last executing test programs:

1m46.674399857s ago: executing program 1 (id=117):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0), 0xff, 0x55b, &(0x7f0000000340)="$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")
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00')

1m46.495550001s ago: executing program 1 (id=119):
syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
pipe2(&(0x7f0000000000), 0x80000)
getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000)

1m46.377211425s ago: executing program 1 (id=121):
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000040)=ANY=[], 0xff, 0x60e7, &(0x7f0000000940)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1ef)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x35)

1m45.338399562s ago: executing program 1 (id=127):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r2=>0xffffffffffffffff])
keyctl$chown(0x4, r1, 0xee01, r2)
keyctl$setperm(0x5, r1, 0x2008)
keyctl$update(0x2, r1, 0x0, 0x0)

1m45.208456415s ago: executing program 1 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
setresuid(0xee01, 0xee00, 0x0)
write(r0, &(0x7f0000000900)='-', 0x1)

1m45.086100628s ago: executing program 1 (id=132):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="98", 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x0, 0x1, "84"}, 0x9)

1m29.963144258s ago: executing program 32 (id=132):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="98", 0x1}], 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x0, 0x1, "84"}, 0x9)

3.329754004s ago: executing program 3 (id=838):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1003, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

3.174582018s ago: executing program 0 (id=839):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffff7fffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x6, 0xfffffffffffffffb}, 0xfffffffe}}, 0xfff1}, 0x1, 0x0, 0x0, 0x80}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

3.08442259s ago: executing program 3 (id=841):
r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f0000002f40)=""/4079, 0x7c4)

3.016749002s ago: executing program 0 (id=842):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20400, 0xb6)
close(0x3)

2.900829945s ago: executing program 3 (id=843):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

2.733136269s ago: executing program 0 (id=846):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$eJxUk9Mf54W7BzfvZtt2TbZt27Y9ue/HRrZt1yLbtrHZbRvP63d5nj/guXjPzJi51t3wngHeO8D7Bnj/AB8Y4IMDHD7AEQMcOcBRA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXAxw9wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D3DMAP8Y4NgB/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAoQEOC3DiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkACXCpAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAA3w5ABPCfDUAE8L8PQAzwjwzADPCnAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/g2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAQ4PcESAIwMcFeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhng6AC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AMcE+EeAYwP8M8C/Avw7wH8C/DfA/wIcEuI4IY4b4nghjh/iBCFOGOJEIQ4NcViIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhkiIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4VoiCeHeEqIp4Z4Woinh3hGiGeGeFaIgxCDEMMQoxDjEJMQ0xCHjIN5iEWIZYhViHWITYhtiF2IfYhnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiFeGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+GODzEESGODHFUiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYijQ/wqxK9D/CbEb0P8LsTvQ/whxB9D/CnEn0P8JcRfQ/wtxN9DHBPiHyGODfHPEP8K8e8Q/wnx3xD/+x/TCMeJcNwIx4tw/AgniHDCCCeKcGiEwyKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwyQiJcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM8KUIjPDnCUyI8NcLTIjw9wjMiPDPCsyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YITDIxwR4cgIR0X4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYQfRvhRhB9H+EmEn0b4WYSfR/hFhF9GODrCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcIxEf4R4dgI/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYxDYxwW48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhHjkjES41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbj/+kCH/23fHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjj8BhHxDgyxlExPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMY6O8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf49xTIx/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTg0ASHJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJUwwZMgQZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEEl0hwyQRJcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE9M8KQETfDkBE9J8NQET0vw9ATPSPDMBM9KcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+DZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJDk9wRIIjExyV4EMJPpzgIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meDoBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcExyT4R4JjE/wzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4kQpDk1xWIoTpzhJipOmOFmKk6c4RYpTpjhVilOnOE2K06Y4XYrTpzhDijOmOFOKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQigunuEiKi6a4WIqLp7hEikumSIpLpbh0isukuGyKy6W4fIorpLhiiiuluHKKq6S4aoqrpbh6imukuGaKa6W4dorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6R4YoonpWiKJ6d4SoqnpnhaiqeneEaKZ6Z4VoqDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTHF4iiNSHJniqBQfSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2ZTkuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9McXSKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4pjUvwjxbEp/pniXyn+neI/Kf6b4n8pDslwnAzHzXC8DMfPcIIMJ8xwogyHZjgsw4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCLDJTMkw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyNMOTMzwlw1MzPC3D0zM8I8MzMzwrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9mODzDERmOzHBUhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYajM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98zHJPhHxmOzfDPDP/K8O8M/8nw3wz/y3BIjuPkOG6O4+U4fo4T5DhhjhPlODTHYTlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOS6ZIzkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rjV0yJD/bbFOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjuZ4co6n5HhqjqfleHqOZ+R4Zo5n5TjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/x7BzPyfHcHM/L8fwcL8jxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzv+h+v0WePvSfHe//n8pD/f8NzHJHjyBxH5fjQ/9wfMmTIIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzl+mePoHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fccx+T4R45jc/wzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFDi1wWIETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgUsWSIFLFbh0gcsUuOGMzdjlCly+wBUKXLHAlQpcucBVCvyfB6sVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEb/O9fgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYddhIcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgRZ4coGnFHhqgacVeHqBZxR4ZoFnFTgoMCgwLDAqMC4wKTAtMCswL7AosCywKrAusCmwLbArsC/w7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAocXOKLAkQWOKvChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyxwdIFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gWMK/KPAsQX+WeBfBf5d4D8F/lvgf/9rocRxShy3xPFKHL/ECUqcsMSJShxa4rASJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnLHGmEmcucZYSZy1xthJnL3GOEucsca4S5y5xnhLnLXG+EucvcYESFyxxoRIXLnGREhctcbESFy9xiRKXLJESlypx6RKXKXHZEpcrcfkSVyhxxRJXKnHlElcpcdUSVytx9RLXKHHNEtcqce0S1ylx3RLXK3H9EjcoccMSNypx4xI3KXHTEjcrcfMStyhxyxK3KnHrErcpcdsStytx+xJ3KHHHEncqcecSdylx1xJ3K3H3Evcocc8S9ypx7xL3KXHfEvcrcf8SDyjxwBIPKvHgEg8p8dASDyvx8BKPKPHIEo8q8egSjynx2BKPK/H4Ek8o8cQSTyrREk8u8ZQSTy3xtBJPL/GMEs8s8awSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JZ5dLjl0yBA8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0q8u8R7Sry3xPtKvL/EB0p8sMThJY4ocWSJo0p8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9LHF3iVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuKYEv8ocWyJf5b4V4l/l/hPif+W+F+JQyocp8JxKxyvwvErnKDCCSucqMKhFQ6rcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqpcKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoCo+u8JgKj63wuAqPr/CECk+s8KQKrfDkCk+p8NQKT6vw9ArPqPDMCs+qcFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+HZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVDq9wRIUjKxxV4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeHoCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcKx1T4R4VjK/yzwr8q/LvCfyr8t8L/KhxS4zg1jlvjeDWOX+MENU5Y40Q1Dq1xWI0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjUvWSI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9R4Yo0n1WiNJ9d4So2n1nhajafXeEaNZ9Z4Vo2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrHF4jSNqHFnjqBofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csaR9f4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1zimxj9qHFvjnzX+VePfNf5T4781/lfjkAbHaXDcBsdrcPwGJ2hwwgYnanBog8ManLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxs8rsHjGzyhwRMbPKlBGzy5wVMaPLXB0xo8vcEzGjyzwbMaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3h2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDwxsc0eDIBkc1+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNji6wa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BMQ3+0eDYBv9s8K8G/27wnwb/bfC/Boe0OE6L47Y4XovjtzhBixO2OFGLQ1sc1uLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLS7R4pIt0uJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS2e2OJJLdriyS2e0uKpLZ7W4uktntHimS2e1eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxze4ogWR7Y4qsWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+Zdj/unmxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxdEtftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y2OafGPaXBsi3+2+FeLf7f4T4v/tvhfi0M6HKfDcTscr8PxO5ygwwk7nKjDoR0O63DiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFjmFDhgxxpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQO7fDkDk/p8NQOT+vw9A7P6PDMDs/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXh1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdDu9wRIcjOxzV4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eHoDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcOx3T4R4djO/yzw786/LvDfzr8t8P/OhzS4zg9jtvjeD2O3+MEPU7Y40Q9Du1xWI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2SI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9WiPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvsez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7HF4jyN6HNnjqJ7/Y9kem/A8GAUIp7Ztm1vbtm3b3hqp/dw2atttWNu2bTc5c2bev3DNfl2HDXD4AEcMcOQARw1w9AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+Abg/GHvDnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgGMGOHaAQwIcJ8BxAxwvwPEDnCDACQOcKMCJA5wkwEkDnCzAyQOcIsApA5wqwKkDnCbAaQOcLsDpA5whwBkDnCnAmQOcJcBZA5wtwNkDnCPAOQOcK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLMDFA1wiwCUDXCrApQMkwGUCXDbA5QJcPsAVAlwxwJUCXDnAVQJcNcDVAlw9wDUCXDPAtQJcO8B1Alw3wPUCXD/ADQLcMMCNAtw4wE0C3DTAzQLcPMAtAtwywK0C3DrAbQLcNsDtAtw+wB0C3DHAnQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8McCTAjw5wFMCNMBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/AoQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAhwW4PAARwQ4MsBRAY4O8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8J8N8A/wtwTIBjAxwS4jghjhvieCGOH+IEIU4Y4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGOJMIc4c4iwhzhribCHOHuIcIc4Z4lwhzh3iPCHOG+J8Ic4f4gIhLhjiQiEuHOIiIS4a4mIhLh7iEiEuGeJSIS4dIiEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iGuEeKaIa4V4tohrhPiuiGuF+L6IW4Q4oYhbhTixiFuEuKmIW4W4uYhbhHiliFuFeLWIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiriHuFuLuIe4R4p4h7hXi3iHuE+K+Ie4X4v4hHhDigSEeFOLBIR4S4qEhHhbi4SEeEeKRIR4V4tEhHhPisSEeF+LxIZ4Q4okhnhTiySGeEqIhnhriaSGeHuIZIZ4Z4lkhnh3iOSGeG+J5IQ4N8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOLDIT4S4qMhPhbisBCHhzgixJEhjgpxdIiP/7/nEHwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhKdEaISnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6EQyM8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2E10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgswuERjohwZISjIhwd4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYlw6RmJcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M8JUZjPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYhwa4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGYTEOj3FEjCNjHBXj6Bgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpXg0gmS4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6c4CkJmuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg0ATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCQ5LcHiCIxIcmeCoBEcn+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTHGpFJdOkRSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUT0rx5BRPSdEUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FIemeH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0txWIrDUxyR4sgUR6U4OsXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2T4ToaLZbh4hktkuGSGS2W4dIZkuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoYnZnhShidneEqGZnhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52U4NMPzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYhsMyHJ7hiAxHZjgqw9EZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+/b+G383wvQzfz/CDDD/M8KMMP87wkww/zfCzDD/P8IsMv8zwqwy/zvCbDL/N8LsMv8/whwx/zPCnDH/O8JcMf83wtwx/z/CPDP/M8K8M/87wnwz/zfC/DMdkODbDITmOk+O4OY6X4/g5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5LpXj0jmS4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e/+//zfGoHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBzN8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy3FojufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfnOMgxyDHMMcoxHjPWJMc0xyzHPMcixzLHKsc6xybHNscuxz7Ha3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHchyW4/AcR+Q4MsdROY7O8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txTI5jcxxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BQ4t8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbgsAKHFziiwJEFjipwdIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBv/6/z6T4e4F/FPhngX8V+HeB/xT4b4H/FTimwLEFDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSh5Z4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYmDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK3FYicNLHFHiyBJHlTi6xMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EMSWOLXFIheNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVbh0hVS4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1d4SoVWeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVTi0wvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrHFQYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFwyocXuGICkdWOKrC0RU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6pcGyFQ2ocp8ZxaxyvxvFrnKDGCWucqMaJa5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKrGpWukxmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3PR/JpvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Ti0xvNrvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNw2ocXuOIGkfWOKrG0TU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NY6pcWyNQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcfsIhrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ2e0qANntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DQ5t8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbgsAaHNziiwZENjmpwdIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg2MaHNvgkBbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2px6RZpcZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u8ZQWbfHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2txaIvnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXtzhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFoe1OLzFES2ObHFUi6NbfLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc0+LYFod0OE6H43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh0t3SIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4coendGiHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh0M7PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h9d0eG2H13V4fYc3dHhjhzd1eHOHt3R4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3U4rMPhHY7ocGSHozoc3eHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvQ4f4R4d/dvhXh393+E+H/3b4X4djOhzb4ZAex+lx3B7H63H8HifoccIeJ+px4h4n6XHSHifrcfIep+hxyh6n6nHqHqfpcdoep+tx+h5n6HHGHmfqceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6nHhHhfpcdEeF+tx8R6X6HHJHpfqceke6XGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7fG4Ho/v8YQeT+zxpB5P7vGUHu3x1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/rcWiP5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHh/u8ZEeH+3xsR6H9Ti8xxE9juxxVI+je/6Ppnfu4fxwnG+3W2xt29apbdu2bZ/ato33y0ZtL7q7tW3bvPnmfn4PYU4yf0wyyfGZAT47wOEDHDHAkQMcNcDnBjh6gGMGOHaAzw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwIcJ8ChAY4b4HgBjh/gBAEOC3DCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQAJcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IBh/xNXBHhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKAJwVogCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDfC+AO8P8IEAHwzwoQAfDvCRAB8N8LEAHw/wiQCfDPCpAJ8O8JkAnw1weIAjAhwZ4KgAnwtwdIBjAhwb4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/Af4XjOuQEMcJcWiI44Y4XojjhzhBiMNCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyREJcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KURDPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcRbQrw1xNtCvD3EO0K8M8S7QhyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjDQxwR4sgQR4X4XIijQxwT4tgQnw/xhRBf/H+ioRBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEODTCcSMcL8LxI5wgwmERThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EZ4b4XkRnh/hBRFeGOFFEV4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEQ4iDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CO8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLhEY6IcGSEoyJ8LsLREY6JcGyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ahMY4b43gxjh/jBDEOi3HCGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3HTpkyP9x2zzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I0xpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8ZBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4PMYRMY6McVSMz8U4OsYxMY6N8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcUiC4yQ4NMFxExwvwfETnCDBYQlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgkumuBiCS6e4BIJLpkgCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6UoAmenOAp503sqQmeluDpCZ6R4JkJnpXg2Qmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BuxO8J8F7E7wvwfsTfCDBBxN8KMGHE3wkwUcTfCzBxxN8IsEnE3wqwacTfCbBZxMcnuCIBEcmOCrB5xIcneCYBMcm+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyT4ZYJfJfh1gt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgv8lOCTFcVIcmuK4KY6X4vgpTpDisBQnTHGiFCdOcZIUJ01xshQnT3GKFKdMcaoUp05xmhSnTXG6FKdPcYYUZ0xxphRnTnGWFGdNcbYUZ09xjhTnTHGuFOdOcZ4U501xvhTnT3GBFBdMcaEUF05xkRQXTXGxFBdPcYkUl0yRFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U9/kf7/1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6Y4PMURKY5McVSKz6U4OsUxKY5N8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcUiG42Q4NMNxMxwvw/EznCDDYRlOmOFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZLpkhGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvtn/DQzcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjTDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZ3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZjg8wxEZjsxwVIbPZTg6wzEZjs3w+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twSI7j5Dg0x3FzHC/H8XOcIMdhOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumSM5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npSjOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHJ3J8Msencnw6x2dyfDbH4TmOyHFkjqNyfC7H0TmOyXFsjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjkMKHKfAoQWOW+B4BY5f4AQFDitwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqcOECFylw0QIXK3DxApcocMkCKXCpApcucJkCly1wuQKXL3CFAlcscKUCVy5wlQJXLXC1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3LHCjAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAi3w5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8qcFBgUGBYYFRgXGBSYFpgVmBeYFFgWTBsyJAh1gU2BbYFdgX2Bd5d4D0F3lvgfQXeX+ADBT5Y4EMFPlzgIwU+WuBjBT5e4BMFPlngUwU+XeAzBT5b4PACRxQ4ssBRBT5X4OgCxxQ4tsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhJY5T4tASxy1xvBLHL3GCEoeVOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJi5W4eIlLlLhkiZS4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJJ5Z4UomWeHKJp5R4aomnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x7hLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8q8ekSnynx2RKHlziixJEljirxuRJHlzimHOrYEp8v8YUSXyzxpRJfLvGVEl8t8bUSX5/of7+AEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUiF41Q4tMJxKxyvwvErnKDCYRVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlkhFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5UoRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0VDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK7y7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wuEVjqhwZIWjKnyuwtEVjqlwbIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDahynxqE1jlvjeDWOX+MENQ6rccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGqlxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBqt8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqnFQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszUOr3FEjSNrHFXjczWOrnFMjWNrfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHNLgOA0ObXDcBsdrcPwGJ2hwWIMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSzZIg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1aIMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bu9u8J4G723wvgbvb/CBBh9s8KEGH27wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9tcHiDIxoc2eCoBp9rcHSDYxoc2+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+CQFsdpcWiL47Y4XovjtzhBi8NanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyRVpcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qUVbPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Why0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvDWxzR4sgWR7X/f19GtzimxbEtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+OSF+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf73f3k6HKfDoR2O2+F4HY7f4QQdDutwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA6P7vCYDo/t8LgOj+/whA5P7PCkDu3w5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+nw0g4v6/DyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDm/p8NYOb+vw9g7v6PDODu/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHQ7vcESHIzsc1eFzHY7ucEyHYzt8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfD/zoc0uM4PQ7tcdwex+tx/B4n6HFYjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI9L9kiPS/W4dI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/W4cY+b9Lhpj5v1uHmPW/S4ZY9b9bh1j9v0uG2P2/W4fY879Lhjjzv1uHOPu/S4a4+79bh7j3v0uGePe/W4d4/79Lhvj/v1uH+PB/R4YI8H9Xhwj4f0eGiPh/V4eI9H9Hhkj0f1eHSPx/R4bI/H9Xh8jyf0eGKPJ/Vojyf3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To/n9nhej+f3eEGPF/Z4UY8X93hJj5f2eFmPl/d4RY9X9nhVj1f3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V4+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7+7xnh7v7fG+Hu/v8YEeH+zxoR4f7vGRHh/t8bEeH+/xiR6f7PGpHp/u8Zken+1xeI8jehzZ46gen+txdI9jehzb/380nGPz2AcDZZM2RWrbdntq27Zt26dtatu23eb/s1HbRmobabjzzO7eb3Bn7n135uDrA/jGAL45gG8N4NsD+M4AvjuA7w3g+wP4wQB+OIAfDeDHA/jJAH46gJ8N4OcDOGIAvxjALwfwqwH8egC/GcBvB/C7Afx+AH8YwB8H8KcB/HkAfxnAXwfwtwH8fQD/GMA/B/CvAfx7AP8ZwH8HcOQA/jeAowZw9ACOGcCxAzhuAMcP4KAABwc4QYATBjgkwIkCnDjASQKcNMChAU4W4OQBThHglAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4MwBzhLgrAHOFuDsAc4R4JwBzhXg3AHOE+C8Ac4X4PwBLhDgggEuFODCAS4S4KIBLhbg4gEuEeCSAS4V4NIBLhMgAS4b4HIBLh/gCgGuGOBKAa4c4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHOApAZ4aoAGeFuDpAZ4R4LAAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQCfDnB4gAMBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBjgjwiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSA/wU4KsDRAY4JcGyA4wIcH+CgEAeHOEGIE4Y4JMSJQpw4xElCnDTEoSFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4TIiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhziKSGeGqIhnhbi6SGeEeKwEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw5xeIgDIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIY4I8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DXFkiP+FOCrE0SGOCXFsiONCHB/ioAgHRzhBhBNGOCTCiSKcOMJJIpw0wqERThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIRLhXh0hEuEyERLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBv/f5RDhxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRnhThyRGeEuGpERrhaRGeHuEZEQ6L8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QiHRzgQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hMxE+G+FzET4f4QsRvhjhSxG+HOErEb4a4WsRvh7hGxG+GeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxF+GuFnEX4e4YgIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCEdG+F+EoyIcHeGYCMdGOC7C8REOinFwjBPEOGGMQ2KcKMaJY0aO/79xaIyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxbh0jMvESIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SoynxmiMp8V4eoxnxDgsxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa/+3n0GDBl0f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HePwGAdiDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9jHBHjFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b48gY/4txVIyjYxwT49gYx8U4PsZBCQ5OcIIEJ0xwSIITJThxgpMkOGmCQxOcLMHJE5wiwSkTnCrBqROcJsFpE5wuwekTnCHBGROcKcGZE5wlwVkTnC3B2ROcI8E5E5wrwbkTnCfBeROcL8H5E1wgwQUTXCjBhRNcJMFFE1wswcUTXCLBJRNcKsGlE1wmQRJcNsHlElw+wRUSXDHBlRJcOcFVElw1wdUSXD3BNRJcM8G1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjwxwZMSPDnBUxI8NUETPC3B0xM8I8FhCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3g8AQHEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCbBZxN8LsHnE3whwRcTfCnBlxN8JcFXE3wtwdcTfCPBNxN8K8G3E3wnwXcTfC/B9xP8IMEPE/wowY8T/CTBTxP8LMHPExyR4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+DIBP9LcFSCoxMck+DYBMclOD7BQSkOTnGCFCdMcUiKE6U4cYqTpDhpikNTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJkVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5xVNSPDVFUzwtxdNTPCPFYSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4vAUB1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1MckeIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pviyBT/S3FUiqNTHJPi2BTHpTg+xUEZDs5wggwnzHBIhhNlOHGGk2Q4aYZDM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTNcIsMlM1wqw6UzXCZDMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDHDkzI8OcNTMjw1QzM8LcPTMzwjw2EZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neHwDAcyDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88zHJHhFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4cgM/8twVIajMxyT4dgMx2U4PsNBOQ7OcYIcJ8xxSI4T5ThxjpPkOGmOQ3OcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXNcKselc1wmR3JcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyPDnHU3I8NUdzPC3H03M8I8dhOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3j8BwHcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuyHDhr0v088m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e44gcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHEfm+F+Oo3IcneOYHMfmOC7H8TkOKnBwgRMUOGGBQwqcqMCJC5ykwEkLHFrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgUuWuBiBS5e4BIFLlngUgUuXeAyBVLgsgUuV+DyBa5Q4IoFrlTgygWuUuCqBa5W4OoFrlHgmgWuVeDaBa5T4LoFrlfg+gVuUOCGBW5U4MYFblLgpgVuVuDmBW5R4JYFblXg1gVuU+C2BW5X4PYF7lDgjgXuVODOBe5S4K4F7lbg7gXuUeCeBe5V4N4F7lPgvgXuV+D+BR5Q4IEFHlTgwQUeUuChBR5W4OEFHlHgkQUeVeDRBR5T4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQVa4GkFnl7gGQUOK/DMAs8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkChxc4UGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuCIAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ynw3wJHFvhfgaMKHF3gmALHFjiuwPEFDipxcIkTlDhhiUNKnKjEiUucpMRJSxxa4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiVS4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSWeVOLJJZ5S4qklWuJpJZ5e4hklDivxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKvHpEoeXOFBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+IzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iiBK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8SR5b4X4mjShxd4pgSx5Y4rsTxJQ6qcHCFE1Q4YYVDKpyowokrnKTCSSscWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeVzFi+KBBnlDhiRWeVOHJFZ5S4akVWuFpFZ5e4RkVDqvwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCodXOFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+EzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hiAq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8KR1b4X4WjKhxd4ZgKx1Y4rsLxFQ6qcXCNE9Q4YY1DapyoxolrnKTGSWscWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1UuOyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTWeUuOpNVrjaTWeXuMZNQ6r8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckan6rx6RqH1zhQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e44gav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8a/6rx7xr/qfHfGkfW+F+No2ocXeOYGsfWOK7G8TUOanBwgxM0OGGDQxqcqMGJG5ykwUkbHNrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2uBiDS7e4BINLtngUg0u3eAyDdLgsg0u1+DyDa7Q4IoNrtTgyg2u0uCqDa7W4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7U4MkNntLgqQ3a4GkNnt7gGQ0Oa/DMBs9q8OwGz2nw3AbPa/D8Bi9o8MIGL2rw4gYvafDSBi9r8PIGr2jwygavavDqBq9p8NoGr2vw+gZvaPDGBm9q8OYGb2nw1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGhzc40GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uCIBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNvhfg6MaHN3gmAbHNjiuwfENDmpxcIsTtDhhi0NanKjFiVucpMVJWxza4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lItLt3iMi3S4rItLjdmsMu3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7d4SountmiLp7V4eotntDisxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1sc3uJAi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lz7T4bIvPtfh8iy+0+GKLL7X4couvtPj/2Nhhr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBix+2+FGLH7f4SYuftvhZi5+3OKLFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xZEt/tfiqBZHtzimxbEtjvtfhxYHdTi4wwk6nLDDIR1O1OHEHU7S4aQdDu1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/oGDJo0CAP6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o8MQOT+rw5A5P6fDUDu3wtA5P7/CMDod1eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090+GSHT3X4dIfDOxzoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/vcESHX3T4ZYdfdfh1h990+G2H33X4fYc/dPhjhz91+HOHv3T4a4e/dfh7h390+GeHf3X4d4f/dPhvhyM7/K/DUR2O7nBMh2M7HNfh+A4H9Ti4xwl6nLDHIT1O1OPEPU7S46Q9Du1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx7Pjx4/frcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQeT+rx5B5P6fHUHu3xtB5P7/GMHof1eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/Dexzo8f8EAAD//9eYyt4=")
write$FUSE_OPEN(r0, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x20)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0)
mknod(&(0x7f0000000000)='./file3\x00', 0x8, 0x0)

