171.211436][ T4400] ath9k_htc: Failed to initialize the device
[  171.217954][ T4314] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  171.237038][   T14] usb 5-1: ath9k_htc: USB layer deinitialized
[  171.250575][ T4314] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  171.289508][ T4314] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  171.325557][ T4314] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  171.326552][ T6208] loop1: detected capacity change from 0 to 2048
[  171.334537][ T4314] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  171.351928][ T4314] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.370465][ T4314] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.392978][ T6188] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x20 len 8 error 74
[  171.417456][ T6208] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  171.459108][ T6188] XFS (loop2): Failed to initialize disk quotas.
[  171.482757][ T6210] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.702061][ T4271] XFS (loop2): Unmounting Filesystem
[  171.867639][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.625'.
[  171.939519][ T6218] loop5: detected capacity change from 0 to 64
[  172.109077][ T6218] hfs: request for non-existent node 1025 in B*Tree
[  172.168892][ T6218] hfs: request for non-existent node 1025 in B*Tree
[  172.243293][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.631'.
[  172.694711][ T5113] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  172.885073][ T5113] usb 5-1: Using ep0 maxpacket: 8
[  172.896602][ T5113] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.933702][ T5113] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  172.964185][ T5113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  173.004488][ T5113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  173.040341][ T5113] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  173.064425][ T5113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.127652][ T5113] hub 5-1:1.0: bad descriptor, ignoring hub
[  173.133649][ T5113] hub: probe of 5-1:1.0 failed with error -5
[  173.160815][ T5113] cdc_wdm 5-1:1.0: skipping garbage
[  173.206952][ T5113] cdc_wdm 5-1:1.0: skipping garbage
[  173.227439][ T5113] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  173.233510][ T5113] cdc_wdm 5-1:1.0: Unknown control protocol
[  173.361216][ T6232] loop1: detected capacity change from 0 to 32768
[  173.422772][ T6232] ea_get: invalid extended attribute
[  173.440567][ T6232] ffff8880504843f0: 04 00 00 00                                      ....
[  173.490683][ T6235] loop0: detected capacity change from 0 to 32768
[  173.519214][ T6250] loop5: detected capacity change from 0 to 2048
[  173.538265][ T6235] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.633 (6235)
[  173.565067][ T6250] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  173.601243][ T4530] usb 5-1: USB disconnect, device number 8
[  173.641348][ T6235] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  173.685797][ T6252] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.701024][ T6235] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  173.739873][ T6235] BTRFS info (device loop0): using free space tree
[  173.784886][ T5104] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  174.026631][ T5104] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.054743][ T5104] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.074761][ T5104] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  174.095435][ T5104] usb 3-1: config 0 interface 0 has no altsetting 0
[  174.095511][ T6235] BTRFS info (device loop0): enabling ssd optimizations
[  174.124657][ T5104] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  174.133797][ T5104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.183878][ T5104] usb 3-1: config 0 descriptor??
[  174.219794][ T6276] ptrace attach of "./syz-executor exec"[4269] was attempted by " Àÿ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      
[  174.432576][ T4268] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  174.603758][ T5104] holtek 0003:1241:5015.0004: collection stack underflow
[  174.624311][ T5104] holtek 0003:1241:5015.0004: item 0 1 0 12 parsing failed
[  174.647815][ T5104] holtek 0003:1241:5015.0004: parse failed
[  174.685412][ T5104] holtek: probe of 0003:1241:5015.0004 failed with error -22
[  174.872587][ T4314] usb 3-1: USB disconnect, device number 5
[  175.354097][ T6306] ptrace attach of "./syz-executor exec"[4553] was attempted by " Àÿ      Ðÿ      ð¥      Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      
[  175.604869][ T5113] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  175.838361][ T6317] loop0: detected capacity change from 0 to 8
[  176.096559][ T5113] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  176.107737][ T5113] usb 5-1: config 0 has no interface number 0
[  176.149032][ T5113] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  176.186644][ T5113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.207164][ T5113] usb 5-1: Product: syz
[  176.219202][ T5113] usb 5-1: Manufacturer: syz
[  176.249914][ T5113] usb 5-1: SerialNumber: syz
[  176.262949][ T5113] usb 5-1: config 0 descriptor??
[  176.283454][ T5113] usb 5-1: selecting invalid altsetting 1
[  176.311811][ T6329] netlink: 32 bytes leftover after parsing attributes in process `syz.0.667'.
[  176.324544][ T5113] dvb_ttusb_budget: ttusb_init_controller: error
[  176.344672][ T5113] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  176.636593][ T5113] DVB: Unable to find symbol stv0299_attach()
[  176.662700][ T6315] loop5: detected capacity change from 0 to 32768
[  176.810222][ T6315] XFS (loop5): Mounting V5 Filesystem
[  176.902473][ T6343] loop0: detected capacity change from 0 to 4096
[  176.965880][ T5113] DVB: Unable to find symbol tda8083_attach()
[  176.972043][ T5113] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  176.988837][ T6343] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  177.032100][ T6351] mkiss: ax0: crc mode is auto.
[  177.086837][ T5113] usb 5-1: USB disconnect, device number 9
[  177.095601][ T6315] XFS (loop5): Ending clean mount
[  177.113274][ T6315] XFS (loop5): Quotacheck needed: Please wait.
[  177.260877][ T6315] XFS (loop5): Quotacheck: Done.
[  177.324499][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  177.380578][ T4553] XFS (loop5): Unmounting Filesystem
[  177.414912][ T4530] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  177.614687][ T4530] usb 3-1: Using ep0 maxpacket: 32
[  177.622160][ T4530] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  177.643467][ T4530] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  177.675513][ T4530] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  177.716620][ T4530] usb 3-1: config 1 has no interface number 0
[  177.746995][ T4530] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  177.801017][ T4530] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  177.883574][ T4530] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  177.933474][ T4530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.983590][ T4530] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  178.187721][ T4530] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  178.599065][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.689'.
[  178.609265][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.689'.
[  178.657058][ T4530] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  178.690399][   T22] usb 3-1: USB disconnect, device number 6
[  178.698549][   T22] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  178.822936][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.692'.
[  178.882660][ T4530] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  178.901402][ T4530] usb 5-1: config 0 has no interface number 0
[  178.918724][ T4530] usb 5-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30
[  178.945242][ T4530] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.992556][ T4530] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.022605][ T4530] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  179.046552][ T4530] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  179.061863][ T4530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.079629][ T4530] usb 5-1: config 0 descriptor??
