last executing test programs:

4.796997988s ago: executing program 0 (id=1462):
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040))

4.449846049s ago: executing program 0 (id=1467):
r0 = memfd_secret(0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

4.151930382s ago: executing program 0 (id=1471):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x3, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1003, 0x0, 0xaa1})
creat(&(0x7f0000000380)='./file1\x00', 0x3)

3.68536438s ago: executing program 1 (id=1479):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b49cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

3.502937038s ago: executing program 0 (id=1480):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

3.470250076s ago: executing program 4 (id=1481):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$eJzs3UFsHFcZAOB/XCdxXIiqgkIUpek0LVIipe7aSV1ZlWi367Ezrb1rdtdVIoTaiDhRFKetEiqRHEhzAYGKKsSBY9sDFzghLiAkkEACTkhw5VapEocWBIIDqJLRzKwTO/baSeomUfk+K56Z997M++ftZv4dr2YmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIGpO12mgSM3lz/njaX2Oy3ZrdoH55e79eNdmg34ik+BdDQ7GnKtrz+evVu4tfB2JftbQvhorJUFy+f/cDT39ucGB5/Q0C2mqD6xVevHT53MnFxYULdzCQT8B3f7lq8UfDcZMjO501804rn61PZ2neaaUT4+O1J45NddKpfCbrnOh0s9m00c7q3VY7Pdg4lI5OTBxJs5ETrfnm9GR9JksHq8KnHh+r1cbT50fmsnq702o+8fxIp3Esn5nJm9PlikV10eap4o34Qt5Nu1l9Nk1Pn11cOLI6pJ1rgiwaja4q+Whp5dK+xx54//X3/nl2YWyz3R2rjY2Njo6NjY4nEVGrDV4veHLiyadqtcHaDWJNizv6puUetMVHcLh9A738HzORRzPm43ik6/40YjLa0YrZuP4GXlnfs5z/v/jE3/64Ub9vVfn/6opI9u25vrA3yvy/v1ra3y//V31v39En5k/q5/r+X4xLcTnOxclYjMVYiAsr2+3Yqv6SrYt94NbaD29SPx1ZNCOPTrQij9molyVprySNiRiP8ajFS3EspqITaUxFHjORRSdORCe6kZXvqEa0I4t6dKMV7UjjYDTiUKQxGhMxEUcijSxG4kS0Yj6aMR2TUS+3cjrOluN+5Ia4dn/z5V+c+dP7b5ev1nKj0Y2G+I2IstE/Nmi0JpnL/9yyiPjtFhy54eNbWs7/AAAAwKdWUn7HXpz/b4uHyrmpfCb7yiZrDRa/3rgzEQIAAAAfV/nN/75isq2YeyiS4vy/trrRT7bdneAAAACALZGU19glETEcD1dzy5dL1e52bAAAAMDWKL//319MhiOu7Fwudv4PAAAAnyIv/qw3c+M99t97vlhMkhiY25H86u/Rbm9Ljr5z/LHkfL2oqJ+/r1qvN3nx2ha7U3uT6N1QsNzW+ODl+4vlwUa2L1m+ee5HO6rph+XvvYPXVl8dx7O9v0gkSVIEcHWubwCxKoBdvb24FkC5FG/GI1WbR05V01PLNdUdhYen8plspNGaeXo06vVdA93sePf1V85+I8rd/05zdlcSp88uLox87dXFU2Us5Q2Mr57v7e+a+yhuEMtSbwTiobV3Ny42ta28EKPX73DVb23l/g9c3FXMDNxCn9+KA58p2xwYrtoOr97/oaLP0ZF+ez9c7d/omj0fXPvGqqI40Vu6IYpHq9JHDz5aTdaJYmyjKIqxGFsZRW8Qbm0s1o0iHoiItx+5cvzfv2sl2ZHNojjyMaMAuFtOl3f9KbJQlY6qLPTfpUqR/9vtbdtjVd6pVrjZo1xS9tJ7ks+ZN9e/k//NZ/f/LG1wRD9YtTlYfZ4Y3LtOXqmtc0R/7exrv+8d0Y/++IfvfHX/H35623l9aLnJte9SHvzN/QNRRrGzF8XlXk17W/K9a5mkyqrvFuXv9u23MzOWFB8X7vv6+ddi98VLlx8/e/7kmYUzC6+MjR0Zrx2t1Z5Mkt6Lt1R+YpB7AFjHgdhfJfK+z9jp8xSe8gNAlbuPbnRWfV8kD167pKDIia/GYpyKw+XVBhHx8Pr9Dlfr/Kv4VHI4DlRtv9wL+oaz1uEVT3g5vMm55faIXtuxTdsOr3i8zHVf+P4n+HIAwB1xYJM83Df/rzh3P7zJeffwiksKD8ehqu2h5Qj65/KIeObOjgYA/H/I2h8mw91vJ+12PvfS6MTEaL17LEvbrcYLaTufnM7SvNnN2jFYb05n6Vy71W01WjPFzIv5ZNZJO/Nzc612N51qtdO5Vic/Xj75Pe09+r2Tzdab3bzRmZvJ6p0sbbSa3Xqjm07mnUY6N//cTN45lrXLlTtzWSOfyhv1bt5qpp3WfLuRjaRpJ8tWNMwns2Y3n8qL2WY6185n6+2rETEzP5ulk1mn0c7nuq1qg8t95c2pVnu23Oxfd93t0QaAe8PFS5fPnVxcXLhwUzM/iIhVJX+5mbX69z7kxsIAcBdcz9IffPbGOn98BwAAAAAAAAAAAACAe8OtXf93EzM7t3aDQ32qvrRrceHC0pWItVXJ0tLSLXSxMzZps703VFs8UHdk5uqWbGcg1hvne2cm6V/18jPPnOu3+nNX9hzr85aoXCvZ9H/KYNG6utT1jQ+2//ytqurZ29qdgVtf688RcRt9LSUbtLl7xyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Od/AQAA//8WKmR4")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4083, 0xff3)

3.325233353s ago: executing program 0 (id=1483):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=cp12fi,utf8=1,utf8=1,iocharset=cp869,uni_xlate=1,nonumtail=0,\x00'], 0x1, 0x16f, &(0x7f0000000400)="$eJzs271qFFEABeCzMWrUYrewEosBG6slmycwSARxQVC2UBAUkwXJSMDAghYmnYUv4eNY+ySWKYQrycT8MSkskoHs9zVz4M6Be4v5uQPz9v7HzfWt7emb6c8s9XpZeJQqe70MspB/dgMAXCV7peR3KaXc3M2tHymldD0jAOCief4DwPx5+er1s9XxeO1FVS0l9bfZZDZpjs346jQfUmcjy+nnT/ZfEA41+cnT8dpydWCQ7/XOYX9nNrl2uj9KP4P2/qjpV6f713P7ZH8l/dxt76+09m/k4YMT/WH6+fU+W6mznv3ucf/rqKoePx+f6d85OA8AAACugmF1pHX/PhyeN970/+P7wJn99WLuLXa7dgCYV9ufv2y+q+uNT4IgCEeh6zsTcNGOL/quZwIAAAAAAAAAAAAAAJznMn4n6nqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyfvwEAAP//hLKYFQ==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2)

3.303504267s ago: executing program 5 (id=1484):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000680)="571bb258392d52f862b725e8bf10b6116ec9e0c6af475ce2d420a93dd0abfcaa29d02fbed526adc7b526e315039571b2ceda5dce280ab59f42a01d8ee07a58224f83746b3f176f6d8ad7d29c09979bcbf02e89ba250845f350d48d5b71ec643617b75bd899c8e3b7bfd5a9967ff21234d339294e2bae6e683ff53762287c40eb131a9f96353e879ca8e2a2ba81eafcb7954139a4570e41e1f3f0cca0d9908a150232168551ee7aa3020d762924cdd4f1b4f9612d147c36f65c04465bd9f15ef2914164ab1c3e443dbe0096c58c32b55d5f26b3616a06fa2e9d8b7a75", 0xdc}, {&(0x7f0000001640)="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", 0x725}], 0x2)

3.025943251s ago: executing program 0 (id=1486):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1e0, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x40, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0xc, 0x7, {0x7, 0x4, "518401f0eb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.025278608s ago: executing program 4 (id=1487):
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)

2.93389864s ago: executing program 5 (id=1488):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x7, 0x1, 0x1, 0x0, 0x5})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x0, 0x80000000, 0x1, {0x1, @pix_mp={0x0, 0x800, 0x38416761, 0x0, 0x0, [{0x82be, 0xc}, {0x6, 0x81}, {0x6, 0xfff}, {0x8be2, 0x4}, {0x5, 0x8}, {0x800, 0x2}, {0x4, 0x7}, {0x8, 0x1}], 0x4, 0x6, 0x4, 0x0, 0x4}}})

2.812449283s ago: executing program 4 (id=1490):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

