last executing test programs:

4m19.534397187s ago: executing program 2 (id=95):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000)

4m19.388058819s ago: executing program 2 (id=96):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0)

4m18.884260146s ago: executing program 2 (id=97):
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000412000/0x2000)=nil)
setuid(0xee01)
shmctl$IPC_RMID(r0, 0x0)

4m18.748142128s ago: executing program 2 (id=98):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb02, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m17.797015392s ago: executing program 2 (id=105):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40)

4m15.796341721s ago: executing program 2 (id=114):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x80042, 0x20262076a4e6d5e)
write$cgroup_int(r0, &(0x7f0000000040)=0x9, 0x12)
write$cgroup_int(r0, &(0x7f0000000180)=0x400, 0x12)

4m15.201635749s ago: executing program 32 (id=114):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x80042, 0x20262076a4e6d5e)
write$cgroup_int(r0, &(0x7f0000000040)=0x9, 0x12)
write$cgroup_int(r0, &(0x7f0000000180)=0x400, 0x12)

48.624356273s ago: executing program 1 (id=1712):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040)

47.804200725s ago: executing program 1 (id=1716):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)

45.616665246s ago: executing program 1 (id=1727):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r1, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x30}}, 0x0)

45.34142696s ago: executing program 1 (id=1722):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

44.879916777s ago: executing program 1 (id=1728):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x0, 0x559e, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x500, 0x0)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)=ANY=[])

44.470098253s ago: executing program 1 (id=1731):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

43.886438801s ago: executing program 33 (id=1731):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

4.580613755s ago: executing program 3 (id=2012):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="49c515c472"], 0x30}}, 0x20040000)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

4.24791451s ago: executing program 4 (id=2015):
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x92aa842669e14d00]}}, {@mac=@random="f135419f37d9", {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3e}, @empty, 0x0, 0x0, 0x0, 0xd, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

4.2052009s ago: executing program 3 (id=2016):
unshare(0x26020480)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=<r5=>0x0)
syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10f00, 0x2, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x2, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ca, 0x10, 0x0, 0x90, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16e7, 0x4000, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0)

4.047323402s ago: executing program 4 (id=2017):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xffeb)

3.786071276s ago: executing program 4 (id=2019):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0)

3.607992729s ago: executing program 4 (id=2020):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

3.060227916s ago: executing program 3 (id=2024):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x7, 0x204, 0x8, 0x9, 0xd20, 0x0, 0x8}, 0x20)

2.724209971s ago: executing program 4 (id=2027):
setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000)

2.716154492s ago: executing program 3 (id=2028):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000440))

2.375877637s ago: executing program 0 (id=2030):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0xd01}], 0x2}}], 0x1, 0x4001c00)

2.375699326s ago: executing program 3 (id=2031):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000640)={[{0x3d, 0x4e00, "b36823b0852def7df483c9443abca4cd0a29976a58dc20c6e1f40e5dd228946e7fb4c13b09345f8b77a30315015469e350d39cca2c2c0de65b06e5f884"}]})
syz_usb_control_io(r0, 0x0, 0x0)

2.295881878s ago: executing program 0 (id=2032):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
getpeername$netlink(r0, 0x0, &(0x7f0000000640))

2.12441699s ago: executing program 0 (id=2034):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/160, 0xa0}], 0x1}, 0xfffffffb}], 0x1, 0x3, 0x0)

2.054159381s ago: executing program 0 (id=2036):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[], 0x1, 0x5dd, &(0x7f0000000680)="$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")
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18)

1.840787034s ago: executing program 0 (id=2037):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1.608151607s ago: executing program 4 (id=2038):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000bc0)={0x34, &(0x7f00000009c0)={0x0, 0xb, 0xc, "31f77bf3e02038c6e28df956"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x28, "559593fd6f433317bdc97fb91e5ba877838e857f0e73c509148ddca27b733795253ebf0da6133e70"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.315918432s ago: executing program 5 (id=2041):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x1})
ppoll(&(0x7f0000000140)=[{r1, 0x22}, {r0, 0x8041}], 0x2, 0x0, 0x0, 0x0)

1.288145842s ago: executing program 5 (id=2042):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000006c0)={0x2, 0x0, [{0x80000019, 0x9, 0x2, 0x9, 0x5, 0x1, 0xd}, {0x80000008, 0xffffffff, 0x0, 0xfffffff7, 0x658, 0x3, 0x3}]})

1.074956095s ago: executing program 5 (id=2043):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0)

936.200567ms ago: executing program 5 (id=2044):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x4, 0xe, "03f37fe99f4da288"})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)

823.636069ms ago: executing program 5 (id=2045):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x5c)

676.989441ms ago: executing program 5 (id=2046):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x7ffe)
truncate(&(0x7f0000000180)='./file1\x00', 0x9)

296.86µs ago: executing program 0 (id=2047):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000000)={0x28, r1, 0x5, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}], @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}]}, 0x28}}, 0x810)

0s ago: executing program 3 (id=2048):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0096ce58ff8352d9de0416ffb4067e17295264ca45bf0a9df230ed3f7ae0cbd6b1a317f2a272ed833a79ef2361ed9b1d2ccd274788b5eca3c24e6fc99810d9a2c4010696724a7cad016ff9d5ddf0faa7dd283aa641c55ab60e321fdc7b13b74fb58c21dcb1cd6c79f6fe335614be756c1f5966d5d9eef66aea54040ee72add1f658c823fb9059f1670e0012fa0cd8d396dd7b1c82d"], 0x1, 0xc11, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x189d011, 0x0, 0x60, 0x0, &(0x7f0000000140))
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

kernel console output (not intermixed with test programs):