[  179.103768][ T6400] loop5: detected capacity change from 0 to 4096
[  179.166282][ T6400] NILFS (loop5): invalid segment: Checksum error in segment payload
[  179.221407][ T6400] NILFS (loop5): trying rollback from an earlier position
[  179.268530][ T6400] NILFS (loop5): recovery complete
[  179.315411][ T6407] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.451747][ T6410] affs: Unrecognized mount option "" or missing value
[  179.471341][ T6410] affs: Error parsing options
[  179.498409][ T4530] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  179.524763][ T4530] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  179.531757][ T4530] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  179.589189][ T4530] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  179.621834][ T4530] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  179.654744][ T4530] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  179.683284][ T4530] wacom 0003:056A:0084.0005: unknown main item tag 0x0
[  179.716959][ T6415] loop1: detected capacity change from 0 to 2048
[  179.723863][ T4530] wacom 0003:056A:0084.0005: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.4-1/input2
[  179.763877][ T4530] usb 5-1: USB disconnect, device number 10
[  179.776099][ T6415] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  179.809373][ T6415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.121191][ T6418] fido_id[6418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  180.826047][ T6450] loop1: detected capacity change from 0 to 256
[  181.339360][ T6465] loop5: detected capacity change from 0 to 256
[  181.434464][ T6465] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  181.501318][ T6465] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  181.845525][ T6479] hugetlbfs: Bad value 'ó' for mount option 'size'
[  181.845525][ T6479] 
[  182.291906][ T6491] loop2: detected capacity change from 0 to 4096
[  182.333513][ T6491] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  182.431096][ T6496] loop1: detected capacity change from 0 to 4096
[  182.524821][ T6496] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  182.554787][ T6496] NILFS (loop1): mounting unchecked fs
[  182.665037][ T6496] NILFS (loop1): recovery complete
[  182.699240][ T6507] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.942919][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.748'.
[  182.977474][ T6512] netlink: 7 bytes leftover after parsing attributes in process `syz.5.748'.
[  183.274991][   T14] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  183.349142][ T6526] loop5: detected capacity change from 0 to 1024
[  183.489815][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  183.542805][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.587835][   T14] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  183.618295][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.659677][   T14] usb 5-1: config 0 descriptor??
[  183.934875][ T5112] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  184.083301][   T14] elan 0003:04F3:0755.0006: unknown main item tag 0x2
[  184.091274][   T14] elan 0003:04F3:0755.0006: item fetching failed at offset 3/5
[  184.100723][   T14] elan 0003:04F3:0755.0006: Hid Parse failed
[  184.117901][   T14] elan: probe of 0003:04F3:0755.0006 failed with error -22
[  184.134955][ T5112] usb 3-1: Using ep0 maxpacket: 16
[  184.156571][ T5112] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  184.181918][ T5112] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.194782][ T5112] usb 3-1: Product: syz
[  184.199092][ T5112] usb 3-1: Manufacturer: syz
[  184.206804][ T5112] usb 3-1: SerialNumber: syz
[  184.227387][ T5112] usb 3-1: config 0 descriptor??
[  184.251115][ T5112] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  184.309002][   T14] usb 5-1: USB disconnect, device number 11
[  184.645109][ T5112] usb 3-1: clie_3_5_startup: get interface number bad return length: 0
[  184.673936][ T5112] visor: probe of 3-1:0.0 failed with error -5
[  184.711976][ T6562] program syz.1.772 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.864892][ T5112] usb 3-1: USB disconnect, device number 7
[  185.240239][ T6582] loop4: detected capacity change from 0 to 256
[  185.368303][ T6582] FAT-fs (loop4): Directory bread(block 64) failed
[  185.402541][ T6582] FAT-fs (loop4): Directory bread(block 65) failed
[  185.440424][ T6582] FAT-fs (loop4): Directory bread(block 66) failed
[  185.467913][ T6582] FAT-fs (loop4): Directory bread(block 67) failed
[  185.484809][ T6582] FAT-fs (loop4): Directory bread(block 68) failed
[  185.491451][ T6582] FAT-fs (loop4): Directory bread(block 69) failed
[  185.560222][ T6582] FAT-fs (loop4): Directory bread(block 70) failed
[  185.609742][ T6582] FAT-fs (loop4): Directory bread(block 71) failed
[  185.638356][ T6582] FAT-fs (loop4): Directory bread(block 72) failed
[  185.680618][ T6582] FAT-fs (loop4): Directory bread(block 73) failed
[  185.877794][ T6595] loop5: detected capacity change from 0 to 1024
[  185.940699][ T6598] loop1: detected capacity change from 0 to 1024
[  186.117914][ T6601] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  186.145050][   T56] hfsplus: b-tree write err: -5, ino 25
[  186.157629][   T56] hfsplus: b-tree write err: -5, ino 4
[  186.189443][   T56] hfsplus: b-tree write err: -5, ino 2
[  186.235262][   T56] hfsplus: b-tree write err: -5, ino 17
[  186.433681][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'.
[  186.749802][ T6617] netlink: 'syz.2.798': attribute type 6 has an invalid length.
[  187.000925][ T5112] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  187.196534][ T5112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  187.225133][ T5112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.253426][ T5112] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  187.274050][ T5112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.293752][   T27] audit: type=1400 audit(1776484314.833:30): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="://&P" pid=6637 comm="syz.2.807"
[  187.334386][ T5112] usb 2-1: config 0 descriptor??
[  187.600050][ T6645] netlink: 'syz.4.811': attribute type 11 has an invalid length.
[  187.624736][ T6645] netlink: 'syz.4.811': attribute type 11 has an invalid length.
[  187.632865][ T6645] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.811'.
[  187.776500][ T5112] isku 0003:1E7D:319C.0007: unknown main item tag 0x0
[  187.803267][ T6632] loop0: detected capacity change from 0 to 32768
[  187.810082][ T5112] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  187.966984][ T6632] XFS (loop0): Mounting V5 Filesystem
[  187.976902][ T5112] isku 0003:1E7D:319C.0007: couldn't init struct isku_device
[  187.984957][ T5112] isku 0003:1E7D:319C.0007: couldn't install keyboard
[  187.997249][ T5112] isku: probe of 0003:1E7D:319C.0007 failed with error -71
[  188.025925][ T5112] usb 2-1: USB disconnect, device number 6
[  188.068003][ T6632] XFS (loop0): Ending clean mount
[  188.101171][ T6632] XFS (loop0): Quotacheck needed: Please wait.
[  188.161320][ T6660] fido_id[6660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  188.223093][ T6632] XFS (loop0): Quotacheck: Done.
[  188.481786][ T4268] XFS (loop0): Unmounting Filesystem
[  188.711387][ T6675] netlink: 'syz.5.821': attribute type 8 has an invalid length.
[  189.130378][ T6686] loop4: detected capacity change from 0 to 1024
[  189.223321][ T6686] hfsplus: bad catalog entry type
[  189.251016][ T6691] netlink: 'syz.5.830': attribute type 6 has an invalid length.
[  189.283797][ T6691] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.830'.
[  189.420773][ T4330] hfsplus: b-tree write err: -5, ino 25
[  189.460275][ T4330] hfsplus: b-tree write err: -5, ino 4
[  189.484852][ T4330] hfsplus: b-tree write err: -5, ino 2
[  189.752423][ T6708] loop2: detected capacity change from 0 to 764
[  189.793609][ T6712] usb usb9: usbfs: process 6712 (syz.4.838) did not claim interface 0 before use
[  189.806076][ T6713] netlink: 'syz.5.837': attribute type 6 has an invalid length.
[  189.879163][ T6715] net_ratelimit: 12 callbacks suppressed
[  189.879184][ T6715] sock: sock_set_timeout: `syz.0.839' (pid 6715) tries to set negative timeout
[  189.901352][ T5113] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  190.102073][ T5113] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  190.119910][ T6719] loop2: detected capacity change from 0 to 1024
[  190.137616][ T5113] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.173019][ T5113] usb 2-1: config 0 interface 0 has no altsetting 0
[  190.190114][ T5113] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  190.206731][ T5113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.210577][ T6719] hfsplus: extend alloc file! (16384,256,150995124)
[  190.263259][ T5113] usb 2-1: config 0 descriptor??