2.521024286s ago: executing program 4 (id=1493):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nogrpid}, {@gqnoenforce}, {@uquota}, {@swalloc}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrget93/t+3HvPOc+zO9PVVTXV/1931cxUT/eS8yw258DA6ANDm2JgxG69a86FNt5xziv33WmvU6cYc/zJh00etsCkwy5OOmjYx5EGBgZGGraeYdPGeuykk0caGOW96f9orDHGHDTOwMB0wy7OPuzjTEM/TPT48PneHaERN3TQ3y8O2n7ov/cab8iXGPLJ0rdcdO7AwMD471t+yCLT/MsNlbbkHPPO8w+rv7sNsRo87PP3/xt16L+JHhwYmOi+Ab5/vH/eQR/BTRryNcff8aHR1/0Ivvb/uJacY975RvAf8lgcedi0mYY8xkd8DBob8X5+yyqz7jFsCN+7vw0MDNnF/dNj5X9ES84xzwIDH7yfH3hkzHHPfPe9/eZYzw0MjPX8wMBYLwwMjPXiwMBYLw0MjPXyR+1S/3fNMef0cw55vA+/PIx9+H15fLpf7Lv6S/sMDAyMNnSesd4ZerwYe4rhx4Sqqqr6790cc04/Fxz/R/+w4/9WW89xW8f/qqqq/7nNN8ec0w85jo9w/B/7w47/P7jppjWG/u5/9pmGLvXOR3sjqqqq6j/VPPPh8X/8Dzv+j7fDDQd0/K+qqvqf26ILvnf8H3uE4//EH3b8X2P+uy4fNt/w7xveft8q33v+2LDpb75v+sjvm/7G+6YPft963j//qO+b/tr7po8+MDDWY8Omv/WPyWM9N2SZf13PWK/84/k4k47yvumvvm/6qO+b/tqwbRoyfbT3TX/7ffOP/o/pYw/5b4phX/f1Dxnqqqqq/zYtOv08cw2873n2wyYPf2I/Pi/02GO3vvuj2t6qqqqqqqqq+s/3ztNnnPOPv/n+9MD7/nb173/DOuz3AoOOO++66z6yDf3v0aB//X3IFh/1Nv3fNsR59COmGBhYa4mPelPqI+h/zN+q1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/v/vf/8/cN9Xdhg26yyT3XX/Yv9YctKB1YZ9dutdcy602kew7R9B/1vP/w+sNmhgYJjv+EMsF5pj0cWnGhgYWOz+uyabceDv18085LpZJxz5vT/mHBiY6r3/B0/6AWse9i4L7725w8R/X8dx761/vnf3H3nQCBvxvmY794GDV13y1RlG/PilD74df39/iaVe2X/K4X/LMtIIM43+AQsPX//w2zKi87Btn2rItk+9wZrrTL3+xpt8fbU1l19lpVVWWmu66aadYfoZZ5jum7NMvfJqa6w0zdD/P2DMhr51xcj/zpiNPeKYPT3H+8dsxNs2wSkH45j967t6/NMq3lvj+bM9csXwMRvl3xyz4V9v5A8fsylWG/aFJh0YPLDce0MzaGBg0lEGD2w05MK0ow0MTDp42LyTDpn32xOONDCw4z9u6KBhLzY6dJ5BWwyZ57/Z+5bMMmxENh0+34ivsz7ihv5H71ty4ti73DXC+5b8v+r/6Pj/L14zD/r7QA1/A4Rh8wz1+ojfZ+JftneKUd47yH3Q9n7I6+K8F92/1lz18SX+q14Xh7Z37A/Z3g95Hb8P3N6ppn12z6Gr+i/b3hH2dQsMvfLf2dcNfPi+bmRafqWrJx9xXzf/B2/iPz2Oh4/RaCPM9EH7uh3nP3/zIesf+PB93QKrDXvxgH/s60YaGJh05OH7uiE7vlEHD+w45MJ0Qy6MNnjgsCEXpn/vwhgD5w258I0V1l5jxUHvvczAsPVOM2S9s084aOgD6OaDVx1tl3ffHWXYtrwy1j9v67D7xxTvP57PMeGwwRy27PD1Dpl1+Hpf22bodaMOW++r/4n1Dl+WtnfSs4deN9qw9b42wnoHf8h6hy/7L4+HqQb90xNVYX/zkb6vET1+R/+Q7f2Q1+HG+9t77lMu+8h/wetwD/qg7R3lw7f3g9435AO394krntzvv+p1w+l+dt++Q+8row+7n739n7j/Dl92xP3Y0BcCGbrbH/3f2Y9N8S/7sS1HHmmEwX5fH/R97oow/7BHxN/XtuJBr642fOwHj7De/+j73PfdlkGwHxt/hJ/nBm2+38AgGvPH1nhxw3d2/vAxHzzwzz9bDB/z4ct+2JiP9u+M+ac+fMxH/D75g8Z8qs8PvX7wCNv//jFfZLfZbx4+5qOOsN7/aMxH+/Bjx7+O+cDAYBrzHScbOm4ftj/9oDEfvuzwMR/ydWadcJSBuQcGBqYcNuaj/jtjPul/zf18TJh/6Ocr/X3SczMu/LXhYz7iGP9HYz7qf3LMN7vv7/fzKd+77nMjDYw66sBGy2+wwXrTDv1/+MXphv7P+6LnVhw6zh92LP0go+HLftjjYpR/x2j8f8to0H9kNNkoH2T0j4fWyAcv+vz/6b5olP+s0Xm8Lzpt3qHj9mHfF33QmA9flo6DE79v+RF/Dv2Q18/C2/Te+My/7fCf9/47vH7W8J93/0e+ftbw30muNuJOvv7d+v2/u/zd5e8uf3f5i/uA8/9TDD///+7YB04y7IfOwVfPfNvsH/X2fsT9rz7/P8z3n87/z37bzFcP+dFq2HUfen526Dz/Lc/PzjT0w0SPD59vxPODI27of3R+dt9dN7j6/6fzs/9HDX+s/hs/F7f/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/0wx/HsDDiy/0w2EnQgdvOu3Rm37U2/sR97/6/P8w3386/7/p0dNuOtLA36/70PP/Q+dxnP9/YMHNl/nvfP5/+GO18//1H5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/sw9/HsCRs839heHPB7hxu/33/Ki39yPuf+v5/97/31v7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4Yef/B0Z4m8SFu19gcP7/f3Yf4L9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5Q/ZvH/cf6YxX/J/DGL/1L5Yxb/n+SPWfx/mj9m8V86f8ziv0z+mMV/2fwxi//P8scs/svlj1n8l88fs/j/PH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9F/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/1/mj1n8f5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f549Z/H+TP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/zR+z+G+VP2bx/13+mMV/6/wxi//v88cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/4f8MYv/H/PHLP475I9Z/P+UP2bx/3P+mMV/x/wxi/9O+WMW/7/kj1n8d84fs/jvkj9m8d81f8zi/9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388ck/oMG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/e5/m/69Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6YxX+K/DGL/2fzxyz+n8sfs/h/Pn/M4j9l/pjF/wv5Yxb/L+aPWfy/lD9m8Z8qf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/N/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfxnyx+z+H8nf8zi/938MYv/7PljFv858scs/nPmj1n858ofs/h/L3/M4j93/pjFf578MYv/vPljFv/v549Z/OfLH7P4/yB/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4/zB+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yh+z+P84f8ziv2T+mMV/qfwxi/9P8scs/j/NH7P4L50/ZvFfJn/M4r9s/pjF/2f5Yxb/5fLHLP7L549Z/H+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yJ/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/L/PHLP6/yh+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6/zxyz+v8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjF//f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Q/6Yxf+P+WMW/x3yxyz+f8ofs/j/OX/M4r9j/pjFf6f8MYv/X/LHLP47549Z/HfJH7P475o/ZvH/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/kQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOI/Sf6Yxf/j+WMW/0nzxyz+n8gfs/hPlj9m8f9k/pjF/1P5Yxb/yfPHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzJ/zOL/hfwxi/8X88cs/l/KH7P4T5U/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+b+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/1b+mMV/1vwxi/+388cs/rPlj1n8v5M/ZvH/bv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+XP2bxnzt/zOI/T/6YxX/e/DGL//fzxyz+8+WPWfx/kD9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/x/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/lj1n8f5w/ZvFfMn/M4r9U/pjF/yf5Yxb/n+aPWfyXzh+z+C+TP2bxXzZ/zOL/s/wxi/9y+WMW/+Xzxyz+P88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/kT9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+X+WMW/1/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/1/ljFv/f5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/b/PHLP5b5Y9Z/H+XP2bx3zp/zOL/+/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8hf8zi/8f8MYv/DvljFv8/5Y9Z/P+cP2bx3zF/zOK/U/6Yxf8v+WMW/53zxyz+u+SPWfx3zR+z+P81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif8oA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8Z8kf8zi//H8MYv/pPljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/+fyxyz+n88fs/hPmT9m8f9C/pjF/4v5Yxb/L+WPWfynyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/838MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/K3/M4j9r/pjF/9v5Yxb/2fLHLP7fyR+z+H83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+38sfs/jPnT9m8Z8nf8ziP2/+mMX/+/ljFv/58scs/j/IH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/D/PHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/j/LHLP4/zh+z+C+ZP2bxXyp/zOL/k/wxi/9P88cs/kvnj1n8l8kfs/gvmz9m8f9Z/pjFf7n8MYv/8vljFv+f549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/r/IH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/8v8MYv/r/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v/r/DGL/2/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf+3+WMW/63yxyz+v8sfs/hvnT9m8f99/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8/5A/ZvH/Y/6YxX+H/DGL/5/yxyz+f84fs/jvmD9m8d8pf8zi/5f8MYv/zvljFv9d8scs/rvmj1n8/5o/ZvH/W/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdSB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I82kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv8p8scs/p/NH7P4fy5/zOL/+fwxi/+U+WMW/y/kj1n8v5g/ZvH/Uv6YxX+q/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+38wfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+38scs/rPmj1n8v50/ZvGfLX/M4v+d/DGL/3fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/vfwxi//c+WMW/3nyxyz+8+aPWfy/nz9m8Z8vf8zi/4P8MYv//PljFv8F8scs/gvmj1n8F8ofs/j/MH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/KH/M4v/j/DGL/5L5Yxb/pfLHLP4/yR+z+P80f8ziv3T+mMV/mfwxi/+y+WMW/5/lj1n8l8sfs/gvnz9m8f95/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/4v8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+v8wfs/j/Kn/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/OH7P4/yZ/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+bP2bx3yp/zOL/u/wxi//W+WMW/9/nj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/D/ljFv8/5o9Z/HfIH7P4/yl/zOL/5/wxi/+O+WMW/53yxyz+f8kfs/jvnD9m8d8lf8ziv2v+mMX/r/ljFv+/5Y9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938scs/u/mj0n8Rx/IH7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOI/Wf6Yxf+T+WMW/0/lj1n8J88fs/h/On/M4v+Z/DGL/xT5Yxb/z+aPWfw/lz9m8f98/pjFf8r8MYv/F/LHLP5fzB+z+H8pf8ziP1X+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv9v5o9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+M+WP2bx/07+mMX/u/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9e/pjFf+78MYv/PPljFv9588cs/t/PH7P4z5c/ZvH/Qf6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/H+YP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/H+UP2bx/3H+mMV/yfwxi/9S+WMW/5/kj1n8f5o/ZvFfOn/M4r9M/pjFf9n8MYv/z/LHLP7L5Y9Z/JfPH7P4/zx/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Rf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9f5o9Z/H+VP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/X+ePWfx/kz9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/7/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+H/DGL/x/zxyz+O+SPWfz/lD9m8f9z/pjFf8f8MYv/TvljFv+/5I9Z/HfOH7P475I/ZvHfNX/M4v/X/DGL/9/yxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5Yxb/d/PHJP5jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMV/ivwxi/9n88cs/p/LH7P4fz5/zOI/Zf6Yxf8L+WMW/y/mj1n8v5Q/ZvGfKn/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/zfzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8Z8sfs/h/J3/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fy9/zOI/d/6YxX+e/DGL/7z5Yxb/7+ePWfznyx+z+P8gf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+P8wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/j/OH/M4r9k/pjFf6n8MYv/T/LHLP4/zR+z+C+dP2bxXyZ/zOK/bP6Yxf9n+WMW/+Xyxyz+y+ePWfx/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8if8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/zEH8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/WAP5Yxb/QfljFv+R8scs/iPnj1n8R8kfs/gPzh+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfwnyx+z+H8yf8zi/6n8MYv/5PljFv9P549Z/D+TP2bxnyJ/zOL/2fwxi//n8scs/p/PH7P4T5k/ZvH/Qv6Yxf+L+WMW/y/lj1n8p8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v/N/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/9nyxyz+38kfs/h/N3/M4j97/pjFf478MYv/nPljFv+58scs/t/LH7P4z50/ZvGfJ3/M4j9v/pjF//v5Yxb/+fLHLP4/yB+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/w/zxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/4/yxyz+P84fs/gvmT9m8V8qf8zi/5P8MYv/T/PHLP5L549Z/JfJH7P4L5s/ZvH/Wf6YxX+5/DGL//L5Yxb/n+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6/yB+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v/L/DGL/6/yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/6/wxi/9v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvH/ff6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/P+QP2bx/2P+mMV/h/wxi/+f8scs/n/OH7P475g/ZvHfKX/M4v+X/DGL/875Yxb/XfLHLP675o9Z/P+aP2bx/1v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/zOL/bv6YxH/sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/pPlj1n8P5k/ZvH/VP6YxX/y/DGL/6fzxyz+n8kfs/hPkT9m8f9s/pjF/3P5Yxb/z+ePWfynzB+z+H8hf8zi/8X8MYv/l/LHLP5T5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/2b+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/bPljFv/v5I9Z/L+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+WPWfznzh+z+M+TP2bxnzd/zOL//fwxi/98+WMW/x/kj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/h/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/R/ljFv8f549Z/JfMH7P4L5U/ZvH/Sf6Yxf+n+WMW/6Xzxyz+y+SPWfyXzR+z+P8sf8ziv1z+mMV/+fwxi//P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/1/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/2X+mMX/V/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8f91/pjF/zf5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+P8+f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+f8gfs/j/MX/M4r9D/pjF/0/5Yxb/P+ePWfx3zB+z+O+UP2bx/0v+mMV/5/wxi/8u+WMW/13zxyz+f80fs/j/LX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f0ziP85A/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdyB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I83kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PH/j/26MEADAQAAtjbGuBt27Zt27Zt27Zt27ZtW3UXuAl6yQpp+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/qOW/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T9q+f/bf9Ty/4//qOX/X/9Ry/9//qOW///9Ry3/A/xHLf8D/Uct/4P8Ry3/g/1HLf9D/Ect/0P9Ry3/w/xHJf8TjeQ/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+NcP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCcvbuNzass/Dh+urZ7+rN/N+fwGjIYbLqJK1u7MhlsPtTHgqk6FgMmkC2sjEph7iG4gVoNSgzGMBkJIuo2dRNIjBkvhgkIK4lKnIrGiWiIQ1AXMTVMZETjUnO3vUt7r23Wq17XXuzzedHe55Tf6bbku3PK1gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//r0PLXg==")
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0)
llistxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280)=""/181, 0xb5)

2.489050537s ago: executing program 5 (id=1494):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000100)={[{@gid}, {@anchor={'anchor', 0x3d, 0x7}}, {@utf8}, {@uid}, {@unhide}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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")
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0))

2.427510479s ago: executing program 2 (id=1496):
r0 = syz_usbip_server_init(0x4)
syz_usbip_server_init(0x3)
write$usbip_server(r0, &(0x7f0000000000)=ANY=[], 0x33)

2.043437645s ago: executing program 5 (id=1498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x200, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0xb}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

1.778824812s ago: executing program 5 (id=1500):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000008040)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$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")
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x825, 0x0)

1.493747672s ago: executing program 1 (id=1501):
unshare(0x20000400)
r0 = memfd_secret(0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)

1.385539557s ago: executing program 2 (id=1503):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.222112142s ago: executing program 3 (id=1504):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0xe0}, 0x24000890)

1.15320384s ago: executing program 1 (id=1505):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x50, r1, 0x1, 0x0, 0x25dfdbfe, {0x1, 0x0, 0xffff}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xf36187960dadebcc}, 0x0)

1.139802553s ago: executing program 2 (id=1506):
unshare(0x2040400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r0, @void, @void, @value}, 0x50)

975.086139ms ago: executing program 1 (id=1507):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

974.846303ms ago: executing program 3 (id=1508):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)

928.055607ms ago: executing program 4 (id=1509):
unshare(0x22020400)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x6)

927.310097ms ago: executing program 2 (id=1510):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18)

720.102534ms ago: executing program 3 (id=1511):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20a0, 0x0, 0x0, 0x2}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000d00000000000000080009000d000000", 0x24)

661.241308ms ago: executing program 2 (id=1512):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00')
statx(r0, 0x0, 0x1000, 0x6000, 0x0)

660.858351ms ago: executing program 1 (id=1513):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18)

479.249424ms ago: executing program 5 (id=1514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x170, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0xfffffffffffffe49, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x40}, {0x58, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OBJREF_IMM_TYPE={0xfffffffffffffef5, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x198}}, 0x0)

475.615613ms ago: executing program 1 (id=1515):
syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000ac0)='./file0\x00', 0x2004008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xfe, 0x4f5, &(0x7f00000005c0)="$eJzs3F1oJVcdAPD/mb03e5Mu7e3XdrUFgyIbW7sk2bS7GpGmXWOFoGCagj4oaT7W0HwsSSpN8aMgiqAg+KAFn/vQIrKKoPTJJx98VhH6Ij74KEEKPogoM5n7kextE3tzk83m94Pknjvzn7kzw/2fOefcmQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLpz0wMj6Tj3goA4Ch9fvqLw6PO/wBwqjyn/w8AAKdFiiw+ESnG/7adLhbvd9SmllZfennm2mTnxfpTseSZIj7/q42MXh574skrVxuv7738YftAfGH6uYnBZ9ZWbqwvbGwszA/OrC7Nrc0vHHgN3S6/16PFARhcefGl+cXFjcHRS5d3zX65/vezd52vj18de2KuETtzbXJyui2mUn3fn34LPTw66YssfhUpXvvkL9JQRGTRfS7sU3f0Wn9U8vwrdmLm2mSxI8tLs6ub+czUSITK7pzoa+TIEeRiV4YiHs+3tU9G071qZDERKT4U2+ljEXGmkQePFT8M7r+CyhFsZAf5dl6JiGfjBOQs3KbORha/jRQr99Ti0eNLZ+AYVCKL70eKi5/eTo8V7YH8fJo3m6eeH/zc6uJaW2xK5Rn1pPcPjpK2CbexWmQxVLT4t9PHj3tjgCPVH1l8OVL8+U9fL8aVohiXvmf86lefGm4fYXpon/XksZciYvSAffJqY6wxXzY73H0CAAAAAAAAAACAO10tZfHzSPHNh2vF+2ebF8j/7r+FY94+oIdSFv+JFM//cru4Nb79uRRn2p7v0XTS7/3p7fb3155Zu7G1vnT9a5sd5w/UJl7Y2Fyfnes8O/qj1rouurDfcwygC9WUxYcjxcNTN1vfu3rKy+WtwK0v2uufan03a2nP3KLeuHvneTaNewi+MvnR9nLHr+z/cX9cvfxc9ygDQHdSyuIPkeKzL1wozqspBuKWNmgZdzZSvPOPR8q4rC8vNE7T9eJ/bXFpeWE4j/11pOj/XiM2itiBMvb+VuxIHvt0pPjxD3bH3lXGPtCKHc1jvxMpfv9a59gHW7GX89if5u2a6cFG7EBeeLCMPd+KvTS3tjzfswMMt7G8/f9GpFi+ezA1crnMl7KZfaYZ+/o3Wu39V/eu6F3a/N22/+tt014t66G8vlh860JR9xT1VaVzffWXSPGbfz9Sxu3UFX3l/HuL/6366s1I8cbbu2MbDwq5rxU7cuADCydAnv/nIsUft242c6PM/zID2/r/bfn/wbJ2aI0Z9Cb/722bVi8/9+zh7Dqcehtbr7w4u7y8sK6goKDQLBx3zQT0Wt7+fydS/Gz57WZ/t2z/n9t51+r//+tbrfb/+N4V9aj9f1/btPGyN1KtRNQ2V25UH4qobWy98vjSyuz1hesLq2PDI0+OjoyNjV6p9jU6961S18cK7jR5/n83Uqx96c3m+Pzu/n/n8b+BvSvqUf7f3zZtYFd/petdh1Mvz/+pSPGTf95s/o72XuN/jfG+oY/svDYfpt2j/H+gbVq9/Nxzh7PrAAAAAAAAAAAAcGJVUxY/ihR//WElNZ6NcZDrf295YEaPrv873zZt/ojuV+z6oAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K6yyGItUrz11Hb6dj7hQsTF9lfgjvW/AAAA//8Qgywy")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x14)
getdents64(r0, 0xfffffffffffffffe, 0x29)

420.783676ms ago: executing program 3 (id=1516):
timer_create(0x7, 0x0, &(0x7f0000000680)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))

420.090231ms ago: executing program 2 (id=1517):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f0000000000), &(0x7f0000000200)=ANY=[], 0xfe37, 0x0)
creat(&(0x7f0000000140)='./file2\x00', 0x1ad)

205.330025ms ago: executing program 3 (id=1518):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000000800000014f200000000861f4104bfeacdd5a9007dbeb514f650b583db", 0x2c, r1)

80.121351ms ago: executing program 4 (id=1519):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502)
r1 = dup2(r0, r0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x7000001e, 0x4})