02] FAT-fs (loop0): Directory bread(block 66) failed
[  255.589128][ T9602] FAT-fs (loop0): Directory bread(block 67) failed
[  255.610185][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  255.623253][ T9602] FAT-fs (loop0): Directory bread(block 68) failed
[  255.630866][ T9602] FAT-fs (loop0): Directory bread(block 69) failed
[  255.637998][ T9602] FAT-fs (loop0): Directory bread(block 70) failed
[  255.646496][ T9602] FAT-fs (loop0): Directory bread(block 71) failed
[  255.659730][ T9602] FAT-fs (loop0): Directory bread(block 72) failed
[  255.683053][ T9602] FAT-fs (loop0): Directory bread(block 73) failed
[  256.057921][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  256.081404][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.196308][ T9610] loop4: detected capacity change from 0 to 256
[  256.342733][ T9610] FAT-fs (loop4): Directory bread(block 64) failed
[  256.349535][ T9610] FAT-fs (loop4): Directory bread(block 65) failed
[  256.381737][ T9610] FAT-fs (loop4): Directory bread(block 66) failed
[  256.388362][ T9610] FAT-fs (loop4): Directory bread(block 67) failed
[  256.400587][ T9610] FAT-fs (loop4): Directory bread(block 68) failed
[  256.442100][ T9610] FAT-fs (loop4): Directory bread(block 69) failed
[  256.448820][ T9610] FAT-fs (loop4): Directory bread(block 70) failed
[  256.492601][ T9610] FAT-fs (loop4): Directory bread(block 71) failed
[  256.499326][ T9610] FAT-fs (loop4): Directory bread(block 72) failed
[  256.530832][ T9610] FAT-fs (loop4): Directory bread(block 73) failed
[  256.738211][ T9621] loop9: detected capacity change from 0 to 7
[  256.788539][ T9621] Dev loop9: unable to read RDB block 7
[  256.797576][ T1098] loop: Write error at byte offset 4, length 3584.
[  256.822642][    C1] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  256.832261][    C1] Buffer I/O error on dev loop9, logical block 0, lost async page write
[  256.860328][ T9621]  loop9: unable to read partition table
[  256.879441][ T9621] loop9: partition table beyond EOD, truncated
[  256.885836][ T9621] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  256.922497][ T5788] block nbd1: Receive control failed (result -32)
[  257.406698][ T9640] loop3: detected capacity change from 0 to 512
[  257.610269][ T9645] loop4: detected capacity change from 0 to 256
[  257.672710][ T9645] exfat: Deprecated parameter 'utf8'
[  257.749453][   T27] audit: type=1326 audit(1782264228.965:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  257.765539][ T9645] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  257.855557][   T27] audit: type=1326 audit(1782264228.985:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  257.925147][   T27] audit: type=1326 audit(1782264229.015:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  257.991532][   T27] audit: type=1326 audit(1782264229.015:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  258.053869][   T27] audit: type=1326 audit(1782264229.015:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  258.097011][ T9628] loop0: detected capacity change from 0 to 32768
[  258.112689][   T27] audit: type=1326 audit(1782264229.015:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  258.144576][ T9653] loop1: detected capacity change from 0 to 8192
[  258.150127][   T27] audit: type=1326 audit(1782264229.015:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  258.196366][ T9653] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  258.197412][ T9628] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.225638][ T9653] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  258.252164][ T9653] REISERFS (device loop1): using ordered data mode
[  258.258050][   T27] audit: type=1326 audit(1782264229.025:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  258.259533][ T9653] reiserfs: using flush barriers
[  258.283596][   T27] audit: type=1326 audit(1782264229.025:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  258.316548][ T9659] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  258.318393][ T9653] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  258.326745][   T27] audit: type=1326 audit(1782264229.075:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.3.1343" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc70cd9ce59 code=0x7ffc0000
[  258.387030][ T9653] REISERFS (device loop1): checking transaction log (loop1)
[  258.417496][ T9628] XFS (loop0): Ending clean mount
[  258.646110][ T9653] REISERFS (device loop1): Using tea hash to sort names
[  258.683146][ T9653] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  258.730256][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  260.088576][ T9678] loop3: detected capacity change from 0 to 32768
[  260.348265][ T9680] loop4: detected capacity change from 0 to 32768
[  260.480905][ T9680] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  260.491891][ T9683] loop0: detected capacity change from 0 to 32768
[  260.644675][ T9680] XFS (loop4): Ending clean mount
[  260.819571][ T9683] UFO tlock:0xffffc900028ba1b0
[  260.859085][ T9703] MetaData crosses page boundary!!
[  260.896665][ T9703] lblock = 610061, size  = 269537280
[  260.919897][ T6168] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  260.935086][ T9703] CPU: 0 PID: 9703 Comm: syz.0.1348 Not tainted syzkaller #0
[  260.942541][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  260.952827][ T9703] Call Trace:
[  260.956156][ T9703]  <TASK>
[  260.959220][ T9703]  dump_stack_lvl+0x18c/0x250
[  260.963958][ T9703]  ? show_regs_print_info+0x20/0x20
[  260.969210][ T9703]  ? load_image+0x420/0x420
[  260.973762][ T9703]  ? folio_unlock+0x118/0x2f0
[  260.978930][ T9703]  __get_metapage+0xaac/0xfa0
[  260.983666][ T9703]  dtSearch+0x58d/0x21a0
[  260.988060][ T9703]  ? rcu_is_watching+0x15/0xb0
[  260.992933][ T9703]  jfs_lookup+0x1b1/0x420
[  260.997329][ T9703]  ? jfs_get_parent+0xb0/0xb0
[  261.002059][ T9703]  ? __asan_memset+0x22/0x40
[  261.006821][ T9703]  ? __lock_acquire+0x7d80/0x7d80
[  261.011906][ T9703]  ? __rwlock_init+0x150/0x150
[  261.016729][ T9703]  ? d_set_d_op+0x25f/0x370
[  261.021385][ T9703]  ? do_raw_spin_unlock+0x121/0x230
[  261.026651][ T9703]  ? _raw_spin_unlock+0x28/0x40
[  261.031561][ T9703]  ? d_alloc+0x1eb/0x250
[  261.035927][ T9703]  lookup_one_qstr_excl+0x112/0x250
[  261.041160][ T9703]  filename_create+0x246/0x450
[  261.045949][ T9703]  ? kern_path_create+0x50/0x50
[  261.050967][ T9703]  ? __virt_addr_valid+0x10c/0x380
[  261.056109][ T9703]  ? __virt_addr_valid+0x10c/0x380
[  261.061278][ T9703]  do_mkdirat+0xa9/0x450
[  261.065577][ T9703]  ? vfs_mkdir+0x470/0x470
[  261.070058][ T9703]  ? getname_flags+0x20a/0x500
[  261.074889][ T9703]  __x64_sys_mkdir+0x6e/0x80
[  261.079624][ T9703]  do_syscall_64+0x55/0xb0
[  261.084105][ T9703]  ? clear_bhb_loop+0x40/0x90
[  261.088828][ T9703]  ? clear_bhb_loop+0x40/0x90
[  261.093562][ T9703]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  261.099515][ T9703] RIP: 0033:0x7f371439ce59
[  261.103957][ T9703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.123773][ T9703] RSP: 002b:00007f37152dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  261.132300][ T9703] RAX: ffffffffffffffda RBX: 00007f3714616090 RCX: 00007f371439ce59
[  261.140297][ T9703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[  261.148295][ T9703] RBP: 00007f3714432e6f R08: 0000000000000000 R09: 0000000000000000
[  261.156311][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.164305][ T9703] R13: 00007f3714616128 R14: 00007f3714616090 R15: 00007fffafefc048
[  261.172317][ T9703]  </TASK>
[  261.221977][ T9703] bread failed!
[  261.225571][ T9703] jfs_lookup: dtSearch returned -5
[  262.161393][  T786] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  262.246165][ T9741] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  262.253566][ T9741] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  262.268631][ T9741] vhci_hcd vhci_hcd.0: Device attached
[  262.366912][  T786] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  262.389413][  T786] usb 2-1: config 0 has no interface number 0
[  262.401350][  T786] usb 2-1: config 0 interface 41 has no altsetting 0
[  262.414676][ T9745] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1374'.
[  262.427460][  T786] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  262.447072][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.461331][  T786] usb 2-1: Product: syz
[  262.465552][  T786] usb 2-1: Manufacturer: syz
[  262.479676][  T786] usb 2-1: SerialNumber: syz
[  262.495991][  T786] usb 2-1: config 0 descriptor??
[  262.551436][ T5781] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  262.572080][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  262.680222][ T9734] loop0: detected capacity change from 0 to 32768
[  262.785181][    T8] usb 5-1: config 0 has no interfaces?
[  262.791055][    T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  262.801580][ T9734] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  262.801640][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.823453][    T8] usb 5-1: config 0 descriptor??
[  262.885861][ T9734] XFS (loop0): Ending clean mount
[  262.899404][ T9734] XFS (loop0): Quotacheck needed: Please wait.
[  262.992684][ T9734] XFS (loop0): Quotacheck: Done.
[  263.103198][ T5783] usb 5-1: USB disconnect, device number 11
[  263.110841][ T9742] usb 41-1: recv xbuf, 0
[  263.131063][   T12] vhci_hcd: stop threads
[  263.140259][   T12] vhci_hcd: release socket
[  263.157968][   T12] vhci_hcd: disconnect device
[  263.202525][ T5781] vhci_hcd: vhci_device speed not set
[  263.217837][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  263.380156][  T786] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  263.416476][  T786] CoreChips: probe of 2-1:0.41 failed with error -71
[  263.432187][ T9765] loop3: detected capacity change from 0 to 1024
[  263.451820][  T786] usb 2-1: USB disconnect, device number 8
[  263.646373][ T3453] hfsplus: b-tree write err: -5, ino 8
[  263.785493][ T9767] loop0: detected capacity change from 0 to 8192
[  264.054145][ T9774] loop4: detected capacity change from 0 to 256
[  264.291471][ T5783] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  264.383649][ T9778] loop1: detected capacity change from 0 to 4096
[  264.448645][ T9781] loop4: detected capacity change from 0 to 16
[  264.456116][ T9780] lo speed is unknown, defaulting to 1000
[  264.501572][ T5783] usb 4-1: Using ep0 maxpacket: 32
[  264.535877][ T5783] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  264.566569][ T5783] usb 4-1: config 0 has no interface number 0
[  264.615109][ T5783] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  264.634017][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.661482][ T5783] usb 4-1: Product: syz
[  264.675952][ T5783] usb 4-1: Manufacturer: syz
[  264.680619][ T5783] usb 4-1: SerialNumber: syz
[  264.717679][ T5783] usb 4-1: config 0 descriptor??
[  264.735889][ T5783] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  264.769582][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'.
[  264.969911][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.016830][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.206446][ T9793] loop1: detected capacity change from 0 to 1024
[  265.231794][ T9793] EXT4-fs: Ignoring removed orlov option
[  265.318410][ T9791] loop4: detected capacity change from 0 to 8192
[  265.348435][ T9793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.385674][ T9793] EXT4-fs error (device loop1): __ext4_new_inode:1290: comm syz.1.1399: failed to insert inode 16: doubly allocated?
[  265.406749][ T9791] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  265.411448][ T5783] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  265.435029][ T9791] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  265.478154][ T5783] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  265.491566][ T9791] REISERFS (device loop4): using ordered data mode
[  265.498490][ T9791] reiserfs: using flush barriers
[  265.616649][ T9791] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  265.663201][ T9791] REISERFS (device loop4): checking transaction log (loop4)
[  265.673723][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.798862][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  265.799240][ T3065] usb 4-1: USB disconnect, device number 17
[  265.875847][ T3065] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  265.923826][ T3065] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  265.966051][ T9791] REISERFS (device loop4): Using tea hash to sort names
[  265.966517][ T3065] quatech2 4-1:0.51: device disconnected
[  265.989250][ T9791] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  266.012232][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'.
[  266.065258][ T9807] ipvlan2: entered allmulticast mode
[  266.080903][ T9807] syz_tun: entered allmulticast mode
[  266.683862][ T9805] loop1: detected capacity change from 0 to 32768
[  266.752243][ T9805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1394 (9805)
[  266.796685][ T9805] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.819700][ T9805] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  266.829910][ T9821] loop0: detected capacity change from 0 to 256
[  266.879029][ T9805] BTRFS info (device loop1): setting nodatacow, compression disabled
[  266.885948][ T9821] exfat: Deprecated parameter 'namecase'
[  266.908006][ T9805] BTRFS info (device loop1): turning on flush-on-commit
[  266.931712][ T9805] BTRFS info (device loop1): turning on sync discard
[  266.939213][ T9805] BTRFS info (device loop1): trying to use backup root at mount time
[  266.962182][ T9805] BTRFS info (device loop1): max_inline at 4096
[  267.012424][ T9821] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  267.015825][ T9805] BTRFS info (device loop1): using free space tree
[  267.195952][   T49] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  267.271855][ T9805] BTRFS error (device loop1): failed to load root extent
[  267.311507][ T9805] BTRFS warning (device loop1): try to load backup roots slot 1
[  267.367125][   T49] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  267.418127][ T9805] BTRFS warning (device loop1): couldn't read tree root
[  267.441591][ T9805] BTRFS warning (device loop1): try to load backup roots slot 2
[  267.457722][ T1098] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  267.480907][ T9805] BTRFS warning (device loop1): couldn't read tree root
[  267.513965][ T9805] BTRFS warning (device loop1): try to load backup roots slot 3
[  267.592665][ T9805] BTRFS info (device loop1): enabling ssd optimizations
[  267.657382][ T9805] BTRFS info (device loop1): rebuilding free space tree
[  267.737962][ T9805] BTRFS info (device loop1): checking UUID tree
[  267.823757][ T9823] loop3: detected capacity change from 0 to 32768
[  267.859321][ T9823] 
[  267.859321][ T9823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  267.859321][ T9823] 
[  268.001324][   T27] audit: type=1800 audit(1782264239.205:85): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1403" name="file1" dev="loop3" ino=4 res=0 errno=0
[  268.044987][ T9823] 
[  268.044987][ T9823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.044987][ T9823] 
[  268.107501][ T9852] ERROR: (device loop3): diWrite: ixpxd invalid
[  268.107501][ T9852] 
[  268.151715][ T9823] JFS: metapage_get_blocks failed
[  268.157340][ T9823] 
[  268.157340][ T9823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.157340][ T9823] 
[  268.181756][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.237405][ T9852] ERROR: (device loop3): txCommit: 
[  268.237405][ T9852] 
[  268.262456][ T9823] 
[  268.262456][ T9823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.262456][ T9823] 
[  268.291948][ T9852] ERROR: (device loop3): diFree: invalid inoext
[  268.291948][ T9852] 
[  268.383913][ T9823] 
[  268.383913][ T9823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.383913][ T9823] 
[  268.634303][   T11] ERROR: (device loop3): diWrite: ixpxd invalid
[  268.634303][   T11] 
[  268.676323][   T11] ERROR: (device loop3): txCommit: 
[  268.676323][   T11] 
[  268.694638][   T11] jfs_write_inode: jfs_commit_inode failed!
[  268.700691][ T5775] 
[  268.700691][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.700691][ T5775] 
[  268.744965][ T5775] 