[  190.277625][ T6719] hfsplus: failed to extend attributes file
[  190.285556][ T6724] hfsplus: extend alloc file! (16384,256,150995124)
[  190.292283][ T6724] hfsplus: failed to extend attributes file
[  190.579774][ T6731] loop5: detected capacity change from 0 to 512
[  190.640016][ T6731] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  190.701131][ T5113] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  190.727300][ T6731] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.844: bg 0: block 104: invalid block bitmap
[  190.769347][ T6731] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  190.796476][ T6731] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.844: invalid indirect mapped block 1 (level 1)
[  190.847184][ T6738] loop4: detected capacity change from 0 to 1024
[  190.902140][ T6731] EXT4-fs (loop5): 1 truncate cleaned up
[  190.918277][ T6731] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  190.942211][ T5113] usb 2-1: USB disconnect, device number 7
[  190.984732][ T6738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  191.156941][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  191.163816][ T4553] EXT4-fs (loop5): unmounting filesystem.
[  191.731996][ T6759] netlink: 'syz.4.856': attribute type 6 has an invalid length.
[  191.974717][ T4530] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  192.164888][ T4530] usb 3-1: Using ep0 maxpacket: 32
[  192.174220][ T4530] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  192.193857][ T4530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.212573][ T4530] usb 3-1: Product: syz
[  192.227409][ T4530] usb 3-1: Manufacturer: syz
[  192.253285][ T4530] usb 3-1: SerialNumber: syz
[  192.270250][ T4530] usb 3-1: config 0 descriptor??
[  192.291168][ T4530] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  192.309920][ T4530] dvb-usb: bulk message failed: -22 (4/0)
[  192.338650][ T4530] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  192.364732][ T4530] dvb-usb: bulk message failed: -22 (5/0)
[  192.370558][ T4530] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  192.428805][ T4530] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  192.439329][ T4530] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  192.448145][ T4530] usb 3-1: media controller created
[  192.474355][ T4530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  192.490924][ T6763] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  192.527313][ T6763] ttusb2: i2c rd len=61 too high
[  192.539620][ T4530] usb 3-1: selecting invalid altsetting 3
[  192.553759][ T4530] ttusb2: set interface to alts=3 failed
[  192.582340][ T6770] loop5: detected capacity change from 0 to 32768
[  192.605124][ T5113] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  192.789571][ T4530] DVB: Unable to find symbol tda10086_attach()
[  192.804739][ T4530] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  192.815514][ T5113] usb 2-1: config 11 has an invalid interface number: 68 but max is 0
[  192.823768][ T5113] usb 2-1: config 11 has no interface number 0
[  192.827343][ T4530] dvb-usb: bulk message failed: -22 (4/0)
[  192.843541][ T5113] usb 2-1: config 11 interface 68 has no altsetting 0
[  192.859450][ T5113] usb 2-1: New USB device found, idVendor=0af0, idProduct=d058, bcdDevice= 0.00
[  192.871652][ T5113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.875107][ T4530] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  192.925078][ T5113] usb 2-1: Product: syz
[  192.934947][ T4530] dvb-usb: bulk message failed: -22 (5/0)
[  192.940766][ T4530] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  192.945682][ T5113] usb 2-1: Manufacturer: syz
[  192.979835][ T5113] usb 2-1: SerialNumber: syz
[  192.983818][ T4530] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  193.026157][ T4530] usb 3-1: USB disconnect, device number 8
[  193.119799][ T4530] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  193.176047][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.869'.
[  193.233891][ T5113] hso 2-1:11.68: Not our interface
[  193.269394][ T5113] usb-storage 2-1:11.68: USB Mass Storage device detected
[  193.415550][ T5113] usb 2-1: USB disconnect, device number 8
[  193.820801][ T6810] netlink: 'syz.0.876': attribute type 29 has an invalid length.
[  193.843542][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  193.852698][ T4530] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  193.862691][   T22] kernel write not supported for file /uhid (pid: 22 comm: kworker/1:0)
[  193.884899][ T6810] netlink: 'syz.0.876': attribute type 29 has an invalid length.
[  193.914545][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  193.924014][ T6813] netlink: 'syz.0.876': attribute type 29 has an invalid length.
[  193.943661][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'.
[  194.046843][ T4530] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  194.061974][ T4530] usb 5-1: config 0 has no interface number 0
[  194.098080][ T4530] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  194.134682][ T4530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.143238][ T4530] usb 5-1: Product: syz
[  194.174946][ T4530] usb 5-1: Manufacturer: syz
[  194.179687][ T4530] usb 5-1: SerialNumber: syz
[  194.207133][ T4530] usb 5-1: config 0 descriptor??
[  194.427249][ T4530] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  194.461323][ T4530] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  194.482511][ T4530] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  194.500418][ T4530] usb 5-1: media controller created
[  194.551576][ T4530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  194.650654][ T4530] usb 5-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)...
[  194.676746][ T4530] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered.
[  194.976202][ T4530] DVB: Unable to find symbol mxl5005s_attach()
[  195.114864][ T4530] usb 5-1: USB disconnect, device number 12
[  195.192613][ T6854] loop0: detected capacity change from 0 to 64
[  195.303149][ T6856] tipc: Started in network mode
[  195.344921][ T6856] tipc: Node identity ac14140f, cluster identity 4711
[  195.357945][ T6856] tipc: Enabled bearer <udp:syz2>, priority 10
[  195.426715][ T6851] loop5: detected capacity change from 0 to 4096
[  195.477652][ T6851] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  195.597890][ T6851] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  196.248580][   T27] audit: type=1326 audit(1776484323.793:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.4.910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f297259c819 code=0x0
[  196.266811][ T6877] loop0: detected capacity change from 0 to 4096
[  196.398622][ T6885] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.478011][ T4530] tipc: Node number set to 2886997007
[  196.580735][ T6887] netlink: 1 bytes leftover after parsing attributes in process `syz.2.912'.
[  196.867049][ T6871] loop5: detected capacity change from 0 to 32768
[  197.031644][ T6871] XFS (loop5): Mounting V5 Filesystem
[  197.075128][ T6893] loop0: detected capacity change from 0 to 4096
[  197.094234][ T6893] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  197.128574][ T6879] loop1: detected capacity change from 0 to 32768
[  197.140667][ T6879] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.909 (6879)
[  197.165858][ T6871] XFS (loop5): Ending clean mount
[  197.187766][ T6871] XFS (loop5): Quotacheck needed: Please wait.
[  197.218202][ T6879] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  197.271288][ T6879] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  197.335148][ T6879] BTRFS info (device loop1): force zlib compression, level 3
[  197.336177][ T6871] XFS (loop5): Quotacheck: Done.