2.601089423s ago: executing program 2 (id=847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0xfffd, 0x201000, @local, 0x13}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x10)

2.405696418s ago: executing program 2 (id=848):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
close(0x3)

2.33480191s ago: executing program 2 (id=849):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="0200", 0x2, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000140)="00000080", 0x4, 0x0)

2.33404586s ago: executing program 0 (id=850):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000841)

2.184001484s ago: executing program 2 (id=851):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)

2.103757466s ago: executing program 0 (id=854):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r2 = dup3(r1, r0, 0x80000)
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0)

1.896680681s ago: executing program 4 (id=855):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x2, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2db, @loopback, 0x1}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x6, @mcast2, 0x2}, 0x1c)
syz_emit_ethernet(0x9a, &(0x7f00000006c0)=ANY=[@ANYBLOB="5b685c7e778f09b16926e2b686dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e234e20"], 0x0)

1.821066033s ago: executing program 5 (id=856):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
close(r0)

1.664657727s ago: executing program 4 (id=857):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x5719, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x8fe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xe, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x59}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="14042bfdd9fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.55565659s ago: executing program 5 (id=858):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendto$packet(r0, &(0x7f0000000100)='?', 0x48, 0x40000c4, &(0x7f0000000540)={0xc9, 0xd, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

1.452281012s ago: executing program 4 (id=859):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000011c0)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4c50a6c84d5fc390}, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x68, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @local}, "7628c4294fbb9d5b"}}}}}, 0x32)

1.341488686s ago: executing program 5 (id=860):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r2=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}, 0xc)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1.077981432s ago: executing program 4 (id=861):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x50f, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x60000, 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)

1.025065874s ago: executing program 0 (id=862):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='apple,cd321x 0x3', 0x10) (async)

623.824154ms ago: executing program 3 (id=863):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x4000, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x42024, 0xbc85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0)

608.649404ms ago: executing program 4 (id=864):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)

605.896294ms ago: executing program 5 (id=874):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235})
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)
close_range(r0, 0xffffffffffffffff, 0x0)

545.033676ms ago: executing program 2 (id=865):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r1=>0x0})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r1, {0xffe0, 0xb}, {0x0, 0xfff1}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000)

450.893509ms ago: executing program 5 (id=866):
r0 = syz_io_uring_setup(0x7fb, &(0x7f0000000080)={0x0, 0x5d90, 0x800, 0x1, 0x3}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0xfffd)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x6, 0x0, <r4=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0xa75, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4d}}}, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000480)={0x2e, 0x4, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x12000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x1, 0x68, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x206}}}, 0x0)
io_uring_enter(r0, 0x317d, 0x5, 0x2, 0x0, 0x0)

330.786421ms ago: executing program 3 (id=867):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='md0\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/block/md0/md/array_size\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1024\x00', 0x4)

183.725705ms ago: executing program 5 (id=868):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000200), 0x8)
listen(r0, 0x1)
accept(r0, 0x0, 0x0)

171.074776ms ago: executing program 3 (id=869):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0xfffffffffffffffc)
syz_usb_connect$uac2(0x2, 0x9d, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000039c0)={&(0x7f0000001840)="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", &(0x7f0000002840)=""/4096, 0x0, &(0x7f0000003940)="4f98ccaf290ec92ee75326f35007644838daa19d4afb", 0x3}, 0x38)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3008810, &(0x7f0000000640)={[{@errors_remount}, {@debug}]}, 0x0, 0x526, &(0x7f0000001300)="$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")
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8)

94.369867ms ago: executing program 4 (id=870):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="2402bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}], 0x3)