[  268.744965][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.744965][ T5775] 
[  269.747478][ T9861] loop0: detected capacity change from 0 to 32768
[  269.823687][ T9861] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.846789][ T9864] loop1: detected capacity change from 0 to 32768
[  269.914872][ T9861] XFS (loop0): Ending clean mount
[  269.936281][ T9864] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  269.965813][ T9864] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  270.005077][ T9869] loop3: detected capacity change from 0 to 32768
[  270.022232][ T9869] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1412 (9869)
[  270.045182][ T9869] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.055998][ T9869] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  270.065233][ T9869] BTRFS info (device loop3): force clearing of disk cache
[  270.073671][ T9869] BTRFS info (device loop3): metadata ratio 0
[  270.080726][ T9869] BTRFS info (device loop3): enabling ssd optimizations
[  270.087972][ T9869] BTRFS info (device loop3): using spread ssd allocation scheme
[  270.096234][ T9869] BTRFS info (device loop3): using free space tree
[  270.106308][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  270.148343][ T9864] XFS (loop1): Ending clean mount
[  270.155089][ T9878] XFS (loop0): SB summary counter sanity check failed
[  270.173814][ T9864] XFS (loop1): Quotacheck needed: Please wait.
[  270.180139][ T9878] XFS (loop0): Metadata corruption detected at xfs_sb_write_verify+0x1bc/0x3e0, xfs_sb block 0x0 
[  270.208471][ T9878] XFS (loop0): Unmount and run xfs_repair
[  270.215982][ T9878] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  270.224269][ T9878] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  270.254459][ T9878] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  270.301624][ T9864] XFS (loop1): Quotacheck: Done.
[  270.307804][ T9869] BTRFS info (device loop3): auto enabling async discard
[  270.320351][ T9878] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  270.338659][ T9869] BTRFS info (device loop3): rebuilding free space tree
[  270.410676][ T9878] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 11 40  ...............@
[  270.453565][ T9878] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42  .......A.......B
[  270.498452][ T9878] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  270.521348][ T9878] 00000060: 00 00 04 3e b4 b5 02 00 04 00 00 04 00 00 00 00  ...>............
[  270.571427][ T9878] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a  ................
[  270.600074][ T9878] XFS (loop0): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x330/0x620 (fs/xfs/xfs_buf.c:1559).  Shutting down filesystem.
[  270.645739][ T9878] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  270.968038][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.027388][   T49] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  271.331688][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.567854][ T9924] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  271.910214][ T9926] lo speed is unknown, defaulting to 1000
[  271.923125][ T9930] loop1: detected capacity change from 0 to 256
[  271.951613][ T5788] Bluetooth: hci2: unexpected event for opcode 0x1408
[  272.027216][ T9930] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  272.053460][ T5788] block nbd2: Receive control failed (result -32)
[  273.410771][ T9937] loop4: detected capacity change from 0 to 32768
[  273.694490][ T9957] loop3: detected capacity change from 0 to 64
[  273.889815][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'.
[  273.921492][ T9964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1443'.
[  274.083103][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1441'.
[  274.083136][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'.
[  274.083179][ T9970] macvlan0: entered allmulticast mode
[  274.083194][ T9970] veth1_vlan: entered allmulticast mode
[  274.691413][ T3065] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  274.871346][ T3065] usb 5-1: Using ep0 maxpacket: 32
[  274.876634][ T3065] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  274.876667][ T3065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.876689][ T3065] usb 5-1: Product: syz
[  274.876705][ T3065] usb 5-1: Manufacturer: syz
[  274.876721][ T3065] usb 5-1: SerialNumber: syz
[  274.879391][ T3065] usb 5-1: config 0 descriptor??
[  275.150940][ T9984] loop3: detected capacity change from 0 to 32768
[  275.260998][ T9995] loop1: detected capacity change from 0 to 4096
[  275.293560][ T9995] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  275.515368][ T3065] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  275.548511][ T3065] peak_usb 5-1:0.0 can0: sending command failure: -22
[  275.572592][ T3065] peak_usb 5-1:0.0 can0: sending command failure: -22
[  275.595510][ T9995] ntfs3: loop1: ino=1e, "file1" ntfs3_write_inode failed, -22.
[  275.653237][ T3065] peak_usb: probe of 5-1:0.0 failed with error -22
[  275.726447][ T3065] usb 5-1: USB disconnect, device number 12
[  275.911518][ T5814] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  275.979565][T10013] kvm_intel: kvm [10012]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x75
[  276.101530][ T5814] usb 4-1: Using ep0 maxpacket: 32
[  276.111091][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.127330][ T5814] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  276.138174][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.172521][ T5814] usb 4-1: config 0 descriptor??
[  276.467636][T10025] loop1: detected capacity change from 0 to 4096
[  276.480552][T10025] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  276.620200][T10025] ntfs: volume version 3.1.
[  276.626387][ T5814] kye 0003:0458:5015.000F: control rdesc unexpectedly large
[  276.684482][ T5814] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5015.000F/input/input13
[  276.829675][ T5814] input: HID 0458:5015 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5015.000F/input/input14
[  276.842310][T10025] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775.  You might want to try to use the mount option nls=utf8.
[  276.892424][T10025] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  277.059300][ T5814] kye 0003:0458:5015.000F: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0
[  277.065552][T10034] loop0: detected capacity change from 0 to 4096
[  277.104219][T10034] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  277.135744][ T5814] usb 4-1: USB disconnect, device number 18
[  277.366248][T10035] fido_id[10035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  277.651046][T10044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  277.659142][T10044] IPv6: NLM_F_CREATE should be set when creating new route
[  277.666586][T10044] IPv6: NLM_F_CREATE should be set when creating new route
[  277.674077][T10044] IPv6: NLM_F_CREATE should be set when creating new route
[  277.726695][T10044] netlink: 'syz.0.1475': attribute type 20 has an invalid length.
[  277.767338][T10048] loop4: detected capacity change from 0 to 512
[  277.909152][T10050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  278.007237][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'.
[  278.036594][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.224602][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.381568][T10057] loop3: detected capacity change from 0 to 8192
[  278.574896][ T5781] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  278.603464][T10065] netlink: 'syz.0.1486': attribute type 8 has an invalid length.
[  278.630683][T10065] sch_fq: defrate 0 ignored.
[  278.762184][ T5781] usb 5-1: Using ep0 maxpacket: 8
[  278.772307][ T5781] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  278.795191][ T5781] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  278.817043][ T5781] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.826462][T10071] loop0: detected capacity change from 0 to 1024
[  278.861461][ T5781] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.873792][T10071] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  278.905238][ T5781] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  278.929967][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.950024][T10071] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.1488: lblock 2 mapped to illegal pblock 2 (length 1)
[  279.015568][T10071] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  279.049987][T10071] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1488: lblock 0 mapped to illegal pblock 48 (length 1)
[  279.116012][T10071] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  279.156009][T10071] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1488: Failed to acquire dquot type 0
[  279.181854][T10071] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  279.213597][ T5781] usb 5-1: GET_CAPABILITIES returned 0
[  279.219191][ T5781] usbtmc 5-1:16.0: can't read capabilities
[  279.229335][T10071] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1488: mark_inode_dirty error
[  279.261664][T10071] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  279.274822][T10071] EXT4-fs (loop0): 1 orphan inode deleted
[  279.293039][T10071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.305749][ T1025] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  279.351011][ T1025] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  279.361134][ T1025] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0
[  279.458100][ T5781] usb 5-1: USB disconnect, device number 13
[  279.491047][T10081] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  279.563017][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.641580][ T5773] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0
[  279.664244][ T5773] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  279.675454][T10086] loop1: detected capacity change from 0 to 256
[  279.679125][ T5773] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  280.091663][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  280.251775][  T786] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  280.281405][ T5814] usb 1-1: Using ep0 maxpacket: 16
[  280.292133][ T5814] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  280.329576][ T5814] usb 1-1: config 0 has no interface number 0
[  280.341989][ T5814] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  280.347030][T10102] loop3: detected capacity change from 0 to 1024
[  280.368356][ T5814] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  280.377305][T10102] EXT4-fs: Ignoring removed orlov option
[  280.404773][ T5814] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  280.416979][T10102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  280.429498][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.441214][ T5814] usb 1-1: Product: syz
[  280.444019][T10102] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.445526][ T5814] usb 1-1: Manufacturer: syz
[  280.471144][  T786] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  280.471408][ T5814] usb 1-1: SerialNumber: syz
[  280.488331][ T5814] usb 1-1: config 0 descriptor??
[  280.495746][T10088] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  280.504505][T10088] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  280.522368][  T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.546516][T10102] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.1502: lblock 3 mapped to illegal pblock 3 (length 3)
[  280.565813][  T786] usb 2-1: config 0 descriptor??
[  280.593358][  T786] gspca_main: cpia1-2.14.0 probing 0813:0001
[  280.618474][T10102] EXT4-fs (loop3): Remounting filesystem read-only
[  280.665573][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  280.778060][T10088] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  280.792015][T10088] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  281.015495][ T5814] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  281.023592][  T786] gspca_cpia1: usb_control_msg 03, error -32
[  281.052220][  T786] gspca_cpia1: usb_control_msg 03, error -32
[  281.068483][  T786] gspca_cpia1: usb_control_msg 03, error -71
[  281.083471][  T786] gspca_cpia1: usb_control_msg 01, error -71
[  281.097433][  T786] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  281.118357][  T786] usb 2-1: USB disconnect, device number 9
[  281.216419][ T5814] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  281.251531][ T5814] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  281.277481][ T5814] asix: probe of 1-1:0.34 failed with error -71
[  281.312182][ T5814] usb 1-1: USB disconnect, device number 9
[  282.032988][T10135] loop0: detected capacity change from 0 to 256
[  282.040763][T10135] FAT-fs (loop0): "posix" option is obsolete, not supported now
[  282.136864][T10137] loop3: detected capacity change from 0 to 128
[  282.233802][T10137] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  282.281857][T10137] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.335439][T10142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1517'.
[  282.451866][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'.
[  282.620695][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  282.636261][T10146] loop1: detected capacity change from 0 to 2048
[  283.133896][T10157] tun0: tun_chr_ioctl cmd 2147767511
[  283.272036][T10159] sock: sock_set_timeout: `syz.1.1525' (pid 10159) tries to set negative timeout
[  283.778814][T10167] loop0: detected capacity change from 0 to 4096
[  283.813482][T10170] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.861425][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  283.942857][T10167] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  284.041389][ T5832] usb 2-1: Using ep0 maxpacket: 32
[  284.050408][ T5832] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  284.069361][ T5832] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  284.107695][ T5832] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  284.144244][ T5832] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  284.188027][ T5832] usb 2-1: config 0 interface 0 has no altsetting 0
[  284.213466][ T5832] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  284.232927][ T5832] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  284.261413][ T5832] usb 2-1: Product: syz
[  284.275962][ T5832] usb 2-1: Manufacturer: syz
[  284.280628][ T5832] usb 2-1: SerialNumber: syz
[  284.312743][ T5832] usb 2-1: config 0 descriptor??
[  284.324276][ T5832] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  284.364239][ T5832] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  284.554408][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  284.554418][ T5781] usb 2-1: USB disconnect, device number 10
[  284.603180][ T5781] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  284.757227][T10164] ldusb: No device or device unplugged -19
[  285.479955][T10188] loop4: detected capacity change from 0 to 128
[  285.575879][T10179] loop0: detected capacity change from 0 to 40427
[  285.582473][T10188] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  285.615245][T10179] F2FS-fs (loop0): invalid crc value
[  285.651051][T10179] F2FS-fs (loop0): Found nat_bits in checkpoint
[  285.657657][T10188] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  285.866819][T10179] F2FS-fs (loop0): Start checkpoint disabled!
[  285.925582][T10179] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  285.958531][ T6168] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.359043][   T59] kworker/u4:4: attempt to access beyond end of device
[  286.359043][   T59] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  286.400823][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  286.426918][   T59] kworker/u4:4: attempt to access beyond end of device
[  286.426918][   T59] loop0: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[  286.446124][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  286.531613][ T5086] Bluetooth: hci3: command tx timeout
[  286.845617][T10218] loop1: detected capacity change from 0 to 1024
[  286.895867][T10218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  287.086549][T10223] loop0: detected capacity change from 0 to 128
[  287.128941][T10223] EXT4-fs: inline encryption not supported