0s ago: executing program 3 (id=1520):
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000004ec0000007"], 0x18}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

uproot' instead
[  150.242908][ T7352] loop5: detected capacity change from 0 to 512
[  150.265901][ T7319] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.518 (7319)
[  150.296807][ T7352] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  150.379486][ T7319] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.381755][ T7352] EXT4-fs (loop5): 1 truncate cleaned up
[  150.396401][ T7352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.491010][ T7319] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm
[  150.560651][ T7319] BTRFS info (device loop3): using free-space-tree
[  150.714277][ T7319] BTRFS info (device loop3): rebuilding free space tree
[  150.819270][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.059282][ T5834] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.292845][ T7387] loop5: detected capacity change from 0 to 256
[  151.340449][ T7387] FAT-fs (loop5): Directory bread(block 1285) failed
[  151.392551][ T7387] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  151.488251][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'.
[  151.580359][ T7393] sock: sock_timestamping_bind_phc: sock not bind to device
[  151.701997][ T5915] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  151.736290][ T7396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  151.771341][ T7360] loop4: detected capacity change from 0 to 32768
[  151.861900][ T7360] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.537 (7360)
[  151.911773][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  151.978665][ T7360] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  151.982421][ T5915] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  152.051308][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.076736][ T7360] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  152.110979][ T5915] usb 4-1: Product: syz
[  152.118197][ T5915] usb 4-1: Manufacturer: syz
[  152.128977][ T5915] usb 4-1: SerialNumber: syz
[  152.139688][ T7360] BTRFS info (device loop4): using free-space-tree
[  152.164582][ T5915] usb 4-1: config 0 descriptor??
[  152.198632][ T5915] gspca_main: se401-2.14.0 probing 047d:5003
[  152.232808][ T7404] loop1: detected capacity change from 0 to 1764
[  152.612884][ T5915] gspca_se401: Wrong descriptor type
[  152.665860][ T7430] new mount options do not match the existing superblock, will be ignored
[  152.670410][ T7428] loop0: detected capacity change from 0 to 256
[  152.678709][ T7430] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  152.723062][ T5829] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  152.734299][ T7428] exfat: Deprecated parameter 'namecase'
[  152.803198][ T7428] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  152.855069][ T5841] usb 4-1: USB disconnect, device number 7
[  153.349120][ T7444] loop4: detected capacity change from 0 to 128
[  153.411732][ T7444] VFS: Found a Xenix FS (block size = 1024) on device loop4
[  153.473811][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  153.552329][ T5910] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  153.574576][ T5829] sysv_free_block: flc_count > flc_size
[  153.580166][ T5829] sysv_free_block: flc_count > flc_size
[  153.596285][ T5829] sysv_free_block: flc_count > flc_size
[  153.625121][ T7448] loop3: detected capacity change from 0 to 128
[  153.631936][ T5829] sysv_free_block: flc_count > flc_size
[  153.637729][ T5829] sysv_free_block: flc_count > flc_size
[  153.644383][ T5829] sysv_free_block: flc_count > flc_size
[  153.650033][ T5829] sysv_free_block: flc_count > flc_size
[  153.662239][ T5915] usb 1-1: Using ep0 maxpacket: 16
[  153.673451][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.678795][ T5829] sysv_free_block: flc_count > flc_size
[  153.704907][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.722916][ T5910] usb 2-1: Using ep0 maxpacket: 8
[  153.726421][ T5829] sysv_free_block: flc_count > flc_size
[  153.743655][ T5910] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  153.746553][ T5829] sysv_free_block: flc_count > flc_size
[  153.759042][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  153.777222][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.777747][ T5829] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  153.793295][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  153.806325][ T5910] usb 2-1: Product: syz
[  153.810505][ T5910] usb 2-1: Manufacturer: syz
[  153.819167][ T7426] loop2: detected capacity change from 0 to 32768
[  153.826173][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  153.853304][ T5910] usb 2-1: SerialNumber: syz
[  153.869318][ T7426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.553 (7426)
[  153.902732][ T5910] usb 2-1: config 0 descriptor??
[  153.913992][ T5915] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  153.929866][ T5910] gspca_main: sq930x-2.14.0 probing 2770:930c
[  153.948910][ T7426] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.961625][ T5915] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  153.980519][ T7426] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  154.029654][ T5915] usb 1-1: Manufacturer: syz
[  154.044407][ T5915] usb 1-1: config 0 descriptor??
[  154.069430][ T7426] BTRFS info (device loop2): using free-space-tree
[  154.412849][ T5915] rc_core: IR keymap rc-hauppauge not found
[  154.446060][ T5915] Registered IR keymap rc-empty
[  154.463866][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.506027][ T7479] option changes via remount are deprecated (pid=7478 comm=syz.3.571)
[  154.522246][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.569844][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  154.581630][ T5910] gspca_sq930x: reg_w 0305 fd00 failed -71
[  154.587516][ T5910] sq930x 2-1:0.0: probe with driver sq930x failed with error -71
[  154.613467][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15
[  154.638930][ T5910] usb 2-1: USB disconnect, device number 3
[  154.671263][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.692252][ T7481] loop5: detected capacity change from 0 to 512
[  154.721891][ T7481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  154.731806][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.785854][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.815333][ T7481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.833498][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.861786][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.864880][ T7481] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.881801][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.901981][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.931691][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.953181][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  154.983011][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.021701][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  155.052862][ T5915] mceusb 1-1:0.0: Registered �檻狦倜⇿ with mce emulator interface version 1
[  155.110281][ T5915] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  155.161688][ T5915] usb 1-1: USB disconnect, device number 6
[  155.316774][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.466295][ T7500] loop2: detected capacity change from 0 to 256
[  155.606407][   T30] audit: type=1800 audit(1742617897.615:19): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.573" name="file2" dev="loop2" ino=123 res=0 errno=0
[  155.768423][ T7500] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  156.024981][ T7518] program syz.1.589 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.253285][ T7526] loop5: detected capacity change from 0 to 256
[  156.253864][ T7522] loop2: detected capacity change from 0 to 2048
[  156.270868][ T7526] exfat: Deprecated parameter 'namecase'
[  156.328730][ T7526] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  156.390653][ T7522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.024494][ T7543] loop4: detected capacity change from 0 to 4096
[  157.165388][ T7551] loop0: detected capacity change from 0 to 512
[  157.191831][   T30] audit: type=1800 audit(1742617899.195:20): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.588" name="file2" dev="loop2" ino=16 res=0 errno=0
[  157.263877][ T7551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.315535][ T7514] loop3: detected capacity change from 0 to 32768
[  157.420282][ T7551] fs-verity: sha256 using implementation "sha256-ni"
[  157.451759][ T7551] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.602: verity is only allowed on extent-based files
[  157.454224][ T7514] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  157.574280][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.655511][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.718815][ T7514] XFS (loop3): Starting recovery (logdev: internal)
[  157.818285][ T7514] XFS (loop3): Ending recovery (logdev: internal)
[  158.102480][ T5834] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  158.117411][ T7570] loop0: detected capacity change from 0 to 4096
[  158.313993][ T7580] vlan2: entered allmulticast mode
[  158.382325][ T7580] macsec0: entered allmulticast mode
[  158.387689][ T7580] veth1_macvtap: entered allmulticast mode
[  158.769270][ T7556] loop5: detected capacity change from 0 to 32768
[  159.111852][ T5896] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  159.293875][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.327317][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.368131][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  159.391862][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  159.400981][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.474984][ T5896] usb 4-1: config 0 descriptor??
[  159.634834][ T7583] loop4: detected capacity change from 0 to 40427
[  159.664069][ T7583] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  159.682907][ T7583] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  159.691761][ T5841] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  159.746232][ T7583] F2FS-fs (loop4): invalid crc value
[  159.804996][ T7583] F2FS-fs (loop4): Found nat_bits in checkpoint
[  159.873485][ T5841] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.904973][ T5841] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.937199][ T5896] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x1
[  159.945790][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0
[  159.966478][ T5841] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  159.972972][ T5896] plantronics 0003:047F:FFFF.0009: unbalanced collection at end of report description
[  160.006416][ T5896] plantronics 0003:047F:FFFF.0009: parse failed
[  160.027669][ T5896] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22
[  160.028567][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.043996][ T7583] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  160.094131][ T7583] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  160.112904][ T5841] usb 3-1: config 0 descriptor??
[  160.145008][ T5910] usb 4-1: USB disconnect, device number 8
[  160.441911][ T7601] loop1: detected capacity change from 0 to 32768
[  160.522940][   T30] audit: type=1800 audit(1742617902.525:21): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.622" name="file1" dev="loop1" ino=7 res=0 errno=0
[  160.559730][ T5841] wacom 0003:056A:0027.000A: unknown main item tag 0x0
[  160.601685][ T5841] wacom 0003:056A:0027.000A: unknown main item tag 0x0
[  160.619005][ T5841] wacom 0003:056A:0027.000A: unknown main item tag 0x0
[  160.635891][ T5841] wacom 0003:056A:0027.000A: unknown main item tag 0x0
[  160.666552][ T5841] wacom 0003:056A:0027.000A: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  160.723328][ T5841] wacom 0003:056A:0027.000A: hidraw0: USB HID v0.01 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0
[  160.782082][ T5841] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.000A/input/input16
[  160.914361][ T5841] usb 3-1: USB disconnect, device number 5
[  161.072447][ T7627] loop0: detected capacity change from 0 to 256
[  161.079576][ T7627] exfat: Deprecated parameter 'namecase'
[  161.128491][ T7627] exfat: Deprecated parameter 'namecase'
[  161.184289][ T7627] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d)
[  161.449831][ T7640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.465778][ T7640] batadv_slave_0: entered promiscuous mode
[  161.512084][ T7640] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  161.595143][ T7636] loop4: detected capacity change from 0 to 4096
[  161.735656][ T7636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.804616][ T7650] loop2: detected capacity change from 0 to 16
[  161.916384][ T7650] erofs (device loop2): mounted with root inode @ nid 36.
[  161.977908][ T7646] loop1: detected capacity change from 0 to 4096
[  162.009184][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.251445][ T7659] loop5: detected capacity change from 0 to 256
[  162.275224][ T7659] exfat: Deprecated parameter 'namecase'
[  162.295576][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'.
[  162.312249][ T7659] exfat: Deprecated parameter 'utf8'
[  162.352731][ T7659] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  162.431824][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  162.629034][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'.
[  162.641907][ T5910] usb 4-1: Using ep0 maxpacket: 8
[  162.662460][ T7665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.649'.
[  162.672938][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  162.691743][ T5910] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  162.693705][ T7665] netlink: 'syz.4.649': attribute type 10 has an invalid length.
[  162.701735][ T5910] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  162.768988][ T5910] usb 4-1: Product: syz
[  162.783538][ T5910] usb 4-1: Manufacturer: syz
[  162.801784][ T5910] usb 4-1: SerialNumber: syz
[  163.035140][ T5910] usb 4-1: Handspring Visor / Palm OS: No valid connect info available
[  163.072895][ T5910] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  163.080823][ T5910] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  163.100790][ T7681] batadv0: entered promiscuous mode
[  163.106742][ T5910] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  163.140262][ T7680] batadv0: left promiscuous mode
[  163.239082][ T5910] usb 4-1: palm_os_3_probe - error -32 getting bytes available request
[  163.260440][ T5910] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  163.314028][ T5910] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  163.343885][ T7654] loop0: detected capacity change from 0 to 32768
[  163.344865][ T5910] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  163.411796][ T7654] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.644 (7654)
[  163.414122][ T5910] usb 4-1: USB disconnect, device number 9
[  163.494976][ T5910] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  163.531174][ T7654] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.561764][ T7654] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  163.563830][ T5910] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  163.609123][ T7654] BTRFS info (device loop0): disk space caching is enabled
[  163.638024][ T7654] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  163.664533][ T5910] visor 4-1:1.0: device disconnected
[  163.794487][ T7654] BTRFS info (device loop0): rebuilding free space tree
[  163.819241][ T7654] BTRFS info (device loop0): disabling free space tree
[  163.864438][ T7654] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.888880][ T7654] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.971734][ T5841] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  164.125854][ T7654] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4)
[  164.175270][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.193431][ T7717] loop3: detected capacity change from 0 to 24
[  164.200413][ T7717] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  164.217028][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.263169][ T5841] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  164.288482][ T7717] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  164.310707][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.347989][ T5841] usb 2-1: config 0 descriptor??
[  164.388066][ T5837] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.412879][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  164.571807][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  164.591801][ T5910] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.591839][ T5910] usb 5-1: config 0 interface 0 has no altsetting 0
[  164.591871][ T5910] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  164.591897][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.593899][ T5910] usb 5-1: config 0 descriptor??
[  164.817650][ T5841] elecom 0003:056E:00FB.000B: hidraw0: USB HID v0.00 Device [HID 056e:00fb] on usb-dummy_hcd.1-1/input0
[  165.025847][ T5910] kye 0003:0458:0138.000C: unknown main item tag 0x4
[  165.062034][ T5910] kye 0003:0458:0138.000C: unexpected long global item
[  165.089831][ T5896] usb 2-1: USB disconnect, device number 4
[  165.096502][ T5910] kye 0003:0458:0138.000C: parse failed
[  165.096569][ T5910] kye 0003:0458:0138.000C: probe with driver kye failed with error -22
[  165.150839][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  165.150869][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'.
[  165.150910][ T7729] netlink: 'syz.0.672': attribute type 14 has an invalid length.
[  165.231781][ T5910] usb 5-1: USB disconnect, device number 4
[  165.281799][ T5841] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  165.440000][ T7733] loop5: detected capacity change from 0 to 8
[  165.453452][ T5841] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  165.478611][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.504678][ T5841] usb 4-1: config 0 has no interface number 0
[  165.522339][ T5841] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  165.541808][ T5841] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  165.598690][ T5841] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  165.612167][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.634102][ T5841] usb 4-1: Product: syz
[  165.638333][ T5841] usb 4-1: Manufacturer: syz
[  165.671718][ T5841] usb 4-1: SerialNumber: syz
[  165.696504][ T5841] usb 4-1: config 0 descriptor??
[  165.730840][ T7721] loop2: detected capacity change from 0 to 32768
[  165.813048][ T7721] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.928124][ T7721] XFS (loop2): Ending clean mount
[  166.212098][ T5849] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  166.391219][ T5915] usb 4-1: USB disconnect, device number 10
[  166.483242][ T5896] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  166.676990][ T7771] loop5: detected capacity change from 0 to 512
[  166.702218][ T5896] usb 2-1: Using ep0 maxpacket: 16