[  197.355479][ T6879] BTRFS info (device loop1): turning on flush-on-commit
[  197.388027][ T6879] BTRFS info (device loop1): max_inline at 4096
[  197.394472][ T6879] BTRFS info (device loop1): using free space tree
[  197.568560][ T4553] XFS (loop5): Unmounting Filesystem
[  197.645239][ T6913] loop2: detected capacity change from 0 to 128
[  197.729597][ T6913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  197.756401][ T6913] System zones: 1-3, 19-19, 35-36
[  197.816715][ T6913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  197.833282][ T6913] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  197.906834][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  198.029724][ T6879] BTRFS info (device loop1): enabling ssd optimizations
[  198.217893][ T4270] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  198.516505][ T4372] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (4372)
[  199.369190][ T6968] netlink: 96 bytes leftover after parsing attributes in process `syz.1.937'.
[  199.857300][ T6987] loop1: detected capacity change from 0 to 128
[  199.888269][ T6987] EXT4-fs (loop1): Test dummy encryption mode enabled
[  199.935671][ T6987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  199.974823][ T6987] System zones: 1-3, 19-19, 35-36
[  199.991490][ T6987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  200.016964][ T6987] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.093596][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'.
[  200.141725][ T6987] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  200.214817][ T6987] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  200.234286][ T6987] EXT4-fs: user quota file already specified
[  200.250671][ T6997] loop5: detected capacity change from 0 to 4096
[  200.311784][ T7000] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.366770][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  200.529799][ T7006] loop1: detected capacity change from 0 to 512
[  200.543259][ T7008] sctp: [Deprecated]: syz.5.955 (pid 7008) Use of int in max_burst socket option.
[  200.543259][ T7008] Use struct sctp_assoc_value instead
[  200.574711][ T7006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  200.735956][ T7006] EXT4-fs (loop1): 1 orphan inode deleted
[  200.764710][ T7006] EXT4-fs (loop1): 1 truncate cleaned up
[  200.796428][ T7006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  200.818802][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  200.825228][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  200.877768][ T7006] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  200.987981][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  201.070931][   T27] audit: type=1400 audit(1776484328.613:32): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7020 comm="syz.1.961"
[  201.578705][   T27] audit: type=1326 audit(1776484329.123:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3659c819 code=0x7ffc0000
[  201.648398][   T27] audit: type=1326 audit(1776484329.153:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3659c819 code=0x7ffc0000
[  201.679642][   T27] audit: type=1326 audit(1776484329.163:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ffa3659c819 code=0x7ffc0000
[  201.710943][   T27] audit: type=1326 audit(1776484329.163:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3659c819 code=0x7ffc0000
[  201.782622][   T27] audit: type=1326 audit(1776484329.163:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.5.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3659c819 code=0x7ffc0000
[  201.992623][ T7051] loop2: detected capacity change from 0 to 64
[  202.717011][ T7075] loop0: detected capacity change from 0 to 512
[  202.745673][ T7075] EXT4-fs: Ignoring removed nobh option
[  202.824938][ T7075] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.987: invalid indirect mapped block 10 (level 1)
[  202.875173][ T7075] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.987: invalid indirect mapped block 8 (level 1)
[  202.975350][ T7075] EXT4-fs (loop0): 1 truncate cleaned up
[  202.981115][ T7075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  203.031963][ T7089] loop5: detected capacity change from 0 to 256
[  203.073903][ T7089] exfat: Deprecated parameter 'namecase'
[  203.120749][ T7089] exfat: Deprecated parameter 'utf8'
[  203.216778][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  203.228715][ T7089] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[  203.672771][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.999'.
[  203.898177][ T7085] loop2: detected capacity change from 0 to 32768
[  204.190854][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'.
[  204.905319][ T7137] loop2: detected capacity change from 0 to 4096
[  204.928686][ T7137] EXT4-fs: Ignoring removed orlov option
[  204.961326][ T7137] EXT4-fs (loop2): Test dummy encryption mode enabled
[  205.024302][ T7137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  205.065765][   T27] audit: type=1800 audit(1776484332.613:38): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1008" name="file1" dev="loop2" ino=15 res=0 errno=0
[  205.087634][ T7137] fs-verity (loop2, inode 15): Unknown hash algorithm number: 3
[  205.221058][ T7149] loop4: detected capacity change from 0 to 2048
[  205.228712][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  205.276495][ T7149] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  205.317517][ T7149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.506320][ T7162] loop2: detected capacity change from 0 to 512
[  205.554828][ T7162] EXT4-fs: Ignoring removed nobh option
[  205.635361][ T7162] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 1: comm syz.2.1024: invalid block
[  205.721003][ T7162] EXT4-fs (loop2): Remounting filesystem read-only
[  205.772406][ T7162] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1024: couldn't read orphan inode 11 (err -117)
[  205.794721][ T6949] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  205.848961][ T7162] EXT4-fs (loop2): Remounting filesystem read-only
[  205.887357][ T7162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  205.903866][ T7177] loop0: detected capacity change from 0 to 128
[  205.987704][ T6949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.017555][ T6949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.044971][ T6949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.084450][ T6949] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  206.094823][ T7177] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  206.126920][ T6949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.139545][ T7177] hpfs: filesystem error: improperly stopped
[  206.160291][ T7177] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  206.202974][ T6949] usb 2-1: config 0 descriptor??
[  206.208345][ T7177] hpfs: You really don't want any checks? You are crazy...
[  206.246857][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  206.253261][ T7177] hpfs: hpfs_map_sector(): read error
[  206.265823][ T7177] hpfs: code page support is disabled
[  206.289274][ T7177] hpfs: hpfs_map_4sectors(): unaligned read
[  206.306094][ T7177] hpfs: hpfs_map_4sectors(): unaligned read
[  206.312254][ T7177] hpfs: filesystem error: unable to find root dir
[  206.454719][ T4399] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  206.638105][ T6949] kye 0003:0458:501A.0009: unknown main item tag 0x4
[  206.664683][ T4399] usb 5-1: Using ep0 maxpacket: 32
[  206.679709][ T4399] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  206.689991][ T6949] kye 0003:0458:501A.0009: hidraw0: USB HID vff.fc Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0
[  206.701217][ T4399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.714651][ T6949] kye 0003:0458:501A.0009: tablet-enabling feature report not found
[  206.722732][ T6949] kye 0003:0458:501A.0009: tablet enabling failed
[  206.730194][ T4399] usb 5-1: Product: syz
[  206.740620][ T4399] usb 5-1: Manufacturer: syz
[  206.745773][ T4399] usb 5-1: SerialNumber: syz
[  206.757677][ T4399] usb 5-1: config 0 descriptor??