0s ago: executing program 2 (id=871):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x2, 0x0, 0x2000, &(0x7f000007f000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   90.047779][ T4813] syz.3.166: attempt to access beyond end of device
[   90.047779][ T4813] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[   90.048223][ T4813] syz.3.166: attempt to access beyond end of device
[   90.048223][ T4813] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[   90.048714][   T27] audit: type=1800 audit(1785967660.399:4): pid=4813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.166" name="file1" dev="loop3" ino=1048608 res=0 errno=0
[   90.051843][ T4813] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[   90.051914][ T4813] exFAT-fs (loop3): Filesystem has been set read-only
[   90.086838][ T4813] exFAT-fs (loop3): hint_cluster is invalid (1)
[   90.127899][ T4813] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   90.128211][ T4813] exFAT-fs (loop3): error, failed to bmap (inode : ffff8880548f1b60 iblock : 9, err : -5)
[   90.129440][ T4813] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[   90.129463][ T4813] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[   90.177197][ T4316] usb 5-1: USB disconnect, device number 3
[   90.215695][ T4272] Bluetooth: hci0: command 0x0406 tx timeout
[   90.410254][ T4820] loop2: detected capacity change from 0 to 512
[   90.433959][ T4820] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   90.485195][ T4820] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.169: bad orphan inode 13
[   90.490296][ T4820] ext4_test_bit(bit=12, block=18) = 1
[   90.490315][ T4820] is_bad_inode(inode)=0
[   90.490323][ T4820] NEXT_ORPHAN(inode)=0
[   90.490331][ T4820] max_ino=32
[   90.490338][ T4820] i_nlink=1
[   90.490409][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   90.545035][ T4820] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   90.547948][ T4820] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.169: bg 0: block 248: padding at end of block bitmap is not set
[   90.550185][ T4820] Quota error (device loop2): write_blk: dquota write failed
[   90.604719][ T4820] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   90.604773][ T4820] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.169: Failed to acquire dquot type 1
[   90.697488][ T4824] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   90.697640][ T4824] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   90.697671][ T4824] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.169: Failed to acquire dquot type 1
[   90.876770][ T4281] EXT4-fs (loop2): unmounting filesystem.
[   90.934934][   T36] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[   90.935126][   T36] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1
[   91.096548][ T4285] Bluetooth: hci1: command 0x0406 tx timeout
[   91.096583][ T4285] Bluetooth: hci2: command 0x0406 tx timeout
[   91.176072][ T4272] Bluetooth: hci3: command 0x0406 tx timeout
[   91.176105][ T4272] Bluetooth: hci4: command 0x0406 tx timeout
[   91.234731][ T4833] capability: warning: `syz.3.173' uses 32-bit capabilities (legacy support in use)
[   91.368463][ T4837] loop4: detected capacity change from 0 to 128
[   91.386929][ T4837] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   91.391089][ T4837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.482849][ T4839] loop3: detected capacity change from 0 to 1024
[   91.483726][ T4839] EXT4-fs: Ignoring removed bh option
[   91.558912][ T4839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   91.990196][ T4280] EXT4-fs (loop3): unmounting filesystem.
[   92.295757][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout
[   93.150148][ T4885] loop4: detected capacity change from 0 to 128
[   93.352558][ T4885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   93.383923][ T4880] loop2: detected capacity change from 0 to 32768
[   93.406003][ T4885] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.138966][ T4880] syz.2.191 (4880) used greatest stack depth: 20656 bytes left
[   94.163992][ T4275] EXT4-fs (loop4): unmounting filesystem.
[   94.294195][ T4902] loop3: detected capacity change from 0 to 8192
[   94.368344][ T4908] loop4: detected capacity change from 0 to 512
[   94.929069][ T4285] Bluetooth: hci3: unexpected event for opcode 0x1407
[   95.162994][ T4926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.209'.
[   95.230716][ T4922] loop0: detected capacity change from 0 to 8192
[   95.573705][ T4932] Mass Storage Function, version: 2009/09/11
[   95.626650][ T4932] LUN: removable file: (no medium)
[   96.065825][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   96.264729][   T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   96.293451][   T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   96.317152][   T26] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[   96.325677][ T4952] loop3: detected capacity change from 0 to 512
[   96.334161][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   96.364622][   T26] usb 1-1: Product: syz
[   96.369364][   T26] usb 1-1: Manufacturer: syz
[   96.385581][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.399502][ T4952] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.221: inode has both inline data and extents flags
[   96.400965][   T26] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected
[   96.430240][ T4952] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.221: couldn't read orphan inode 15 (err -117)
[   96.473847][ T4952] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   96.523763][   T26] usb 1-1: iuu_phoenix converter now attached to ttyUSB0
[   96.570690][ T4280] EXT4-fs (loop3): unmounting filesystem.
[   96.595698][    T7] usb 3-1: Using ep0 maxpacket: 16
[   96.620331][    T7] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[   96.655715][    T7] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[   96.680161][    T7] usb 3-1: Product: syz
[   96.691368][   T26] usb 1-1: USB disconnect, device number 4
[   96.694809][    T7] usb 3-1: Manufacturer: syz
[   96.707919][    T7] usb 3-1: SerialNumber: syz
[   96.713985][   T26] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[   96.731586][    T7] usb 3-1: config 0 descriptor??
[   96.752615][   T26] iuu_phoenix 1-1:1.0: device disconnected
[   96.777186][    T7] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[   96.988561][    T7] usb 3-1: USB disconnect, device number 3
[   97.338571][ T4964] loop0: detected capacity change from 0 to 512
[   97.367141][ T4964] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   97.439211][ T4964] EXT4-fs (loop0): 1 truncate cleaned up
[   97.471567][ T4964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   97.560293][   T27] audit: type=1800 audit(1785967667.909:5): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.224" name="file1" dev="loop0" ino=15 res=0 errno=0
[   97.616217][ T4967] EXT4-fs (loop0): shut down requested (1)
[   97.790670][ T4271] EXT4-fs (loop0): unmounting filesystem.
[   97.839574][ T4969] loop2: detected capacity change from 0 to 4096
[   98.332864][ T4982] loop3: detected capacity change from 0 to 128
[   98.483132][ T4982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   98.522583][ T4982] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   98.915250][ T4280] EXT4-fs (loop3): unmounting filesystem.
[   99.013168][ T4993] loop0: detected capacity change from 0 to 1024
[   99.113719][ T4993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   99.135212][ T4993] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.326551][   T11] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 1)
[   99.374279][   T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   99.410432][   T11] EXT4-fs (loop0): This should not happen!! Data will be lost
[   99.410432][   T11] 
[   99.458686][ T4271] EXT4-fs (loop0): unmounting filesystem.
[   99.672048][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'.
[   99.909805][ T5018] loop4: detected capacity change from 0 to 16
[   99.972784][ T5018] erofs: (device loop4): mounted with root inode @ nid 36.
[  100.080068][ T5018] syz.4.245: attempt to access beyond end of device
[  100.080068][ T5018] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  100.117096][ T5018] syz.4.245: attempt to access beyond end of device
[  100.117096][ T5018] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  100.368704][ T5027] loop0: detected capacity change from 0 to 512
[  100.432286][ T5027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.588135][ T5027] EXT4-fs (loop0): 1 truncate cleaned up
[  100.620134][ T5027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  100.928669][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.946007][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.954992][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.963738][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.972058][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  101.000803][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.240575][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  101.392725][ T5105] loop6: detected capacity change from 0 to 8
[  101.560162][   T53] I/O error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[  101.610447][ T5105] Dev loop6: unable to read RDB block 8
[  101.681115][ T5105]  loop6: unable to read partition table
[  101.694673][ T5105] loop6: partition table beyond EOD, truncated
[  101.794029][ T5105] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  102.471222][ T5127] loop3: detected capacity change from 0 to 512
[  102.493169][ T4458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.512691][ T5127] EXT4-fs (loop3): Test dummy encryption mode enabled
[  102.561960][ T5127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.572508][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'.
[  102.613674][ T5127] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  102.625441][ T5130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.257'.
[  102.642498][ T5127] EXT4-fs (loop3): orphan cleanup on readonly fs
[  102.657550][ T5127] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.258: corrupted xattr entries
[  102.687669][ T5130] device ip6erspan0 entered promiscuous mode
[  102.698103][ T5127] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  102.721802][ T5127] EXT4-fs (loop3): 1 orphan inode deleted
[  102.760465][ T5127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  102.762971][ T4458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.013842][ T4458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.062704][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  103.095683][ T4285] Bluetooth: hci2: command 0x0409 tx timeout
[  103.139725][ T5141] vim2m vim2m.0: Removing vim2m
[  103.163307][ T4458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.244269][ T5141] vim2m vim2m.0: Device registered as /dev/video3
[  103.246354][ T5043] chnl_net:caif_netlink_parms(): no params data found
[  103.323871][ T5150] loop4: detected capacity change from 0 to 512
[  103.351859][ T5150] EXT4-fs: Ignoring removed oldalloc option
[  103.380194][ T5150] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  103.456033][ T5150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  103.484038][ T5155] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  103.486773][ T5150] EXT4-fs (loop4): orphan cleanup on readonly fs
[  103.584139][ T5150] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.265: bad orphan inode 267
[  103.605386][ T5150] EXT4-fs (loop4): Remounting filesystem read-only
[  103.619663][ T5150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  103.639411][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.672091][ T5043] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.686872][ T5043] device bridge_slave_0 entered promiscuous mode
[  103.711256][ T5150] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.265: dx entry: limit 0 != root limit 125
[  103.733726][ T5043] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.741575][ T5150] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.265: Corrupt directory, running e2fsck is recommended
[  103.786893][ T5043] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.831352][ T5043] device bridge_slave_1 entered promiscuous mode
[  103.933573][ T5043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.966528][ T5043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.981794][ T5170] loop0: detected capacity change from 0 to 128
[  104.035764][ T5170] FAT-fs (loop0): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1)
[  104.209154][ T5043] team0: Port device team_slave_0 added
[  104.282197][ T5043] team0: Port device team_slave_1 added
[  104.381260][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  104.482645][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.499448][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.595025][ T5043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.610457][ T5189] loop3: detected capacity change from 0 to 256
[  104.647686][ T5189] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  104.702666][ T5189] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  104.721125][ T5043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.740846][ T5043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.772234][ T5189] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  104.871720][ T5043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.105192][ T5205] loop4: detected capacity change from 0 to 1024
[  105.156507][ T5205] ext3: Unknown parameter 'nouser_xattr'
[  105.177206][ T4285] Bluetooth: hci2: command 0x041b tx timeout
[  105.492373][ T5217] loop4: detected capacity change from 0 to 1024
[  105.499345][ T5214] bond0: (slave bond_slave_0): Releasing backup interface
[  105.587302][ T5217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  105.636270][ T5043] device hsr_slave_0 entered promiscuous mode
[  105.643338][ T5043] device hsr_slave_1 entered promiscuous mode
[  105.652572][ T5043] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.661120][ T5043] Cannot create hsr debugfs directory
[  105.842356][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  105.916622][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  105.945042][ T4272] Bluetooth: hci5: unexpected event for opcode 0x1001
[  105.953123][ T4272] Bluetooth: hci5: unexpected event for opcode 0x1009
[  106.110037][    T7] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  106.137126][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.176924][    T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  106.225149][    T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.249962][    T7] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  106.270238][    T7] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  106.278829][    T7] usb 3-1: Product: syz
[  106.283020][    T7] usb 3-1: Manufacturer: syz
[  106.318711][    T7] cdc_wdm 3-1:1.0: skipping garbage
[  106.323967][    T7] cdc_wdm 3-1:1.0: skipping garbage
[  106.360261][    T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  106.375217][    T7] cdc_wdm 3-1:1.0: Unknown control protocol
[  106.500714][ T5241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'.
[  106.505813][ T5061] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  106.534133][ T5241] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.621121][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  106.621648][    T7] usb 3-1: USB disconnect, device number 4
[  106.628302][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  106.640088][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  106.651027][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.685867][ T5241] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.933558][ T5061] usb 4-1: unable to get BOS descriptor or descriptor too short
[  106.958598][ T5061] usb 4-1: unable to read config index 0 descriptor/start: -71
[  106.969328][ T5043] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  106.970981][ T5061] usb 4-1: can't read configurations, error -71
[  106.999204][ T5043] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  107.029617][ T5043] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  107.048664][ T5043] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  107.087243][ T4458] device hsr_slave_0 left promiscuous mode
[  107.094398][ T4458] device hsr_slave_1 left promiscuous mode
[  107.112546][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.124245][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.140791][ T4458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.149534][ T4458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.162711][ T4458] device bridge_slave_1 left promiscuous mode
[  107.172557][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.193922][ T4458] device bridge_slave_0 left promiscuous mode
[  107.200409][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.257577][ T4272] Bluetooth: hci2: command 0x040f tx timeout
[  107.298431][ T4458] device veth1_macvtap left promiscuous mode
[  107.312142][ T4458] device veth0_macvtap left promiscuous mode
[  107.318850][ T4458] device veth1_vlan left promiscuous mode
[  107.325013][ T4458] device veth0_vlan left promiscuous mode
[  107.475156][ T5265] loop5: detected capacity change from 0 to 7
[  107.493021][ T4688] Dev loop5: unable to read RDB block 7
[  107.502310][ T4688]  loop5: AHDI p1 p2 p3
[  107.510625][ T4688] loop5: partition table partially beyond EOD, truncated
[  107.521495][ T4688] loop5: p1 start 1818582900 is beyond EOD, truncated
[  107.529340][ T4688] loop5: p3 start 335544320 is beyond EOD, truncated
[  107.557899][ T5265] Dev loop5: unable to read RDB block 7
[  107.582373][ T5265]  loop5: AHDI p1 p2 p3
[  107.588181][ T5265] loop5: partition table partially beyond EOD, truncated
[  107.618016][ T5265] loop5: p1 start 1818582900 is beyond EOD, truncated
[  107.636560][ T5265] loop5: p3 start 335544320 is beyond EOD, truncated
[  107.979882][ T4285] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  108.123332][ T5286] loop4: detected capacity change from 0 to 128
[  108.135792][ T4318] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  108.209803][ T5286] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  108.252568][ T5286] hpfs: filesystem error: improperly stopped
[  108.272413][ T5286] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  108.306001][ T5286] hpfs: You really don't want any checks? You are crazy...
[  108.314032][ T5286] hpfs: Code page index out of array
[  108.325351][ T5286] hpfs: code page support is disabled
[  108.332123][ T5286] hpfs: hpfs_map_4sectors(): unaligned read
[  108.341582][ T4318] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  108.350157][ T5286] hpfs: hpfs_map_4sectors(): unaligned read
[  108.357437][ T4318] usb 3-1: config 0 has no interface number 0
[  108.365908][ T5286] hpfs: filesystem error: unable to find root dir
[  108.374472][ T4318] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  108.390693][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.429263][ T4318] usb 3-1: Product: syz
[  108.433485][ T4318] usb 3-1: Manufacturer: syz
[  108.465823][ T4318] usb 3-1: SerialNumber: syz
[  108.472577][ T4318] usb 3-1: config 0 descriptor??
[  108.692478][ T4458] team0 (unregistering): Port device team_slave_1 removed
[  108.748207][ T4458] team0 (unregistering): Port device team_slave_0 removed
[  108.781988][ T4318] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[  108.798573][ T4458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.808523][ T4318] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[  108.851307][ T4318] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[  108.870031][ T4318] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[  108.880770][ T4458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.899209][ T5294] loop2: detected capacity change from 0 to 8
[  108.907854][ T4318] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  108.961941][ T4318] usb 3-1: USB disconnect, device number 5
[  108.993950][ T4318] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  109.002730][ T5294] SQUASHFS error: Failed to read block 0x1000629: -5
[  109.013489][ T4318] keyspan 3-1:0.133: device disconnected
[  109.035758][ T5294] SQUASHFS error: Unable to read metadata cache entry [1000629]
[  109.053510][ T5294] SQUASHFS error: Unable to read directory block [1000629:1fff]
[  109.335636][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[  109.426071][ T4458] bond0 (unregistering): Released all slaves
[  109.857327][ T5043] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.931490][ T5043] 8021q: adding VLAN 0 to HW filter on device team0
[  109.958544][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  110.035898][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  110.063868][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.100395][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.137388][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.144575][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.197569][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.216422][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.239497][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.246689][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.288094][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  110.319567][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  110.370582][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.380360][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.391408][ T5331] syz.3.315 uses obsolete (PF_INET,SOCK_PACKET)
[  110.449553][ T5324] device bridge_slave_1 left promiscuous mode
[  110.495273][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.551320][ T5324] device bridge_slave_0 left promiscuous mode