[  287.136068][T10223] ext4: Unknown parameter 'subj_type'
[  287.141814][  T786] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  287.164166][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.342434][  T786] usb 5-1: Using ep0 maxpacket: 16
[  287.355610][  T786] usb 5-1: unable to get BOS descriptor or descriptor too short
[  287.371649][  T786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.395318][  T786] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  287.422669][T10230] loop0: detected capacity change from 0 to 128
[  287.437717][T10228] loop1: detected capacity change from 0 to 4096
[  287.439649][  T786] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  287.466280][T10230] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  287.479142][  T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.479170][  T786] usb 5-1: Product: syz
[  287.501351][T10228] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  287.515283][T10230] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.569306][  T786] usb 5-1: Manufacturer: syz
[  287.589505][  T786] usb 5-1: SerialNumber: syz
[  287.690060][T10228] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  287.718694][T10233] loop3: detected capacity change from 0 to 1024
[  287.754273][T10233] EXT4-fs: Ignoring removed i_version option
[  287.792277][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  287.867287][  T786] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  287.878348][T10233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  287.906006][T10233] System zones: 0-1, 3-12
[  287.906233][  T786] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  287.927818][T10233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.228689][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.291674][  T786] usb 5-1: 2:1 : can't get Cluster Descriptor
[  288.473932][T10241] loop1: detected capacity change from 0 to 4096
[  288.520086][   T42] usb 5-1: USB disconnect, device number 14
[  288.699917][T10241] ntfs3: loop1: ino=21, "bus" The size of extended attributes must not exceed 64KiB
[  288.911580][ T5814] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  289.028436][T10251] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1564'.
[  289.047933][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'.
[  289.086415][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'.
[  289.121560][ T5814] usb 4-1: Using ep0 maxpacket: 32
[  289.141589][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.164734][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.191373][ T5814] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  289.201766][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.223502][ T5814] usb 4-1: config 0 descriptor??
[  289.225282][T10253] loop4: detected capacity change from 0 to 128
[  289.233160][ T5814] hub 4-1:0.0: USB hub found
[  289.261986][T10253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  289.292484][T10253] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.350838][T10237] loop0: detected capacity change from 0 to 65536
[  289.393734][T10237] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  289.442404][ T5814] hub 4-1:0.0: 26 ports detected
[  289.448039][ T5814] hub 4-1:0.0: insufficient power available to use all downstream ports
[  289.511019][T10237] XFS (loop0): Ending clean mount
[  289.556230][T10237] XFS (loop0): Quotacheck needed: Please wait.
[  289.627533][T10237] XFS (loop0): Quotacheck: Done.
[  289.650774][ T5814] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  289.670787][ T5814] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  289.690917][ T5814] usbhid 4-1:0.0: can't add hid device: -71
[  289.694885][ T6168] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.697156][ T5814] usbhid: probe of 4-1:0.0 failed with error -71
[  289.762756][ T5814] usb 4-1: USB disconnect, device number 19
[  289.949915][ T5773] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  290.115170][T10270] loop4: detected capacity change from 0 to 64
[  290.170250][   T27] audit: type=1800 audit(1782264261.385:86): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1570" name="file1" dev="loop4" ino=21 res=0 errno=0
[  290.326776][ T6168] hfs: node 4:3 still has 1 user(s)!
[  290.426741][T10274] loop4: detected capacity change from 0 to 1024
[  290.438173][T10274] EXT4-fs: Ignoring removed orlov option
[  290.488542][T10274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  290.542638][T10274] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.658200][T10274] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 3)
[  290.718079][T10285] bridge0: entered promiscuous mode
[  290.721326][T10274] EXT4-fs (loop4): Remounting filesystem read-only
[  290.724470][T10285] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  290.867512][ T6168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  291.665146][T10315] loop0: detected capacity change from 0 to 1024
[  291.678725][T10315] EXT4-fs: Ignoring removed orlov option
[  291.713042][T10315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  291.744338][T10315] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.917400][T10315] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.1586: lblock 3 mapped to illegal pblock 3 (length 3)
[  291.952724][T10315] EXT4-fs (loop0): Remounting filesystem read-only
[  292.047502][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  292.641876][T10319] loop4: detected capacity change from 0 to 40427
[  292.670217][T10319] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  292.684880][T10308] loop3: detected capacity change from 0 to 65536
[  292.697752][T10319] F2FS-fs (loop4): invalid crc value
[  292.735713][T10319] F2FS-fs (loop4): Found nat_bits in checkpoint
[  292.805478][T10308] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  293.008961][T10308] XFS (loop3): Ending clean mount
[  293.064441][T10308] XFS (loop3): Quotacheck needed: Please wait.
[  293.101770][T10319] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  293.176676][T10308] XFS (loop3): Quotacheck: Done.
[  293.178945][T10325] loop1: detected capacity change from 0 to 32768
[  293.315135][ T5775] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  293.370215][ T6168] syz-executor: attempt to access beyond end of device
[  293.370215][ T6168] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  293.414929][ T6168] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  294.254357][T10347] loop3: detected capacity change from 0 to 4096
[  294.306848][T10349] tap0: tun_chr_ioctl cmd 2147767520
[  294.326762][T10350] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.598967][T10355] loop1: detected capacity change from 0 to 1024
[  294.691078][T10355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  294.707347][T10355] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.789340][T10355] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.1598: lblock 3 mapped to illegal pblock 3 (length 3)
[  294.807677][T10355] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  294.820369][T10355] EXT4-fs (loop1): This should not happen!! Data will be lost
[  294.820369][T10355] 
[  294.957986][ T1098] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8)
[  295.020987][ T1098] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  295.075922][ T1098] EXT4-fs (loop1): This should not happen!! Data will be lost
[  295.075922][ T1098] 
[  295.123080][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  295.213487][T10365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1603'.
[  295.519481][T10357] loop4: detected capacity change from 0 to 32768
[  295.563248][T10357] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  295.655073][T10357] XFS (loop4): Ending clean mount
[  295.980550][T10387] loop1: detected capacity change from 0 to 512
[  295.999335][ T6168] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  296.009087][T10387] EXT4-fs: Ignoring removed bh option
[  296.044913][T10387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.064090][T10387] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.335924][T10394] loop3: detected capacity change from 0 to 256
[  296.399390][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.422416][T10418] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1621'.
[  297.459261][T10418] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1621'.
[  297.679598][T10428] program syz.3.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.807029][T10430] loop1: detected capacity change from 0 to 2048
[  297.849566][T10430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.888020][   T27] audit: type=1800 audit(1782264269.105:87): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1626" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  297.912864][ T5814] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  298.042771][T10409] loop0: detected capacity change from 0 to 32768
[  298.098565][T10409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  298.108071][T10409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  298.145936][ T5814] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  298.164187][T10409] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  298.225745][T10437] loop1: detected capacity change from 0 to 1024
[  298.226719][ T5814] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  298.233465][T10437] EXT4-fs: Ignoring removed bh option
[  298.251781][   T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  298.275433][   T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  298.299840][ T5814] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  298.301350][T10437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.350135][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.432968][T10426] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  298.457376][ T5814] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  298.492807][   T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 217ms
[  298.500201][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.518192][   T42] gfs2: fsid=syz:syz.0: jid=0: Done
[  298.567789][T10409] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  298.716679][ T5814] usb 5-1: USB disconnect, device number 15
[  299.545354][T10462] loop0: detected capacity change from 0 to 128
[  299.618478][T10462] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.687005][T10462] ext4 filesystem being mounted at /422/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  299.788921][T10462] fscrypt (loop0, inode 12): Unsupported encryption flags (0xea)
[  299.933721][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  300.144681][T10477] loop0: detected capacity change from 0 to 512
[  300.903802][T10501] loop0: detected capacity change from 0 to 16
[  300.969141][T10501] erofs: (device loop0): mounted with root inode @ nid 36.
[  301.117292][T10506] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1653'.
[  301.597052][T10521] loop4: detected capacity change from 0 to 4096
[  301.751503][T10527] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  301.935279][   T27] audit: type=1800 audit(1782264273.155:88): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1658" name="file1" dev="loop4" ino=15 res=0 errno=0
[  302.097367][T10535] loop1: detected capacity change from 0 to 1024
[  302.523529][T10544] loop1: detected capacity change from 0 to 128
[  302.596819][T10520] loop3: detected capacity change from 0 to 32768
[  302.612192][T10544] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  302.655583][T10544] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  302.822439][T10553] loop0: detected capacity change from 0 to 256
[  302.925439][T10553] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ef3, chksum : 0x1ec11f63, utbl_chksum : 0xe619d30d)
[  303.010034][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  303.626731][T10541] loop4: detected capacity change from 0 to 32768
[  304.218564][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1680'.
[  304.303642][T10587] bridge0: port 3(ip6gretap0) entered blocking state
[  304.326653][T10587] bridge0: port 3(ip6gretap0) entered disabled state
[  304.351931][T10587] ip6gretap0: entered allmulticast mode
[  304.378150][T10587] ip6gretap0: entered promiscuous mode
[  304.394032][T10587] bridge0: port 3(ip6gretap0) entered blocking state
[  304.402766][T10587] bridge0: port 3(ip6gretap0) entered forwarding state
[  304.780381][T10601] loop4: detected capacity change from 0 to 4096
[  304.793660][T10601] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  304.824315][T10601] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  304.842497][T10601] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  304.872217][T10601] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  304.891456][T10601] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  304.921400][T10601] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  304.949864][   T42] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  305.007125][T10601] ntfs: volume version 3.1.
[  305.030543][T10601] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota.
[  305.050744][T10601] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  305.109856][T10601] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp932.  You might want to try to use the mount option nls=utf8.
[  305.161320][T10601] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  305.174285][   T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  305.201341][   T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  305.233089][   T42] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  305.252147][   T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  305.260211][   T42] usb 1-1: SerialNumber: syz
[  305.506813][   T42] usb 1-1: 0:2 : does not exist
[  305.528340][   T42] usb 1-1: 0:0: failed to get current value for ch 0 (-22)
[  305.581522][   T42] usb 1-1: USB disconnect, device number 10
[  305.611978][T10613] loop4: detected capacity change from 0 to 256
[  305.625046][T10613] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  305.648775][T10613] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.690412][T10611] lo speed is unknown, defaulting to 1000
[  305.707297][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.942292][T10622] loop4: detected capacity change from 0 to 2048
[  305.947830][T10624] autofs4:pid:10624:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e)
[  305.963886][T10624] autofs4:pid:10624:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[  305.988281][T10622] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  306.029516][T10622] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  306.049302][T10622] UDF-fs: Scanning with blocksize 512 failed
[  306.137972][T10622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.661512][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1701'.
[  307.413281][T10657] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1710'.
[  307.495496][T10660] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  307.533079][T10660] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  307.811262][    C1] sched: RT throttling activated
[  308.119770][T10647] loop0: detected capacity change from 0 to 131072
[  308.138623][T10647] F2FS-fs (loop0): invalid crc value
[  308.192412][T10647] F2FS-fs (loop0): Found nat_bits in checkpoint
[  308.255361][T10647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  308.851444][T10664] loop3: detected capacity change from 0 to 32768
[  308.933889][T10664] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  309.242118][ T5775] ocfs2: Unmounting device (7,3) on (node local)
[  309.315372][T10671] loop1: detected capacity change from 0 to 32768
[  309.402817][T10671] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  309.525300][T10676] loop4: detected capacity change from 0 to 40427
[  309.543031][T10676] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  309.553519][T10676] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  309.566776][T10676] F2FS-fs (loop4): invalid crc value
[  309.570477][T10671] XFS (loop1): Ending clean mount
[  309.777065][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  309.819910][T10676] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  309.836587][T10676] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  310.044823][T10688] f2fs_ckpt-7:4: attempt to access beyond end of device