[  206.795247][ T4399] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  206.802952][ T4399] dvb-usb: bulk message failed: -22 (4/0)
[  206.848469][ T4399] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  206.861604][ T7189] loop2: detected capacity change from 0 to 128
[  206.881495][ T4399] dvb-usb: bulk message failed: -22 (5/0)
[  206.909380][ T4399] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  206.947351][ T4399] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  206.973884][ T7179] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  206.994745][ T7179] ttusb2: i2c rd len=61 too high
[  207.003677][ T6949] usb 2-1: USB disconnect, device number 9
[  207.010437][ T4399] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  207.052151][ T7187] fido_id[7187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  207.055584][ T4399] usb 5-1: media controller created
[  207.121216][ T4399] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  207.177331][ T4399] usb 5-1: selecting invalid altsetting 3
[  207.183310][ T4399] ttusb2: set interface to alts=3 failed
[  207.358361][ T4399] DVB: Unable to find symbol tda10086_attach()
[  207.395360][ T4399] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  207.418593][ T4399] dvb-usb: bulk message failed: -22 (4/0)
[  207.424410][ T4399] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  207.454781][ T4399] dvb-usb: bulk message failed: -22 (5/0)
[  207.460652][ T4399] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  207.484705][ T4399] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  207.534955][ T4399] usb 5-1: USB disconnect, device number 13
[  207.598495][ T4399] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  208.006343][ T4274] Bluetooth: hci3: command 0x0406 tx timeout
[  208.012539][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[  208.020364][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  208.062358][ T7207] loop1: detected capacity change from 0 to 4096
[  208.084503][ T7192] loop5: detected capacity change from 0 to 32768
[  208.151522][ T7207] NILFS (loop1): invalid segment: Checksum error in segment payload
[  208.168987][ T7192] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  208.188479][ T7207] NILFS (loop1): trying rollback from an earlier position
[  208.229947][ T7192] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  208.298329][ T7207] NILFS (loop1): recovery complete
[  208.364728][ T7211] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.394452][ T7197] loop2: detected capacity change from 0 to 32768
[  208.592424][ T4553] ocfs2: Unmounting device (7,5) on (node local)
[  208.639514][ T7203] loop4: detected capacity change from 0 to 32768
[  208.766656][ T7214] loop1: detected capacity change from 0 to 256
[  208.820484][ T7214] exfat: Deprecated parameter 'utf8'
[  208.871907][ T7217] netlink: 790 bytes leftover after parsing attributes in process `syz.2.1048'.
[  208.892630][ T7214] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  209.259874][ T7223] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1052'.
[  209.321703][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'.
[  209.477786][ T7225] loop2: detected capacity change from 0 to 256
[  210.104536][ T7246] loop2: detected capacity change from 0 to 64
[  210.128610][ T7246] hfs: unable to locate alternate MDB
[  210.150058][ T7246] hfs: continuing without an alternate MDB
[  210.354267][ T7250] loop2: detected capacity change from 0 to 16
[  210.379205][ T7250] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  210.832925][ T7264] loop4: detected capacity change from 0 to 512
[  210.860681][ T7264] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  210.880334][ T7264] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  210.907680][ T7264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  210.924761][ T7264] System zones: 0-2, 18-18, 34-34
[  210.948230][ T7264] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1071: inode #15: comm syz.4.1071: iget: illegal inode #
[  211.002020][ T7268] loop0: detected capacity change from 0 to 256
[  211.014657][ T6949] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  211.072340][ T7268] FAT-fs (loop0): Directory bread(block 64) failed
[  211.095098][ T7264] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1071: couldn't read orphan inode 15 (err -117)
[  211.134708][ T7268] FAT-fs (loop0): Directory bread(block 65) failed
[  211.141907][ T7268] FAT-fs (loop0): Directory bread(block 66) failed
[  211.165917][ T7264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  211.206571][ T6949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.240722][ T6949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.265116][ T7268] FAT-fs (loop0): Directory bread(block 67) failed
[  211.271852][ T7268] FAT-fs (loop0): Directory bread(block 68) failed
[  211.291289][ T6949] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  211.324702][ T7268] FAT-fs (loop0): Directory bread(block 69) failed
[  211.331422][ T7268] FAT-fs (loop0): Directory bread(block 70) failed
[  211.338506][ T6949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.357158][ T6949] usb 2-1: config 0 descriptor??
[  211.381414][ T7268] FAT-fs (loop0): Directory bread(block 71) failed
[  211.393048][ T4269] EXT4-fs (loop4): unmounting filesystem.
[  211.405253][ T7268] FAT-fs (loop0): Directory bread(block 72) failed
[  211.411934][ T7268] FAT-fs (loop0): Directory bread(block 73) failed
[  211.511048][ T7254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1066 (7254)
[  211.602993][ T7254] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.625524][ T7254] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  211.677511][ T7254] BTRFS info (device loop2): using free space tree
[  211.789642][ T6949] hid-led 0003:27B8:01ED.000A: unknown main item tag 0x5
[  211.962021][ T7254] BTRFS info (device loop2): enabling ssd optimizations
[  211.989259][ T6949] hid-led: probe of 0003:27B8:01ED.000A failed with error -71
[  212.028651][ T6949] usb 2-1: USB disconnect, device number 10
[  212.122534][ T4271] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.789265][ T7302] netlink: 'syz.2.1078': attribute type 24 has an invalid length.
[  213.118993][   T11] hfsplus: b-tree write err: -5, ino 25
[  213.126075][   T11] hfsplus: b-tree write err: -5, ino 4
[  213.165376][   T11] hfsplus: b-tree write err: -5, ino 2
[  213.191106][   T11] hfsplus: b-tree write err: -5, ino 17
[  213.407961][ T7298] set_capacity_and_notify: 2 callbacks suppressed
[  213.407979][ T7298] loop5: detected capacity change from 0 to 32768
[  213.450419][ T7298] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1079 (7298)
[  213.518748][ T7298] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  213.552315][ T7298] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  213.585531][ T7298] BTRFS info (device loop5): using free space tree
[  213.654440][ T7322] loop0: detected capacity change from 0 to 4096
[  213.681219][ T7322] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  213.862053][ T7322] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  213.894534][ T7298] BTRFS info (device loop5): enabling ssd optimizations
[  213.946249][ T7322] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  214.000419][ T7322] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  214.070873][ T7322] ntfs: volume version 3.1.
[  214.078995][ T4553] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  214.120871][ T7322] ntfs: (device loop0): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  214.734080][ T7363] loop5: detected capacity change from 0 to 512
[  214.776794][ T7363] EXT4-fs: Ignoring removed nobh option
[  214.795168][ T7363] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  214.863606][ T7363] EXT4-fs (loop5): 1 truncate cleaned up
[  214.880419][ T7363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  215.280003][ T7367] device veth1_macvtap left promiscuous mode
[  215.314098][ T4553] EXT4-fs (loop5): unmounting filesystem.
[  215.334769][ T7368] device veth1_macvtap entered promiscuous mode
[  215.537002][ T7357] loop0: detected capacity change from 0 to 32768
[  215.590752][ T7373] loop5: detected capacity change from 0 to 2048
[  215.664153][ T7373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.681805][ T7357] XFS (loop0): Mounting V5 Filesystem
[  215.823200][ T7370] loop4: detected capacity change from 0 to 32768
[  215.885149][ T7357] XFS (loop0): Ending clean mount
[  216.319357][ T4268] XFS (loop0): Unmounting Filesystem
[  216.384865][ T7399] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  216.899405][ T7408] loop5: detected capacity change from 0 to 64
[  217.250222][ T7414] netlink: 'syz.4.1120': attribute type 39 has an invalid length.
[  217.447957][ T7422] loop1: detected capacity change from 0 to 16
[  217.474461][ T7422] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature a50000, please upgrade kernel version
[  217.643486][ T7424] loop5: detected capacity change from 0 to 2048
[  217.712815][ T7395] loop2: detected capacity change from 0 to 40427
[  217.742546][ T7395] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  217.755881][ T7395] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  217.775543][ T7424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  217.804807][ T7395] F2FS-fs (loop2): invalid crc value
[  217.823460][ T7429] netlink: 'syz.1.1125': attribute type 28 has an invalid length.