[  110.572779][ T5324] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.780731][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.802957][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  110.839111][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  110.868712][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  110.889874][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  110.900606][ T5349] input: syz0 as /devices/virtual/input/input6
[  110.907965][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  110.927315][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  110.936378][ T4359] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.953698][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  110.982907][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.004156][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  111.052821][ T5043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  111.135582][ T4359] usb 5-1: Using ep0 maxpacket: 8
[  111.150267][ T4359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.214660][ T4359] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  111.268583][ T4359] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  111.324158][ T4359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.363808][ T4359] usb 5-1: config 0 descriptor??
[  111.393536][ T5361] syz.3.324 sent an empty control message without MSG_MORE.
[  111.534767][ T5367] CIFS: Attempting to mount \\127.0.0.1\share
[  111.793937][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.812419][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.832075][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.858166][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.870752][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.882499][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.894200][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.901805][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.909175][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.916514][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.925051][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.932425][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.939733][ T4359] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0
[  111.947025][ T4359] ryos 0003:1E7D:3138.0002: item fetching failed at offset 20/40
[  111.955382][ T4359] ryos 0003:1E7D:3138.0002: parse failed
[  111.963218][ T4359] ryos: probe of 0003:1E7D:3138.0002 failed with error -22
[  111.992485][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.012328][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.029368][ T5062] usb 5-1: USB disconnect, device number 4
[  112.044308][ T5043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.366460][ T5367] CIFS: VFS: cifs_mount failed w/return code = -112
[  112.381372][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[  112.395587][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[  112.429136][ T5401] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.438457][ T5401] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.447229][ T5401] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.456049][ T5401] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.517178][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[  112.540820][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[  112.579658][ T5404] loop2: detected capacity change from 0 to 512
[  112.600797][ T5401] Zero length message leads to an empty skb
[  112.605231][ T5404] EXT4-fs: Ignoring removed nobh option
[  112.672726][ T5404] EXT4-fs: Ignoring removed mblk_io_submit option
[  112.720840][ T5404] EXT4-fs (loop2): orphan cleanup on readonly fs
[  112.763686][ T5411] loop4: detected capacity change from 0 to 256
[  112.774895][ T5404] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  112.870493][ T5404] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.332: attempt to clear invalid blocks 2 len 1
[  112.976482][ T5404] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  113.049885][ T5404] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.332: invalid indirect mapped block 1819239214 (level 0)
[  113.092458][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.122450][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.155544][ T5404] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.332: invalid indirect mapped block 1819239214 (level 1)
[  113.213938][ T5043] device veth0_vlan entered promiscuous mode
[  113.259065][ T5404] EXT4-fs (loop2): 1 truncate cleaned up
[  113.270812][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.274983][ T5404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  113.292024][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.299531][ T5424] loop0: detected capacity change from 0 to 1024
[  113.339386][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.433103][ T5084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.488750][ T5043] device veth1_vlan entered promiscuous mode
[  113.548575][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  113.621444][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.633496][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  113.716343][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.738537][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.805783][ T5043] device veth0_macvtap entered promiscuous mode
[  113.836803][ T5043] device veth1_macvtap entered promiscuous mode
[  113.927490][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.965635][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.982989][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.042936][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.085316][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.115538][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.125536][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.155575][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.182201][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.215296][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  114.237373][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.263082][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  114.302299][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.344689][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.375515][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.411390][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.474429][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.503624][ T5043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.521884][ T5043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.543412][ T5043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.571437][ T5043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.595938][ T5043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.604888][ T5043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.655614][ T5043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.677254][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.706425][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.011635][ T5092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.026378][ T5092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.083059][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  115.108383][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.191461][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.234458][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  115.298797][ T5481] ALSA: seq fatal error: cannot create timer (-22)
[  115.478571][ T4318] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.686058][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  115.705733][ T4318] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  115.708682][ T5494] loop4: detected capacity change from 0 to 4096
[  115.738258][ T4318] usb 3-1: config 0 has no interface number 0
[  115.758059][ T4318] usb 3-1: config 0 interface 184 has no altsetting 0
[  115.800820][ T4318] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  115.846055][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.864361][ T4318] usb 3-1: Product: syz
[  115.869828][ T4318] usb 3-1: Manufacturer: syz
[  115.878284][ T4318] usb 3-1: SerialNumber: syz
[  115.884532][ T5494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  115.890160][ T4318] usb 3-1: config 0 descriptor??
[  115.903995][ T4318] smsc75xx v1.0.0
[  116.016168][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  116.075327][ T5512] loop3: detected capacity change from 0 to 1024
[  116.432890][ T5522] netlink: 14 bytes leftover after parsing attributes in process `syz.5.367'.
[  116.513220][ T5524] loop4: detected capacity change from 0 to 128
[  116.570486][ T5524] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  116.620176][ T5524] hpfs: filesystem error: improperly stopped
[  116.657937][ T5524] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  116.684331][ T5524] hpfs: You really don't want any checks? You are crazy...
[  116.713447][ T5524] hpfs: Code page index out of array
[  116.731416][ T5524] hpfs: code page support is disabled
[  116.764145][ T5524] hpfs: hpfs_map_4sectors(): unaligned read
[  116.827139][ T5524] hpfs: hpfs_map_4sectors(): unaligned read
[  116.855910][ T5524] hpfs: filesystem error: unable to find root dir
[  117.130084][ T4318] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  117.148847][ T4318] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  117.204288][ T4318] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  117.244871][ T4318] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  117.291197][ T4318] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  117.319934][ T4318] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  117.360922][ T4318] smsc75xx: probe of 3-1:0.184 failed with error -71
[  117.397136][ T4318] usb 3-1: USB disconnect, device number 6
[  117.597914][ T5061] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  117.795584][ T5061] usb 5-1: Using ep0 maxpacket: 32
[  117.800980][ T5554] gadgetfs: bound to dummy_udc driver
[  117.802349][ T5061] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  117.870932][ T5061] usb 5-1: config 0 has no interface number 0
[  117.890426][ T5061] usb 5-1: config 0 interface 12 has no altsetting 0
[  117.914933][ T5061] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  117.945121][ T5061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.996640][ T5061] usb 5-1: Product: syz
[  118.011181][ T5061] usb 5-1: Manufacturer: syz
[  118.036601][ T5061] usb 5-1: SerialNumber: syz
[  118.063472][ T5061] usb 5-1: config 0 descriptor??
[  118.075897][ T5575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'.
[  119.311880][ T5061] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  119.322349][ T5061] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  119.339349][ T5061] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  119.355755][ T5061] f81534: probe of 5-1:0.12 failed with error -71
[  119.377704][ T5061] usb 5-1: USB disconnect, device number 5
[  119.527101][ T5621] loop3: detected capacity change from 0 to 512
[  119.571665][ T5621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  119.647791][ T5621] EXT4-fs (loop3): 1 truncate cleaned up
[  119.664594][ T5621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  119.938089][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  120.127643][ T5638] loop4: detected capacity change from 0 to 2048
[  120.228322][ T5638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  120.365210][ T5649] loop3: detected capacity change from 0 to 128
[  120.398609][ T5649] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  120.460542][ T5615] loop2: detected capacity change from 0 to 40427
[  120.472755][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  120.575033][ T5615] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  120.594366][ T5615] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  120.688512][ T5615] F2FS-fs (loop2): invalid crc value
[  120.745245][ T5615] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  120.770246][ T5666] loop5: detected capacity change from 0 to 1024
[  120.956850][ T4318] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  121.014492][ T5615] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  121.024409][ T5615] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  121.177408][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.189076][   T27] audit: type=1800 audit(1785967691.539:6): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.393" name="bus" dev="loop2" ino=10 res=0 errno=0
[  121.205528][ T4318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.270636][ T4318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  121.294281][ T4318] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  121.314571][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.349917][ T4318] usb 1-1: config 0 descriptor??
[  121.383478][ T4281] syz-executor: attempt to access beyond end of device
[  121.383478][ T4281] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.505835][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  121.727406][    T7] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  121.746090][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.771017][ T4318] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  121.806380][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.828952][ T4318] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  121.842683][ T5673] loop5: detected capacity change from 0 to 32768
[  121.849363][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  121.909008][    T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  121.923206][ T5673] JBD2: Ignoring recovery information on journal
[  121.941514][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.960480][    T7] usb 5-1: config 0 descriptor??
[  122.089164][ T5673] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  122.232875][   T27] audit: type=1804 audit(1785967692.579:7): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.411" name="/newroot/15/file1/bus" dev="loop5" ino=17059 res=1 errno=0
[  122.317180][ T5673] (syz.5.411,5673,0):ocfs2_get_clusters:606 ERROR: status = -34
[  122.351245][ T5673] (syz.5.411,5673,0):ocfs2_reflink_remap_extent:4534 ERROR: status = -34
[  122.387153][ T5673] (syz.5.411,5673,0):ocfs2_reflink_remap_blocks:4693 ERROR: status = -34
[  122.408946][    T7] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[  122.447729][    T7] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  122.452678][ T5673] (syz.5.411,5673,1):ocfs2_remap_file_range:2710 ERROR: status = -34
[  122.504307][    T7] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  122.618023][ T5043] ocfs2: Unmounting device (7,5) on (node local)
[  123.112296][ T4318] usb 5-1: USB disconnect, device number 6
[  123.303418][ T5706] loop5: detected capacity change from 0 to 8
[  123.339262][ T5706] unable to read xattr id index table
[  123.690159][ T5061] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  123.891903][ T5061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.911074][ T5061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.935564][ T5061] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  123.960582][ T4313] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  123.965575][ T5061] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  123.985616][ T5061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.012135][ T5061] usb 6-1: config 0 descriptor??
[  124.145602][ T4313] usb 5-1: Using ep0 maxpacket: 16
[  124.159881][ T4313] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  124.169008][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.182049][ T4313] usb 5-1: Product: syz
[  124.186607][ T4313] usb 5-1: Manufacturer: syz
[  124.191231][ T4313] usb 5-1: SerialNumber: syz
[  124.197641][ T4313] usb 5-1: config 0 descriptor??
[  124.205283][ T4313] usb 5-1: selecting invalid altsetting 1
[  124.211209][ T4313] technisat-usb2: could not set alternate setting to 0
[  124.255598][    T7] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[  124.268072][    T7] usb 1-1: device reset changed ep0 maxpacket size!
[  124.278875][   T14] usb 1-1: USB disconnect, device number 5
[  124.410777][ T4313] technisat-usb2: firmware version: 0.0
[  124.416450][ T4313] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  124.428178][ T5061] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  124.445613][   T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  124.464308][ T5061] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  124.645683][   T14] usb 1-1: Using ep0 maxpacket: 32
[  124.658572][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.679876][   T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.714017][   T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  124.724658][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.740222][   T14] usb 1-1: config 0 descriptor??
[  124.763015][   T14] hub 1-1:0.0: USB hub found
[  124.785636][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.793173][ T5061] usb 6-1: USB disconnect, device number 2
[  124.821562][ T4313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.834070][ T4313] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[  124.844183][ T4313] usb 5-1: media controller created
[  124.850984][ T4313] technisat-usb2: i2c-error: out failed 53 = -22
[  124.858176][ T4313] dvb-usb: MAC address reading failed.
[  124.875621][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.960085][   T14] hub 1-1:0.0: 1 port detected
[  124.997215][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.016783][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.020153][ T5720] technisat-usb2: i2c-error: out failed 00 = -22
[  125.027123][ T4313] DVB: Unable to find symbol stv090x_attach()
[  125.045206][    T7] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  125.059320][ T4313] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[  125.068650][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.103465][    T7] usb 4-1: config 0 descriptor??
[  125.165882][ T4313] rc_core: IR keymap rc-technisat-usb2 not found
[  125.177305][ T4313] Registered IR keymap rc-empty
[  125.186223][ T4313] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  125.198643][ T4313] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8
[  125.221863][ T4313] dvb-usb: schedule remote query interval to 100 msecs.
[  125.241903][ T4313] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[  125.289603][ T4313] usb 5-1: USB disconnect, device number 7
[  125.453376][ T4313] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[  125.521614][    T7] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  125.556331][    T7] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  125.605612][    T7] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  125.613105][    T7] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  125.635552][   T14] hub 1-1:0.0: activate --> -90
[  125.657712][    T7] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  125.675269][    T7] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  126.044453][ T5061] usb 1-1: USB disconnect, device number 6
[  126.091960][ T5775] loop4: detected capacity change from 0 to 256
[  126.150964][ T5775] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  126.165019][    T7] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (3), disabling calibration.
[  126.185568][    T7] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (4), disabling calibration.
[  126.245683][    T7] playstation 0003:054C:0DF2.0006: Invalid gyro calibration data for axis (5), disabling calibration.
[  126.259337][ T5775] exFAT-fs (loop4): hint_cluster is invalid (17)
[  126.276831][    T7] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (0), disabling calibration.
[  126.291703][    T7] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (1), disabling calibration.
[  126.331743][    T7] playstation 0003:054C:0DF2.0006: Invalid accelerometer calibration data for axis (2), disabling calibration.
[  126.367125][    T7] input: HID 054c:0df2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0006/input/input9
[  126.502034][    T7] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0006/input/input10
[  126.542328][ T5785] loop2: detected capacity change from 0 to 512
[  126.554146][    T7] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0006/input/input11
[  126.594266][ T5785] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  126.618032][    T7] playstation 0003:054C:0DF2.0006: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000
[  126.634989][    T7] usb 4-1: USB disconnect, device number 5
[  126.674746][ T5785] System zones: 0-2, 18-18, 34-35
[  126.825900][ T5785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  126.834890][ T5785] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.107975][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  127.177498][ T5799] fido_id[5799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  127.354875][ T5783] loop5: detected capacity change from 0 to 32768
[  127.414094][ T5783] (syz.5.446,5783,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.483936][ T5783] (syz.5.446,5783,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.558906][ T5783] (syz.5.446,5783,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  127.689050][ T5783] JBD2: Ignoring recovery information on journal
[  127.911822][ T5783] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  128.065372][ T5783] (syz.5.446,5783,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[  128.104818][ T5783] (syz.5.446,5783,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[  128.195943][ T5783] (syz.5.446,5783,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  128.204991][ T5783] (syz.5.446,5783,1):ocfs2_quota_read:201 ERROR: status = -5
[  128.300721][ T5783] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 1
[  128.355327][ T5783] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 16877