[  310.044823][T10688] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  310.065834][T10688] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  310.305847][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1720'.
[  310.496299][T10703] program syz.3.1721 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  310.564704][T10699] ip6tnl1: entered allmulticast mode
[  310.584464][   T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  310.625707][ T5783] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  310.639286][   T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  310.693940][T10707] loop1: detected capacity change from 0 to 8
[  310.711588][ T5783] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  310.929662][ T5774] SQUASHFS error: Unable to read directory block [631:72]
[  310.961012][ T5774] SQUASHFS error: Unable to read inode 0x0
[  310.994901][ T5774] SQUASHFS error: Unable to read inode 0x0
[  311.103615][T10717] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1729'.
[  311.573797][T10722] netlink: 'syz.4.1732': attribute type 1 has an invalid length.
[  311.631521][  T786] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  311.892776][T10716] loop0: detected capacity change from 0 to 32768
[  311.918693][T10716] JBD2: Ignoring recovery information on journal
[  311.979661][T10716] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  312.134017][ T5773] ocfs2: Unmounting device (7,0) on (node local)
[  312.897491][T10742] loop4: detected capacity change from 0 to 128
[  312.920456][T10742] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  312.934572][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  312.953089][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  312.964050][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  312.973559][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  312.981604][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  312.990762][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.019726][T10742] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  313.107816][T10743] lo speed is unknown, defaulting to 1000
[  313.222930][   T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  313.315580][T10732] loop0: detected capacity change from 0 to 32768
[  313.416088][T10732] 
[  313.416088][T10732]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  313.416088][T10732] 
[  313.772869][T10743] chnl_net:caif_netlink_parms(): no params data found
[  313.794929][T10732] blkno = 0, nblocks = 40
[  313.813289][T10732] ERROR: (device loop0): dbFree: block to be freed is outside the map
[  313.813289][T10732] 
[  313.963109][T10743] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.970456][T10743] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.978209][T10743] bridge_slave_0: entered allmulticast mode
[  313.986150][T10743] bridge_slave_0: entered promiscuous mode
[  313.996013][T10743] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.003366][T10743] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.010698][T10743] bridge_slave_1: entered allmulticast mode
[  314.018494][T10743] bridge_slave_1: entered promiscuous mode
[  314.045286][ T5773] 
[  314.045286][ T5773]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  314.045286][ T5773] 
[  314.077420][T10743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.088677][ T5773] 
[  314.088677][ T5773]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  314.088677][ T5773] 
[  314.092990][T10743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.187939][T10743] team0: Port device team_slave_0 added
[  314.205655][T10743] team0: Port device team_slave_1 added
[  314.257598][T10743] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.279695][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.316854][T10743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.338907][T10743] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.348147][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.383171][T10743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.506829][T10743] hsr_slave_0: entered promiscuous mode
[  314.528039][T10743] hsr_slave_1: entered promiscuous mode
[  314.547467][T10743] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.561488][T10743] Cannot create hsr debugfs directory
[  314.841489][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  315.082182][ T5086] Bluetooth: hci1: command tx timeout
[  315.132762][T10776] loop3: detected capacity change from 0 to 512
[  315.210205][T10770] loop0: detected capacity change from 0 to 32768
[  315.213850][T10776] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  315.222632][T10770] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1749 (10770)
[  315.238527][ T5783] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  315.307895][T10743] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  315.310584][T10770] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  315.336115][T10743] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  315.344378][T10770] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  315.345155][T10776] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1752: iget: bad i_size value: 360287970189639680
[  315.373246][T10776] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1752: couldn't read orphan inode 15 (err -117)
[  315.375534][T10770] BTRFS info (device loop0): using free space tree
[  315.405877][T10743] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  315.425563][T10743] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  315.432701][ T5783] usb 5-1: Using ep0 maxpacket: 32
[  315.444227][T10776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.447632][ T5783] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 59200, setting to 1024
[  315.476372][ T5783] usb 5-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  315.521679][ T5783] usb 5-1: config 0 interface 0 has no altsetting 0
[  315.551588][ T5783] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  315.568906][T10776] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  315.593048][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.629181][T10770] BTRFS info (device loop0): enabling ssd optimizations
[  315.652709][ T5783] usb 5-1: config 0 descriptor??
[  315.668661][T10770] BTRFS info (device loop0): auto enabling async discard
[  315.699911][T10774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  315.790423][T10743] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.825734][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.964725][ T5773] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  315.983176][T10743] 8021q: adding VLAN 0 to HW filter on device team0
[  316.018011][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.025311][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.155117][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.162359][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.203223][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x2
[  316.237213][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.249946][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.257893][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.265216][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.272757][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.279788][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.288210][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.296185][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.303963][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.305417][T10743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  316.313299][ T5783] elecom 0003:056E:00E6.0010: unknown main item tag 0x0
[  316.348722][ T5783] elecom 0003:056E:00E6.0010: hidraw0: USB HID v0.08 Device [HID 056e:00e6] on usb-dummy_hcd.4-1/input0
[  316.663978][ T5814] usb 5-1: USB disconnect, device number 16
[  316.948858][T10743] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.952377][T10814] loop0: detected capacity change from 0 to 4096
[  316.995066][T10814] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  317.153760][ T5086] Bluetooth: hci1: command tx timeout
[  317.180254][T10820] loop3: detected capacity change from 0 to 256
[  317.230405][T10820] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  317.480003][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.486570][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  317.677683][T10830] loop4: detected capacity change from 0 to 512
[  317.711393][T10830] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  317.826822][T10743] veth0_vlan: entered promiscuous mode
[  317.880897][T10830] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.1765: Allocating blocks 41-42 which overlap fs metadata
[  317.896447][T10832] loop3: detected capacity change from 0 to 8192
[  317.938841][T10832] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  317.962223][T10743] veth1_vlan: entered promiscuous mode
[  317.979974][T10830] EXT4-fs (loop4): Remounting filesystem read-only
[  318.010302][T10830] Quota error (device loop4): write_blk: dquota write failed
[  318.018638][T10832] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  318.061560][T10830] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  318.065632][T10832] REISERFS (device loop3): using ordered data mode
[  318.072963][T10830] Quota error (device loop4): write_blk: dquota write failed
[  318.083486][T10743] veth0_macvtap: entered promiscuous mode
[  318.095826][T10830] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  318.100032][T10832] reiserfs: using flush barriers
[  318.127036][T10832] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  318.131091][T10743] veth1_macvtap: entered promiscuous mode
[  318.143682][T10830] EXT4-fs (loop4): 1 truncate cleaned up
[  318.166648][T10830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.190162][T10832] REISERFS (device loop3): checking transaction log (loop3)
[  318.204285][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.251343][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.277587][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.300325][T10827] loop0: detected capacity change from 0 to 32768
[  318.313687][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.351684][T10827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1762 (10827)
[  318.365961][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.387879][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.410165][T10827] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  318.424946][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.436776][T10827] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  318.445929][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.457472][T10827] BTRFS info (device loop0): turning off barriers
[  318.485667][T10743] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.493945][T10827] BTRFS info (device loop0): setting nodatasum
[  318.500209][T10827] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  318.529147][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.545668][T10832] REISERFS (device loop3): Using tea hash to sort names
[  318.551154][T10827] BTRFS info (device loop0): use zstd compression, level 3
[  318.560683][T10827] BTRFS info (device loop0): using free space tree
[  318.577191][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.599734][T10832] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  318.621180][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.651170][T10832] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  318.665329][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.713908][T10743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  318.783692][T10743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.846320][T10743] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.865377][T10743] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.907723][T10743] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.917265][T10743] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.928175][T10743] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.939639][ T6168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.093838][ T5773] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  319.231895][ T5086] Bluetooth: hci1: command tx timeout
[  319.345330][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.369798][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.576187][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.597124][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.342451][T10879] loop0: detected capacity change from 0 to 1024
[  320.376587][T10879] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  320.449311][T10879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.512991][T10886] loop5: detected capacity change from 0 to 1024
[  320.558682][T10886] hfsplus: inconsistency in B*Tree (1,0,1,1,0)
[  320.569817][T10879] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  320.616000][T10886] hfsplus: failed to load root directory
[  320.801738][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.282838][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  321.311968][ T5086] Bluetooth: hci1: command tx timeout
[  321.469526][T10905] loop0: detected capacity change from 0 to 32768
[  321.505674][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.541688][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  321.550924][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.579373][    T9] usb 6-1: config 0 descriptor??
[  322.168018][T10923] loop3: detected capacity change from 0 to 128
[  322.233328][T10923] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  322.248413][    T9] ath6kl: mismatched byte count 0 vs. expected 12
[  322.260319][    T9] ath6kl: Failed to init ath6kl core: -22
[  322.273536][    T9] ath6kl_usb: probe of 6-1:0.0 failed with error -22
[  322.297390][T10923] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.428501][T10923] fscrypt (loop3, inode 12): Reserved bits set in encryption policy
[  322.455394][ T5814] usb 6-1: USB disconnect, device number 2
[  322.493760][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  323.231548][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  323.250594][T10942] loop3: detected capacity change from 0 to 2048
[  323.339941][T10947] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  323.441431][T10942] NILFS (loop3): failed to count free inodes: err=-34
[  323.441463][T10942] NILFS (loop3): failed to count free inodes: err=-34
[  323.592313][T10947] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  323.618352][T10947] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  323.657430][T10947] Remounting filesystem read-only
[  323.670941][   T49] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  323.702014][   T49] NILFS (loop3): discard dirty block: blocknr=39, size=1024
[  323.731338][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.740266][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.781929][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.804398][   T49] NILFS (loop3): discard dirty page: offset=0, ino=2
[  323.831294][   T49] NILFS (loop3): discard dirty block: blocknr=18, size=1024
[  323.849434][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.877949][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.897513][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.919624][   T49] NILFS (loop3): discard dirty page: offset=0, ino=5
[  323.936896][   T49] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[  323.954596][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.973769][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  323.993369][   T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.012565][ T5775] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  324.032413][ T5775] NILFS (loop3): discard dirty page: offset=0, ino=6
[  324.039268][ T5775] NILFS (loop3): discard dirty block: blocknr=35, size=1024
[  324.061665][ T5775] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[  324.106440][ T5775] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  324.124576][ T5775] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  324.154227][ T5775] NILFS (loop3): discard dirty page: offset=0, ino=4