[  217.896749][ T7395] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  218.019348][ T7434] exfat: Deprecated parameter 'utf8'
[  218.030251][ T4553] EXT4-fs (loop5): unmounting filesystem.
[  218.053019][ T7434] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  218.226571][ T7395] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  218.233808][ T7395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  218.292520][ T7439] xt_policy: too many policy elements
[  218.560559][ T4271] syz-executor: attempt to access beyond end of device
[  218.560559][ T4271] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  219.080434][ T7443] set_capacity_and_notify: 1 callbacks suppressed
[  219.080452][ T7443] loop1: detected capacity change from 0 to 32768
[  219.136074][ T7443] add_index: next_index = 0.  Resetting!
[  219.176184][ T7443] non-latin1 character 0x3ff found in JFS file name
[  219.182877][ T7443] mount with iocharset=utf8 to access
[  219.451714][ T7461] sp0: Synchronizing with TNC
[  219.456875][ T7459] loop5: detected capacity change from 0 to 4096
[  219.479759][ T7459] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  219.558621][ T7459] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  219.723938][ T7468] netlink: 'syz.2.1142': attribute type 1 has an invalid length.
[  220.059953][ T7474] loop5: detected capacity change from 0 to 1024
[  220.123669][   T27] audit: type=1800 audit(1776484347.663:39): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1145" name="file1" dev="loop5" ino=20 res=0 errno=0
[  220.179226][ T7474] syz.5.1145: attempt to access beyond end of device
[  220.179226][ T7474] loop5: rw=34817, sector=5778, nr_sectors = 2 limit=1024
[  220.854085][ T7499] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  221.110090][ T7507] xt_l2tp: unknown flags: 51
[  221.628437][ T7490] loop2: detected capacity change from 0 to 40427
[  221.666557][ T7490] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  221.674280][ T7490] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  221.760595][ T7490] F2FS-fs (loop2): invalid crc value
[  221.817795][ T7490] F2FS-fs (loop2): Found nat_bits in checkpoint
[  221.923256][ T7490] F2FS-fs (loop2): recover fsync data on readonly fs
[  221.973584][ T7490] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  221.990681][ T7490] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  222.010704][ T7531] loop0: detected capacity change from 0 to 512
[  222.038250][ T7529] loop5: detected capacity change from 0 to 4096
[  222.170694][ T7531] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1172: bg 0: block 393: padding at end of block bitmap is not set
[  222.241968][ T7531] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  222.283051][ T7531] EXT4-fs (loop0): 2 truncates cleaned up
[  222.291341][ T7531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  222.423054][ T7531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  222.461916][ T7531] EXT4-fs (loop0): can't enable nombcache during remount
[  222.660424][ T7515] loop1: detected capacity change from 0 to 32768
[  222.670632][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  222.685851][ T4553] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  222.700401][ T7515] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1165 (7515)
[  222.791640][ T4553] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  222.802913][ T7515] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.850188][ T7515] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  222.886684][ T7539] netlink: 'syz.0.1176': attribute type 39 has an invalid length.
[  222.905166][ T7515] BTRFS info (device loop1): setting nodatasum
[  222.925738][ T7541] loop4: detected capacity change from 0 to 256
[  222.933184][ T7515] BTRFS info (device loop1): force zlib compression, level 3
[  222.942580][ T7541] exfat: Deprecated parameter 'utf8'
[  222.960415][ T7541] exfat: Deprecated parameter 'namecase'
[  222.978277][ T7515] BTRFS info (device loop1): turning on flush-on-commit
[  223.019269][ T7515] BTRFS info (device loop1): max_inline at 4096
[  223.042889][ T7541] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  223.067849][ T7515] BTRFS info (device loop1): using free space tree
[  223.484843][ T7515] BTRFS info (device loop1): enabling ssd optimizations
[  223.545522][ T7543] loop2: detected capacity change from 0 to 32768
[  223.629121][ T7543] XFS (loop2): Mounting V5 Filesystem
[  223.842850][ T4270] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.889690][ T7543] XFS (loop2): Ending clean mount
[  223.899264][ T7543] XFS (loop2): Quotacheck needed: Please wait.
[  224.059190][ T7543] XFS (loop2): Quotacheck: Done.
[  224.384055][ T4271] XFS (loop2): Unmounting Filesystem
[  224.794799][ T7589] loop1: detected capacity change from 0 to 8192
[  224.838993][ T7589] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  224.839060][ T7589] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  224.839672][ T7589] REISERFS (device loop1): using ordered data mode
[  224.839685][ T7589] reiserfs: using flush barriers
[  224.939997][ T7589] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  224.940446][ T7589] REISERFS (device loop1): checking transaction log (loop1)
[  224.984669][ T7589] REISERFS (device loop1): Using r5 hash to sort names
[  224.985166][ T7589] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  224.985236][ T7589] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  224.994274][ T7589] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  225.391904][ T7602] loop2: detected capacity change from 0 to 256
[  225.440710][ T7602] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  225.483190][ T7600] loop4: detected capacity change from 0 to 4096
[  225.541508][ T7600] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  225.618080][ T7608] netlink: 'syz.5.1194': attribute type 39 has an invalid length.
[  225.660447][ T7600] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  225.768216][ T7600] ntfs3: loop4: failed to convert name for inode 20.
[  225.800032][ T7610] loop1: detected capacity change from 0 to 256
[  225.930677][ T7612] tipc: Invalid UDP bearer configuration
[  225.930718][ T7612] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  226.619413][ T7634] loop2: detected capacity change from 0 to 128
[  226.663579][ T7638] loop1: detected capacity change from 0 to 128
[  226.675352][ T7634] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  226.742590][   T27] audit: type=1800 audit(1776484354.283:40): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1208" name="bus" dev="loop1" ino=1048687 res=0 errno=0
[  226.814338][ T7634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.990804][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'.