[  128.409863][ T5783] (syz.5.446,5783,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  128.489414][ T5828] (syz.5.446,5828,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[  128.577507][ T5828] (syz.5.446,5828,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[  128.621396][ T5828] (syz.5.446,5828,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  128.645919][ T5828] (syz.5.446,5828,1):ocfs2_quota_read:201 ERROR: status = -5
[  128.673704][ T5828] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 1
[  128.709652][ T5851] gadgetfs: bound to dummy_udc driver
[  128.719757][ T5828] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  128.757615][ T5828] (syz.5.446,5828,1):ocfs2_acquire_dquot:878 ERROR: status = -5
[  128.802142][ T5828] (syz.5.446,5828,1):ocfs2_mknod:314 ERROR: status = -5
[  128.811223][ T5828] (syz.5.446,5828,1):ocfs2_mknod:502 ERROR: status = -5
[  128.828436][ T5828] (syz.5.446,5828,1):ocfs2_mkdir:659 ERROR: status = -5
[  128.866566][   T27] audit: type=1326 audit(1785967699.214:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.3.463" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefb919e0d9 code=0x0
[  128.967571][ T5043] ocfs2: Unmounting device (7,5) on (node local)
[  129.158599][ T5859] loop5: detected capacity change from 0 to 512
[  129.181026][ T5859] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.193544][ T5859] EXT4-fs: inline encryption not supported
[  129.213177][ T5843] loop4: detected capacity change from 0 to 32768
[  129.214620][ T5859] EXT4-fs: Conflicting test_dummy_encryption options
[  129.290325][ T5843] XFS (loop4): Mounting V5 Filesystem
[  129.359735][ T5843] XFS (loop4): Ending clean mount
[  129.374069][ T5859] loop5: detected capacity change from 0 to 2048
[  129.421561][ T5859] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  129.472442][ T5859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.583684][ T4275] XFS (loop4): Unmounting Filesystem
[  129.855392][ T5861] loop2: detected capacity change from 0 to 32768
[  129.917641][ T5861] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.466 (5861)
[  130.018992][ T5861] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  130.041042][ T5861] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  130.088658][ T5861] BTRFS info (device loop2): using free space tree
[  130.273839][ T5861] BTRFS info (device loop2): enabling ssd optimizations
[  130.385593][ T5061] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  130.398681][   T27] audit: type=1800 audit(1785967700.754:9): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.466" name="file1" dev="loop2" ino=260 res=0 errno=0
[  130.575567][ T4359] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  130.586631][ T5061] usb 4-1: Using ep0 maxpacket: 16
[  130.594764][ T5061] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  130.630524][ T5061] usb 4-1: config 0 has no interface number 0
[  130.650297][ T5061] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9
[  130.676649][ T5061] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024
[  130.714500][ T5061] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  130.739575][ T5061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.754182][ T4281] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  130.765570][ T5914] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004ÿÿ
[  130.777562][ T5061] usb 4-1: config 0 descriptor??
[  130.784055][ T5882] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  130.801472][ T4359] usb 1-1: Using ep0 maxpacket: 16
[  130.810070][ T4359] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.852037][ T4359] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.876826][ T4359] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  130.896298][ T4359] usb 1-1: config 0 interface 0 has no altsetting 0
[  130.907114][ T4359] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  130.926616][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.982356][ T4359] usb 1-1: config 0 descriptor??
[  131.455299][ T5061] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0007/input/input12
[  131.469301][ T5907] loop0: detected capacity change from 0 to 1024
[  131.513330][ T5907] hfsplus: unable to find HFS+ superblock
[  131.543620][ T4359] hid (null): unknown global tag 0xe
[  131.556507][ T4359] hid (null): invalid report_count 13888
[  131.562592][ T4359] hid (null): report_id 1265538985 is invalid
[  131.584885][ T5061] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0007/input/input13
[  131.670124][ T5061] uclogic 0003:28BD:0071.0007: input,hiddev0,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1
[  131.775760][ T5061] usb 4-1: USB disconnect, device number 6
[  131.839371][ T5929] usb 1-1: USB disconnect, device number 7
[  132.026603][ T5941] fido_id[5941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  132.327729][ T5955] loop3: detected capacity change from 0 to 1024
[  132.350566][ T5955] hfsplus: uid requires an argument
[  132.358914][ T5955] hfsplus: unable to parse mount options
[  132.778679][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.785149][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.231495][ T5987] loop5: detected capacity change from 0 to 4096
[  133.270448][ T5987] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  133.499141][ T5043] EXT4-fs (loop5): unmounting filesystem.
[  133.752896][ T6007] loop3: detected capacity change from 0 to 8192
[  133.793769][ T6007] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.988755][ T6019] input: syz1 as /devices/virtual/input/input14
[  134.115645][ T4313] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  134.149028][ T6023] netlink: 204 bytes leftover after parsing attributes in process `syz.2.500'.
[  134.196196][ T6023] netlink: 232 bytes leftover after parsing attributes in process `syz.2.500'.
[  134.301138][ T4313] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.322037][ T4313] usb 6-1: config 0 has no interfaces?
[  134.345537][ T4313] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  134.392795][ T4313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.419012][ T4313] usb 6-1: config 0 descriptor??
[  134.550482][ T6035] loop2: detected capacity change from 0 to 2048
[  134.565782][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'.
[  134.610781][ T6035] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  134.709535][ T6035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.848406][ T4313] usb 6-1: USB disconnect, device number 3
[  134.850147][ T6045] loop0: detected capacity change from 0 to 256
[  135.077370][ T6054] binder: 6053:6054 ioctl c0306201 200000000180 returned -14
[  135.481392][ T6063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'.
[  135.567914][ T6065] loop3: detected capacity change from 0 to 4096
[  135.638645][ T6028] loop4: detected capacity change from 0 to 40427
[  135.700039][ T6028] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  135.719967][ T6070] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.761198][ T6028] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  135.859930][ T6028] F2FS-fs (loop4): invalid crc value
[  135.885636][ T6065] loop3: detected capacity change from 4096 to 0
[  135.909595][ T6028] F2FS-fs (loop4): Found nat_bits in checkpoint
[  135.918360][ T5092] loop: Write error at byte offset 9223372036856868863, length 1024.
[  135.949409][    C0] I/O error, dev loop3, sector 4088 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  135.959195][    C0] I/O error, dev loop3, sector 4088 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  135.969797][    C0] Buffer I/O error on dev loop3, logical block 2044, lost sync page write
[  135.978367][ T6074] NILFS (loop3): unable to write superblock: err=-5
[  135.991044][ T6080] netlink: 1355 bytes leftover after parsing attributes in process `syz.5.517'.
[  136.054410][ T4298] loop: Write error at byte offset 9223372036854776831, length 1024.
[  136.098566][    C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  136.108175][    C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  136.117578][    C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[  136.125948][ T6074] NILFS (loop3): unable to write superblock: err=-5
[  136.237680][ T5092] loop: Write error at byte offset 9223372036854843391, length 1024.
[  136.246483][ T6028] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  136.258898][ T6028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  136.291509][    C0] I/O error, dev loop3, sector 132 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  136.301389][ T6070] NILFS (loop3): I/O error writing log (start-blocknr=66, block-count=12) in segment 1
[  136.364643][ T6090] loop5: detected capacity change from 0 to 256
[  136.410280][ T6028] syz.4.502: attempt to access beyond end of device
[  136.410280][ T6028] loop4: rw=34817, sector=77824, nr_sectors = 16 limit=40427
[  136.439811][ T6090] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  136.607400][ T5080] loop: Write error at byte offset 9223372036854906879, length 1024.
[  136.634936][    C1] I/O error, dev loop3, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  136.646227][ T6070] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  136.663887][ T5075] loop: Write error at byte offset 9223372036854906879, length 1024.
[  136.712983][    C0] I/O error, dev loop3, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  136.722756][ T6070] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  136.774270][ T5080] loop: Write error at byte offset 9223372036854906879, length 1024.
[  136.788580][    C0] I/O error, dev loop3, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  136.798575][ T6070] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  136.820434][    T9] loop: Write error at byte offset 9223372036854906879, length 1024.
[  136.831407][    C0] I/O error, dev loop3, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  136.841569][ T6070] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  136.880631][    T9] loop: Write error at byte offset 9223372036854906879, length 1024.
[  136.896521][    C0] I/O error, dev loop3, sector 256 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  136.906231][ T6070] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  136.929978][ T5080] loop: Write error at byte offset 9223372036854906879, length 1024.
[  136.945652][ T6070] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  136.971536][    T9] loop: Write error at byte offset 9223372036854906879, length 1024.
[  137.000333][ T4280] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  137.015123][ T4280] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  137.047805][ T4280] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  137.072153][ T4280] NILFS (loop3): I/O error writing log (start-blocknr=128, block-count=14) in segment 2
[  137.105841][ T4280] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  137.127260][    C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[  137.135587][ T4280] NILFS (loop3): unable to write superblock: err=-5
[  137.324698][ T6112] syzkaller0: tun_chr_ioctl cmd 1074025676
[  137.334845][ T6112] syzkaller0: owner set to 0
[  149.347012][ T6206] netlink: 27 bytes leftover after parsing attributes in process `syz.2.528'.
[  149.789146][ T6214] loop5: detected capacity change from 0 to 4096
[  149.889291][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.901850][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.912269][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.921012][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.929080][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  149.937487][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.123826][ T6223] kvm: apic: phys broadcast and lowest prio
[  150.490105][ T6231] file system registered
[  150.495336][ T6230] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer.
[  150.908925][ T6219] chnl_net:caif_netlink_parms(): no params data found
[  150.964625][ T6242] Invalid option length (1047276) for dns_resolver key
[  151.128962][ T6249] binder: 6248:6249 ioctl c0306201 2000000003c0 returned -14
[  151.159510][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.166767][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.187228][ T6219] device bridge_slave_0 entered promiscuous mode
[  151.231759][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.316255][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.338194][ T6219] device bridge_slave_1 entered promiscuous mode
[  151.412687][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.454640][ T6259] "syz.2.547" (6259) uses obsolete ecb(arc4) skcipher
[  151.468457][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.553004][ T6238] loop0: detected capacity change from 0 to 32768
[  151.620707][ T6219] team0: Port device team_slave_0 added
[  151.667282][ T6238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.538 (6238)
[  151.685292][ T6219] team0: Port device team_slave_1 added
[  151.739487][ T6238] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.777819][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.789963][ T6238] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  151.821026][ T6238] BTRFS info (device loop0): setting nodatacow, compression disabled
[  151.845906][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.853105][ T6238] BTRFS info (device loop0): setting datasum, datacow enabled
[  151.953254][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.973924][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.981865][ T4272] Bluetooth: hci3: command 0x0409 tx timeout
[  151.996234][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.010162][ T6238] BTRFS info (device loop0): turning off barriers
[  152.029328][ T6238] BTRFS info (device loop0): enabling ssd optimizations
[  152.036852][ T6238] BTRFS info (device loop0): using spread ssd allocation scheme
[  152.044596][ T6238] BTRFS info (device loop0): turning on sync discard
[  152.051489][ T6238] BTRFS info (device loop0): setting nodatacow, compression disabled
[  152.059703][ T6238] BTRFS info (device loop0): not using ssd optimizations
[  152.066856][ T6238] BTRFS info (device loop0): not using spread ssd allocation scheme
[  152.074958][ T6238] BTRFS info (device loop0): using free space tree
[  152.113852][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.348325][ T6219] device hsr_slave_0 entered promiscuous mode
[  152.381485][ T6219] device hsr_slave_1 entered promiscuous mode
[  152.788773][ T4271] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  153.293952][ T6219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.496128][ T6312] netlink: 'syz.5.560': attribute type 11 has an invalid length.
[  153.507988][ T6219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.590534][ T6317] loop0: detected capacity change from 0 to 128
[  153.604807][ T6317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  153.619749][ T6317] System zones: 1-3, 19-19, 35-36
[  153.652084][ T6317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  153.668174][ T6219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.684068][ T6317] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  153.794325][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  153.820251][ T6323] loop5: detected capacity change from 0 to 1024
[  153.888130][ T6219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.992364][ T6323] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  154.055956][ T4272] Bluetooth: hci3: command 0x041b tx timeout
[  154.121627][ T6219] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  154.146927][ T6219] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  154.157769][ T6219] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  154.167806][ T6219] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  154.178436][ T5043] EXT4-fs (loop5): unmounting filesystem.
[  154.427885][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.487006][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.510929][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.553845][ T6219] 8021q: adding VLAN 0 to HW filter on device team0
[  154.564382][ T6346] loop5: detected capacity change from 0 to 512
[  154.580555][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.596845][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.625646][ T4316] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  154.655129][ T6346] EXT4-fs warning (device loop5): dx_probe:869: inode #2: comm syz.5.572: Unimplemented hash flags: 0x0001
[  154.688271][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.695418][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.723139][ T6346] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.572: Corrupt directory, running e2fsck is recommended
[  154.728495][ T6337] loop4: detected capacity change from 0 to 32768
[  154.743778][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  154.763459][ T6346] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  154.772043][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.781265][ T6346] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.572: corrupted in-inode xattr
[  154.794039][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.795689][ T6337]  loop4: p1 p3 < >
[  154.811384][ T6346] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.572: couldn't read orphan inode 15 (err -117)
[  154.823292][ T4316] usb 1-1: Using ep0 maxpacket: 16
[  154.831773][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  154.848032][ T4316] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  154.865729][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.872873][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.880410][ T6346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  154.896259][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.905027][ T4316] usb 1-1: Product: syz
[  154.931304][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.939524][ T4316] usb 1-1: Manufacturer: syz
[  154.946307][ T6346] EXT4-fs (loop5): shut down requested (2)
[  154.953135][ T6346] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.572: directory missing '.'
[  154.973793][ T4316] usb 1-1: SerialNumber: syz
[  154.980533][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.011666][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.020911][ T4316] usb 1-1: config 0 descriptor??
[  155.056275][ T4316] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  155.073872][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.107826][ T4316] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  155.116078][ T5043] EXT4-fs (loop5): unmounting filesystem.
[  155.132848][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.168055][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.192276][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.251061][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.269569][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.290311][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.312480][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.348476][ T6331] udevd[6331]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  155.361331][ T6219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.362357][ T6213] udevd[6213]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  155.539297][ T6349] loop2: detected capacity change from 0 to 32768
[  155.586625][ T6349] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  155.603123][ T6349] JBD2: Ignoring recovery information on journal
[  155.646064][ T4316] em28xx 1-1:0.0: chip ID is em2874
[  155.648684][ T6303] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  155.670778][ T6349] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  155.844784][ T6349] syz.2.573 (6349) used greatest stack depth: 19200 bytes left
[  155.853504][ T6303] usb 6-1: Using ep0 maxpacket: 16
[  155.871992][ T4281] ocfs2: Unmounting device (7,2) on (node local)
[  155.879554][ T6303] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.931029][ T6303] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.988398][ T6303] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  156.017952][ T6303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.048956][ T6303] usb 6-1: Product: syz
[  156.053181][ T6303] usb 6-1: Manufacturer: syz
[  156.065951][ T6303] usb 6-1: SerialNumber: syz
[  156.119914][ T4316] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  156.131116][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.139413][ T4272] Bluetooth: hci3: command 0x040f tx timeout
[  156.145792][ T4316] em28xx 1-1:0.0: board has no eeprom
[  156.165753][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.182399][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.221149][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.231138][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.247573][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.266756][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.287541][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.305572][ T4316] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  156.316208][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.328662][ T6219] device veth0_vlan entered promiscuous mode
[  156.330955][ T4316] em28xx 1-1:0.0: dvb set to bulk mode.
[  156.337942][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'.
[  156.350173][ T4359] em28xx 1-1:0.0: Binding DVB extension
[  156.369463][ T6371] device netdevsim0 entered promiscuous mode
[  156.374739][ T4316] usb 1-1: USB disconnect, device number 8
[  156.396102][ T4316] em28xx 1-1:0.0: Disconnecting em28xx
[  156.408021][ T6371] device gretap0 entered promiscuous mode
[  156.429087][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'.
[  156.508480][ T6219] device veth1_vlan entered promiscuous mode
[  156.541169][ T4359] em28xx 1-1:0.0: Registering input extension
[  156.620075][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  156.643174][ T6303] usb 6-1: USB disconnect, device number 4
[  156.655668][ T4359] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  156.662233][ T4359] Registered IR keymap rc-empty