[  324.171665][ T5775] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[  324.185754][ T5775] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.206436][ T5775] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.233723][ T5775] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.243060][ T5775] NILFS (loop3): discard dirty page: offset=0, ino=3
[  324.249822][ T5775] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  324.257283][ T5775] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  324.264850][ T5775] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  324.272746][ T5775] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.276667][T10963] loop0: detected capacity change from 0 to 1024
[  324.281947][ T5775] NILFS (loop3): discard dirty page: offset=196608, ino=3
[  324.281971][ T5775] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.281990][ T5775] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.282007][ T5775] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[  324.282023][ T5775] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  324.362848][T10963] hfsplus: Filesystem is marked locked, mounting read-only.
[  324.410437][T10963] hfsplus: filesystem is marked locked, leaving read-only.
[  324.456298][T10950] loop4: detected capacity change from 0 to 32768
[  324.521717][T10950] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  324.688771][T10950] XFS (loop4): Ending clean mount
[  324.728078][T10950] XFS (loop4): User initiated shutdown received.
[  324.769339][T10950] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  324.851377][T10950] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  324.859093][T10983] loop3: detected capacity change from 0 to 1024
[  324.946424][T10983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.981202][ T6168] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  325.252761][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.303435][T10996] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1819'.
[  325.341811][T10996] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  325.595239][T11000] loop3: detected capacity change from 0 to 4096
[  325.677961][T11006] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.714878][T11004] autofs4:pid:11004:autofs_fill_super: could not open pipe file descriptor
[  326.136780][T11013] loop3: detected capacity change from 0 to 128
[  326.194585][T11013] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  326.334676][T11013] ext4 filesystem being mounted at /441/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  326.482510][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  326.512498][  T786] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  326.731431][  T786] usb 5-1: Using ep0 maxpacket: 32
[  326.743808][  T786] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  326.761382][  T786] usb 5-1: config 0 has no interface number 0
[  326.781421][  T786] usb 5-1: config 0 interface 12 has no altsetting 0
[  326.792975][  T786] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  326.802636][  T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.810732][  T786] usb 5-1: Product: syz
[  326.816667][  T786] usb 5-1: Manufacturer: syz
[  326.821708][  T786] usb 5-1: SerialNumber: syz
[  326.832501][  T786] usb 5-1: config 0 descriptor??
[  326.990749][T11035] loop5: detected capacity change from 0 to 1024
[  327.081500][   T23] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  327.273814][   T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  327.297915][   T23] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  327.313573][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.325026][   T23] usb 4-1: Product: syz
[  327.329472][   T23] usb 4-1: Manufacturer: syz
[  327.334288][   T23] usb 4-1: SerialNumber: syz
[  327.349478][   T23] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  327.676683][  T786] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  327.691978][  T786] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  327.721209][  T786] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  327.748891][  T786] f81534: probe of 5-1:0.12 failed with error -71
[  327.786359][  T786] usb 5-1: USB disconnect, device number 17
[  328.118895][T11054] loop5: detected capacity change from 0 to 128
[  328.127769][T11054] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  328.147146][T11054] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  328.190292][   T23] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  328.238781][   T23] usb 4-1: USB disconnect, device number 20
[  328.529188][T11060] loop0: detected capacity change from 0 to 2048
[  328.618574][T11060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.632333][T11060] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.741915][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.866843][   T23] kernel read not supported for file /adsp1 (pid: 23 comm: kworker/1:0)
[  328.891380][ T5832] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  328.956151][T11074] loop0: detected capacity change from 0 to 1024
[  328.964500][T11074] EXT4-fs: inline encryption not supported
[  329.023555][T11074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.081505][ T5832] usb 5-1: Using ep0 maxpacket: 32
[  329.096311][ T5832] usb 5-1: config 0 has an invalid interface number: 74 but max is 0
[  329.105547][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.117995][ T5832] usb 5-1: config 0 has no interface number 0
[  329.124552][ T5832] usb 5-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  329.134988][ T5832] usb 5-1: config 0 interface 74 has no altsetting 0
[  329.153463][ T5832] usb 5-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08
[  329.159268][T11074] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.1849: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0
[  329.171362][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.221387][ T5832] usb 5-1: Product: syz
[  329.232817][ T5832] usb 5-1: Manufacturer: syz
[  329.250073][ T5832] usb 5-1: SerialNumber: syz
[  329.255780][T11074] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1802: Corrupt filesystem
[  329.289971][ T5832] usb 5-1: config 0 descriptor??
[  329.340134][ T5832] em28xx 5-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74)
[  329.385812][ T5832] em28xx 5-1:0.74: Video interface 74 found:
[  329.478065][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.948312][ T5832] em28xx 5-1:0.74: chip ID is em2765
[  330.046258][T11091] loop0: detected capacity change from 0 to 512
[  330.108948][T11091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  330.175339][T11091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.199487][T11091] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.281066][ T5832] em28xx 5-1:0.74: reading from i2c device at 0xa0 failed (error=-5)
[  330.321327][ T5832] em28xx 5-1:0.74: board has no eeprom
[  330.325392][T11091] lo speed is unknown, defaulting to 1000
[  330.351158][T11096] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 32: comm syz.0.1856: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  330.367891][ T5832] em28xx 5-1:0.74: writing to i2c device at 0xb8 failed (error=-5)
[  330.385452][ T5832] em28xx 5-1:0.74: couldn't read from i2c device 0xb8: error -5
[  330.404995][ T5832] em28xx 5-1:0.74: writing to i2c device at 0xba failed (error=-5)
[  330.436292][ T5832] em28xx 5-1:0.74: couldn't read from i2c device 0xba: error -5
[  330.457904][T11096] EXT4-fs (loop0): Remounting filesystem read-only
[  330.468028][ T5832] em28xx 5-1:0.74: writing to i2c device at 0x90 failed (error=-5)
[  330.484893][ T5832] em28xx 5-1:0.74: couldn't read from i2c device 0x90: error -5
[  330.513647][ T5832] em28xx 5-1:0.74: writing to i2c device at 0x42 failed (error=-5)
[  330.528964][ T5832] em28xx 5-1:0.74: couldn't read from i2c device 0x42: error -5
[  330.539256][ T5832] em28xx 5-1:0.74: writing to i2c device at 0x60 failed (error=-5)
[  330.581155][ T5832] em28xx 5-1:0.74: couldn't read from i2c device 0x60: error -5
[  330.602877][ T5832] em28xx 5-1:0.74: No sensor detected
[  330.654108][T11102] loop5: detected capacity change from 0 to 16
[  330.682957][T11102] erofs: (device loop5): mounted with root inode @ nid 36.
[  330.683429][ T5832] em28xx 5-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91)
[  330.731319][ T5832] em28xx 5-1:0.74: Currently, V4L2 is not supported on this model
[  330.793795][T11102] overlayfs: failed to get metacopy (-117)
[  330.823459][   T23] em28xx 5-1:0.74: Registering snapshot button...
[  330.847958][ T5832] usb 5-1: USB disconnect, device number 18
[  330.885668][ T5832] em28xx 5-1:0.74: Disconnecting em28xx
[  330.905005][   T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/input/input15
[  330.923368][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.002372][   T23] em28xx 5-1:0.74: Remote control support is not available for this card.
[  331.017125][ T5832] em28xx 5-1:0.74: Closing input extension
[  331.033882][ T5832] em28xx 5-1:0.74: Deregistering snapshot button
[  331.259747][ T5832] em28xx 5-1:0.74: Freeing device
[  331.521431][   T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  331.631775][ T5832] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  331.712760][   T23] usb 4-1: Using ep0 maxpacket: 8
[  331.740647][   T23] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  331.767924][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  331.794875][   T23] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  331.822478][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.833521][ T5832] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  331.853000][   T23] usb 4-1: config 0 descriptor??
[  331.858123][ T5832] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.875112][ T5832] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.876710][T11111] loop0: detected capacity change from 0 to 40427
[  331.885910][ T5832] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  331.907534][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0
[  331.927913][ T5832] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  331.929627][T11111] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff
[  331.948336][T11111] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4
[  331.953547][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.980547][T11111] F2FS-fs (loop0): invalid crc value
[  331.986428][ T5832] usb 5-1: config 0 descriptor??
[  332.023580][T11111] F2FS-fs (loop0): Found nat_bits in checkpoint
[  332.136034][T11111] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  332.209980][T11111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  332.283383][   T23] wacom 0003:056A:00E3.0011: unknown main item tag 0x7
[  332.290409][   T23] wacom 0003:056A:00E3.0011: unknown main item tag 0x0
[  332.317274][T11111] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x137a/0x4080
[  332.338406][   T23] wacom 0003:056A:00E3.0011: unknown main item tag 0x1
[  332.379167][   T23] wacom 0003:056A:00E3.0011: unknown main item tag 0xd
[  332.433881][   T23] wacom 0003:056A:00E3.0011: hidraw0: USB HID v0.77 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0
[  332.478776][ T5832] apple 0003:05AC:027D.0012: unknown main item tag 0x0
[  332.504460][   T23] usb 4-1: USB disconnect, device number 21
[  332.519672][ T5832] apple 0003:05AC:027D.0012: unknown main item tag 0x0
[  332.533146][ T5832] apple 0003:05AC:027D.0012: unknown main item tag 0x0
[  332.559888][ T5832] apple 0003:05AC:027D.0012: unknown main item tag 0x0
[  332.567974][ T5832] apple 0003:05AC:027D.0012: unknown main item tag 0x0
[  332.577776][ T5832] apple 0003:05AC:027D.0012: unknown main item tag 0x0
[  332.587943][ T5832] apple 0003:05AC:027D.0012: unknown main item tag 0x0
[  332.622948][T11126] fido_id[11126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  332.641925][ T5832] apple 0003:05AC:027D.0012: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0
[  332.731785][ T5832] usb 5-1: USB disconnect, device number 19
[  332.894572][T11131] fido_id[11131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  333.330126][T11135] loop5: detected capacity change from 0 to 8192
[  333.431798][T11138] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  333.506611][T11135] NILFS error (device loop5): nilfs_readdir: zero-length directory entry
[  333.550499][T11135] Remounting filesystem read-only
[  334.421693][ T5832] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  334.591863][T11165] loop5: detected capacity change from 0 to 2048
[  334.611427][ T5832] usb 5-1: Using ep0 maxpacket: 16
[  334.623030][T11169] loop0: detected capacity change from 0 to 256
[  334.632225][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.636221][T11169] exfat: Deprecated parameter 'utf8'
[  334.649955][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  334.653245][T11169] exfat: Deprecated parameter 'utf8'
[  334.667125][T11165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  334.676442][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  334.678976][T11169] exfat: Deprecated parameter 'utf8'
[  334.710076][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  334.740219][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.785231][T11169] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  334.810374][ T5832] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  334.827311][ T5832] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  334.856943][ T5832] usb 5-1: Manufacturer: syz
[  334.882910][ T5832] usb 5-1: config 0 descriptor??
[  335.144960][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'.
[  335.292120][   T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  335.300875][ T5832] rc_core: IR keymap rc-hauppauge not found
[  335.321748][ T5832] Registered IR keymap rc-empty
[  335.326800][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.381443][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.426069][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  335.443653][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19
[  335.466203][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.523187][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.525118][   T42] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  335.542462][   T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.555573][   T42] usb 6-1: config 0 descriptor??
[  335.577811][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.587061][   T42] cp210x 6-1:0.0: cp210x converter detected
[  335.621523][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.671552][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.692779][T11195] loop3: detected capacity change from 0 to 256
[  335.711598][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.761574][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.790202][T11195] FAT-fs (loop3): Directory bread(block 64) failed
[  335.811452][T11195] FAT-fs (loop3): Directory bread(block 65) failed
[  335.818143][T11195] FAT-fs (loop3): Directory bread(block 66) failed
[  335.824949][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.832361][T11195] FAT-fs (loop3): Directory bread(block 67) failed
[  335.839079][T11195] FAT-fs (loop3): Directory bread(block 68) failed
[  335.845842][T11195] FAT-fs (loop3): Directory bread(block 69) failed
[  335.852613][T11195] FAT-fs (loop3): Directory bread(block 70) failed
[  335.859279][T11195] FAT-fs (loop3): Directory bread(block 71) failed
[  335.866059][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.875423][T11195] FAT-fs (loop3): Directory bread(block 72) failed
[  335.886543][T11195] FAT-fs (loop3): Directory bread(block 73) failed
[  335.911751][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.961592][ T5832] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  335.983281][   T42] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  336.001440][ T5832] mceusb 5-1:0.0: Registered 42424242 with mce emulator interface version 1
[  336.010265][ T5832] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  336.066513][ T5832] usb 5-1: USB disconnect, device number 20
[  336.193752][   T42] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71
[  336.215905][   T42] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  336.237180][   T42] usb 6-1: cp210x converter now attached to ttyUSB0