[  227.091491][ T7648] tipc: Enabled bearer <eth:vlan1>, priority 10
[  227.138948][ T7650] loop1: detected capacity change from 0 to 512
[  227.265530][ T7650] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1211: inode #1: comm syz.1.1211: iget: illegal inode #
[  227.273244][ T7655] loop5: detected capacity change from 0 to 256
[  227.381229][ T7650] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1211: error while reading EA inode 1 err=-117
[  227.404787][ T7650] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1211: inode #1: comm syz.1.1211: iget: illegal inode #
[  227.460072][ T7650] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1211: error while reading EA inode 1 err=-117
[  227.509794][ T7650] EXT4-fs (loop1): 1 orphan inode deleted
[  227.531774][ T7650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  227.745864][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  227.925907][ T7670] loop1: detected capacity change from 0 to 1024
[  227.952235][ T7672] loop2: detected capacity change from 0 to 256
[  227.964722][ T4399] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  228.042790][ T7672] FAT-fs (loop2): Directory bread(block 64) failed
[  228.059852][ T7672] FAT-fs (loop2): Directory bread(block 65) failed
[  228.082753][ T7672] FAT-fs (loop2): Directory bread(block 66) failed
[  228.104800][ T7672] FAT-fs (loop2): Directory bread(block 67) failed
[  228.125027][ T7672] FAT-fs (loop2): Directory bread(block 68) failed
[  228.131672][ T7672] FAT-fs (loop2): Directory bread(block 69) failed
[  228.147728][   T11] hfsplus: b-tree write err: -5, ino 25
[  228.153526][   T11] hfsplus: b-tree write err: -5, ino 4
[  228.159870][ T7672] FAT-fs (loop2): Directory bread(block 70) failed
[  228.185956][ T4399] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  228.193660][   T11] hfsplus: b-tree write err: -5, ino 2
[  228.207275][ T4399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.224731][ T6299] tipc: Node number set to 738213888
[  228.234724][ T7672] FAT-fs (loop2): Directory bread(block 71) failed
[  228.251957][ T4399] usb 6-1: Product: syz
[  228.256951][ T7672] FAT-fs (loop2): Directory bread(block 72) failed
[  228.274354][ T4399] usb 6-1: Manufacturer: syz
[  228.284492][ T4399] usb 6-1: SerialNumber: syz
[  228.304805][ T7672] FAT-fs (loop2): Directory bread(block 73) failed
[  228.332119][ T4399] usb 6-1: config 0 descriptor??
[  228.388929][ T4399] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  228.419430][ T4399] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  228.464667][ T4399] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  228.484496][ T4399] usb 6-1: media controller created
[  228.547677][ T4399] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  228.798686][ T7665] XFS (loop4): Mounting V5 Filesystem
[  228.891319][ T7665] XFS (loop4): Ending clean mount
[  228.911560][ T4399] DVB: Unable to find symbol mt352_attach()
[  228.920693][ T7665] XFS (loop4): Quotacheck needed: Please wait.
[  229.003764][ T7665] XFS (loop4): Quotacheck: Done.
[  229.125561][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'.
[  229.256488][ T4399] DVB: Unable to find symbol nxt6000_attach()
[  229.264166][ T4269] XFS (loop4): Unmounting Filesystem
[  229.290298][ T4399] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  229.336346][ T4399] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  229.422694][ T4399] dvb-usb: schedule remote query interval to 1000 msecs.
[  229.437941][ T4399] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  229.460005][ T4399] dvb-usb: bulk message failed: -22 (7/0)
[  229.466582][ T4399] dvb-usb: bulk message failed: -22 (7/0)
[  229.487238][ T4399] usb 6-1: USB disconnect, device number 5
[  229.626088][ T4399] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  229.674271][ T7713] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.711789][ T7712] hfs: unable to locate alternate MDB
[  229.730278][ T7712] hfs: continuing without an alternate MDB
[  229.828065][   T27] audit: type=1800 audit(1776484357.373:41): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1239" name="file1" dev="loop5" ino=21 res=0 errno=0
[  230.123304][ T4330] hfs: new node 0 already hashed?
[  230.165097][ T4330] ------------[ cut here ]------------
[  230.170674][ T4330] WARNING: CPU: 1 PID: 4330 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400
[  230.179780][ T4330] Modules linked in:
[  230.184126][ T4330] CPU: 1 PID: 4330 Comm: kworker/u4:6 Not tainted syzkaller #0
[  230.192680][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.202899][ T4330] Workqueue: writeback wb_workfn (flush-7:5)
[  230.209026][ T4330] RIP: 0010:hfs_bnode_create+0x37a/0x400
[  230.214789][ T4330] Code: ac a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 00 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[  230.234444][    C1] vkms_vblank_simulate: vblank timer overrun
[  230.240641][ T4330] RSP: 0018:ffffc90004256e80 EFLAGS: 00010246
[  230.246844][ T4330] RAX: 000000000000001f RBX: ffff88807937a0e0 RCX: 10e610cf523e0e00
[  230.254950][ T4330] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  230.262990][ T4330] RBP: 0000000000000000 R08: ffffc90004256b87 R09: 1ffff9200084ad70
[  230.271110][ T4330] R10: dffffc0000000000 R11: fffff5200084ad71 R12: 0000000000000000
[  230.279189][ T4330] R13: ffff88807937a000 R14: ffff888026896d00 R15: dffffc0000000000
[  230.287316][ T4330] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  230.296357][ T4330] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  230.303042][ T4330] CR2: 00007f472ae20009 CR3: 00000000781ed000 CR4: 00000000003506e0
[  230.311230][ T4330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  230.319352][ T4330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  230.327490][ T4330] Call Trace:
[  230.330842][ T4330]  <TASK>
[  230.333842][ T4330]  hfs_bmap_alloc+0x53d/0x5d0
[  230.338749][ T4330]  ? hfs_bmap_reserve+0x420/0x420
[  230.343862][ T4330]  hfs_btree_inc_height+0xfd/0xac0
[  230.349125][ T4330]  ? hfs_brec_insert+0x6f6/0xbd0
[  230.354187][ T4330]  ? hfs_brec_insert+0xbd0/0xbd0
[  230.359293][ T4330]  ? do_raw_spin_unlock+0x11d/0x230
[  230.364606][ T4330]  hfs_brec_insert+0x744/0xbd0
[  230.369507][ T4330]  ? hfs_brec_keylen+0x350/0x350
[  230.374605][ T4330]  __hfs_ext_write_extent+0x2a1/0x470
[  230.380071][ T4330]  hfs_ext_write_extent+0x17b/0x200