[  156.667935][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  156.686420][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  156.710874][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  156.725245][ T6219] device veth0_macvtap entered promiscuous mode
[  156.764514][ T6219] device veth1_macvtap entered promiscuous mode
[  156.766402][ T4359] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  156.785296][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  156.798612][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  156.814435][ T4359] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15
[  156.844296][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.880128][ T4359] em28xx 1-1:0.0: Input extension successfully initialized
[  156.895717][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.900993][ T6380] loop0: detected capacity change from 0 to 128
[  156.926548][ T4316] em28xx 1-1:0.0: Closing input extension
[  156.932833][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.957883][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.068093][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.104872][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.171078][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.215639][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.244927][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.260740][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.283432][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.328387][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.383391][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.411810][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.446196][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.472552][ T4316] em28xx 1-1:0.0: Freeing device
[  157.476691][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.529422][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.559427][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.579103][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.598552][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.621785][ T6219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.645873][ T6219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.650965][ T6386] loop2: detected capacity change from 0 to 32768
[  157.667937][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.675288][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  157.748849][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  157.786991][ T6219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.812137][ T6219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.824023][ T6219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.850128][ T6219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.871785][ T6386] jfs_rmdir: dtDelete returned -2
[  158.140717][ T6395] loop5: detected capacity change from 0 to 512
[  158.143873][ T4458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.188020][ T4458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.209877][ T6398] loop2: detected capacity change from 0 to 256
[  158.216955][ T4285] Bluetooth: hci3: command 0x0419 tx timeout
[  158.235289][ T6395] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  158.272738][ T6395] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  158.284018][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  158.417257][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.436356][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.490978][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  158.542474][ T6395] EXT4-fs warning (device loop5): verify_group_input:169: Last group not full
[  158.595715][ T4316] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  158.759402][ T6405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'.
[  158.766808][ T5043] EXT4-fs (loop5): unmounting filesystem.
[  158.823234][ T4316] usb 3-1: Using ep0 maxpacket: 16
[  158.843586][ T4316] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.895614][ T4316] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.919983][ T6409] loop4: detected capacity change from 0 to 256
[  158.943034][ T4316] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  158.969541][ T6409] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  158.985603][ T4316] usb 3-1: config 0 interface 0 has no altsetting 0
[  159.002619][ T4316] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  159.039856][ T6411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.591'.
[  159.056199][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.105607][ T4316] usb 3-1: config 0 descriptor??
[  159.396181][ T6404] loop3: detected capacity change from 0 to 32768
[  159.473088][ T6404] JBD2: Ignoring recovery information on journal
[  159.516410][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.573040][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.602839][ T6427] blk_print_req_error: 7 callbacks suppressed
[  159.602859][ T6427] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  159.647269][ T4316] hid (null): invalid report_count -842715762
[  159.653729][ T4316] hid (null): invalid report_size -2094628929
[  159.674955][ T6404] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  159.767975][ T6404] (syz.3.529,6404,0):ocfs2_file_write_iter:2446 ERROR: status = -27
[  159.768719][ T6427] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO)
[  159.786500][ T6427] device-mapper: ioctl: error adding target to table
[  159.893680][ T5921] usb 3-1: USB disconnect, device number 7
[  159.944624][ T6219] ocfs2: Unmounting device (7,3) on (node local)
[  160.023253][ T6431] loop5: detected capacity change from 0 to 2048
[  160.104669][ T6431] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  160.277212][ T5043] EXT4-fs (loop5): unmounting filesystem.
[  160.585731][ T6449] hugetlbfs: syz.0.604 (6449): Using mlock ulimits for SHM_HUGETLB is obsolete
[  161.115638][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  161.310130][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  161.365731][    T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  161.385156][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.412953][    T7] usb 5-1: config 0 descriptor??
[  161.847647][    T7] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  161.849611][ T6471] loop0: detected capacity change from 0 to 32768
[  161.881486][    T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input16
[  161.933925][ T6471] jfs_rmdir: dtDelete returned -2
[  162.057951][    C0] usb 5-1: input irq status -75 received
[  162.106753][    T7] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  162.221095][ T6489] loop5: detected capacity change from 0 to 512
[  162.279869][ T6489] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  162.362118][ T6304] usb 5-1: USB disconnect, device number 8
[  162.533241][ T6487] fido_id[6487]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  163.483166][ T4316] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  163.575935][ T4316] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  163.835128][ T6535] loop2: detected capacity change from 0 to 512
[  163.852780][ T6535] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  163.904428][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.638'.
[  164.134796][ T6542] loop2: detected capacity change from 0 to 512
[  164.161470][ T6542] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  164.237179][ T6542] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.640: invalid indirect mapped block 4294967295 (level 0)
[  164.309309][ T6542] EXT4-fs (loop2): Remounting filesystem read-only
[  164.344272][ T6542] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.640: invalid indirect mapped block 4294967295 (level 1)
[  164.430635][ T6542] EXT4-fs (loop2): Remounting filesystem read-only
[  164.462732][ T6542] EXT4-fs (loop2): 1 orphan inode deleted
[  164.474006][ T6542] EXT4-fs (loop2): 1 truncate cleaned up
[  164.484447][ T6542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  164.653925][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  164.975613][ T5921] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  165.185779][ T5921] usb 1-1: Using ep0 maxpacket: 32
[  165.205678][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.256417][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.276519][ T5921] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  165.305627][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.334211][ T5921] usb 1-1: config 0 descriptor??
[  165.371781][ T5921] hub 1-1:0.0: USB hub found
[  165.582721][ T5921] hub 1-1:0.0: 1 port detected
[  165.615025][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.637719][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.651416][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.673300][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.682574][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.705568][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.726626][ T6596] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.733385][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.746941][ T6304] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  165.765846][ T6304] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  165.816732][ T6596] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO)
[  165.846467][ T6596] device-mapper: ioctl: error adding target to table
[  166.074200][ T6599] fido_id[6599]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  166.114252][ T6606] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  166.150790][ T6606] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  166.160736][ T6609] device pim6reg1 entered promiscuous mode
[  166.190382][ T5921] hub 1-1:0.0: activate --> -90
[  166.281538][ T6614] netlink: 'syz.3.667': attribute type 8 has an invalid length.
[  166.539030][ T6620] loop4: detected capacity change from 0 to 512
[  166.574180][ T6620] EXT4-fs: Ignoring removed oldalloc option
[  166.598317][ T5921] usb 1-1-port1: cannot disable (err = -71)
[  166.598424][ T6304] usb 1-1: USB disconnect, device number 9
[  166.632301][ T6620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  166.708227][ T6620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  166.727327][ T6620] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.875673][ T6610] loop2: detected capacity change from 0 to 32768
[  166.902139][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  166.979349][ T5921] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  166.993123][ T6616] loop3: detected capacity change from 0 to 32768
[  167.035387][ T6610] XFS (loop2): Mounting V5 Filesystem
[  167.044416][ T6616] XFS (loop3): Mounting V5 Filesystem
[  167.145207][ T6610] XFS (loop2): Ending clean mount
[  167.154368][ T6616] XFS (loop3): Ending clean mount
[  167.183907][ T6616] XFS (loop3): Quotacheck needed: Please wait.
[  167.185581][ T6610] XFS (loop2): Quotacheck needed: Please wait.
[  167.191071][ T5921] usb 6-1: Using ep0 maxpacket: 8
[  167.229809][ T5921] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  167.239294][ T5921] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  167.251292][ T5921] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  167.261711][ T5921] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  167.269492][ T6640] loop4: detected capacity change from 0 to 4096
[  167.276228][ T5921] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  167.305527][ T6616] XFS (loop3): Quotacheck: Done.
[  167.319923][ T5921] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.333556][ T6640] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  167.367876][ T5921] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  167.379249][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.416303][ T6610] XFS (loop2): Quotacheck: Done.
[  167.488081][ T6219] XFS (loop3): Unmounting Filesystem
[  167.637301][ T6646] tls_set_device_offload_rx: netdev not found
[  167.675349][ T5921] usb 6-1: GET_CAPABILITIES returned 0
[  167.697696][ T5921] usbtmc 6-1:16.0: can't read capabilities
[  167.755684][ T4281] XFS (loop2): Unmounting Filesystem
[  168.039398][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.065848][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.105134][   T14] usb 6-1: USB disconnect, device number 5
[  168.387862][ T5921] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  168.446337][ T5921] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  168.521627][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'.
[  169.070642][ T6686] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  169.210957][ T6691] loop2: detected capacity change from 0 to 512
[  169.302724][ T6691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  169.404257][ T6691] EXT4-fs (loop2): unmounting filesystem.
[  169.638991][ T6687] loop5: detected capacity change from 0 to 32768
[  169.785411][ T6687] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  169.906700][ T6687] JBD2: Ignoring recovery information on journal
[  169.945963][ T6687] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  170.024568][ T6687] (syz.5.690,6687,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  170.253159][ T5043] ocfs2: Unmounting device (7,5) on (node local)
[  170.276054][ T6715] loop4: detected capacity change from 0 to 2048
[  170.373187][ T6715] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  170.409257][ T6715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.761099][ T6726] loop2: detected capacity change from 0 to 32768
[  171.929402][ T6726] XFS (loop2): Mounting V5 Filesystem
[  172.145061][ T6726] XFS (loop2): Ending clean mount
[  172.176329][ T6726] XFS (loop2): Quotacheck needed: Please wait.
[  172.306666][ T4298] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  172.367687][ T4298] XFS (loop2): Unmount and run xfs_repair
[  172.373455][ T4298] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  172.418475][ T4298] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  172.451214][ T4298] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  172.492697][ T4298] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  172.542827][ T4298] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  172.556336][ T4298] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  172.557074][ T6760] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801
[  172.582693][ T4298] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.614798][ T4298] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.660450][ T4298] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  172.683181][ T4298] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  172.699849][ T6726] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  172.778327][ T6305] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  172.823730][ T6305] XFS (loop2): Unmount and run xfs_repair
[  172.895674][ T6305] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  172.932081][ T6305] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  172.972454][ T6305] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  172.998532][ T6305] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  173.052292][ T6305] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  173.103514][ T6305] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  173.132929][ T6305] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.165221][ T6305] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.204193][ T6305] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  173.243704][ T6726] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  173.252118][ T6775] loop3: detected capacity change from 0 to 4096
[  173.291555][ T6775] EXT4-fs: inline encryption not supported
[  173.297290][ T6726] XFS (loop2): page discard on page ffffea0001368f80, inode 0x244a, pos 0.
[  173.321192][ T6775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  173.339585][ T6775] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ee1a8, mo2=0003]
[  173.355088][ T6775] System zones: 0-5
[  173.399673][ T6775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  173.569617][ T6775] overlayfs: conflicting lowerdir path
[  173.678843][ T6219] EXT4-fs (loop3): unmounting filesystem.
[  173.810694][ T6793] loop0: detected capacity change from 0 to 256
[  173.826421][ T6793] exfat: Deprecated parameter 'utf8'
[  173.865717][ T6793] exfat: Deprecated parameter 'namecase'
[  173.871447][ T6793] exfat: Deprecated parameter 'namecase'
[  173.906193][ T6793] exfat: Deprecated parameter 'namecase'
[  173.933367][ T4281] XFS (loop2): Unmounting Filesystem
[  173.936986][ T6793] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  173.999559][ T6794] loop4: detected capacity change from 0 to 8192
[  174.027968][ T6793] netlink: 104 bytes leftover after parsing attributes in process `syz.0.724'.
[  174.286333][   T27] audit: type=1804 audit(1785967744.634:10): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.725" name="/newroot/136/file2/file0" dev="loop4" ino=1048634 res=1 errno=0
[  174.369600][ T6800] loop0: detected capacity change from 0 to 2048
[  174.479439][ T6800] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  174.684709][ T6807] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  174.717466][ T6807] bond1: (slave lo): Enslaving as an active interface with an up link
[  174.717693][ T6809] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  174.756654][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  174.785149][ T6807] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  174.832257][ T6809] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  175.734624][ T6830] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12
[  176.116669][ T6822] loop5: detected capacity change from 0 to 131072
[  176.129341][ T6822] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  176.136305][ T6822] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  176.147169][ T6822] F2FS-fs (loop5): invalid crc value
[  176.161038][ T6838] loop0: detected capacity change from 0 to 64
[  176.195819][ T6822] F2FS-fs (loop5): Found nat_bits in checkpoint
[  176.256998][ T6822] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  176.264127][ T6822] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  176.386212][   T27] audit: type=1800 audit(1785967746.744:11): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.736" name="file1" dev="loop5" ino=7 res=0 errno=0
[  176.663120][ T6853] loop2: detected capacity change from 0 to 8
[  176.727783][ T6851] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  176.739197][ T6853] SQUASHFS error: zlib decompression failed, data probably corrupt
[  176.777301][ T6853] SQUASHFS error: Failed to read block 0x9b: -5
[  176.808611][ T6853] SQUASHFS error: Unable to read metadata cache entry [99]
[  176.866115][ T6853] SQUASHFS error: Unable to read inode 0x127
[  177.226228][ T6305] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  177.431440][ T6305] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  177.462280][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.513136][ T6305] usb 4-1: Product: syz
[  177.543152][ T6305] usb 4-1: Manufacturer: syz
[  177.567139][ T6305] usb 4-1: SerialNumber: syz
[  177.570408][ T6882] loop4: detected capacity change from 0 to 2048
[  177.597788][ T6305] usb 4-1: config 0 descriptor??
[  177.656865][ T6882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  177.705755][ T6882] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.806858][ T6882] EXT4-fs (loop4): shut down requested (1)
[  177.870733][ T6888] fs-verity: sha512 using implementation "sha512-avx2"
[  177.896082][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  177.906290][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  178.043004][ T6305] usb 4-1: Firmware: major: 160, minor: 18, hardware type: UNKNOWN (79)
[  178.107170][    T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  178.122170][    T7] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  178.146516][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.205291][    T7] as10x_usb: device has been detected
[  178.221748][    T7] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  178.244477][ T6305] usb 4-1: Read permanent extended address 24:11:1d:0b:70:a9:e0:a4 from device
[  178.263888][ T6305] usb 4-1: atusb_probe: initialization failed, error = -524
[  178.308189][    T7] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  178.322599][ T6893] loop0: detected capacity change from 0 to 1024
[  178.329741][ T6305] atusb: probe of 4-1:0.0 failed with error -524
[  178.348008][ T6893] EXT4-fs: Ignoring removed oldalloc option
[  178.381948][ T6893] EXT4-fs: Ignoring removed bh option
[  178.403528][ T6897] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  178.424667][ T6893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  178.471771][ T4313] usb 4-1: USB disconnect, device number 7
[  178.487139][ T6893] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.501271][    T7] as10x_usb: error during firmware upload part1
[  178.510453][    T7] Registered device Abilis Systems DVB-Titan
[  178.535700][ T6893] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  178.584720][ T6893] EXT4-fs (loop0): Remounting filesystem read-only
[  178.597827][ T6903] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  178.632179][ T6903] EXT4-fs (loop0): Remounting filesystem read-only
[  178.640963][ T6903] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  178.688040][ T6903] EXT4-fs (loop0): Remounting filesystem read-only
[  178.701477][ T6893] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  178.728984][ T6893] EXT4-fs (loop0): Remounting filesystem read-only
[  178.740082][ T6893] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.774: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  178.773645][ T6893] EXT4-fs (loop0): Remounting filesystem read-only
[  178.782617][ T6903] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  178.796495][ T6893] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem
[  178.806632][ T6903] EXT4-fs (loop0): Remounting filesystem read-only
[  178.815432][ T6891] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  178.844921][ T6893] EXT4-fs (loop0): Remounting filesystem read-only
[  178.865357][ T6910] loop5: detected capacity change from 0 to 128
[  178.871739][ T6891] EXT4-fs (loop0): Remounting filesystem read-only
[  178.901874][ T6903] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  178.928185][ T6903] EXT4-fs (loop0): Remounting filesystem read-only
[  178.934978][ T6891] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #15: comm syz.0.774: lblock 0 mapped to illegal pblock 0 (length 1)
[  179.289697][ T4359] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  179.342237][ T6920] loop3: detected capacity change from 0 to 2048
[  179.357747][ T4359] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  179.418848][ T6920] UDF-fs: error (device loop3): udf_read_tagged: block 97: CRC length 511 exceeds block size
[  179.455949][ T6920] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2)
[  179.590692][ T6331] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  179.695880][ T6933] fido_id[6933]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  179.957804][ T6938] loop5: detected capacity change from 0 to 1024
[  180.029722][ T6938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  180.032212][    T7] usb 3-1: USB disconnect, device number 8
[  180.057889][ T6938] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  180.119769][ T6938] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  180.144310][    T7] Unregistered device Abilis Systems DVB-Titan
[  180.152625][    T7] as10x_usb: device has been disconnected
[  180.205736][ T6938] EXT4-fs error (device loop5): ext4_get_journal_inode:5762: comm syz.5.778: inode #1: comm syz.5.778: iget: illegal inode #
[  180.257404][ T6938] EXT4-fs (loop5): no journal found
[  180.257468][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  180.309191][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  180.373338][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  180.488215][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  180.505982][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  180.572940][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  180.590303][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  180.620554][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  180.640559][ T6951] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  180.659169][ T6960] netlink: 27 bytes leftover after parsing attributes in process `syz.5.787'.
[  180.682834][ T6962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.788'.
[  180.721545][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.728941][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.239668][ T6979] device batadv_slave_0 entered promiscuous mode
[  181.264908][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'.
[  181.291127][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.410387][ T6983] loop2: detected capacity change from 0 to 128
[  181.430067][ T6972] loop0: detected capacity change from 0 to 32768
[  181.504877][ T6983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  181.567441][ T6983] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  181.614961][ T6979] device batadv_slave_0 left promiscuous mode
[  181.628043][ T6972] XFS (loop0): Mounting V5 Filesystem
[  181.634948][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.839467][ T6972] XFS (loop0): Ending clean mount
[  181.858614][ T6983] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 63: comm syz.2.797: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  181.882812][ T6972] XFS (loop0): Quotacheck needed: Please wait.
[  181.911660][ T5092] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  181.963325][ T5092] XFS (loop0): Unmount and run xfs_repair
[  181.979567][ T5092] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  181.982573][ T6983] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem
[  181.996059][ T5092] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  182.012498][ T7001] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 63: comm syz.2.797: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  182.016268][ T5092] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  182.043795][ T7001] EXT4-fs error (device loop2) in do_split:2095: Corrupt filesystem
[  182.085555][ T5092] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  182.094466][ T5092] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  182.115275][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  182.173130][ T5092] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  182.193367][ T5092] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  182.213588][ T5092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  182.246599][ T5092] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  182.265588][ T5092] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  182.302634][ T6972] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  182.325594][ T4316] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  182.422071][ T6305] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  182.438234][ T6305] XFS (loop0): Unmount and run xfs_repair
[  182.444326][ T6305] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  182.463300][ T6305] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  182.504450][ T6305] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80  ................
[  182.515586][ T4316] usb 4-1: Using ep0 maxpacket: 8
[  182.523213][ T6305] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  182.524828][ T4316] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  182.535154][ T6305] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13  .....^..........
[  182.561965][ T6305] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  182.572676][ T6305] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  182.582308][ T7005] loop4: detected capacity change from 0 to 32768
[  182.587317][ T6305] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  182.591470][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.606137][ T6305] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  182.623856][ T6972] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  182.643330][ T7005] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.801 (7005)
[  182.647721][ T6972] XFS (loop0): page discard on page ffffea00012f8dc0, inode 0x244a, pos 0.
[  182.675453][ T4316] usb 4-1: Product: syz
[  182.684519][ T4316] usb 4-1: Manufacturer: syz
[  182.704805][ T4316] usb 4-1: SerialNumber: syz
[  182.752384][ T7005] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.765910][ T7005] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  182.793705][ T7005] BTRFS info (device loop4): setting nodatasum
[  182.804238][ T7019] loop2: detected capacity change from 0 to 512
[  182.836087][ T7005] BTRFS info (device loop4): force zlib compression, level 3
[  182.836215][ T7019] EXT4-fs: Ignoring removed nobh option
[  182.860015][ T7019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  182.872269][ T7005] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  182.901263][ T7019] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  182.919936][ T7019] EXT4-fs (loop2): 1 truncate cleaned up
[  182.927033][ T7019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  182.966796][ T7005] BTRFS info (device loop4): use lzo compression, level 0
[  182.974938][   T27] audit: type=1800 audit(1785967753.324:12): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.806" name="file1" dev="loop2" ino=15 res=0 errno=0
[  183.011266][ T7005] BTRFS info (device loop4): turning on flush-on-commit
[  183.012764][ T7022] loop5: detected capacity change from 0 to 512
[  183.066532][ T7005] BTRFS info (device loop4): enabling auto defrag
[  183.079798][ T7022] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  183.084223][ T7005] BTRFS info (device loop4): max_inline at 4096
[  183.117655][ T7022] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.182312][ T7005] BTRFS info (device loop4): using free space tree
[  183.348546][ T4316] usb 4-1: clock source 0 is not valid, cannot use
[  183.355190][ T7022] EXT4-fs error (device loop5): ext4_get_first_dir_block:3583: inode #12: comm syz.5.807: Directory hole found for htree leaf block 0
[  183.360317][ T4271] XFS (loop0): Unmounting Filesystem
[  183.376546][ T4281] EXT4-fs (loop2): unmounting filesystem.
[  183.514726][ T5043] EXT4-fs (loop5): unmounting filesystem.
[  183.566404][ T4316] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[  183.580744][ T4316] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  183.593408][ T4316] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  183.602903][ T4316] usb 4-1: clock source 0 is not valid, cannot use
[  183.611114][ T4316] usb 4-1: 2:1: cannot get freq (v2/v3): err -71
[  183.618496][ T7005] BTRFS info (device loop4): enabling ssd optimizations
[  183.634990][ T4316] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  183.736096][   T27] audit: type=1326 audit(1785967754.084:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7046 comm="syz.2.811" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3409f9e0d9 code=0x0
[  183.848302][ T4316] usb 4-1: USB disconnect, device number 8
[  184.185305][ T4275] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.599906][ T7062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.816'.
[  185.171095][ T7078] loop2: detected capacity change from 0 to 4096
[  185.495793][ T5062] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  185.707346][ T5062] usb 6-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 0.00
[  185.732102][ T5062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.744456][ T7097] loop3: detected capacity change from 0 to 8192
[  186.022845][   T27] audit: type=1804 audit(1785967756.374:14): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.828" name="/newroot/44/file2/file0" dev="loop3" ino=1048638 res=1 errno=0
[  186.055801][ T4272] Bluetooth: hci4: command 0x0406 tx timeout
[  186.056262][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  186.061837][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  187.006900][ T5062] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1
[  187.065088][ T7144] loop0: detected capacity change from 0 to 128
[  187.079974][ T7144] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  187.111649][ T7144] hpfs: filesystem error: improperly stopped
[  187.113220][ T5062] usb 6-1: USB disconnect, device number 6
[  187.145792][ T7144] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  187.175630][ T4359] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  187.184928][ T7144] hpfs: You really don't want any checks? You are crazy...
[  187.216001][ T7144] hpfs: Code page index out of array
[  187.228021][ T7144] hpfs: code page support is disabled
[  187.239330][ T7144] hpfs: hpfs_map_4sectors(): unaligned read
[  187.253669][ T7144] hpfs: hpfs_map_4sectors(): unaligned read
[  187.261267][ T7144] hpfs: filesystem error: unable to find root dir
[  187.365556][ T4359] usb 4-1: Using ep0 maxpacket: 8
[  187.373047][ T4359] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  187.462233][ T4359] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  187.475891][ T4359] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  187.510053][ T4359] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.595768][ T4359] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  187.654919][   T27] audit: type=1326 audit(1785967758.004:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  187.656611][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.700924][   T27] audit: type=1326 audit(1785967758.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  187.732003][   T27] audit: type=1326 audit(1785967758.054:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  187.773048][   T27] audit: type=1326 audit(1785967758.054:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  187.784156][ T2185] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  187.812169][   T27] audit: type=1326 audit(1785967758.054:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  187.843152][ T2185] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  187.925652][ T4359] usb 4-1: GET_CAPABILITIES returned 0
[  187.931287][   T27] audit: type=1326 audit(1785967758.054:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  187.931701][ T4359] usbtmc 4-1:16.0: can't read capabilities
[  187.956203][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.012247][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  188.075557][   T27] audit: type=1326 audit(1785967758.054:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  188.155897][   T27] audit: type=1326 audit(1785967758.054:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  188.251841][   T27] audit: type=1326 audit(1785967758.054:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  188.330596][   T27] audit: type=1326 audit(1785967758.054:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3409f9e0d9 code=0x7ffc0000
[  188.337617][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  188.354482][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.427895][   T27] audit: type=1326 audit(1785967758.054:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3409f97e57 code=0x7ffc0000
[  188.429146][ T4316] usb 4-1: USB disconnect, device number 9
[  188.451644][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.515597][   T27] audit: type=1326 audit(1785967758.054:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3409f3f459 code=0x7ffc0000
[  188.539339][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.556095][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.860'.
[  188.571154][ T7176] device bridge_slave_1 left promiscuous mode
[  188.575542][   T27] audit: type=1326 audit(1785967758.054:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3409f97e57 code=0x7ffc0000
[  188.578150][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.600977][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.627615][   T27] audit: type=1326 audit(1785967758.054:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3409f3f459 code=0x7ffc0000
[  188.651396][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.671645][ T7176] device bridge_slave_0 left promiscuous mode
[  188.691601][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.705179][ T7178] loop4: detected capacity change from 0 to 512
[  188.711987][   T27] audit: type=1326 audit(1785967758.054:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3409f97e57 code=0x7ffc0000
[  188.735763][    C0] vkms_vblank_simulate: vblank timer overrun
[  188.754463][   T27] audit: type=1326 audit(1785967758.054:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.2.851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3409f3f459 code=0x7ffc0000
[  188.866579][ T7178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  188.885800][ T7178] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.012321][ T7178] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.861: Failed to acquire dquot type 0
[  189.137547][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  189.245772][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'.
[  194.220173][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.226563][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  227.015821][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  255.657900][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.664915][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  273.105618][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  317.099559][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.106121][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  347.175785][   T28] INFO: task jbd2/sda1-8:3601 blocked for more than 143 seconds.
[  347.183571][   T28]       Not tainted syzkaller #0
[  347.188651][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  347.197428][   T28] task:jbd2/sda1-8     state:D stack:25904 pid:3601  ppid:2      flags:0x00004000
[  347.206723][   T28] Call Trace:
[  347.210432][   T28]  <TASK>
[  347.213405][   T28]  __schedule+0x107f/0x4030
[  347.217998][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  347.223046][   T28]  ? __sched_text_start+0x8/0x8
[  347.228157][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  347.234082][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  347.239374][   T28]  schedule+0xb9/0x180
[  347.243452][   T28]  io_schedule+0x7c/0xd0
[  347.247796][   T28]  bit_wait_io+0xd/0xc0
[  347.251966][   T28]  __wait_on_bit+0x9b/0x2c0
[  347.256517][   T28]  ? bit_wait+0xc0/0xc0
[  347.260696][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  347.266372][   T28]  ? bit_wait+0xc0/0xc0
[  347.270549][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  347.275328][   T28]  ? do_raw_write_lock+0x11a/0x260
[  347.280677][   T28]  ? bit_waitqueue+0x30/0x30
[  347.285297][   T28]  ? do_raw_read_unlock+0x39/0x70
[  347.290382][   T28]  jbd2_journal_commit_transaction+0x2f0f/0x5f30
[  347.296796][   T28]  ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0
[  347.303647][   T28]  ? lock_chain_count+0x20/0x20
[  347.308576][   T28]  ? _raw_spin_unlock+0x40/0x40
[  347.313829][   T28]  ? rcu_is_watching+0x11/0xa0
[  347.318704][   T28]  ? __timer_delete_sync+0x239/0x2e0
[  347.324121][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  347.329193][   T28]  ? timer_delete_sync+0x20/0x20
[  347.334145][   T28]  ? do_raw_read_unlock+0x70/0x70
[  347.339390][   T28]  ? prepare_to_wait+0x1a6/0x1f0
[  347.344355][   T28]  kjournald2+0x40b/0x800
[  347.348738][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  347.353944][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  347.359899][   T28]  ? wake_bit_function+0x200/0x200
[  347.365029][   T28]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  347.370992][   T28]  ? __kthread_parkme+0x71/0x1c0
[  347.376114][   T28]  ? __kthread_parkme+0x15b/0x1c0
[  347.381171][   T28]  kthread+0x29d/0x330
[  347.385249][   T28]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  347.390512][   T28]  ? kthread_blkcg+0xd0/0xd0
[  347.395108][   T28]  ret_from_fork+0x1f/0x30
[  347.399571][   T28]  </TASK>
[  347.402612][   T28] INFO: task syz-executor:4259 blocked for more than 143 seconds.
[  347.410476][   T28]       Not tainted syzkaller #0
[  347.416042][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  347.424729][   T28] task:syz-executor    state:D stack:21856 pid:4259  ppid:4258   flags:0x00004002
[  347.434091][   T28] Call Trace:
[  347.437588][   T28]  <TASK>
[  347.440524][   T28]  __schedule+0x107f/0x4030
[  347.445020][   T28]  ? mark_lock+0x94/0x320
[  347.449420][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  347.454460][   T28]  ? __sched_text_start+0x8/0x8
[  347.459351][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  347.465247][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  347.470521][   T28]  schedule+0xb9/0x180
[  347.474600][   T28]  io_schedule+0x7c/0xd0
[  347.478892][   T28]  bit_wait_io+0xd/0xc0
[  347.483051][   T28]  __wait_on_bit+0x9b/0x2c0
[  347.487717][   T28]  ? bit_wait+0xc0/0xc0
[  347.491897][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  347.497436][   T28]  ? bit_wait+0xc0/0xc0
[  347.501601][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  347.506407][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  347.511429][   T28]  ? bit_waitqueue+0x30/0x30
[  347.516621][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  347.521958][   T28]  do_get_write_access+0x605/0xf20
[  347.527163][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  347.533201][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  347.539411][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  347.545645][   T28]  ? rcu_is_watching+0x11/0xa0
[  347.550423][   T28]  ext4_reserve_inode_write+0x201/0x290
[  347.556011][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  347.561648][   T28]  ext4_dirty_inode+0xbf/0x100
[  347.566497][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  347.572316][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  347.577416][   T28]  __file_update_time+0x21d/0x240
[  347.582460][   T28]  file_update_time+0x2f3/0x370
[  347.587450][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  347.592754][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  347.598220][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  347.603274][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  347.609796][   T28]  ? count_memcg_event_mm+0x8a/0x3c0
[  347.615107][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  347.620982][   T28]  do_page_mkwrite+0x16b/0x5c0
[  347.626002][   T28]  wp_page_shared+0x167/0x370
[  347.630688][   T28]  handle_mm_fault+0x1b1b/0x3d40
[  347.635935][   T28]  ? mt_find+0x157/0x830
[  347.640206][   T28]  ? numa_migrate_prep+0x250/0x250
[  347.645318][   T28]  ? lock_chain_count+0x20/0x20
[  347.650615][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  347.657260][   T28]  do_user_addr_fault+0x58e/0xb20
[  347.662356][   T28]  exc_page_fault+0x60/0x100
[  347.667871][   T28]  ? clear_bhb_loop+0x60/0xb0
[  347.672576][   T28]  asm_exc_page_fault+0x22/0x30
[  347.677479][   T28] RIP: 0033:0x7f95fc87c662
[  347.681901][   T28] RSP: 002b:00007ffd26359b10 EFLAGS: 00010202
[  347.688012][   T28] RAX: 00007f95fa660000 RBX: 0000555587f82810 RCX: 0000000000000006
[  347.696187][   T28] RDX: 0000000000003fdf RSI: 0000555587f83b38 RDI: 0000000000000040
[  347.704170][   T28] RBP: 00007ffd2635a010 R08: 0000555587f83c90 R09: 000000000000008e
[  347.712343][   T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd26359e50
[  347.720929][   T28] R13: 00007ffd26359c40 R14: 585858582e7a7973 R15: 00007ffd26359b90
[  347.729019][   T28]  </TASK>
[  347.732117][   T28] INFO: task syz.3.869:7202 blocked for more than 143 seconds.
[  347.739809][   T28]       Not tainted syzkaller #0