[  166.722549][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.741649][ T5896] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  166.763053][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.774082][ T5896] usb 2-1: config 0 descriptor??
[  166.806110][ T7771] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  166.886617][ T7771] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  166.974362][ T7771] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.690: Corrupt directory, running e2fsck is recommended
[  167.075220][ T7771] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  167.115071][ T7777] loop0: detected capacity change from 0 to 4096
[  167.122426][ T7771] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.690: corrupted in-inode xattr: invalid ea_ino
[  167.156517][ T7777] ntfs3(loop0): ino=3, Correct links count -> 2.
[  167.196581][ T7771] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.690: couldn't read orphan inode 15 (err -117)
[  167.215406][ T5896] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0
[  167.244715][ T7771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.246661][ T5896] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0
[  167.312102][ T5896] hid-steam 0003:28DE:1102.000D: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  167.354652][ T7777] ntfs3(loop0): failed to convert "0000" to iso8859-3
[  167.365708][ T7777] ntfs3(loop0): failed to convert name for inode 1e.
[  167.382298][ T5841] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  167.388462][ T7787] loop3: detected capacity change from 0 to 4096
[  167.403940][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.406653][ T7777] ntfs3(loop0): ino=1f, mi_enum_attr
[  167.427518][ T5896] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' connected
[  167.440730][ T7787] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  167.453166][ T7777] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  167.470483][ T7777] ntfs3(loop0): ino=1f, mi_enum_attr
[  167.477594][ T5896] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.000D/input/input20
[  167.573418][ T5841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.581031][ T5896] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0
[  167.601775][ T5841] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  167.620630][ T5841] usb 3-1: config 1 has no interface number 0
[  167.632855][   T30] audit: type=1800 audit(1742617909.645:22): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.696" name="file1" dev="loop3" ino=30 res=0 errno=0
[  167.641643][ T5896] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0
[  167.671779][ T5841] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.703302][ T5841] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  167.724144][ T5841] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  167.728849][ T5896] hid-steam 0003:28DE:1102.000E: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0
[  167.741774][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.791740][ T5841] usb 3-1: Product: syz
[  167.808979][ T5841] usb 3-1: Manufacturer: syz
[  167.824174][ T5841] usb 3-1: SerialNumber: syz
[  167.832788][ T7789] loop5: detected capacity change from 0 to 4096
[  167.848889][ T5896] usb 2-1: USB disconnect, device number 5
[  167.892538][ T7789] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  167.963217][ T5896] hid-steam 0003:28DE:1102.000D: Steam Controller 'XXXXXXXXXX' disconnected
[  168.276322][ T7797] warning: `syz.3.701' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  168.399857][ T7783] loop4: detected capacity change from 0 to 32768
[  168.521778][ T5841] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS
[  168.535539][ T5841] cdc_ncm 3-1:1.1: bind() failure
[  168.544454][ T7801] loop0: detected capacity change from 0 to 512
[  168.566379][ T7783] ERROR: (device loop4): dbAlloc: unable to allocate blocks
[  168.566379][ T7783] 
[  168.582046][ T5841] usb 3-1: USB disconnect, device number 6
[  168.603969][ T7783] jfs_create: dtInsert returned -EIO
[  168.633956][ T7801] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  168.645740][ T7783] ERROR: (device loop4): jfs_create: 
[  168.645740][ T7783] 
[  168.686772][ T7801] EXT4-fs (loop0): orphan cleanup on readonly fs
[  168.698326][ T7801] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  168.716110][ T7801] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  168.768911][ T7801] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  168.811145][ T7801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.704: bg 0: block 40: padding at end of block bitmap is not set
[  168.837191][ T7801] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  168.863534][ T7801] EXT4-fs (loop0): 1 truncate cleaned up
[  168.902895][ T7801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  169.123438][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.348226][ T7824] loop0: detected capacity change from 0 to 256
[  169.393913][ T7826] loop4: detected capacity change from 0 to 1024
[  169.473159][ T7824] FAT-fs (loop0): Directory bread(block 64) failed
[  169.498584][ T7824] FAT-fs (loop0): Directory bread(block 65) failed
[  169.541882][ T7824] FAT-fs (loop0): Directory bread(block 66) failed
[  169.552708][ T7824] FAT-fs (loop0): Directory bread(block 67) failed
[  169.559321][ T7824] FAT-fs (loop0): Directory bread(block 68) failed
[  169.581166][ T7832] gretap0: entered promiscuous mode
[  169.601751][ T7824] FAT-fs (loop0): Directory bread(block 69) failed
[  169.632796][ T7832] macsec1: entered promiscuous mode
[  169.644995][ T7824] FAT-fs (loop0): Directory bread(block 70) failed
[  169.658834][ T7824] FAT-fs (loop0): Directory bread(block 71) failed
[  169.665603][ T7824] FAT-fs (loop0): Directory bread(block 72) failed
[  169.679128][ T7824] FAT-fs (loop0): Directory bread(block 73) failed
[  169.705143][ T7832] gretap0: left promiscuous mode
[  169.826727][ T7824] syz.0.714: attempt to access beyond end of device
[  169.826727][ T7824] loop0: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  169.827021][ T7824] syz.0.714: attempt to access beyond end of device
[  169.827021][ T7824] loop0: rw=0, sector=1160, nr_sectors = 4 limit=256
[  169.828094][   T30] audit: type=1800 audit(1742617911.835:23): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.714" name="memory.events" dev="loop0" ino=128 res=0 errno=0
[  169.830044][ T7824] syz.0.714: attempt to access beyond end of device
[  169.830044][ T7824] loop0: rw=2051, sector=1160, nr_sectors = 32 limit=256
[  169.842032][ T7836] loop3: detected capacity change from 0 to 4096
[  169.861700][   T30] audit: type=1804 audit(1742617911.865:24): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.714" name="/newroot/99/bus/file0" dev="loop0" ino=128 res=1 errno=0
[  170.076369][ T7836] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  170.083837][ T7836] ntfs3(loop3): Failed to load $Extend (-22).
[  170.089939][ T7836] ntfs3(loop3): Failed to initialize $Extend.
[  170.136687][ T5896] IPVS: starting estimator thread 0...
[  170.261686][ T7845] IPVS: using max 19 ests per chain, 45600 per kthread
[  171.096601][ T7834] loop2: detected capacity change from 0 to 32768
[  171.179471][ T7834] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.210710][ T7883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.361907][ T5915] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  171.424303][ T7834] XFS (loop2): Ending clean mount
[  171.453798][ T7834] XFS (loop2): Quotacheck needed: Please wait.
[  171.572303][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  171.585529][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.606949][ T7834] XFS (loop2): Quotacheck: Done.
[  171.651609][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.728898][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  171.801835][ T5915] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  171.841766][ T7895] loop0: detected capacity change from 0 to 32768
[  171.859279][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.859882][ T7895] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  171.875881][ T7895] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  171.935111][ T5915] usb 5-1: config 0 descriptor??
[  171.945963][ T7895] gfs2: fsid=syz:syz.s: journal 0 mapped with 7 extents in 0ms
[  171.957058][ T5849] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.972320][ T7895] syz.0.743: attempt to access beyond end of device
[  171.972320][ T7895] loop0: rw=0, sector=133699704, nr_sectors = 8 limit=32768
[  172.043736][ T7895] gfs2: fsid=syz:syz.s: Error parsing journal for spectator mount.
[  172.361506][ T7868] loop1: detected capacity change from 0 to 32768
[  172.413738][ T7902] loop5: detected capacity change from 0 to 512
[  172.450859][ T7868] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  172.463581][ T5915] ryos 0003:1E7D:31CE.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.4-1/input0
[  172.482306][ T7902] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.746: corrupted in-inode xattr: e_value size too large
[  172.527777][ T7868] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  172.586524][ T7902] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.746: couldn't read orphan inode 15 (err -117)
[  172.665058][   T10] usb 5-1: USB disconnect, device number 5
[  172.667347][ T7902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.727287][ T7902] EXT4-fs warning (device loop5): ext4_empty_dir:3105: inode #2: comm syz.5.746: directory missing '.'
[  172.777289][ T7908] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  172.856366][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'.
[  172.898656][ T5830] ocfs2: Unmounting device (7,1) on (node local)
[  173.005125][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.473434][ T7932] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  173.528605][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'.
[  173.538426][ T7933] loop5: detected capacity change from 0 to 2048
[  173.547789][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.761'.
[  173.623682][ T7933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.661792][ T7933] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.895020][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.345964][ T7923] loop0: detected capacity change from 0 to 32768
[  174.543402][ T7923] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  174.648224][ T7929] loop2: detected capacity change from 0 to 32768
[  174.674288][ T7929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.758 (7929)
[  174.743452][ T7929] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.787968][ T7971] loop4: detected capacity change from 0 to 1024
[  174.798573][ T7929] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  174.810210][ T5837] ocfs2: Unmounting device (7,0) on (node local)
[  174.832138][ T7973] netlink: 'syz.5.776': attribute type 6 has an invalid length.
[  174.871776][ T7929] BTRFS info (device loop2): disk space caching is enabled
[  174.902708][ T7929] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  174.968467][ T7971] hfsplus: bad catalog entry type
[  175.213223][  T966] hfsplus: b-tree write err: -5, ino 4
[  175.356654][ T7929] BTRFS info (device loop2): rebuilding free space tree
[  175.415627][ T7929] BTRFS info (device loop2): disabling free space tree
[  175.481738][ T7929] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  175.508522][ T7929] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  175.522107][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'.
[  175.802746][ T7929] BTRFS info (device loop2 state M): max_inline set to 8
[  175.861704][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout
[  175.861818][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  176.008924][ T5849] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.074092][ T8018] loop1: detected capacity change from 0 to 256
[  176.139197][ T8018] exfat: Deprecated parameter 'utf8'
[  176.188108][ T8018] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  176.689732][ T8032] loop3: detected capacity change from 0 to 256
[  176.717829][ T8032] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.717852][ T8032] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  176.780762][ T8032] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  176.994336][ T8038] loop1: detected capacity change from 0 to 128
[  177.017045][ T8038] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  177.050444][ T8038] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  177.106176][ T8013] loop4: detected capacity change from 0 to 40427
[  177.149297][ T8013] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff
[  177.183692][ T8013] F2FS-fs (loop4): invalid crc value
[  177.241819][ T8013] F2FS-fs (loop4): Found nat_bits in checkpoint
[  177.389358][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'.
[  177.436760][ T8013] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  177.539962][ T8052] loop2: detected capacity change from 0 to 4096
[  177.682880][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.5.808'.
[  178.163277][ T5915] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  178.291818][ T5896] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  178.343671][ T5915] usb 3-1: Using ep0 maxpacket: 32
[  178.360733][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.382654][ T5915] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  178.400679][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.419974][ T5915] usb 3-1: config 0 descriptor??
[  178.463117][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  178.485164][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  178.511743][ T5896] usb 2-1: New USB device found, idVendor=056a, idProduct=0033, bcdDevice= 0.00
[  178.530989][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.567815][ T5896] usb 2-1: config 0 descriptor??
[  178.584424][ T8067] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  178.866950][ T5915] steelseries 0003:1038:1410.0010: not enough fields in HID_OUTPUT_REPORT 0
[  178.916283][ T8091] loop3: detected capacity change from 0 to 256
[  178.957941][   T30] audit: type=1800 audit(1742617920.965:25): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="file1" dev="loop3" ino=132 res=0 errno=0
[  179.022079][ T5896] wacom 0003:056A:0033.0011: unbalanced collection at end of report description
[  179.102207][ T5896] wacom 0003:056A:0033.0011: parse failed
[  179.110974][ T5896] wacom 0003:056A:0033.0011: probe with driver wacom failed with error -22
[  179.126398][ T5901] usb 3-1: USB disconnect, device number 7
[  179.226170][ T5896] usb 2-1: USB disconnect, device number 6
[  179.624919][ T8081] loop5: detected capacity change from 0 to 40427
[  179.640608][ T8081] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff
[  179.661720][ T8081] F2FS-fs (loop5): invalid crc value
[  179.686344][ T8081] F2FS-fs (loop5): Found nat_bits in checkpoint
[  179.935902][ T8081] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  179.966155][ T8121] loop1: detected capacity change from 0 to 1024
[  180.025642][ T8122] loop0: detected capacity change from 0 to 128
[  180.066724][ T8121] hfsplus: request for non-existent node 2048 in B*Tree
[  180.093209][ T8121] hfsplus: request for non-existent node 2048 in B*Tree
[  180.106102][ T5832] syz-executor: attempt to access beyond end of device
[  180.106102][ T5832] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.143271][ T8122] syz.0.836: attempt to access beyond end of device
[  180.143271][ T8122] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128
[  180.185097][ T5832] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  180.202380][ T8122] Buffer I/O error on dev loop0, logical block 3245768, async page read
[  180.335905][ T5837] sysv_free_block: flc_count > flc_size
[  180.341516][ T5837] sysv_free_block: flc_count > flc_size
[  180.373606][ T8128] loop1: detected capacity change from 0 to 64
[  180.382204][ T5837] sysv_free_block: flc_count > flc_size
[  180.387810][ T5837] sysv_free_block: flc_count > flc_size
[  180.437271][ T8128] hfs: small file entry
[  180.448468][ T8130] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  180.451866][ T5837] sysv_free_block: flc_count > flc_size
[  180.524020][ T5837] sysv_free_block: flc_count > flc_size
[  180.552323][ T5837] sysv_free_block: flc_count > flc_size
[  180.557966][ T5837] sysv_free_block: flc_count > flc_size
[  180.574960][ T5837] sysv_free_block: flc_count > flc_size
[  180.580549][ T5837] sysv_free_block: flc_count > flc_size
[  180.631724][ T5837] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  180.772668][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  180.811640][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  180.829842][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  180.866656][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  180.897439][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  180.934223][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  180.977935][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.008525][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.061309][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.092130][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.099928][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.152113][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.169428][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.201709][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.230380][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.251721][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.290597][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.317391][ T8151] loop5: detected capacity change from 0 to 512
[  181.331647][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.345233][ T8151] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  181.355092][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.369798][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.381986][ T8113] loop3: detected capacity change from 0 to 40427
[  181.404457][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.412834][ T8151] EXT4-fs (loop5): invalid journal inode
[  181.418808][ T8151] EXT4-fs (loop5): can't get journal size
[  181.424428][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.435676][ T8113] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  181.442298][ T8113] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  181.475512][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.500363][ T8151] EXT4-fs (loop5): 1 truncate cleaned up
[  181.506584][ T8113] F2FS-fs (loop3): invalid crc value
[  181.515011][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.533883][ T8151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.555897][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.569166][ T8113] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  181.611723][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.662305][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.670359][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  181.920098][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.995852][ T8113] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  182.051145][ T8113] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  182.065998][ T8168] loop2: detected capacity change from 0 to 32768