[  230.385429][ T4330]  ? verify_lock_unused+0x140/0x140
[  230.390702][ T4330]  ? hfs_ext_keycmp+0x310/0x310
[  230.395678][ T4330]  ? writeback_sb_inodes+0x46b/0x1850
[  230.401164][ T4330]  hfs_write_inode+0xd8/0xa20
[  230.405948][ T4330]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  230.411430][ T4330]  ? __writeback_single_inode+0x4ae/0x1160
[  230.417357][ T4330]  ? __lock_acquire+0x7d10/0x7d10
[  230.422544][ T4330]  ? do_raw_spin_lock+0x128/0x2f0
[  230.427675][ T4330]  ? __rwlock_init+0x140/0x140
[  230.432515][ T4330]  __writeback_single_inode+0x75b/0x1160
[  230.438293][ T4330]  writeback_sb_inodes+0xb30/0x1850
[  230.443588][ T4330]  ? queue_io+0x5a0/0x5a0
[  230.448051][ T4330]  ? rcu_is_watching+0x11/0xa0
[  230.452944][ T4330]  wb_writeback+0x482/0xd50
[  230.457585][ T4330]  ? percpu_ref_tryget+0x250/0x250
[  230.462773][ T4330]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  230.468919][ T4330]  ? _raw_spin_unlock_irq+0x1f/0x40
[  230.474205][ T4330]  wb_workfn+0x423/0xee0
[  230.478594][ T4330]  ? inode_wait_for_writeback+0x220/0x220
[  230.484458][ T4330]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  230.490578][ T4330]  ? read_lock_is_recursive+0x10/0x10
[  230.496078][ T4330]  ? _raw_spin_unlock_irq+0x1f/0x40
[  230.501390][ T4330]  ? process_one_work+0x7b0/0x1160
[  230.506633][ T4330]  process_one_work+0x8a2/0x1160
[  230.511667][ T4330]  ? worker_detach_from_pool+0x240/0x240
[  230.517431][ T4330]  ? _raw_spin_lock_irq+0xb7/0xf0
[  230.522565][ T4330]  ? _raw_spin_lock_irqsave+0x100/0x100
[  230.528246][ T4330]  ? kthread_data+0x4b/0xc0
[  230.532839][ T4330]  worker_thread+0xaa2/0x1270
[  230.537782][ T4330]  ? __kthread_parkme+0x162/0x1c0
[  230.542897][ T4330]  kthread+0x29d/0x330
[  230.547084][ T4330]  ? worker_clr_flags+0x1a0/0x1a0
[  230.552242][ T4330]  ? kthread_blkcg+0xd0/0xd0
[  230.557121][ T4330]  ret_from_fork+0x1f/0x30
[  230.561634][ T4330]  </TASK>
[  230.564752][ T4330] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  230.572078][ T4330] CPU: 1 PID: 4330 Comm: kworker/u4:6 Not tainted syzkaller #0
[  230.579678][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  230.589798][ T4330] Workqueue: writeback wb_workfn (flush-7:5)
[  230.595868][ T4330] Call Trace:
[  230.599196][ T4330]  <TASK>
[  230.602167][ T4330]  dump_stack_lvl+0x188/0x24e
[  230.606915][ T4330]  ? memcpy+0x3c/0x60
[  230.610953][ T4330]  ? show_regs_print_info+0x12/0x12
[  230.616227][ T4330]  ? load_image+0x400/0x400
[  230.620798][ T4330]  panic+0x2e5/0x730
[  230.624797][ T4330]  ? bpf_jit_dump+0xd0/0xd0
[  230.629363][ T4330]  ? ret_from_fork+0x1f/0x30
[  230.634019][ T4330]  __warn+0x2f8/0x4f0
[  230.638074][ T4330]  ? hfs_bnode_create+0x37a/0x400
[  230.643134][ T4330]  ? hfs_bnode_create+0x37a/0x400
[  230.648192][ T4330]  report_bug+0x2ba/0x4f0
[  230.652553][ T4330]  ? hfs_bnode_create+0x37a/0x400
[  230.657642][ T4330]  handle_bug+0x3a/0x70
[  230.661854][ T4330]  exc_invalid_op+0x16/0x40
[  230.666406][ T4330]  asm_exc_invalid_op+0x16/0x20
[  230.671312][ T4330] RIP: 0010:hfs_bnode_create+0x37a/0x400
[  230.676992][ T4330] Code: ac a2 8a 89 ee e8 36 7d d7 07 e9 ab fd ff ff e8 cc 34 37 ff 48 89 df e8 34 cd ec 07 48 c7 c7 00 ad a2 8a 89 ee e8 16 7d d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c
[  230.696700][ T4330] RSP: 0018:ffffc90004256e80 EFLAGS: 00010246
[  230.702794][ T4330] RAX: 000000000000001f RBX: ffff88807937a0e0 RCX: 10e610cf523e0e00
[  230.710793][ T4330] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  230.718818][ T4330] RBP: 0000000000000000 R08: ffffc90004256b87 R09: 1ffff9200084ad70
[  230.726817][ T4330] R10: dffffc0000000000 R11: fffff5200084ad71 R12: 0000000000000000
[  230.734826][ T4330] R13: ffff88807937a000 R14: ffff888026896d00 R15: dffffc0000000000
[  230.742843][ T4330]  hfs_bmap_alloc+0x53d/0x5d0
[  230.747570][ T4330]  ? hfs_bmap_reserve+0x420/0x420
[  230.752645][ T4330]  hfs_btree_inc_height+0xfd/0xac0
[  230.757805][ T4330]  ? hfs_brec_insert+0x6f6/0xbd0
[  230.762806][ T4330]  ? hfs_brec_insert+0xbd0/0xbd0
[  230.767791][ T4330]  ? do_raw_spin_unlock+0x11d/0x230
[  230.773017][ T4330]  hfs_brec_insert+0x744/0xbd0
[  230.777837][ T4330]  ? hfs_brec_keylen+0x350/0x350
[  230.782815][ T4330]  __hfs_ext_write_extent+0x2a1/0x470
[  230.788230][ T4330]  hfs_ext_write_extent+0x17b/0x200
[  230.793494][ T4330]  ? verify_lock_unused+0x140/0x140
[  230.798725][ T4330]  ? hfs_ext_keycmp+0x310/0x310
[  230.803619][ T4330]  ? writeback_sb_inodes+0x46b/0x1850
[  230.809052][ T4330]  hfs_write_inode+0xd8/0xa20
[  230.813769][ T4330]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  230.819185][ T4330]  ? __writeback_single_inode+0x4ae/0x1160
[  230.825029][ T4330]  ? __lock_acquire+0x7d10/0x7d10
[  230.830084][ T4330]  ? do_raw_spin_lock+0x128/0x2f0
[  230.835141][ T4330]  ? __rwlock_init+0x140/0x140
[  230.839943][ T4330]  __writeback_single_inode+0x75b/0x1160
[  230.845647][ T4330]  writeback_sb_inodes+0xb30/0x1850
[  230.850905][ T4330]  ? queue_io+0x5a0/0x5a0
[  230.855298][ T4330]  ? rcu_is_watching+0x11/0xa0
[  230.860146][ T4330]  wb_writeback+0x482/0xd50
[  230.864715][ T4330]  ? percpu_ref_tryget+0x250/0x250
[  230.869890][ T4330]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  230.875934][ T4330]  ? _raw_spin_unlock_irq+0x1f/0x40
[  230.881214][ T4330]  wb_workfn+0x423/0xee0
[  230.885544][ T4330]  ? inode_wait_for_writeback+0x220/0x220
[  230.891321][ T4330]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  230.897350][ T4330]  ? read_lock_is_recursive+0x10/0x10
[  230.902769][ T4330]  ? _raw_spin_unlock_irq+0x1f/0x40
[  230.908000][ T4330]  ? process_one_work+0x7b0/0x1160
[  230.913138][ T4330]  process_one_work+0x8a2/0x1160
[  230.918218][ T4330]  ? worker_detach_from_pool+0x240/0x240
[  230.923981][ T4330]  ? _raw_spin_lock_irq+0xb7/0xf0
[  230.929031][ T4330]  ? _raw_spin_lock_irqsave+0x100/0x100
[  230.934603][ T4330]  ? kthread_data+0x4b/0xc0
[  230.939151][ T4330]  worker_thread+0xaa2/0x1270
[  230.943876][ T4330]  ? __kthread_parkme+0x162/0x1c0
[  230.948947][ T4330]  kthread+0x29d/0x330
[  230.953059][ T4330]  ? worker_clr_flags+0x1a0/0x1a0
[  230.958144][ T4330]  ? kthread_blkcg+0xd0/0xd0
[  230.962776][ T4330]  ret_from_fork+0x1f/0x30
[  230.967242][ T4330]  </TASK>
[  230.970860][ T4330] Kernel Offset: disabled
[  230.975279][ T4330] Rebooting in 86400 seconds..