[  347.744755][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  347.753480][   T28] task:syz.3.869       state:D stack:27632 pid:7202  ppid:6219   flags:0x00004004
[  347.762732][   T28] Call Trace:
[  347.766037][   T28]  <TASK>
[  347.768970][   T28]  __schedule+0x107f/0x4030
[  347.773475][   T28]  ? mark_lock+0x94/0x320
[  347.777878][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  347.782914][   T28]  ? __sched_text_start+0x8/0x8
[  347.787875][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  347.793875][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  347.799126][   T28]  schedule+0xb9/0x180
[  347.803206][   T28]  io_schedule+0x7c/0xd0
[  347.807484][   T28]  bit_wait_io+0xd/0xc0
[  347.811652][   T28]  __wait_on_bit+0x9b/0x2c0
[  347.818096][   T28]  ? bit_wait+0xc0/0xc0
[  347.822308][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  347.828371][   T28]  ? bit_wait+0xc0/0xc0
[  347.832553][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  347.837365][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  347.842396][   T28]  ? bit_waitqueue+0x30/0x30
[  347.847065][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  347.852298][   T28]  do_get_write_access+0x605/0xf20
[  347.857475][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  347.863466][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  347.869681][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  347.875902][   T28]  ? rcu_is_watching+0x11/0xa0
[  347.880678][   T28]  ext4_reserve_inode_write+0x201/0x290
[  347.886542][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  347.892026][   T28]  ext4_dirty_inode+0xbf/0x100
[  347.897152][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  347.902976][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  347.908740][   T28]  __file_update_time+0x21d/0x240
[  347.913794][   T28]  file_update_time+0x2f3/0x370
[  347.918699][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  347.924000][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  347.929781][   T28]  ? pte_alloc_one+0x287/0x310
[  347.934570][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  347.940882][   T28]  do_page_mkwrite+0x16b/0x5c0
[  347.945697][   T28]  handle_mm_fault+0x199c/0x3d40
[  347.950716][   T28]  ? mt_find+0x157/0x830
[  347.954953][   T28]  ? numa_migrate_prep+0x250/0x250
[  347.960102][   T28]  ? lock_chain_count+0x20/0x20
[  347.964982][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  347.970307][   T28]  do_user_addr_fault+0x58e/0xb20
[  347.975344][   T28]  exc_page_fault+0x60/0x100
[  347.980296][   T28]  ? clear_bhb_loop+0x60/0xb0
[  347.985170][   T28]  asm_exc_page_fault+0x22/0x30
[  347.990076][   T28] RIP: 0033:0x7fd4d2e6ba23
[  347.994505][   T28] RSP: 002b:00007ffe3277df30 EFLAGS: 00010246
[  348.000627][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b33064000
[  348.008717][   T28] RDX: 0000001b33024000 RSI: 0000000000600000 RDI: 00007fd4d31e0708
[  348.016979][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  348.025019][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  348.033574][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe3277e1c0
[  348.041731][   T28]  </TASK>
[  348.044787][   T28] INFO: task syz.5.868:7203 blocked for more than 144 seconds.
[  348.052378][   T28]       Not tainted syzkaller #0
[  348.057447][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  348.066190][   T28] task:syz.5.868       state:D stack:27632 pid:7203  ppid:5043   flags:0x00004004
[  348.075413][   T28] Call Trace:
[  348.078756][   T28]  <TASK>
[  348.081695][   T28]  __schedule+0x107f/0x4030
[  348.086272][   T28]  ? mark_lock+0x94/0x320
[  348.090619][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  348.095781][   T28]  ? __sched_text_start+0x8/0x8
[  348.100648][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  348.106589][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  348.111806][   T28]  schedule+0xb9/0x180
[  348.115957][   T28]  io_schedule+0x7c/0xd0
[  348.120227][   T28]  bit_wait_io+0xd/0xc0
[  348.124392][   T28]  __wait_on_bit+0x9b/0x2c0
[  348.128947][   T28]  ? bit_wait+0xc0/0xc0
[  348.133507][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  348.143021][   T28]  ? bit_wait+0xc0/0xc0
[  348.147375][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  348.152158][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  348.157230][   T28]  ? bit_waitqueue+0x30/0x30
[  348.161855][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  348.167097][   T28]  do_get_write_access+0x605/0xf20
[  348.172228][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  348.178253][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  348.184415][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  348.190627][   T28]  ? rcu_is_watching+0x11/0xa0
[  348.195410][   T28]  ext4_reserve_inode_write+0x201/0x290
[  348.201038][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  348.206648][   T28]  ext4_dirty_inode+0xbf/0x100
[  348.211455][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  348.217313][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  348.222354][   T28]  __file_update_time+0x21d/0x240
[  348.227435][   T28]  file_update_time+0x2f3/0x370
[  348.232895][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  348.238316][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  348.243620][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  348.248734][   T28]  ? pte_alloc_one+0x287/0x310
[  348.253509][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  348.259941][   T28]  do_page_mkwrite+0x16b/0x5c0
[  348.264724][   T28]  handle_mm_fault+0x199c/0x3d40
[  348.269733][   T28]  ? mt_find+0x157/0x830
[  348.273995][   T28]  ? numa_migrate_prep+0x250/0x250
[  348.279417][   T28]  ? lock_chain_count+0x20/0x20
[  348.284296][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  348.289675][   T28]  do_user_addr_fault+0x58e/0xb20
[  348.294735][   T28]  exc_page_fault+0x60/0x100
[  348.299397][   T28]  ? clear_bhb_loop+0x60/0xb0
[  348.304086][   T28]  asm_exc_page_fault+0x22/0x30
[  348.309005][   T28] RIP: 0033:0x7ff32aa6ba23
[  348.313434][   T28] RSP: 002b:00007ffff6895850 EFLAGS: 00010246
[  348.319605][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2e064000
[  348.327688][   T28] RDX: 0000001b2e024000 RSI: 0000000000600000 RDI: 00007ff32ade0708
[  348.336291][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  348.344306][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  348.352332][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffff6895ae0
[  348.360356][   T28]  </TASK>
[  348.363406][   T28] INFO: task syz.4.870:7204 blocked for more than 144 seconds.
[  348.371263][   T28]       Not tainted syzkaller #0
[  348.376635][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  348.385333][   T28] task:syz.4.870       state:D stack:27632 pid:7204  ppid:4275   flags:0x00004004
[  348.394594][   T28] Call Trace:
[  348.397924][   T28]  <TASK>
[  348.400847][   T28]  __schedule+0x107f/0x4030
[  348.405346][   T28]  ? mark_lock+0x94/0x320
[  348.409714][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  348.414749][   T28]  ? __sched_text_start+0x8/0x8
[  348.419637][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  348.425582][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  348.430788][   T28]  schedule+0xb9/0x180
[  348.434845][   T28]  io_schedule+0x7c/0xd0
[  348.439678][   T28]  bit_wait_io+0xd/0xc0
[  348.443856][   T28]  __wait_on_bit+0x9b/0x2c0
[  348.448409][   T28]  ? bit_wait+0xc0/0xc0
[  348.452580][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  348.458721][   T28]  ? bit_wait+0xc0/0xc0
[  348.462934][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  348.467745][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  348.472773][   T28]  ? bit_waitqueue+0x30/0x30
[  348.477547][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  348.482786][   T28]  do_get_write_access+0x605/0xf20
[  348.488015][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  348.494018][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  348.500301][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  348.506525][   T28]  ? rcu_is_watching+0x11/0xa0
[  348.511303][   T28]  ext4_reserve_inode_write+0x201/0x290
[  348.516909][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  348.522389][   T28]  ext4_dirty_inode+0xbf/0x100
[  348.527195][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  348.533007][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  348.538075][   T28]  __file_update_time+0x21d/0x240
[  348.543585][   T28]  file_update_time+0x2f3/0x370
[  348.548531][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  348.553838][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  348.559197][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  348.564253][   T28]  ? pte_alloc_one+0x287/0x310
[  348.569101][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  348.575356][   T28]  do_page_mkwrite+0x16b/0x5c0
[  348.580304][   T28]  handle_mm_fault+0x199c/0x3d40
[  348.585266][   T28]  ? mt_find+0x157/0x830
[  348.589735][   T28]  ? numa_migrate_prep+0x250/0x250
[  348.594895][   T28]  ? lock_chain_count+0x20/0x20
[  348.599860][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  348.605257][   T28]  do_user_addr_fault+0x58e/0xb20
[  348.610367][   T28]  exc_page_fault+0x60/0x100
[  348.614981][   T28]  ? clear_bhb_loop+0x60/0xb0
[  348.619716][   T28]  asm_exc_page_fault+0x22/0x30
[  348.624577][   T28] RIP: 0033:0x7fb8f5a6ba23
[  348.629049][   T28] RSP: 002b:00007ffe36de5530 EFLAGS: 00010246
[  348.635121][   T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2fa64000
[  348.643686][   T28] RDX: 0000001b2fa24000 RSI: 0000000000600000 RDI: 00007fb8f5de0708
[  348.651720][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  348.659759][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  348.668193][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe36de57c0
[  348.676248][   T28]  </TASK>
[  348.679354][   T28] INFO: task syz.2.871:7205 blocked for more than 144 seconds.
[  348.687007][   T28]       Not tainted syzkaller #0
[  348.691944][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  348.700921][   T28] task:syz.2.871       state:D stack:27632 pid:7205  ppid:4281   flags:0x00004004
[  348.710221][   T28] Call Trace:
[  348.713501][   T28]  <TASK>
[  348.716538][   T28]  __schedule+0x107f/0x4030
[  348.721081][   T28]  ? mark_lock+0x94/0x320
[  348.725429][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  348.730624][   T28]  ? __sched_text_start+0x8/0x8
[  348.735533][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  348.741517][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  348.747411][   T28]  schedule+0xb9/0x180
[  348.751507][   T28]  io_schedule+0x7c/0xd0
[  348.755811][   T28]  bit_wait_io+0xd/0xc0
[  348.759972][   T28]  __wait_on_bit+0x9b/0x2c0
[  348.764507][   T28]  ? bit_wait+0xc0/0xc0
[  348.768709][   T28]  out_of_line_wait_on_bit+0x138/0x190
[  348.774181][   T28]  ? bit_wait+0xc0/0xc0
[  348.778443][   T28]  ? __wait_on_bit+0x2c0/0x2c0
[  348.783240][   T28]  ? do_raw_spin_lock+0x128/0x2f0
[  348.788302][   T28]  ? bit_waitqueue+0x30/0x30
[  348.792903][   T28]  ? do_raw_spin_unlock+0x11d/0x230
[  348.798149][   T28]  do_get_write_access+0x605/0xf20
[  348.803275][   T28]  jbd2_journal_get_write_access+0x108/0x140
[  348.809425][   T28]  __ext4_journal_get_write_access+0x24b/0x6e0
[  348.815640][   T28]  ? __ext4_journal_ensure_credits+0x450/0x450
[  348.821809][   T28]  ? rcu_is_watching+0x11/0xa0
[  348.826642][   T28]  ext4_reserve_inode_write+0x201/0x290
[  348.832217][   T28]  __ext4_mark_inode_dirty+0x161/0x760
[  348.837753][   T28]  ext4_dirty_inode+0xbf/0x100
[  348.842524][   T28]  ? __ext4_expand_extra_isize+0x3e0/0x3e0
[  348.848934][   T28]  __mark_inode_dirty+0x2e7/0xe80
[  348.854009][   T28]  __file_update_time+0x21d/0x240
[  348.859231][   T28]  file_update_time+0x2f3/0x370
[  348.864096][   T28]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  348.869442][   T28]  ? __file_remove_privs+0x5f0/0x5f0
[  348.874738][   T28]  ext4_page_mkwrite+0x1a9/0x10d0
[  348.879855][   T28]  ? pte_alloc_one+0x287/0x310
[  348.884666][   T28]  ? ext4_change_inode_journal_flag+0x710/0x710
[  348.890957][   T28]  do_page_mkwrite+0x16b/0x5c0
[  348.895815][   T28]  handle_mm_fault+0x199c/0x3d40
[  348.900760][   T28]  ? mt_find+0x157/0x830
[  348.904999][   T28]  ? numa_migrate_prep+0x250/0x250
[  348.910185][   T28]  ? lock_chain_count+0x20/0x20
[  348.915056][   T28]  ? lock_mm_and_find_vma+0xae/0x2f0
[  348.920561][   T28]  do_user_addr_fault+0x58e/0xb20
[  348.925681][   T28]  exc_page_fault+0x60/0x100
[  348.930308][   T28]  ? clear_bhb_loop+0x60/0xb0
[  348.934978][   T28]  asm_exc_page_fault+0x22/0x30
[  348.940133][   T28] RIP: 0033:0x7f3409e6ba23
[  348.944591][   T28] RSP: 002b:00007ffd92d52450 EFLAGS: 00010246
[  348.951322][   T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f864000
[  348.959385][   T28] RDX: 0000001b2f824000 RSI: 0000000000400000 RDI: 00007f340a1e0708
[  348.967409][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  348.975390][   T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  348.983598][   T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd92d526e0
[  348.991682][   T28]  </TASK>
[  348.994718][   T28] 
[  348.994718][   T28] Showing all locks held in the system:
[  349.002460][   T28] 6 locks held by kworker/u4:0/9:
[  349.007524][   T28]  #0: ffff88801b2d2138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  349.018240][   T28]  #1: ffffc900000e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  349.030280][   T28]  #2: ffff88807ddc20e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1c/0xf0
[  349.040286][   T28]  #3: ffff88807ddc4c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2e70
[  349.050874][   T28]  #4: ffff88807ddc6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  349.061165][   T28]  #5: ffff888075b5d2c8 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  349.071040][   T28] 1 lock held by rcu_tasks_kthre/12:
[  349.076496][   T28]  #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  349.087035][   T28] 1 lock held by rcu_tasks_trace/13:
[  349.092317][   T28]  #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  349.103477][   T28] 1 lock held by khungtaskd/28:
[  349.108385][   T28]  #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  349.118304][   T28] 2 locks held by getty/4023:
[  349.122976][   T28]  #0: ffff88814d891098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  349.132750][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  349.142984][   T28] 3 locks held by syz-executor/4259:
[  349.148296][   T28]  #0: ffff88801746ae58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  349.158840][   T28]  #1: ffff88807ddc2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  349.168670][   T28]  #2: ffff88807ddc6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  349.183935][   T28] 2 locks held by kworker/u4:14/5080:
[  349.189370][   T28] 3 locks held by syz.3.869/7202:
[  349.194390][   T28]  #0: ffff88802fcdbd58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  349.204371][   T28]  #1: ffff88807ddc2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  349.214230][   T28]  #2: ffff88807ddc6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  349.223949][   T28] 3 locks held by syz.5.868/7203:
[  349.229052][   T28]  #0: ffff88801be4f1d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  349.239044][   T28]  #1: ffff88807ddc2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  349.248900][   T28]  #2: ffff88807ddc6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  349.259129][   T28] 3 locks held by syz.4.870/7204:
[  349.264159][   T28]  #0: ffff88802fcd9058 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  349.274133][   T28]  #1: ffff88807ddc2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  349.283918][   T28]  #2: ffff88807ddc6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  349.293651][   T28] 3 locks held by syz.2.871/7205:
[  349.298736][   T28]  #0: ffff88802fcd9f58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0
[  349.308721][   T28]  #1: ffff88807ddc2558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0
[  349.318509][   T28]  #2: ffff88807ddc6990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240
[  349.328260][   T28] 
[  349.330587][   T28] =============================================
[  349.330587][   T28] 
[  349.339111][   T28] NMI backtrace for cpu 0
[  349.343448][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  349.350636][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.360718][   T28] Call Trace:
[  349.363981][   T28]  <TASK>
[  349.366909][   T28]  dump_stack_lvl+0x188/0x24e
[  349.371606][   T28]  ? preempt_schedule_thunk+0x16/0x18
[  349.377008][   T28]  ? show_regs_print_info+0x12/0x12
[  349.382213][   T28]  ? load_image+0x410/0x410
[  349.386711][   T28]  ? vprintk_emit+0x59f/0x6a0
[  349.391395][   T28]  ? printk_sprint+0x460/0x460
[  349.396231][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[  349.401162][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  349.407311][   T28]  ? _printk+0xda/0x130
[  349.411476][   T28]  ? load_image+0x410/0x410
[  349.415983][   T28]  ? load_image+0x410/0x410
[  349.420468][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  349.426541][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  349.432620][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  349.438600][   T28]  watchdog+0xf0e/0xf50
[  349.442751][   T28]  ? watchdog+0x1ed/0xf50
[  349.447076][   T28]  kthread+0x29d/0x330
[  349.451137][   T28]  ? hungtask_pm_notify+0x40/0x40
[  349.456155][   T28]  ? kthread_blkcg+0xd0/0xd0
[  349.460738][   T28]  ret_from_fork+0x1f/0x30
[  349.465263][   T28]  </TASK>
[  349.468922][   T28] Sending NMI from CPU 0 to CPUs 1:
[  349.474147][    C1] NMI backtrace for cpu 1
[  349.474156][    C1] CPU: 1 PID: 5092 Comm: kworker/u4:20 Not tainted syzkaller #0
[  349.474171][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.474197][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  349.474221][    C1] RIP: 0010:ieee80211_get_channel_khz+0x6e/0x8a0
[  349.474245][    C1] Code: fc ff df 4d 8b 3f 4d 85 ff 0f 84 f1 00 00 00 4d 8d 67 14 4c 89 e0 48 c1 e8 03 0f b6 04 08 84 c0 0f 85 77 07 00 00 45 8b 24 24 <31> ff 44 89 e6 e8 28 32 f9 f7 45 85 e4 0f 8e ca 00 00 00 4c 89 f8
[  349.474257][    C1] RSP: 0018:ffffc90003507848 EFLAGS: 00000246
[  349.474268][    C1] RAX: 0000000000000000 RBX: 000000000024cde0 RCX: dffffc0000000000
[  349.474278][    C1] RDX: 0000000000000000 RSI: 000000000024cde0 RDI: ffff8880544c0740
[  349.474288][    C1] RBP: ffffc90003507b68 R08: ffffc900035075ff R09: 1ffff920006a0ebf
[  349.474298][    C1] R10: dffffc0000000000 R11: fffff520006a0ec0 R12: 000000000000000e
[  349.474308][    C1] R13: 1ffff1100d03b3c1 R14: ffff8880544c0740 R15: ffff8880544c3348
[  349.474319][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  349.474331][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  349.474341][    C1] CR2: 00007fff602abff8 CR3: 000000007e786000 CR4: 00000000003506e0
[  349.474354][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  349.474362][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  349.474371][    C1] Call Trace:
[  349.474376][    C1]  <TASK>
[  349.474382][    C1]  ieee80211_ibss_rx_queued_mgmt+0x4eb/0x2eb0
[  349.474404][    C1]  ? verify_lock_unused+0x140/0x140
[  349.474425][    C1]  ? verify_lock_unused+0x140/0x140
[  349.474445][    C1]  ? verify_lock_unused+0x140/0x140
[  349.474469][    C1]  ? ieee80211_ibss_rx_no_sta+0x780/0x780
[  349.474493][    C1]  ? mark_lock+0x94/0x320
[  349.474512][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  349.474532][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  349.474551][    C1]  ? lock_chain_count+0x20/0x20
[  349.474568][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  349.474589][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  349.474604][    C1]  ? skb_dequeue+0x120/0x150
[  349.474619][    C1]  ieee80211_iface_work+0x72c/0xc70
[  349.474643][    C1]  cfg80211_wiphy_work+0x224/0x260
[  349.474663][    C1]  ? process_one_work+0x7b4/0x1160
[  349.474680][    C1]  process_one_work+0x8ab/0x1160
[  349.474702][    C1]  ? worker_detach_from_pool+0x240/0x240
[  349.474720][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  349.474735][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  349.474752][    C1]  ? wq_worker_running+0x97/0x190
[  349.474774][    C1]  worker_thread+0xaf5/0x12a0
[  349.474801][    C1]  kthread+0x29d/0x330
[  349.474813][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[  349.474829][    C1]  ? kthread_blkcg+0xd0/0xd0
[  349.474842][    C1]  ret_from_fork+0x1f/0x30
[  349.474867][    C1]  </TASK>
[  349.754533][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  349.761414][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  349.768624][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.778690][   T28] Call Trace:
[  349.781977][   T28]  <TASK>
[  349.784899][   T28]  dump_stack_lvl+0x188/0x24e
[  349.789574][   T28]  ? memcpy+0x3c/0x60
[  349.793548][   T28]  ? show_regs_print_info+0x12/0x12
[  349.798735][   T28]  ? load_image+0x410/0x410
[  349.803236][   T28]  panic+0x2d3/0x710
[  349.807124][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  349.812772][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  349.817262][   T28]  ? load_image+0x410/0x410
[  349.821759][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  349.827909][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  349.834141][   T28]  watchdog+0xf4d/0xf50
[  349.838289][   T28]  ? watchdog+0x1ed/0xf50
[  349.842613][   T28]  kthread+0x29d/0x330
[  349.846672][   T28]  ? hungtask_pm_notify+0x40/0x40
[  349.851683][   T28]  ? kthread_blkcg+0xd0/0xd0
[  349.856263][   T28]  ret_from_fork+0x1f/0x30
[  349.860677][   T28]  </TASK>
[  349.863954][   T28] Kernel Offset: disabled
[  349.868271][   T28] Rebooting in 86400 seconds..