[  336.272006][   T42] usb 6-1: USB disconnect, device number 3
[  336.325503][   T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  336.352171][   T42] cp210x 6-1:0.0: device disconnected
[  336.522462][T11193] loop0: detected capacity change from 0 to 40427
[  336.538807][T11193] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  336.548115][T11193] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  336.549532][T11193] F2FS-fs (loop0): invalid crc value
[  336.577887][T11193] F2FS-fs (loop0): Found nat_bits in checkpoint
[  336.725561][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1903'.
[  336.739812][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1903'.
[  336.760329][T11193] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  336.771517][ T5832] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  336.791412][T11193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  336.852943][T11193] syz.0.1897: attempt to access beyond end of device
[  336.852943][T11193] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  336.972921][ T5832] usb 4-1: Using ep0 maxpacket: 16
[  336.980287][ T5773] syz-executor: attempt to access beyond end of device
[  336.980287][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  337.014801][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.028127][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  337.040747][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  337.062592][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  337.081914][ T5832] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  337.091826][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  337.106402][ T5832] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  337.116062][ T5832] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  337.125585][ T5832] usb 4-1: Manufacturer: syz
[  337.133922][ T5832] usb 4-1: config 0 descriptor??
[  337.281905][ T5783] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  337.471871][ T5783] usb 5-1: Using ep0 maxpacket: 32
[  337.479539][ T5783] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  337.498339][ T5783] usb 5-1: config 0 has no interface number 0
[  337.501395][ T5832] rc_core: IR keymap rc-hauppauge not found
[  337.510730][ T5832] Registered IR keymap rc-empty
[  337.513580][ T5783] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  337.535121][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.537429][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  337.551973][ T5783] usb 5-1: Product: syz
[  337.566656][ T5783] usb 5-1: Manufacturer: syz
[  337.579143][ T5783] usb 5-1: SerialNumber: syz
[  337.591425][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  337.609816][ T5783] usb 5-1: config 0 descriptor??
[  337.622460][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  337.640254][ T5783] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  337.663397][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20
[  337.711781][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  337.761433][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  337.811592][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  337.861454][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  337.876259][ T5783] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  337.907911][ T5783] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  337.911406][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  338.003404][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  338.042905][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  338.092946][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  338.157535][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  338.202759][ T5832] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  338.245527][ T5832] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  338.261496][ T5832] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  338.275488][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  338.289715][ T5832] usb 4-1: USB disconnect, device number 22
[  338.290311][    T8] usb 5-1: USB disconnect, device number 21
[  338.363250][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  338.436868][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  338.442471][T11233] netlink: 'syz.0.1914': attribute type 5 has an invalid length.
[  338.480877][    T8] quatech2 5-1:0.51: device disconnected
[  338.644021][T11238] loop5: detected capacity change from 0 to 128
[  338.801881][T11238] syz.5.1915: attempt to access beyond end of device
[  338.801881][T11238] loop5: rw=1, sector=145, nr_sectors = 8 limit=128
[  338.828521][T11242] loop0: detected capacity change from 0 to 2048
[  338.858121][T11242] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  338.874855][   T59] kworker/u4:4: attempt to access beyond end of device
[  338.874855][   T59] loop5: rw=1, sector=153, nr_sectors = 888 limit=128
[  338.903553][T11242] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  339.004356][T11242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.231504][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  339.348423][T11255] loop3: detected capacity change from 0 to 512
[  339.353007][T11249] loop5: detected capacity change from 0 to 8192
[  339.388094][T11249] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  339.431128][T11255] EXT4-fs (loop3): 1 truncate cleaned up
[  339.437426][T11249] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  339.447397][T11249] REISERFS (device loop5): using ordered data mode
[  339.455288][T11249] reiserfs: using flush barriers
[  339.459842][T11255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.463529][T11249] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  339.489737][T11249] REISERFS (device loop5): checking transaction log (loop5)
[  339.530146][   T27] audit: type=1800 audit(1782264311.746:89): pid=11255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1924" name="file1" dev="loop3" ino=13 res=0 errno=0
[  339.550199][T11255] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1924: bg 0: block 465: padding at end of block bitmap is not set
[  339.651759][T11255] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[  339.689234][T11255] EXT4-fs (loop3): This should not happen!! Data will be lost
[  339.689234][T11255] 
[  339.725670][T11249] REISERFS (device loop5): Using tea hash to sort names
[  339.734472][T11255] EXT4-fs (loop3): Total free blocks count 0
[  339.749411][T11255] EXT4-fs (loop3): Free/Dirty block details
[  339.756798][T11249] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  339.773928][T11255] EXT4-fs (loop3): free_blocks=0
[  339.780524][T11255] EXT4-fs (loop3): dirty_blocks=2
[  339.794431][T11255] EXT4-fs (loop3): Block reservation details
[  339.800760][T11255] EXT4-fs (loop3): i_reserved_data_blocks=2
[  339.859159][T11249] overlayfs: upper fs needs to support d_type.
[  339.884951][T11249] overlayfs: upper fs does not support tmpfile.
[  339.920969][T11249] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  339.940003][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.996822][T11249] overlayfs: conflicting lowerdir path
[  340.374419][T11276] loop3: detected capacity change from 0 to 256
[  340.410032][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1931'.
[  340.710070][T11286] loop4: detected capacity change from 0 to 64
[  341.443171][T11296] loop4: detected capacity change from 0 to 4096
[  341.568642][T11288] loop5: detected capacity change from 0 to 32768
[  341.601654][T11288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1939 (11288)
[  341.679931][T11288] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  341.744609][T11288] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  341.793456][T11288] BTRFS info (device loop5): setting nodatasum
[  341.799713][T11288] BTRFS info (device loop5): force zlib compression, level 3
[  341.845449][T11288] BTRFS info (device loop5): turning on flush-on-commit
[  341.868691][T11288] BTRFS info (device loop5): max_inline at 4096
[  341.907318][T11288] BTRFS info (device loop5): using free space tree
[  342.032031][T11294] loop3: detected capacity change from 0 to 32768
[  342.108635][T11294] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.121550][T11288] BTRFS info (device loop5): enabling ssd optimizations
[  342.301515][T11294] XFS (loop3): Ending clean mount
[  342.372230][T11294] XFS (loop3): User initiated shutdown received.
[  342.391373][ T5783] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  342.419498][T11294] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  342.466200][T11294] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  342.527792][T10743] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  342.626676][ T5783] usb 1-1: Using ep0 maxpacket: 32
[  342.630970][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  342.653313][ T5783] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  342.684844][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.733152][ T5783] usb 1-1: config 0 descriptor??
[  342.981795][ T5783] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  343.002832][ T5783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  343.037185][ T5783] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  343.048355][ T5783] usb 1-1: media controller created
[  343.167146][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  343.254498][ T5783] az6027: usb out operation failed. (-71)
[  343.286315][ T5783] az6027: usb out operation failed. (-71)
[  343.292355][ T5783] stb0899_attach: Driver disabled by Kconfig
[  343.298459][ T5783] az6027: no front-end attached
[  343.298459][ T5783] 
[  343.321128][ T5783] az6027: usb out operation failed. (-71)
[  343.341092][ T5783] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  343.365999][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21
[  343.421566][ T5783] dvb-usb: schedule remote query interval to 400 msecs.
[  343.428594][ T5783] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  343.480726][ T5783] usb 1-1: USB disconnect, device number 11
[  343.521816][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  343.616588][ T5783] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  343.710856][T11347] loop4: detected capacity change from 0 to 2048
[  343.752346][    T9] usb 4-1: Using ep0 maxpacket: 16
[  343.765732][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  343.780096][    T9] usb 4-1: config 0 has no interface number 0
[  343.786563][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.801385][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.811698][    T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  343.820793][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.863274][    T9] usb 4-1: config 0 descriptor??
[  344.273303][   T11] tipc: Subscription rejected, illegal request
[  344.290708][T11360] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1961'.
[  344.312301][    T9] hid (null): unknown global tag 0xd
[  344.317756][    T9] hid (null): bogus close delimiter
[  344.331283][    T9] hid (null): bogus close delimiter
[  344.514223][   T23] usb 4-1: USB disconnect, device number 23
[  344.818110][T11364] loop4: detected capacity change from 0 to 32768
[  344.840335][T11364] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  344.849598][T11364] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  344.912155][ T5788] Bluetooth: hci4: command 0x1003 tx timeout
[  344.922259][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  344.939317][T11364] XFS (loop4): Ending clean mount
[  344.947424][T11364] XFS (loop4): Quotacheck needed: Please wait.
[  345.002359][ T3065] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  345.019273][T11378] loop5: detected capacity change from 0 to 16
[  345.029838][T11378] erofs: (device loop5): mounted with root inode @ nid 36.
[  345.139359][T11364] XFS (loop4): Quotacheck: Done.
[  345.257262][ T3065] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  345.260483][ T6168] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  345.280941][ T3065] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  345.309282][T11382] loop3: detected capacity change from 0 to 64
[  345.318909][ T3065] usb 1-1: config 0 interface 0 has no altsetting 0
[  345.343669][ T3065] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  345.366724][ T3065] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  345.395788][ T3065] usb 1-1: Product: syz
[  345.400027][ T3065] usb 1-1: Manufacturer: syz
[  345.435311][ T3065] usb 1-1: SerialNumber: syz
[  345.462654][ T3065] usb 1-1: config 0 descriptor??
[  345.496593][ T3065] usb 1-1: selecting invalid altsetting 0
[  345.753326][    T9] usb 1-1: USB disconnect, device number 12
[  345.890803][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  346.042162][   T42] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  346.137628][T11384] loop5: detected capacity change from 0 to 32768
[  346.248376][   T42] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  346.278096][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.302327][   T42] usb 5-1: Product: syz
[  346.322775][   T42] usb 5-1: Manufacturer: syz
[  346.332028][   T42] usb 5-1: SerialNumber: syz
[  346.418861][T11397] loop3: detected capacity change from 0 to 64
[  346.499432][   T27] audit: type=1800 audit(1782264318.716:90): pid=11397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1975" name="file1" dev="loop3" ino=21 res=0 errno=0
[  346.695544][   T42] rtl8150 5-1:1.0: couldn't reset the device
[  346.710811][   T42] rtl8150: probe of 5-1:1.0 failed with error -5
[  346.725288][   T42] usb 5-1: USB disconnect, device number 22
[  346.941911][T11412] loop5: detected capacity change from 0 to 16
[  346.957867][T11412] erofs: (device loop5): mounted with root inode @ nid 36.
[  346.987474][T11412] erofs: (device loop5): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  347.157834][T11416] loop5: detected capacity change from 0 to 64
[  347.416772][T11420] loop5: detected capacity change from 0 to 4096
[  347.425056][T11420] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  347.433844][T11422] loop4: detected capacity change from 0 to 512
[  347.478775][T11420] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  347.502713][T11420] ntfs3: loop5: Failed to load $Extend (-22).
[  347.513062][T11420] ntfs3: loop5: Failed to initialize $Extend.
[  347.550371][   T27] audit: type=1800 audit(1782264319.756:91): pid=11420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1985" name="file1" dev="loop5" ino=30 res=0 errno=0
[  347.583974][T11420] ntfs3: loop5: ino=0, attr_set_size
[  347.589123][T11422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.667037][T11422] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  347.980134][T11431] loop0: detected capacity change from 0 to 1024
[  348.074766][ T6168] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.651431][ T5783] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  348.859721][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.886313][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.906173][ T5783] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  348.917074][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.945019][ T5783] usb 5-1: config 0 descriptor??
[  349.390230][ T5783] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  349.419761][ T5783] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  349.442249][ T5783] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  349.460522][ T5783] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  349.475833][ T5783] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  349.509537][ T5783] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  349.525718][T11454] loop3: detected capacity change from 0 to 40427
[  349.563882][T11454] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  349.570916][T11454] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  349.634444][ T5783] playstation 0003:054C:0DF2.0014: Invalid reportID received, expected 9 got 32
[  349.647534][ T5783] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense pairing info: -22
[  349.658152][ T5783] playstation 0003:054C:0DF2.0014: Failed to get MAC address from DualSense
[  349.680132][T11454] F2FS-fs (loop3): invalid crc value