[  182.074892][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.083110][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.090916][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.104024][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.112004][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.120824][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.128823][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.136636][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.145687][ T8168] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  182.153977][ T8168] gfs2: fsid=syz:syz: Now mounting FS (format 1802)...
[  182.162131][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.169910][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.178911][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.186889][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.198062][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.206392][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.214425][ T8168] gfs2: fsid=syz:syz.0: can't read journal index: -116
[  182.346226][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: unknown main item tag 0x0
[  182.366972][ T5901] hid-generic 0000:007F:FFFFFFFE.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  182.658321][ T8166] syz.0.854 (8166): drop_caches: 2
[  182.821401][ T8186] loop2: detected capacity change from 0 to 8
[  184.054507][ T8180] loop4: detected capacity change from 0 to 32768
[  184.069164][ T8219] loop1: detected capacity change from 0 to 16
[  184.432370][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  184.607414][ T8235] loop1: detected capacity change from 0 to 1024
[  184.611691][   T10] usb 6-1: Using ep0 maxpacket: 8
[  184.624109][ T8239] loop2: detected capacity change from 0 to 64
[  184.662282][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[  184.675778][ T8238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.718737][   T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  184.750712][ T8239] hfs: keylen 1794 too large
[  184.751782][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.772556][ T8239] hfs: keylen 1794 too large
[  184.804290][   T10] usb 6-1: config 0 descriptor??
[  184.879979][ T8235] EXT4-fs (loop1): Test dummy encryption mode enabled
[  184.912794][ T8235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.254341][   T10] mcp2200 0003:04D8:00DF.0013: USB HID v1.ff Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0
[  185.311216][ T8235] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  185.357270][ T8259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.892'.
[  185.504578][ T5910] usb 6-1: USB disconnect, device number 6
[  185.535772][ T8235] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4
[  185.536883][ T8235] overlayfs: upper fs does not support tmpfile.
[  185.550186][ T8235] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  185.587501][ T8235] overlayfs: failed index dir cleanup (-512)
[  185.587525][ T8235] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  185.758089][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.826973][ T8272] loop4: detected capacity change from 0 to 2048
[  185.855956][ T8272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.934900][ T8274] loop3: detected capacity change from 0 to 764
[  186.319037][ T8243] loop0: detected capacity change from 0 to 40427
[  186.374495][ T8243] F2FS-fs (loop0): invalid crc value
[  186.499619][ T8243] F2FS-fs (loop0): Found nat_bits in checkpoint
[  186.674873][ T8243] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  186.862127][ T5837] syz-executor: attempt to access beyond end of device
[  186.862127][ T5837] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  186.912249][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  187.321454][ T8282] loop1: detected capacity change from 0 to 32768
[  187.701824][ T8292] loop3: detected capacity change from 0 to 32768
[  187.841237][ T8292] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  187.933507][ T8296] loop5: detected capacity change from 0 to 32768
[  188.120734][   T30] audit: type=1800 audit(1742617930.125:26): pid=8296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.906" name="file1" dev="loop5" ino=4 res=0 errno=0
[  188.134344][ T5834] ocfs2: Unmounting device (7,3) on (node local)
[  188.177530][ T8296] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  188.177530][ T8296] 
[  188.638187][ T8335] netlink: 1 bytes leftover after parsing attributes in process `syz.3.919'.
[  188.708188][ T8338] loop1: detected capacity change from 0 to 512
[  188.831882][ T8338] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  188.921722][ T8338] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  189.124354][ T8353] loop2: detected capacity change from 0 to 16
[  189.174641][ T8353] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  189.205844][ T8353] erofs (device loop2): mounted with root inode @ nid 36.
[  189.262791][ T8353] syz.2.930: attempt to access beyond end of device
[  189.262791][ T8353] loop2: rw=0, sector=4282368000, nr_sectors = 8 limit=16
[  189.336530][ T8359] netlink: 'syz.4.934': attribute type 2 has an invalid length.
[  189.440609][ T8363] ALSA: mixer_oss: invalid OSS volume 'u'
[  189.461945][ T5901] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  189.650786][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.673243][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.704713][ T5901] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  189.704918][ T8371] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  189.735788][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.790226][ T5901] usb 2-1: config 0 descriptor??
[  189.824221][ T8373] loop2: detected capacity change from 0 to 1024
[  189.843229][ T8373] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  189.869714][ T8373] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  189.900152][ T8373] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  189.952072][ T8373] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.941: unexpected bad inode w/o EXT4_IGET_BAD
[  190.006568][ T8373] EXT4-fs (loop2): no journal found
[  190.016706][ T8373] EXT4-fs (loop2): can't get journal size
[  190.039402][ T8373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.064545][ T8383] loop4: detected capacity change from 0 to 164
[  190.148994][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.205882][ T8385] process 'syz.3.946' launched '/dev/fd/3' with NULL argv: empty string added
[  190.434320][ T5901] hid-led 0003:27B8:01ED.0014: probe with driver hid-led failed with error -71
[  190.460359][ T5901] usb 2-1: USB disconnect, device number 7
[  190.475310][ T8393] loop2: detected capacity change from 0 to 512
[  190.518694][ T8393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.551924][ T8393] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  190.601851][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  190.614662][   T30] audit: type=1800 audit(1742617932.625:27): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.949" name="file2" dev="loop2" ino=16 res=0 errno=0
[  190.670482][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.786700][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  190.799158][ T8400] loop5: detected capacity change from 0 to 512
[  190.823474][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  190.852837][ T8400] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  190.854124][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  190.889644][ T5910] Process accounting resumed
[  190.894504][ T8400] EXT4-fs (loop5): 1 truncate cleaned up
[  190.901240][ T8400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.940879][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.956483][ T8404] Process accounting resumed
[  191.092555][ T5896] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  191.117355][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.135931][ T5896] usb 5-1: Product: syz
[  191.140121][ T5896] usb 5-1: Manufacturer: syz
[  191.149381][ T8410] loop3: detected capacity change from 0 to 512
[  191.167359][ T5896] usb 5-1: SerialNumber: syz
[  191.174139][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.182450][ T8410] EXT4-fs: Ignoring removed nobh option
[  191.217746][ T5896] usb 5-1: config 0 descriptor??
[  191.222531][ T8410] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  191.233921][ T5896] redrat3 5-1:0.0: Couldn't find all endpoints
[  191.264443][ T8410] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  191.295563][ T8414] loop0: detected capacity change from 0 to 1024
[  191.321336][ T8410] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #13: comm syz.3.955: casefold flag without casefold feature
[  191.325998][ T8416] loop1: detected capacity change from 0 to 512
[  191.373355][ T8410] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.955: couldn't read orphan inode 13 (err -117)
[  191.413171][ T1297] hfsplus: b-tree write err: -5, ino 4
[  191.430384][ T8410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.454772][ T8416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.472388][ T8416] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.507446][   T10] usb 5-1: USB disconnect, device number 6
[  191.576950][ T8416] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #2: comm syz.1.958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  191.765435][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.786469][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.786907][ T8428] netlink: 56 bytes leftover after parsing attributes in process `syz.5.964'.
[  191.860318][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.964'.
[  191.919293][ T8428] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  191.951968][ T5915] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  192.152024][ T5915] usb 5-1: Using ep0 maxpacket: 16
[  192.163284][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  192.192241][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  192.230091][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  192.251636][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  192.277295][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  192.327651][ T5915] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  192.352498][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  192.383951][ T5915] usb 5-1: Product: syz
[  192.397230][ T5915] usb 5-1: Manufacturer: syz
[  192.417957][ T5915] usb 5-1: SerialNumber: syz
[  192.448825][ T8446] loop1: detected capacity change from 0 to 256
[  192.452207][ T5915] usb 5-1: config 0 descriptor??
[  192.455338][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  192.473945][ T5915] usb 5-1: NFC: intf ffff88801d329000 id ffffffff8f525500
[  192.531977][ T5915] nfcmrvl 5-1:0.0: NFC: registered with nci successfully
[  192.641797][   T10] usb 4-1: Using ep0 maxpacket: 16
[  192.685648][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  192.691164][ T5915] usb 5-1: USB disconnect, device number 7
[  192.732035][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  192.732880][ T5915] usb 5-1: NFC: intf ffff88801d329000
[  192.813580][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  192.816094][ T8430] loop0: detected capacity change from 0 to 32768
[  192.851336][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.878681][   T10] usb 4-1: Product: syz
[  192.906637][   T10] usb 4-1: Manufacturer: syz
[  192.928149][   T10] usb 4-1: SerialNumber: syz
[  192.943341][   T10] usb 4-1: config 0 descriptor??
[  193.244450][   T10] appledisplay 4-1:0.0: Error while getting initial brightness: -110
[  193.256881][   T10] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110
[  193.386461][   T10] usb 4-1: USB disconnect, device number 11
[  193.746900][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'.
[  193.784482][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  193.791002][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  193.806353][ T8480] netlink: 'syz.4.986': attribute type 2 has an invalid length.
[  193.816727][ T8479] loop1: detected capacity change from 0 to 1024
[  193.971713][ T8483] loop0: detected capacity change from 0 to 2048
[  193.994911][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  194.007311][ T8483] EXT4-fs: Ignoring removed mblk_io_submit option
[  194.055627][ T8487] loop4: detected capacity change from 0 to 1024
[  194.076691][  T966] hfsplus: b-tree write err: -5, ino 8
[  194.080972][ T8487] EXT4-fs: Ignoring removed orlov option
[  194.085224][ T8483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.100388][ T8487] EXT4-fs (loop4): Test dummy encryption mode enabled
[  194.153185][ T5850] Bluetooth: hci4: adv larger than maximum supported
[  194.153255][ T5850] Bluetooth: hci4: Malformed LE Event: 0x0d
[  194.192195][   T10] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  194.203572][ T8487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.216469][   T10] usb 3-1: config 0 has no interface number 0
[  194.223858][   T10] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  194.235367][   T10] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  194.249095][   T10] usb 3-1: config 0 interface 255 has no altsetting 0
[  194.256454][   T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  194.266268][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.285652][   T10] usb 3-1: config 0 descriptor??
[  194.298324][   T10] ums-realtek 3-1:0.255: USB Mass Storage device detected
[  194.475710][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.581286][ T5901] usb 3-1: USB disconnect, device number 8
[  194.734268][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.795686][ T8508] loop1: detected capacity change from 0 to 16
[  194.820391][ T8508] erofs (device loop1): mounted with root inode @ nid 36.
[  194.869214][ T8508] erofs (device loop1): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  194.921952][ T8508] erofs (device loop1): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  194.948969][ T8508] erofs (device loop1): read error -117 @ 0 of nid 36
[  194.991829][ T8508] erofs (device loop1): fail to readdir of logical block 0 of nid 36
[  195.014366][ T8515] loop0: detected capacity change from 0 to 8
[  195.096504][ T8515] SQUASHFS error: Failed to read block 0x6a4: -5
[  195.145721][ T8515] SQUASHFS error: Unable to read metadata cache entry [6a2]
[  195.192156][ T8515] SQUASHFS error: Unable to read inode 0x87
[  195.528224][ T5841] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  195.556450][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'.
[  195.606816][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'.
[  195.646226][ T8534] Zero length message leads to an empty skb
[  195.707457][ T5841] usb 5-1: Using ep0 maxpacket: 16
[  195.722639][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.761673][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.785458][ T5841] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[  195.827020][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.883348][ T5841] usb 5-1: config 0 descriptor??
[  196.172354][ T8547] loop1: detected capacity change from 0 to 512
[  196.194018][ T8547] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  196.227711][ T8550] loop5: detected capacity change from 0 to 1024
[  196.243225][ T8547] EXT4-fs (loop1): invalid journal inode
[  196.277842][ T8547] EXT4-fs (loop1): can't get journal size
[  196.309008][ T8550] hfsplus: bad catalog entry type
[  196.322776][ T8547] EXT4-fs (loop1): 1 truncate cleaned up
[  196.332529][ T5841] wacom 0003:056A:00C6.0015: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.4-1/input0
[  196.402608][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.423589][ T8521] loop3: detected capacity change from 0 to 32768
[  196.497111][ T8521] JBD2: Ignoring recovery information on journal
[  196.530373][ T5915] usb 5-1: USB disconnect, device number 8
[  196.566589][ T8532] loop0: detected capacity change from 0 to 32768
[  196.584552][ T8532] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1010 (8532)
[  196.612596][ T8532] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  196.671996][ T8532] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  196.691195][ T8521] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  196.709137][ T8532] BTRFS info (device loop0): using free-space-tree
[  196.775206][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.802798][ T8521] (syz.3.1005,8521,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume.
[  196.858226][ T8521] (syz.3.1005,8521,0):ocfs2_group_add:511 ERROR: status = -22
[  196.963744][ T8532] BTRFS info (device loop0): rebuilding free space tree
[  197.029892][ T5834] ocfs2: Unmounting device (7,3) on (node local)
[  197.371694][ T5837] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  197.643678][ T8590] loop1: detected capacity change from 0 to 64
[  197.986186][ T8559] loop5: detected capacity change from 0 to 32768
[  198.137441][ T8559] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.286132][ T8611] loop1: detected capacity change from 0 to 512
[  198.369868][ T8611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.404842][ T8611] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.435226][ T8559] XFS (loop5): Ending clean mount
[  198.471803][ T8559] XFS (loop5): Quotacheck needed: Please wait.
[  198.486243][ T8581] loop2: detected capacity change from 0 to 32768
[  198.648923][ T8559] XFS (loop5): Quotacheck: Done.
[  198.660032][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.819688][ T5832] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.844163][ T8621] loop4: detected capacity change from 0 to 4096
[  198.956462][ T8588] loop3: detected capacity change from 0 to 32768
[  199.042490][ T8623] program syz.1.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  199.282944][ T8627] loop1: detected capacity change from 0 to 1024
[  199.439383][ T8633] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  199.690053][ T8639] loop1: detected capacity change from 0 to 128
[  199.756347][ T8641] loop0: detected capacity change from 0 to 16
[  199.800527][ T8644] loop4: detected capacity change from 0 to 512
[  199.814679][ T8645] loop3: detected capacity change from 0 to 256
[  199.842875][ T8645] exfat: Deprecated parameter 'utf8'
[  199.858240][ T8644] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  199.877886][ T8641] erofs (device loop0): mounted with root inode @ nid 36.
[  200.012673][ T8645] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  200.051506][ T8651] netlink: 'syz.5.1053': attribute type 5 has an invalid length.
[  200.060931][ T8644] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1047: bg 0: block 64: padding at end of block bitmap is not set