[  349.691413][T11454] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  349.709828][ T5783] playstation 0003:054C:0DF2.0014: Failed to create dualsense.
[  349.753438][ T5783] playstation: probe of 0003:054C:0DF2.0014 failed with error -22
[  349.765726][T11454] F2FS-fs (loop3): Found nat_bits in checkpoint
[  349.861641][ T5783] usb 5-1: USB disconnect, device number 23
[  349.960967][T11454] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  349.968365][T11454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  350.090446][ T5775] syz-executor: attempt to access beyond end of device
[  350.090446][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  350.167872][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  350.571659][   T23] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  350.821924][   T23] usb 1-1: unable to get BOS descriptor or descriptor too short
[  350.830762][   T23] usb 1-1: not running at top speed; connect to a high speed hub
[  350.858721][   T23] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f
[  350.879448][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.906592][T11489] loop3: detected capacity change from 0 to 512
[  350.908146][   T23] usb 1-1: Product: syz
[  350.931437][   T23] usb 1-1: Manufacturer: syz
[  350.936118][   T23] usb 1-1: SerialNumber: syz
[  351.004265][T11489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.177901][   T23] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  351.276098][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.708748][T11503] loop5: detected capacity change from 0 to 512
[  351.781826][T11503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.789486][   T23] gp8psk: usb out operation failed.
[  351.805265][   T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  351.817253][   T23] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19)
[  351.831582][T11503] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.844379][   T23] usb 1-1: USB disconnect, device number 13
[  352.039217][T10743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.244285][T11513] loop5: detected capacity change from 0 to 512
[  352.270706][T11513] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  352.333056][T11513] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  352.421612][T11513] Quota error (device loop5): write_blk: dquota write failed
[  352.429363][T11513] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[  352.454539][T11513] Quota error (device loop5): write_blk: dquota write failed
[  352.471682][T11513] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  352.491723][T11513] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.2018: Failed to acquire dquot type 1
[  352.546149][T11513] EXT4-fs (loop5): 1 truncate cleaned up
[  352.549351][T11517] loop4: detected capacity change from 0 to 4096
[  352.556503][T11513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.586679][T11517] NILFS (loop4): invalid segment: Checksum error in segment payload
[  352.631878][T11517] NILFS (loop4): trying rollback from an earlier position
[  352.713900][T11517] NILFS (loop4): recovery complete
[  352.752486][T11522] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.885503][T10743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.662280][T11548] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  353.801581][   T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  353.905006][T11554] loop0: detected capacity change from 0 to 1024
[  353.906583][T11555] loop5: detected capacity change from 0 to 2048
[  353.956430][T11555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  353.993068][   T23] usb 4-1: Using ep0 maxpacket: 32
[  354.017892][   T23] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  354.026423][   T23] usb 4-1: config 0 has no interface number 0
[  354.038862][   T27] audit: type=1800 audit(1782264326.256:92): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2035" name="file1" dev="loop5" ino=1415 res=0 errno=0
[  354.043174][   T23] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  354.118096][   T23] usb 4-1: config 0 interface 85 has no altsetting 0
[  354.133833][   T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  354.157351][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.181679][   T23] usb 4-1: Product: syz
[  354.187730][   T23] usb 4-1: Manufacturer: syz
[  354.204606][   T23] usb 4-1: SerialNumber: syz
[  354.221918][   T23] usb 4-1: config 0 descriptor??
[  354.437220][   T42] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  354.561369][ T5783] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  354.638613][   T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  354.660547][   T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  354.679196][   T42] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  354.688585][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.701140][   T42] usb 1-1: Product: syz
[  354.705679][   T42] usb 1-1: Manufacturer: syz
[  354.710480][   T42] usb 1-1: SerialNumber: syz
[  354.719017][   T42] usb 1-1: config 0 descriptor??
[  354.725438][T11557] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  354.733391][T11557] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  354.762115][ T5783] usb 5-1: Using ep0 maxpacket: 32
[  354.792465][ T5783] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  354.817581][ T5783] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  354.828148][ T5783] usb 5-1: config 0 interface 0 has no altsetting 0
[  354.843701][ T5783] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  354.860039][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.870188][ T5783] usb 5-1: Product: syz
[  354.908703][ T5783] usb 5-1: Manufacturer: syz
[  354.916019][ T5783] usb 5-1: SerialNumber: syz
[  354.927098][ T5783] usb 5-1: config 0 descriptor??
[  354.952250][T11557] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  354.959763][T11557] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  355.010697][   T23] appletouch 4-1:0.85: Geyser mode initialized.
[  355.030054][   T23] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input22
[  355.054616][    C0] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  355.178649][   T42] Error reading MAC address
[  355.234688][   T42] usb 1-1: USB disconnect, device number 14
[  355.275746][    T9] usb 4-1: USB disconnect, device number 24
[  355.340263][    T9] appletouch 4-1:0.85: input: appletouch disconnected
[  355.353363][ T5783] gs_usb 5-1:0.0: Configuring for 244 interfaces
[  355.641910][T11577] loop5: detected capacity change from 0 to 32768
[  355.699549][T11577] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  355.764258][ T5783] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  355.775514][ T5783] gs_usb: probe of 5-1:0.0 failed with error -71
[  355.787770][ T5783] usb 5-1: USB disconnect, device number 24
[  355.935307][T11580] 
[  355.937707][T11580] ======================================================
[  355.944759][T11580] WARNING: possible circular locking dependency detected
[  355.951811][T11580] syzkaller #0 Not tainted
[  355.956262][T11580] ------------------------------------------------------
[  355.963310][T11580] syz.5.2046/11580 is trying to acquire lock:
[  355.969404][T11580] ffff888059d58660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360
[  355.981145][T11580] 
[  355.981145][T11580] but task is already holding lock:
[  355.981818][T11582] loop3: detected capacity change from 0 to 2048
[  355.988519][T11580] ffff888059d586f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360
[  355.988580][T11580] 
[  355.988580][T11580] which lock already depends on the new lock.
[  355.988580][T11580] 
[  355.988587][T11580] 
[  355.988587][T11580] the existing dependency chain (in reverse order) is:
[  355.988592][T11580] 
[  355.988592][T11580] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  355.988667][T11580]        down_read+0x46/0x2e0
[  356.037821][T11580]        ocfs2_init_acl+0x30a/0x770
[  356.043042][T11580]        ocfs2_mknod+0x1427/0x2310
[  356.048187][T11580]        ocfs2_mkdir+0x196/0x430
[  356.053241][T11580]        vfs_mkdir+0x2a5/0x470
[  356.058062][T11580]        do_mkdirat+0x1dc/0x450
[  356.062923][T11580]        __x64_sys_mkdirat+0x89/0xa0
[  356.068315][T11580]        do_syscall_64+0x55/0xb0
[  356.073312][T11580]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.079836][T11580] 
[  356.079836][T11580] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  356.088404][T11580]        down_read+0x46/0x2e0
[  356.093100][T11580]        ocfs2_start_trans+0x3a8/0x6f0
[  356.098578][T11580]        ocfs2_modify_bh+0xe4/0x4c0
[  356.103795][T11580]        ocfs2_local_read_info+0x1433/0x17d0
[  356.109791][T11580]        dquot_load_quota_sb+0x734/0xb30
[  356.115466][T11580]        dquot_load_quota_inode+0x2d7/0x5c0
[  356.121406][T11580]        ocfs2_enable_quotas+0x1c4/0x4a0
[  356.127059][T11580]        ocfs2_fill_super+0x4187/0x5030
[  356.132649][T11580]        mount_bdev+0x21c/0x2c0
[  356.137534][T11580]        legacy_get_tree+0xea/0x180
[  356.142764][T11580]        vfs_get_tree+0x8c/0x280
[  356.147712][T11580]        do_new_mount+0x24a/0xa40
[  356.152751][T11580]        __se_sys_mount+0x2e7/0x3d0
[  356.157960][T11580]        do_syscall_64+0x55/0xb0
[  356.162913][T11580]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.169438][T11580] 
[  356.169438][T11580] -> #1 (sb_internal#5){.+.+}-{0:0}:
[  356.176993][T11580]        ocfs2_start_trans+0x2a9/0x6f0
[  356.182477][T11580]        ocfs2_setattr+0x10e8/0x1bf0
[  356.187781][T11580]        notify_change+0xb05/0xde0
[  356.192921][T11580]        chown_common+0x3f3/0x5b0
[  356.197967][T11580]        do_fchownat+0x14b/0x240
[  356.202917][T11580]        __x64_sys_lchown+0x85/0x90
[  356.208141][T11580]        do_syscall_64+0x55/0xb0
[  356.213090][T11580]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.219518][T11580] 
[  356.219518][T11580] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  356.228306][T11580]        __lock_acquire+0x37ef/0x7d80
[  356.233732][T11580]        lock_acquire+0x19e/0x420
[  356.238763][T11580]        down_write+0x97/0x200
[  356.243538][T11580]        ocfs2_try_remove_refcount_tree+0xb7/0x360
[  356.250060][T11580]        ocfs2_truncate_file+0xe87/0x1530
[  356.255798][T11580]        ocfs2_setattr+0x15b8/0x1bf0
[  356.261101][T11580]        notify_change+0xb05/0xde0
[  356.266226][T11580]        do_truncate+0x1b0/0x240
[  356.271175][T11580]        vfs_truncate+0x266/0x300
[  356.276216][T11580]        do_sys_truncate+0xf6/0x1c0
[  356.281425][T11580]        do_syscall_64+0x55/0xb0
[  356.286379][T11580]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.292809][T11580] 
[  356.292809][T11580] other info that might help us debug this:
[  356.292809][T11580] 
[  356.303139][T11580] Chain exists of:
[  356.303139][T11580]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  356.303139][T11580] 
[  356.318381][T11580]  Possible unsafe locking scenario:
[  356.318381][T11580] 
[  356.325845][T11580]        CPU0                    CPU1
[  356.331305][T11580]        ----                    ----
[  356.336673][T11580]   lock(&oi->ip_xattr_sem);
[  356.341274][T11580]                                lock(&journal->j_trans_barrier);
[  356.349089][T11580]                                lock(&oi->ip_xattr_sem);
[  356.356208][T11580]   lock(&ocfs2_file_ip_alloc_sem_key);
[  356.361761][T11580] 
[  356.361761][T11580]  *** DEADLOCK ***
[  356.361761][T11580] 
[  356.369906][T11580] 3 locks held by syz.5.2046/11580:
[  356.375122][T11580]  #0: ffff88807add2418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  356.384384][T11580]  #1: ffff888059d589d8 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: do_truncate+0x19c/0x240
[  356.394763][T11580]  #2: ffff888059d586f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360
[  356.405827][T11580] 
[  356.405827][T11580] stack backtrace:
[  356.411751][T11580] CPU: 0 PID: 11580 Comm: syz.5.2046 Not tainted syzkaller #0
[  356.419215][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  356.429364][T11580] Call Trace:
[  356.432718][T11580]  <TASK>
[  356.435713][T11580]  dump_stack_lvl+0x18c/0x250
[  356.440436][T11580]  ? load_image+0x420/0x420
[  356.444995][T11580]  ? show_regs_print_info+0x20/0x20
[  356.450210][T11580]  ? print_circular_bug+0x12b/0x1a0
[  356.455426][T11580]  check_noncircular+0x2fc/0x400
[  356.460381][T11580]  ? print_deadlock_bug+0x5d0/0x5d0
[  356.465595][T11580]  ? lockdep_lock+0xf5/0x230
[  356.470199][T11580]  ? lockdep_unlock+0x146/0x2e0
[  356.475111][T11580]  ? _find_first_zero_bit+0xd6/0x100
[  356.480450][T11580]  __lock_acquire+0x37ef/0x7d80
[  356.485331][T11580]  ? verify_lock_unused+0x140/0x140
[  356.490552][T11580]  lock_acquire+0x19e/0x420
[  356.495099][T11580]  ? ocfs2_try_remove_refcount_tree+0xb7/0x360
[  356.501278][T11580]  ? __might_sleep+0xe0/0xe0
[  356.505939][T11580]  ? read_lock_is_recursive+0x20/0x20
[  356.511334][T11580]  ? mapping_evict_folio+0x530/0x530
[  356.516659][T11580]  down_write+0x97/0x200
[  356.520916][T11580]  ? ocfs2_try_remove_refcount_tree+0xb7/0x360
[  356.527390][T11580]  ? down_read_killable+0x340/0x340
[  356.532698][T11580]  ocfs2_try_remove_refcount_tree+0xb7/0x360
[  356.538701][T11580]  ? ocfs2_remove_refcount_tree+0xe50/0xe50
[  356.544616][T11580]  ? up_write+0x1be/0x410
[  356.549039][T11580]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  356.554781][T11580]  ocfs2_truncate_file+0xe87/0x1530
[  356.560006][T11580]  ? ocfs2_simple_size_update+0x4a0/0x4a0
[  356.565747][T11580]  ? jbd2_journal_begin_ordered_truncate+0xaa/0x150
[  356.572381][T11580]  ? __lock_acquire+0x7d80/0x7d80
[  356.577425][T11580]  ? do_raw_spin_lock+0x11f/0x2b0
[  356.582566][T11580]  ? __rwlock_init+0x150/0x150
[  356.587433][T11580]  ? ocfs2_rw_lock+0x138/0x250
[  356.592232][T11580]  ? do_raw_spin_unlock+0x121/0x230
[  356.597450][T11580]  ? _raw_spin_unlock+0x28/0x40
[  356.602495][T11580]  ? jbd2_journal_begin_ordered_truncate+0xb4/0x150
[  356.609099][T11580]  ocfs2_setattr+0x15b8/0x1bf0
[  356.613888][T11580]  ? ocfs2_extend_allocation+0x1830/0x1830
[  356.619730][T11580]  ? ktime_get_coarse_real_ts64+0x2f/0x120
[  356.625553][T11580]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  356.631821][T11580]  ? ktime_get_coarse_real_ts64+0x10a/0x120
[  356.637737][T11580]  ? current_time+0x196/0x290
[  356.642429][T11580]  ? inode_set_ctime_current+0x2e0/0x2e0
[  356.648159][T11580]  ? evm_inode_setattr+0x10a/0x6c0
[  356.653316][T11580]  ? security_inode_setattr+0xdc/0x140
[  356.658807][T11580]  ? try_break_deleg+0x79/0x120
[  356.663671][T11580]  ? ocfs2_extend_allocation+0x1830/0x1830
[  356.669496][T11580]  notify_change+0xb05/0xde0
[  356.674108][T11580]  do_truncate+0x1b0/0x240
[  356.678575][T11580]  ? put_page_bootmem+0x2b0/0x2b0
[  356.683614][T11580]  ? HAS_UNMAPPED_ID+0x101/0x170
[  356.688602][T11580]  ? bpf_lsm_path_truncate+0x9/0x10
[  356.693837][T11580]  vfs_truncate+0x266/0x300
[  356.698357][T11580]  do_sys_truncate+0xf6/0x1c0
[  356.703052][T11580]  ? lock_chain_count+0x20/0x20
[  356.708004][T11580]  ? break_lease+0xd0/0xd0
[  356.712436][T11580]  ? lockdep_hardirqs_on+0x98/0x150
[  356.717692][T11580]  do_syscall_64+0x55/0xb0
[  356.722124][T11580]  ? clear_bhb_loop+0x40/0x90
[  356.726811][T11580]  ? clear_bhb_loop+0x40/0x90
[  356.731593][T11580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.737513][T11580] RIP: 0033:0x7f73cf59ce59
[  356.742088][T11580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.762009][T11580] RSP: 002b:00007f73d04f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  356.770478][T11580] RAX: ffffffffffffffda RBX: 00007f73cf816090 RCX: 00007f73cf59ce59
[  356.778459][T11580] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000180
[  356.786452][T11580] RBP: 00007f73cf632e6f R08: 0000000000000000 R09: 0000000000000000
[  356.794437][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.802422][T11580] R13: 00007f73cf816128 R14: 00007f73cf816090 R15: 00007ffca01d97b8
[  356.810413][T11580]  </TASK>
[  356.865931][T11582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.918048][T10743] ocfs2: Unmounting device (7,5) on (node local)
[  356.951372][   T27] audit: type=1800 audit(1782264329.156:93): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2048" name="file1" dev="loop3" ino=1415 res=0 errno=0