[  200.091422][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1053'.
[  200.146359][ T8644] Quota error (device loop4): write_blk: dquota write failed
[  200.192080][ T8644] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  200.253958][ T8644] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1047: Failed to acquire dquot type 0
[  200.270251][ T8657] loop0: detected capacity change from 0 to 256
[  200.311226][ T8644] EXT4-fs (loop4): 1 truncate cleaned up
[  200.354637][ T8644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.411092][ T8657] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  200.469121][ T8644] Quota error (device loop4): write_blk: dquota write failed
[  200.481274][ T8664] loop3: detected capacity change from 0 to 512
[  200.510100][ T8644] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  200.549384][ T8664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.577699][ T8644] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1047: Failed to acquire dquot type 0
[  200.678779][ T8667] loop5: detected capacity change from 0 to 256
[  200.709144][ T8667] exfat: Deprecated parameter 'namecase'
[  200.730563][ T8669] loop0: detected capacity change from 0 to 256
[  200.767992][ T8667] exfat: Deprecated parameter 'utf8'
[  200.800527][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.820288][ T8667] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d)
[  200.852884][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.241709][ T5915] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  201.313498][ T8685] program syz.1.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  201.395287][ T8689] loop2: detected capacity change from 0 to 256
[  201.447860][ T8689] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.454110][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.510590][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.561046][ T5915] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00
[  201.604002][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.622000][ T5915] usb 5-1: config 0 descriptor??
[  201.712315][ T8693] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  201.720886][ T8693] FAT-fs (loop2): Filesystem has been set read-only
[  202.056002][ T5915] wacom 0003:056A:00B8.0016: Unknown device_type for 'HID 056a:00b8'. Assuming pen.
[  202.107733][ T5915] wacom 0003:056A:00B8.0016: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.4-1/input0
[  202.136173][ T5915] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B8.0016/input/input24
[  202.309439][ T5915] usb 5-1: USB disconnect, device number 9
[  202.852099][ T8724] loop0: detected capacity change from 0 to 1024
[  202.977717][ T8724] hfsplus: bad catalog entry type
[  203.168230][ T1297] hfsplus: b-tree write err: -5, ino 4
[  203.393010][ T8702] loop5: detected capacity change from 0 to 32768
[  203.444195][ T8702] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.822981][ T8702] XFS (loop5): Ending clean mount
[  203.852513][ T8702] XFS (loop5): Quotacheck needed: Please wait.
[  203.971176][ T8702] XFS (loop5): Quotacheck: Done.
[  204.080451][   T30] audit: type=1800 audit(1742617946.085:28): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1076" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  204.136997][ T8722] loop2: detected capacity change from 0 to 32768
[  204.213640][ T8770] loop0: detected capacity change from 0 to 256
[  204.221114][ T5832] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.253790][ T8722] JBD2: Ignoring recovery information on journal
[  204.302816][ T8770] exfat: Deprecated parameter 'utf8'
[  204.369345][ T8722] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  204.380611][ T8770] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[  204.476398][ T8776] loop4: detected capacity change from 0 to 256
[  204.509888][   T30] audit: type=1326 audit(1742617946.505:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a098d169 code=0x7ffc0000
[  204.586412][   T30] audit: type=1326 audit(1742617946.505:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a098d169 code=0x7ffc0000
[  204.657627][   T30] audit: type=1326 audit(1742617946.505:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe6a098d169 code=0x7ffc0000
[  204.690080][   T30] audit: type=1326 audit(1742617946.505:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a098d169 code=0x7ffc0000
[  204.691096][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[  204.712765][   T30] audit: type=1326 audit(1742617946.505:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.1.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6a098d169 code=0x7ffc0000
[  204.904390][ T8783] loop0: detected capacity change from 0 to 64
[  205.112131][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'.
[  205.754129][ T8803] loop3: detected capacity change from 0 to 1024
[  206.107063][ T5836] Bluetooth: hci4: command 0x0406 tx timeout
[  206.116627][ T5854] Bluetooth: hci5: command 0x0406 tx timeout
[  206.116660][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  206.122706][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  206.122756][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  206.143291][ T5915] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  206.292361][   T12] hfsplus: b-tree write err: -5, ino 4
[  206.340731][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.354901][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.364778][ T5915] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00
[  206.373942][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.383994][ T5915] usb 3-1: config 0 descriptor??
[  206.518002][ T8825] loop1: detected capacity change from 0 to 256
[  206.568582][ T8825] exfat: Deprecated parameter 'utf8'
[  206.636938][ T8825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe577bcd, utbl_chksum : 0xe619d30d)
[  206.679557][ T8826] loop0: detected capacity change from 0 to 4096
[  206.737568][ T8826] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  206.826744][ T5915] wacom 0003:056A:00F4.0017: hidraw0: USB HID v0.00 Device [HID 056a:00f4] on usb-dummy_hcd.2-1/input0
[  206.892876][ T8832] loop5: detected capacity change from 0 to 4096
[  207.030837][ T5915] usb 3-1: USB disconnect, device number 9
[  207.620616][ T8822] loop4: detected capacity change from 0 to 32768
[  207.769175][ T8858] loop1: detected capacity change from 0 to 512
[  207.810241][ T8860] nbd: must specify a size in bytes for the device
[  207.846117][ T8865] loop2: detected capacity change from 0 to 4096
[  207.886553][ T8865] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  207.934481][ T8858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.005214][ T8871] loop0: detected capacity change from 0 to 128
[  208.011379][ T8822] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,str_hash=crc32c,fsck,norecovery,nojournal_transaction_names,noexcl
[  208.012335][ T8865] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  208.030577][ T8858] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.055533][ T8871] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  208.061731][ T8872] loop5: detected capacity change from 0 to 8
[  208.074488][ T8865] ntfs3(loop2): Failed to load $Extend (-22).
[  208.080732][ T8865] ntfs3(loop2): Failed to initialize $Extend.
[  208.099558][ T8871] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  208.102654][ T8822] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  208.140551][ T8822] bcachefs (loop4): Version upgrade required:
[  208.140551][ T8822] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  208.140551][ T8822] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  208.140551][ T8822]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  208.424515][ T8822] bcachefs (loop4): error validating btree node at btree alloc level 0/0
[  208.424555][ T8822]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0  
[  208.424577][ T8822]   node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing
[  208.483695][ T5837] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.677703][ T8822] bcachefs (loop4): btree_node_read_work: rewriting btree node at due to error
[  208.677703][ T8822]   btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  208.723160][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.784443][ T8822] bcachefs (loop4): accounting_read...
[  208.810805][ T8883] loop3: detected capacity change from 0 to 4096
[  208.822064][ T8822]  done
[  208.828260][ T8822] bcachefs (loop4): alloc_read... done
[  208.862513][ T8822] bcachefs (loop4): stripes_read... done
[  208.869740][ T8883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  208.887648][ T8822] bcachefs (loop4): snapshots_read... done
[  208.928437][ T8822] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  209.000566][ T8822] bcachefs (loop4): done starting filesystem
[  209.094866][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.179656][ T8896] loop5: detected capacity change from 0 to 1024
[  209.344613][ T5829] bcachefs (loop4): shutting down
[  209.497028][ T5829] bcachefs (loop4): shutdown complete
[  209.565058][ T8906] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1165'.
[  209.722283][ T8908] mmap: syz.3.1166 (8908) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  209.978981][ T8885] loop2: detected capacity change from 0 to 32768
[  210.083468][ T8885] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.110520][ T8918] block nbd5: not configured, cannot reconfigure
[  210.258685][ T8900] loop1: detected capacity change from 0 to 32768
[  210.281753][ T5901] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  210.341201][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  210.341224][   T30] audit: type=1800 audit(1742617952.345:37): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1162" name="file1" dev="loop1" ino=4 res=0 errno=0
[  210.470087][ T8885] XFS (loop2): Ending clean mount
[  210.475534][ T5901] usb 4-1: Using ep0 maxpacket: 16
[  210.494377][ T8932] syz.0.1174 uses obsolete (PF_INET,SOCK_PACKET)
[  210.520710][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.566259][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  210.587768][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.623694][ T5901] usb 4-1: config 0 descriptor??
[  210.630182][ T5849] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.082924][ T5901] logitech-djreceiver 0003:046D:C513.0018: unknown main item tag 0x0
[  211.106830][ T5901] logitech-djreceiver 0003:046D:C513.0018: unknown main item tag 0x0
[  211.151778][ T5901] logitech-djreceiver 0003:046D:C513.0018: unknown main item tag 0x0
[  211.160196][ T5901] logitech-djreceiver 0003:046D:C513.0018: unknown main item tag 0x0
[  211.231849][ T5901] logitech-djreceiver 0003:046D:C513.0018: unknown main item tag 0x0
[  211.292769][ T5901] usb 4-1: USB disconnect, device number 12
[  211.474188][ T8930] loop5: detected capacity change from 0 to 32768
[  211.514739][ T8930] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1173 (8930)
[  211.585893][ T8930] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.599111][ T8930] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  211.662973][ T8930] BTRFS info (device loop5): using free-space-tree
[  211.952885][ T8966] program syz.0.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.030618][ T8972] loop2: detected capacity change from 0 to 512
[  212.069121][ T8972] EXT4-fs: Ignoring removed orlov option
[  212.160028][ T8972] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1185: corrupted in-inode xattr: invalid ea_ino
[  212.265452][ T8972] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1185: couldn't read orphan inode 15 (err -117)
[  212.297415][ T8972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.324312][ T5832] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.654269][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.634953][ T9018] loop1: detected capacity change from 0 to 256
[  213.699035][ T9018] exfat: Deprecated parameter 'utf8'
[  213.795326][ T9018] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[  214.047269][ T9030] loop3: detected capacity change from 0 to 64
[  214.449010][ T9039] loop0: detected capacity change from 0 to 512
[  214.465420][ T9042] pimreg12: entered allmulticast mode
[  214.535801][ T9039] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  214.592320][ T9039] EXT4-fs (loop0): orphan cleanup on readonly fs
[  214.622559][ T9039] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #16: comm syz.0.1218: casefold flag without casefold feature
[  214.633996][ T9012] loop5: detected capacity change from 0 to 40427
[  214.652495][ T9012] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff
[  214.681741][ T9039] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1218: couldn't read orphan inode 16 (err -117)
[  214.717674][ T9012] F2FS-fs (loop5): invalid crc value
[  214.750355][ T9039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  214.767863][ T9012] F2FS-fs (loop5): Found nat_bits in checkpoint
[  214.799859][ T9053] loop1: detected capacity change from 0 to 128
[  214.897640][ T9039] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  215.004159][ T9012] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  215.082288][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.157265][ T9012] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x609/0x1c70
[  215.359531][ T5832] syz-executor: attempt to access beyond end of device
[  215.359531][ T5832] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  215.382055][ T5832] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  216.515159][ T9099] loop4: detected capacity change from 0 to 2048
[  216.566001][ T9099] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  216.619119][ T9099] NILFS (loop4): mounting unchecked fs
[  216.636237][ T5894] udevd[5894]: incorrect nilfs2 checksum on /dev/loop4
[  216.714524][ T9099] NILFS (loop4): recovery complete
[  216.729073][ T9107] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  216.848610][ T9074] loop3: detected capacity change from 0 to 32768
[  216.878697][ T9109] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1247'.
[  216.921833][ T9074] JBD2: Ignoring recovery information on journal
[  217.009695][ T9074] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  217.168526][ T9119] loop4: detected capacity change from 0 to 1024
[  217.217642][ T9119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.299958][ T5834] ocfs2: Unmounting device (7,3) on (node local)
[  217.338728][ T9124] loop0: detected capacity change from 0 to 1024
[  217.363139][ T9119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  217.451704][ T9119] EXT4-fs (loop4): Remounting filesystem read-only
[  217.471479][ T9119] overlayfs: failed to verify upper root origin
[  217.492326][ T9124] hfsplus: xattr searching failed
[  217.498302][ T9127] loop5: detected capacity change from 0 to 2048
[  217.573324][ T9128] loop1: detected capacity change from 0 to 4096
[  217.618588][ T9128] ntfs3: Unknown parameter 'sys_i÷!ü_able'
[  217.646663][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.926535][ T9092] loop2: detected capacity change from 0 to 40427
[  217.998186][ T9092] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  218.052518][ T9092] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  218.083687][ T9092] F2FS-fs (loop2): invalid crc value
[  218.123662][ T9092] F2FS-fs (loop2): Found nat_bits in checkpoint
[  218.172058][ T9137] loop1: detected capacity change from 0 to 1024
[  218.213750][ T9144] loop3: detected capacity change from 0 to 764
[  218.236170][ T9144] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  218.258694][ T9137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.371149][ T9092] F2FS-fs (loop2): Start checkpoint disabled!
[  218.456430][ T9092] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  218.495213][ T9092] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  218.503606][ T9157] loop0: detected capacity change from 0 to 256
[  218.535776][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.536251][ T9158] loop3: detected capacity change from 0 to 256
[  218.641839][   T30] audit: type=1800 audit(1742617960.635:38): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1240" name="file2" dev="loop2" ino=10 res=0 errno=0
[  218.722865][ T9158] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  218.983834][ T9170] loop5: detected capacity change from 0 to 764
[  219.051081][ T5926] kworker/u8:8: attempt to access beyond end of device
[  219.051081][ T5926] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  219.071119][ T9166] loop1: detected capacity change from 0 to 4096
[  219.122408][ T5926] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.161620][ T5926] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.202952][ T5926] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.210212][ T5926] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.348563][ T9179] loop5: detected capacity change from 0 to 736
[  220.257419][ T9193] loop5: detected capacity change from 0 to 4096
[  220.298692][ T9172] loop3: detected capacity change from 0 to 32768
[  220.301841][ T9193] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  220.345325][ T9172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1273 (9172)
[  220.369499][ T9193] ntfs3(loop5): ino=1a, mi_enum_attr
[  220.382553][ T9197] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1283'.
[  220.395195][ T9174] loop4: detected capacity change from 0 to 40427
[  220.402745][ T9193] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  220.423313][ T9174] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff
[  220.440336][ T9172] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.445727][ T9193] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  220.471718][ T9174] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2
[  220.491457][ T9172] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  220.500361][ T9174] F2FS-fs (loop4): Image doesn't support compression
[  220.531984][ T9174] F2FS-fs (loop4): Image doesn't support compression
[  220.555264][ T9172] BTRFS info (device loop3): using free-space-tree
[  220.623965][ T9174] F2FS-fs (loop4): invalid crc value
[  220.671575][ T9174] F2FS-fs (loop4): Found nat_bits in checkpoint
[  220.861305][ T5834] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.987267][ T9174] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  220.991388][ T9226] loop5: detected capacity change from 0 to 512
[  221.167625][ T9226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  221.219866][ T5829] syz-executor: attempt to access beyond end of device
[  221.219866][ T5829] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  221.227268][ T9226] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.322150][ T5829] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  221.426715][   T30] audit: type=1800 audit(1742617963.435:39): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1287" name="file2" dev="loop5" ino=16 res=0 errno=0
[  221.614666][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  222.283267][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1302'.
[  222.811780][ T9239] loop3: detected capacity change from 0 to 32768
[  222.862856][ T9239] jfs_lookup: iget failed on inum 32
[  222.880938][ T9239] jfs_lookup: iget failed on inum 32
[  222.907504][ T9244] loop1: detected capacity change from 0 to 32768
[  222.957464][ T9244] (syz.1.1298,9244,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  223.005402][ T9244] (syz.1.1298,9244,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  223.056066][ T9244] JBD2: Ignoring recovery information on journal
[  223.194651][ T9244] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  223.214048][ T9256] loop4: detected capacity change from 0 to 32768
[  223.252071][ T9256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1293 (9256)
[  223.298679][ T9272] loop5: detected capacity change from 0 to 2048
[  223.313484][ T9256] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  223.346631][ T9256] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  223.357784][ T9256] BTRFS info (device loop4): disk space caching is enabled
[  223.365568][ T9256] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  223.388931][ T9276] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.489602][ T9283] loop3: detected capacity change from 0 to 512
[  223.571422][ T9283] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1309: corrupted in-inode xattr: invalid ea_ino
[  223.618049][ T9256] BTRFS info (device loop4): rebuilding free space tree
[  223.629721][ T5830] ocfs2: Unmounting device (7,1) on (node local)
[  223.639345][ T9283] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1309: couldn't read orphan inode 15 (err -117)
[  223.749101][ T9283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.841510][ T9256] BTRFS info (device loop4): disabling free space tree
[  223.878211][ T9256] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  223.923165][ T9256] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  223.965164][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.071814][ T5901] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  224.241807][ T5901] usb 6-1: Using ep0 maxpacket: 32
[  224.257900][ T5901] usb 6-1: config 0 has an invalid interface number: 29 but max is 0
[  224.283270][ T5901] usb 6-1: config 0 has no interface number 0
[  224.289394][ T5901] usb 6-1: config 0 interface 29 has no altsetting 0
[  224.302592][ T9268] loop2: detected capacity change from 0 to 32768
[  224.332224][ T5901] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  224.365260][ T9268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1308 (9268)
[  224.365472][ T5829] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  224.394495][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.419844][ T5901] usb 6-1: Product: syz
[  224.437188][ T9268] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.447609][ T5901] usb 6-1: Manufacturer: syz
[  224.472123][ T9268] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  224.473892][ T5901] usb 6-1: SerialNumber: syz
[  224.528858][ T5901] usb 6-1: config 0 descriptor??
[  224.537024][ T9268] BTRFS info (device loop2): using free-space-tree
[  224.846291][ T5901] peak_usb 6-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  224.921901][ T9268] BTRFS info (device loop2): device stats zeroed by syz.2.1308 (9268)
[  225.060142][ T5901] peak_usb 6-1:0.29 can0: sending command failure: -22
[  225.090684][ T5901] peak_usb 6-1:0.29 can0: sending command failure: -22
[  225.113588][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.124171][ T5901] peak_usb 6-1:0.29 can0: sending command failure: -22
[  225.268665][ T9340] loop1: detected capacity change from 0 to 1024
[  225.497949][ T5901] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -22
[  225.540114][ T5901] usb 6-1: USB disconnect, device number 7
[  225.915945][ T9355] loop5: detected capacity change from 0 to 256
[  225.975629][ T9352] loop0: detected capacity change from 0 to 2048
[  226.013836][   T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  226.098478][ T9352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.151935][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  226.203352][   T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.217471][ T9352] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.251636][   T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  226.287854][   T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  226.312120][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  226.338232][   T26] usb 2-1: SerialNumber: syz
[  226.373935][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short
[  226.385237][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  226.405247][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.424848][ T5915] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  226.467505][ T5915] usb 3-1: config 1 interface 0 has no altsetting 0
[  226.512563][ T5915] usb 3-1: config 1 interface 0 has no altsetting 1
[  226.579119][   T26] usb 2-1: 0:2 : does not exist
[  226.588686][ T5915] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  226.610571][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.657889][ T5915] usb 3-1: Product: syz
[  226.671806][   T26] usb 2-1: USB disconnect, device number 8
[  226.678620][ T5915] usb 3-1: Manufacturer: syz
[  226.690714][ T5915] usb 3-1: SerialNumber: syz
[  226.923018][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.957197][ T5915] smsusb:smsusb_probe: board id=8, interface number 0
[  226.984498][ T5915] usb 3-1: selecting invalid altsetting 0
[  227.004825][ T5915] smsusb:smsusb_probe: usb_set_interface failed, rc -22
[  227.032528][ T5915] smsusb 3-1:1.0: probe with driver smsusb failed with error -22
[  227.109035][ T5915] usb 3-1: USB disconnect, device number 10
[  227.167676][ T9383] loop3: detected capacity change from 0 to 1024
[  227.258011][ T9383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.377354][ T9383] ext4: Unexpected value for 'norecovery'
[  227.535537][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.908383][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'.
[  227.931721][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'.
[  227.958423][ T9403] netlink: 'syz.1.1349': attribute type 30 has an invalid length.
[  227.980114][ T9379] loop0: detected capacity change from 0 to 32768
[  227.987484][ T9379] XFS: ikeep mount option is deprecated.
[  227.998794][ T9379] XFS: noikeep mount option is deprecated.
[  228.011800][ T5841] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  228.038056][ T9379] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  228.193218][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.224698][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.236229][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  228.271958][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0
[  228.300426][ T5841] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  228.313022][ T9379] XFS (loop0): Ending clean mount
[  228.339765][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.353103][ T9379] XFS (loop0): Quotacheck needed: Please wait.
[  228.373727][ T5841] usb 3-1: config 0 descriptor??
[  228.460268][   T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.483169][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  228.484614][ T9379] XFS (loop0): Quotacheck: Done.
[  228.525666][   T30] audit: type=1800 audit(1742617970.535:40): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1339" name="file3" dev="loop0" ino=1063 res=0 errno=0
[  228.541787][   T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  228.592898][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.613746][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.631745][ T5899] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  228.650961][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.684307][ T5844] Bluetooth: hci5: unknown advertising packet type: 0x24
[  228.693747][   T10] usb 5-1: config 0 descriptor??
[  228.708464][ T5841] usbhid 3-1:0.0: can't add hid device: -71
[  228.719313][ T9422] loop5: detected capacity change from 0 to 4096
[  228.728525][ T5841] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  228.740489][   T30] audit: type=1400 audit(1742617970.755:41): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="changehat" pid=9425 comm="syz.1.1357"
[  228.748612][ T5837] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  228.815099][ T5899] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  228.823548][ T9422] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  228.833101][ T5841] usb 3-1: USB disconnect, device number 11
[  228.846500][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.876889][ T5899] usb 4-1: config 0 has no interface number 0
[  228.892860][ T5899] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  228.906711][ T5899] usb 4-1: config 0 interface 52 has no altsetting 0
[  228.917999][ T5899] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  228.971712][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  229.011460][ T5899] usb 4-1: Product: syz
[  229.037582][ T5899] usb 4-1: SerialNumber: syz
[  229.086084][ T5899] usb 4-1: config 0 descriptor??
[  229.334082][ T5899] usb 4-1: Can not set alternate setting to 1, error: -71
[  229.354419][   T10] kye 0003:0458:5012.0019: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  229.368422][ T5899] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71
[  229.411833][   T10] kye 0003:0458:5012.0019: hidraw0: USB HID vff.f6 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0
[  229.424284][ T5899] usb 4-1: USB disconnect, device number 13
[  229.471748][   T10] kye 0003:0458:5012.0019: tablet-enabling feature report not found
[  229.486358][ T9432] loop1: detected capacity change from 0 to 128
[  229.502738][   T10] kye 0003:0458:5012.0019: tablet enabling failed
[  229.541044][   T10] usb 5-1: USB disconnect, device number 10
[  229.563310][ T9432] VFS: Found a Xenix FS (block size = 512) on device loop1
[  229.613805][ T9432] sysv_count_free_blocks: new block 2066808832 is not in data zone
[  229.770849][ T9432] sysv_count_free_inodes: unable to read inode table
[  229.886904][ T9440] loop0: detected capacity change from 0 to 2048
[  229.911366][ T5830] sysv_free_block: trying to free block not in datazone
[  229.945740][ T5830] sysv_free_block: trying to free block not in datazone
[  229.973157][ T5830] sysv_free_block: trying to free block not in datazone
[  230.003033][ T9440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.022610][ T5830] sysv_free_block: trying to free block not in datazone
[  230.050154][ T5830] sysv_free_block: trying to free block not in datazone
[  230.061704][ T5830] sysv_free_block: trying to free block not in datazone
[  230.080755][   T30] audit: type=1800 audit(1742617972.085:42): pid=9440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1364" name="bus" dev="loop0" ino=18 res=0 errno=0
[  230.117593][ T5830] sysv_free_block: trying to free block not in datazone
[  230.152331][ T5830] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  230.236557][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.552074][ T9456] netem: change failed
[  230.626897][ T9461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1374'.
[  230.681736][ T5910] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  230.804433][ T9464] netlink: 'syz.0.1375': attribute type 1 has an invalid length.
[  230.830740][ T9436] loop5: detected capacity change from 0 to 32768
[  230.863401][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.875544][ T9464] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1375'.
[  230.895146][ T9436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1363 (9436)
[  230.896265][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.922053][ T9464] NCSI netlink: No device for ifindex 813332851
[  230.960549][ T9436] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  230.978923][ T9436] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  230.987625][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  231.016469][ T9436] BTRFS info (device loop5): disk space caching is enabled
[  231.041468][ T5910] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  231.075195][ T9436] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  231.102223][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.174437][ T5910] usb 3-1: config 0 descriptor??
[  231.270344][ T9489] loop0: detected capacity change from 0 to 256
[  231.289649][ T9436] BTRFS info (device loop5): rebuilding free space tree
[  231.334461][ T9487] loop3: detected capacity change from 0 to 2048
[  231.351136][ T9436] BTRFS info (device loop5): disabling free space tree
[  231.376207][ T9489] exfat: Deprecated parameter 'namecase'
[  231.398008][ T9436] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  231.421700][ T9489] exfat: Deprecated parameter 'utf8'
[  231.427272][ T9489] exfat: Deprecated parameter 'namecase'
[  231.449900][ T9436] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  231.472318][ T9493] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  231.523302][ T9489] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d)
[  231.525499][ T9487] NILFS (loop3): unable to set label with more than 80 bytes
[  231.601821][ T5910] elecom 0003:056E:011C.001A: item fetching failed at offset 0/2
[  231.612428][ T5910] elecom 0003:056E:011C.001A: probe with driver elecom failed with error -22
[  231.855861][ T5832] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.868663][ T5910] usb 3-1: USB disconnect, device number 12
[  232.339489][ T9505] loop3: detected capacity change from 0 to 1024
[  232.397313][ T9507] loop1: detected capacity change from 0 to 512
[  232.466276][ T9507] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  232.505714][ T9505] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e01c, mo2=0002]
[  232.533709][ T9505] System zones: 0-1, 3-12
[  232.585671][ T9505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.643886][ T9507] EXT4-fs (loop1): 1 truncate cleaned up
[  232.650499][ T9507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.729639][   T30] audit: type=1800 audit(1742617974.735:43): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1388" name="bus" dev="loop3" ino=18 res=0 errno=0
[  232.851608][   T30] audit: type=1800 audit(1742617974.785:44): pid=9507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1389" name="file1" dev="loop1" ino=15 res=0 errno=0
[  233.006862][ T9462] loop4: detected capacity change from 0 to 32768
[  233.018543][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.056159][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.136501][ T9527] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1393'.
[  233.151781][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'.
[  233.203197][ T9528] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1396'.
[  233.229108][ T9525] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1396'.
[  233.263150][ T9462] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.535966][ T9539] loop3: detected capacity change from 0 to 1024
[  233.557925][ T9542] loop1: detected capacity change from 0 to 256
[  233.583743][ T9462] XFS (loop4): Ending clean mount
[  233.682695][ T9542] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  233.747719][ T9533] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.758135][ T9533] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.796502][ T9515] loop2: detected capacity change from 0 to 32768
[  233.864525][ T5829] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  234.133070][ T5926] hfsplus: b-tree write err: -5, ino 8
[  234.144373][ T9557] loop1: detected capacity change from 0 to 128
[  234.152383][ T9557] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  234.165420][ T9557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.166182][ T9515] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  234.216956][ T9515] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  234.260616][ T9533] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.267852][ T9515] bcachefs (loop2): Version upgrade required:
[  234.267852][ T9515] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete
[  234.267852][ T9515] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size
[  234.267852][ T9515]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  234.397371][ T9533] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.442729][ T9515] bcachefs (loop2): dropping and reconstructing all alloc info
[  234.575374][ T9515] bcachefs (loop2): accounting_read...
[  234.615013][ T9543] loop5: detected capacity change from 0 to 32768
[  234.649717][ T9515]  done
[  234.653518][ T9515] bcachefs (loop2): alloc_read... done
[  234.659046][ T9515] bcachefs (loop2): stripes_read... done
[  234.667447][ T9562] loop1: detected capacity change from 0 to 128
[  234.677783][ T9515] bcachefs (loop2): snapshots_read... done
[  234.688518][ T9543] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1398 (9543)
[  234.734273][ T9515] bcachefs (loop2): done starting filesystem
[  234.826663][ T9543] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  234.860299][ T9543] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  234.945317][ T9543] BTRFS info (device loop5): disk space caching is enabled
[  234.990405][ T9543] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  235.058704][ T5849] bcachefs (loop2): shutting down
[  235.088359][ T9533] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.102265][ T9533] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.121655][ T9533] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.159215][ T9533] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.227755][ T5849] bcachefs (loop2): shutdown complete
[  235.229217][ T9543] BTRFS info (device loop5): rebuilding free space tree
[  235.373719][ T9543] BTRFS info (device loop5): disabling free space tree
[  235.382920][ T9543] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  235.421328][ T9543] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  235.473082][ T9583] loop3: detected capacity change from 0 to 4096
[  235.549749][ T9591] loop1: detected capacity change from 0 to 1024
[  235.566804][ T9583] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  235.667167][ T9591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.735117][ T9583] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  235.759678][ T5832] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  235.890708][ T5834] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  235.913202][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.976079][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'.
[  237.213386][ T9633] loop5: detected capacity change from 0 to 2048
[  237.292808][ T9633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.440031][ T9633] fscrypt (loop5, inode 15): Error -61 getting encryption context
[  237.458071][ T9639] loop4: detected capacity change from 0 to 4096
[  237.552359][ T9639] NILFS (loop4): mounting unchecked fs
[  237.561281][ T9639] NILFS (loop4): recovery required for readonly filesystem
[  237.581213][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.611040][ T9639] NILFS (loop4): write access will be enabled during recovery
[  237.635736][ T9639] NILFS (loop4): invalid segment: Checksum error in segment payload
[  237.671224][ T9639] NILFS (loop4): trying rollback from an earlier position
[  237.704950][ T9617] loop1: detected capacity change from 0 to 32768
[  237.799006][ T9617] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.844374][ T9639] NILFS (loop4): recovery complete
[  238.183374][ T9617] XFS (loop1): Ending clean mount
[  238.205483][ T9617] XFS (loop1): Quotacheck needed: Please wait.
[  238.206358][ T9663] loop2: detected capacity change from 0 to 512
[  238.257685][ T9663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  238.332279][ T9617] XFS (loop1): Quotacheck: Done.
[  238.361223][ T9663] EXT4-fs (loop2): 1 truncate cleaned up
[  238.429901][ T9663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.504011][ T9663] EXT4-fs error (device loop2): ext4_generic_delete_entry:2687: inode #2: block 13: comm syz.2.1408: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  238.586605][ T9644] loop0: detected capacity change from 0 to 40427
[  238.599548][ T9663] EXT4-fs (loop2): Remounting filesystem read-only
[  238.620769][ T9663] EXT4-fs warning (device loop2): ext4_rename_delete:3742: inode #2: comm syz.2.1408: Deleting old file: nlink 4, error=-117
[  238.655445][ T5830] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.677626][ T9644] F2FS-fs (loop0): invalid crc value
[  238.691374][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.737348][ T9644] F2FS-fs (loop0): Found nat_bits in checkpoint
[  238.841940][ T5910] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  238.932414][ T9644] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  239.034548][ T5910] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  239.047342][ T5910] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  239.071747][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.097513][ T5910] usb 6-1: Product: syz
[  239.111784][ T5910] usb 6-1: Manufacturer: syz
[  239.137182][ T5910] usb 6-1: SerialNumber: syz
[  239.164911][ T5837] syz-executor: attempt to access beyond end of device
[  239.164911][ T5837] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.170278][ T5910] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  239.227744][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  239.799970][ T5910] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  239.839202][ T5910] usb 6-1: USB disconnect, device number 8
[  239.917626][ T9687] loop2: detected capacity change from 0 to 32768
[  240.019607][ T9687] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  240.206520][   T30] audit: type=1326 audit(1742617982.205:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.0.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b978d169 code=0x7ffc0000
[  240.228730][    C1] vkms_vblank_simulate: vblank timer overrun
[  240.313300][   T30] audit: type=1326 audit(1742617982.225:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.0.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f42b978d169 code=0x7ffc0000
[  240.414449][   T30] audit: type=1326 audit(1742617982.225:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.0.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b978d169 code=0x7ffc0000
[  240.456287][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[  240.513633][   T30] audit: type=1326 audit(1742617982.225:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.0.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b978d169 code=0x7ffc0000
[  241.194119][ T9745] loop0: detected capacity change from 0 to 512
[  241.209178][ T9751] loop5: detected capacity change from 0 to 64
[  241.333131][ T9745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.372162][ T9745] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  241.528782][ T9761] loop4: detected capacity change from 0 to 16
[  241.547137][ T9761] erofs (device loop4): mounted with root inode @ nid 36.
[  241.677800][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.831892][ T5910] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  241.928653][ T9772] loop4: detected capacity change from 0 to 764
[  241.952707][ T9774] loop0: detected capacity change from 0 to 128
[  241.963649][ T9772] rock: directory entry would overflow storage
[  241.969813][ T9772] rock: sig=0x4654, size=5, remaining=4
[  242.001690][ T5910] usb 2-1: Using ep0 maxpacket: 16
[  242.016389][ T5910] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  242.040171][ T5910] usb 2-1: config 0 has no interface number 0
[  242.060066][ T5910] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  242.093169][ T5910] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  242.163380][ T5910] usb 2-1: config 0 interface 41 has no altsetting 0
[  242.189483][ T5910] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  242.201373][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.213403][ T5910] usb 2-1: Product: syz
[  242.226706][ T5910] usb 2-1: Manufacturer: syz
[  242.246664][ T5910] usb 2-1: SerialNumber: syz
[  242.295041][ T5910] usb 2-1: config 0 descriptor??
[  242.313112][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.326100][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.572051][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.589570][   T56] Bluetooth: hci5: command 0x0406 tx timeout
[  242.589700][ T9765] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.852757][ T9797] loop5: detected capacity change from 0 to 2048
[  242.891669][ T9801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  242.891984][ T9797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.898535][ T9801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  242.967547][ T9804] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6)
[  242.967562][ T9801] vhci_hcd vhci_hcd.0: Device attached
[  242.974077][ T9804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  242.989169][ T9804] vhci_hcd vhci_hcd.0: Device attached
[  243.085951][ T5910] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  243.089186][ T9808] loop3: detected capacity change from 0 to 1024
[  243.121992][  T971] vhci_hcd: vhci_device speed not set
[  243.130657][ T5910] usb 2-1: USB disconnect, device number 9
[  243.150244][ T9802] usbip_core: unknown command
[  243.159207][ T9808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.186918][ T9805] vhci_hcd: connection closed
[  243.187133][ T9802] vhci_hcd: unknown pdu 0
[  243.198655][ T1297] vhci_hcd: stop threads
[  243.204047][  T971] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  243.213635][ T9802] usbip_core: unknown command
[  243.229027][ T1297] vhci_hcd: release socket
[  243.237138][ T9803] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  243.238285][ T9808] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.254445][ T1297] vhci_hcd: disconnect device
[  243.275617][ T1297] vhci_hcd: stop threads
[  243.284362][ T1297] vhci_hcd: release socket
[  243.294548][ T1297] vhci_hcd: disconnect device
[  243.308584][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1498'.
[  243.323887][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1498'.
[  243.343241][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.666766][ T9795] loop4: detected capacity change from 0 to 32768
[  243.766533][ T9795] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  243.897212][ T9795] XFS (loop4): Ending clean mount
[  243.926033][ T9795] XFS (loop4): Quotacheck needed: Please wait.
[  244.005144][ T9795] XFS (loop4): Quotacheck: Done.
[  244.269337][ T5829] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.304287][ T9817] loop5: detected capacity change from 0 to 32768
[  244.396972][ T9817] syz.5.1500: attempt to access beyond end of device
[  244.396972][ T9817] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  244.454520][ T9817] lbmIODone: I/O error in JFS log
[  244.478419][ T9817] *** Log Format Error ! ***
[  244.521942][ T9817] lmLogInit: exit(-22)
[  244.526087][ T9817] lmLogOpen: exit(-22)
[  244.841019][ T9853] loop1: detected capacity change from 0 to 256
[  244.869374][ T9853] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  244.908437][ T9856] loop2: detected capacity change from 0 to 512
[  244.932881][ T9853] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  244.955680][ T9853] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  244.990127][ T9853] UDF-fs: Scanning with blocksize 512 failed
[  245.025545][ T9856] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  245.035951][ T9853] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  245.078880][ T9853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.122799][ T9856] EXT4-fs (loop2): 1 truncate cleaned up
[  245.152684][ T9856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.184316][ T9863] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1514'.
[  245.217626][ T9856] 
[  245.219982][ T9856] ======================================================
[  245.226999][ T9856] WARNING: possible circular locking dependency detected
[  245.234274][ T9856] 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 Not tainted
[  245.241375][ T9856] ------------------------------------------------------
[  245.248650][ T9856] syz.2.1517/9856 is trying to acquire lock:
[  245.254618][ T9856] ffff88807d69f0f0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: ext4_xattr_inode_lookup_create+0x17de/0x1c70
[  245.266603][ T9856] 
[  245.266603][ T9856] but task is already holding lock:
[  245.273959][ T9856] ffff88807a550288 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x16e1/0x1da0
[  245.283301][ T9856] 
[  245.283301][ T9856] which lock already depends on the new lock.
[  245.283301][ T9856] 
[  245.293806][ T9856] 
[  245.293806][ T9856] the existing dependency chain (in reverse order) is:
[  245.302835][ T9856] 
[  245.302835][ T9856] -> #1 (&ei->i_data_sem/3){++++}-{4:4}:
[  245.310685][ T9856]        lock_acquire+0x1ed/0x550
[  245.315725][ T9856]        down_write+0x99/0x220
[  245.320499][ T9856]        ext4_xattr_inode_lookup_create+0x1484/0x1c70
[  245.327272][ T9856]        ext4_xattr_ibody_set+0x214/0x730
[  245.333003][ T9856]        ext4_xattr_set_handle+0xba6/0x1580
[  245.338902][ T9856]        ext4_xattr_set+0x280/0x3e0
[  245.344107][ T9856]        __vfs_setxattr+0x46a/0x4a0
[  245.349307][ T9856]        __vfs_setxattr_noperm+0x12e/0x660
[  245.355208][ T9856]        vfs_setxattr+0x221/0x430
[  245.360236][ T9856]        filename_setxattr+0x2af/0x430
[  245.365698][ T9856]        path_setxattrat+0x440/0x510
[  245.370994][ T9856]        __x64_sys_setxattr+0xbc/0xe0
[  245.376370][ T9856]        do_syscall_64+0xf3/0x230
[  245.381387][ T9856]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.387812][ T9856] 
[  245.387812][ T9856] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}:
[  245.396625][ T9856]        validate_chain+0x18ef/0x5920
[  245.402018][ T9856]        __lock_acquire+0x1397/0x2100
[  245.407397][ T9856]        lock_acquire+0x1ed/0x550
[  245.412428][ T9856]        down_write+0x99/0x220
[  245.417189][ T9856]        ext4_xattr_inode_lookup_create+0x17de/0x1c70
[  245.424048][ T9856]        ext4_xattr_block_set+0x26c/0x32d0
[  245.429866][ T9856]        ext4_expand_extra_isize_ea+0x1182/0x1cf0
[  245.436289][ T9856]        __ext4_expand_extra_isize+0x306/0x400
[  245.442440][ T9856]        __ext4_mark_inode_dirty+0x524/0x880
[  245.448423][ T9856]        ext4_setattr+0x1780/0x1da0
[  245.453614][ T9856]        notify_change+0xbcc/0xe90
[  245.458722][ T9856]        do_truncate+0x220/0x310
[  245.463658][ T9856]        path_openat+0x2e1b/0x3590
[  245.468763][ T9856]        do_filp_open+0x27f/0x4e0
[  245.473781][ T9856]        do_sys_openat2+0x13e/0x1d0
[  245.478989][ T9856]        __x64_sys_creat+0x123/0x170
[  245.484370][ T9856]        do_syscall_64+0xf3/0x230
[  245.489393][ T9856]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.495813][ T9856] 
[  245.495813][ T9856] other info that might help us debug this:
[  245.495813][ T9856] 
[  245.506029][ T9856]  Possible unsafe locking scenario:
[  245.506029][ T9856] 
[  245.513467][ T9856]        CPU0                    CPU1
[  245.518820][ T9856]        ----                    ----
[  245.524174][ T9856]   lock(&ei->i_data_sem/3);
[  245.528776][ T9856]                                lock(&sb->s_type->i_mutex_key#8/1);
[  245.536868][ T9856]                                lock(&ei->i_data_sem/3);
[  245.543994][ T9856]   lock(&sb->s_type->i_mutex_key#8/1);
[  245.549563][ T9856] 
[  245.549563][ T9856]  *** DEADLOCK ***
[  245.549563][ T9856] 
[  245.557694][ T9856] 5 locks held by syz.2.1517/9856:
[  245.562904][ T9856]  #0: ffff8880246fe420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[  245.572089][ T9856]  #1: ffff88807a5503f8 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: do_truncate+0x20c/0x310
[  245.582393][ T9856]  #2: ffff88807a550598 (mapping.invalidate_lock){++++}-{4:4}, at: ext4_setattr+0xf94/0x1da0
[  245.592597][ T9856]  #3: ffff88807a550288 (&ei->i_data_sem/3){++++}-{4:4}, at: ext4_setattr+0x16e1/0x1da0
[  245.602464][ T9856]  #4: ffff88807a5500c8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x491/0x880
[  245.612770][ T9856] 
[  245.612770][ T9856] stack backtrace:
[  245.618648][ T9856] CPU: 1 UID: 0 PID: 9856 Comm: syz.2.1517 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0
[  245.618672][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  245.618686][ T9856] Call Trace:
[  245.618695][ T9856]  <TASK>
[  245.618705][ T9856]  dump_stack_lvl+0x241/0x360
[  245.618734][ T9856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.618757][ T9856]  ? __pfx__printk+0x10/0x10
[  245.618780][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.618818][ T9856]  print_circular_bug+0x13a/0x1b0
[  245.618847][ T9856]  check_noncircular+0x36a/0x4a0
[  245.618870][ T9856]  ? mark_lock+0x9a/0x360
[  245.618892][ T9856]  ? __pfx_check_noncircular+0x10/0x10
[  245.618917][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.618951][ T9856]  ? lockdep_lock+0x123/0x2b0
[  245.618993][ T9856]  validate_chain+0x18ef/0x5920
[  245.619016][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.619062][ T9856]  ? __pfx_validate_chain+0x10/0x10
[  245.619085][ T9856]  ? __lock_acquire+0x1397/0x2100
[  245.619123][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.619165][ T9856]  ? __pfx_lock_acquire+0x10/0x10
[  245.619199][ T9856]  ? ext4_mark_iloc_dirty+0x4fd/0x1d10
[  245.619223][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.619257][ T9856]  ? mark_lock+0x9a/0x360
[  245.619279][ T9856]  __lock_acquire+0x1397/0x2100
[  245.619320][ T9856]  lock_acquire+0x1ed/0x550
[  245.619352][ T9856]  ? ext4_xattr_inode_lookup_create+0x17de/0x1c70
[  245.619391][ T9856]  ? __pfx_lock_acquire+0x10/0x10
[  245.619425][ T9856]  ? __pfx___might_resched+0x10/0x10
[  245.619454][ T9856]  ? __ext4_mark_inode_dirty+0x5b2/0x880
[  245.619486][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.619522][ T9856]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  245.619553][ T9856]  ? __pfx_dquot_free_inode+0x10/0x10
[  245.619586][ T9856]  down_write+0x99/0x220
[  245.619608][ T9856]  ? ext4_xattr_inode_lookup_create+0x17de/0x1c70
[  245.619642][ T9856]  ? __pfx_down_write+0x10/0x10
[  245.619665][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.619699][ T9856]  ? ext4_get_dquots+0xd/0x20
[  245.619725][ T9856]  ext4_xattr_inode_lookup_create+0x17de/0x1c70
[  245.619766][ T9856]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  245.619799][ T9856]  ? bdev_getblk+0x6e/0x670
[  245.619831][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.619865][ T9856]  ? ext4_get_group_desc+0x410/0x4b0
[  245.619897][ T9856]  ? ext4_get_group_desc+0x113/0x4b0
[  245.619930][ T9856]  ? ext4_xattr_block_set+0x105/0x32d0
[  245.619970][ T9856]  ext4_xattr_block_set+0x26c/0x32d0
[  245.620006][ T9856]  ? ext4_xattr_inode_get+0x1bc/0x490
[  245.620045][ T9856]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  245.620084][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.620119][ T9856]  ? ext4_xattr_ibody_find+0x3e5/0x4b0
[  245.620150][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.620184][ T9856]  ? ext4_xattr_block_find+0xed/0x360
[  245.620219][ T9856]  ext4_expand_extra_isize_ea+0x1182/0x1cf0
[  245.620268][ T9856]  ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10
[  245.620303][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.620338][ T9856]  ? down_write_trylock+0x209/0x3b0
[  245.620362][ T9856]  ? __ext4_mark_inode_dirty+0x491/0x880
[  245.620392][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.620426][ T9856]  ? dquot_initialize_needed+0x130/0x320
[  245.620457][ T9856]  __ext4_expand_extra_isize+0x306/0x400
[  245.620484][ T9856]  __ext4_mark_inode_dirty+0x524/0x880
[  245.620518][ T9856]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  245.620547][ T9856]  ? ext4_break_layouts+0x2a3/0x310
[  245.620585][ T9856]  ? __pfx_down_write+0x10/0x10
[  245.620605][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.620640][ T9856]  ? ext4_fc_track_range+0xf6/0xb70
[  245.620663][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.620701][ T9856]  ext4_setattr+0x1780/0x1da0
[  245.620728][ T9856]  ? __pfx_ext4_setattr+0x10/0x10
[  245.620749][ T9856]  notify_change+0xbcc/0xe90
[  245.620781][ T9856]  do_truncate+0x220/0x310
[  245.620806][ T9856]  ? __pfx_do_truncate+0x10/0x10
[  245.620827][ T9856]  ? apparmor_file_truncate+0x297/0x350
[  245.620866][ T9856]  path_openat+0x2e1b/0x3590
[  245.620895][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.620942][ T9856]  ? __pfx_path_openat+0x10/0x10
[  245.620978][ T9856]  ? srso_alias_return_thunk+0x5/0xfbef5
[  245.621017][ T9856]  do_filp_open+0x27f/0x4e0
[  245.621040][ T9856]  ? __pfx_do_filp_open+0x10/0x10
[  245.621061][ T9856]  ? do_raw_spin_lock+0x14f/0x370
[  245.621106][ T9856]  do_sys_openat2+0x13e/0x1d0
[  245.621138][ T9856]  ? __pfx_do_futex+0x10/0x10
[  245.621166][ T9856]  ? __pfx_do_sys_openat2+0x10/0x10
[  245.621204][ T9856]  __x64_sys_creat+0x123/0x170
[  245.621237][ T9856]  ? __pfx___x64_sys_creat+0x10/0x10
[  245.621273][ T9856]  ? do_syscall_64+0x100/0x230
[  245.621295][ T9856]  ? do_syscall_64+0xb6/0x230
[  245.621315][ T9856]  do_syscall_64+0xf3/0x230
[  245.621336][ T9856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.621367][ T9856] RIP: 0033:0x7f129318d169
[  245.621386][ T9856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.621404][ T9856] RSP: 002b:00007f1293f88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  245.621426][ T9856] RAX: ffffffffffffffda RBX: 00007f12933a5fa0 RCX: 00007f129318d169
[  245.621441][ T9856] RDX: 0000000000000000 RSI: 00000000000001ad RDI: 0000200000000140
[  245.621455][ T9856] RBP: 00007f129320e2a0 R08: 0000000000000000 R09: 0000000000000000
[  245.621469][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.621482][ T9856] R13: 0000000000000000 R14: 00007f12933a5fa0 R15: 00007ffeae6b4998
[  245.621504][ T9856]  </TASK>
[  246.255798][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.336343][  T971] vhci_hcd: vhci_device speed not set