last executing test programs:

1m42.332612586s ago: executing program 0 (id=1064):
mkdirat(0xffffffffffffff9c, &(0x7f0000005200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000005240)='./sys\x00', &(0x7f0000005280)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000005340)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0)
write(r0, &(0x7f0000005380)='p0,0x800000000000000i,0', 0x17)

1m42.145927042s ago: executing program 0 (id=1067):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001040)=0x15)
ioctl(r0, 0x40204706, &(0x7f0000001100))

1m39.97307672s ago: executing program 0 (id=1084):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000280)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4a7, &(0x7f00000002c0)="$eJzs3E1sFFUcAPD/7LallY9WRBQEraCR+NHSgsrBAxpNPGhiogc81rYgslBDawKk0WIMHg2Jd+PRxLMHEw9ejHowJl418WhIiPYCeKqZnRm6LbulW9qudH+/ZHffm4++9+a9t/tmXmcCaFv96VsSsSUifo+I3iy6cIP+7OP67PTojdnp0STm5t78O6lud212erTYtNhvcx45UIoofZLE0eTWdCfPXzg1UqmMn83jg1On3x+cPH/hmZOnR06Mnxg/M3zkyOFDQ88/N/zsqpQzLde13R9O7Nn16tuXXx89dvmdn75Os7Vzb7a+thy3daNOgeroT4/aP3NVi9c93kTe7wZba8JJRwszQlPKEZFWV2e1//dGOeYrrzde+bilmQPWVPrbtKnx6pk5YANLotU5AFqj+KFPz3+L1zoNPf4Xrr4Y0ZWHr89Oj16fnc6jHVHKAt+sZfr9EXFs5t8v0lc0ex0CAGAFOtO3p+uN/0qxs/qZzXVsy+dQ+iLi3ojYHhH3RcSOiLg/orrtAxHxYLbzXO8y0+9fFL91/FO6UjfPqyQd/70wP/arvvJ0i4++ch7bWi1/Z3L8ZGX8YH5MDkTnpjQ+tEQa37/822eN1tWO/9JXmn4xFswzcKVj0QW6sZGpkdU6CFcvRuzuqC1/MbeV3JwJSJfsiojdzf3pbUXg5JNf7Wm00e3Lv4RVmGea+zLiiaz+Z2JB/c/P8SVLz08Odkdl/OBg0Spu9fOvl95olP4dlX8VXN33UBaYb/+LtqhpaJXK+NnJ5tO49MenDc9pVtr+u5K3qn3yl3ezZedGpqbODkV0Ja9V48U5XXX58Py+50ametJ4sX3a/g/sr9//t+f7pPWfHqW0Ee+NiIcj4pE8749GxL6I2L9E+X986bH3lih/Ekm0rv4vRozV/f672f77ktr5+hUEyqd++LbRjPny6v9wzFS/azPV77/bWG4G7/DwAQAAwF2hFBFbIikNZOH+LVEqDQxk/8O/I+4pVSYmp546PvHBmbHsHoG+6CwVV7p6a66HDiUz+V/M4sP5teJi/aH8uvHn5Z5qfGB0ojLW4rJDu9u8sP9H0f9Tf5VbnTtgzblfC9rX4v5falE+gPW3nN9/5wKwMS3s/93pW0+r8gKsL+f/0L7q9f+PFsWN/2FjWtj/v4uIP+s8sg7YiIz/oX3p/9C+9H9oS83czh9HG63qjohmHgtQ3Cyw8qcKdC/7Dv92CRRPvFjLtHriwqmufEmUWlTScpONbUME0h6zvonOP0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbvZfAAAA//9Mbt54")
write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000ffff3201"], 0x138)

1m39.772515217s ago: executing program 0 (id=1087):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000300)="$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")
mount$overlay(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x2000000, &(0x7f0000000c00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x8100, 0x101)
getdents64(r0, 0x0, 0x0)

1m39.227779225s ago: executing program 0 (id=1090):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYBLOB="f62df7d5e2aac04a2e3988eac183b036ca66550e46251fe5a1", @ANYRESHEX=0x0, @ANYRES16=0x0], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1m38.706749157s ago: executing program 0 (id=1093):
unshare(0x22020600)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r0, r1}, 0xc)

1m38.038587657s ago: executing program 32 (id=1093):
unshare(0x22020600)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r0, r1}, 0xc)

13.209890897s ago: executing program 3 (id=1894):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2808080, &(0x7f0000000780)={[{@rodir}, {@shortname_win95}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8}, {@fat=@showexec}, {@fat=@nocase}, {@uni_xlate}, {@utf8no}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x81, 0x2b1, &(0x7f0000000280)="$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")
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file0/file0\x00', 0x5808020, 0x0, 0xc2, 0x0, &(0x7f00000005c0))
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
rename(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000740)='./file0\x00')

12.801669517s ago: executing program 3 (id=1909):
mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./pipefs\x00', 0x1df)
mount(0x0, &(0x7f00000015c0)='./pipefs\x00', &(0x7f0000001600)='rpc_pipefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001640)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
writev(r0, &(0x7f0000001440)=[{&(0x7f0000001540)='x', 0x1}], 0x1)

12.673811067s ago: executing program 3 (id=1900):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_SRC={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000811}, 0x24000010)

12.511200659s ago: executing program 3 (id=1902):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
syz_mount_image$iso9660(&(0x7f0000001600), &(0x7f0000001640)='./file0\x00', 0x800, &(0x7f0000001680)=ANY=[], 0x5, 0x7fd, &(0x7f00000016c0)="$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")
mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3)

12.151998886s ago: executing program 3 (id=1905):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
utimensat(r1, 0x0, 0x0, 0x0)

11.884378022s ago: executing program 3 (id=1920):
r0 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[], 0x7d, 0x1507, &(0x7f0000000200)="$eJzs3Au0TlX3MPA511qb4+TyJLnvuebmSS6LJAklqUiSJCT3hCRJkiRxyC0JScj1JLmH3NNJx/1+yT3p5JUkSUhIsr5xpOHf+77/v9733/vp+878jbHHWfPsPdee68yxn2fvZ4zzfNt5SNUG1arUZWb4d+jfBvjrjyQASACA/gCQAwACACibs2zO9P1ZNCb9WycR/yH1pl3pCsSVJP3P2KT/GZv0P2OT/mds0v+MTfqfsUn/MzbpvxAZ2ox8V8uWcTf5/P//cep/kyzv/xkC/nc7pP//v9H/0tHS/4xN+p+xSf8zNul/RhZc6QLEFSbXf8Ym/RciQ/vTP1Ned+ZKf6Yt27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/xec8ZcYAPhtfKXrEkIIIYQQQgghxJ/Hv3+lKxBCCCGEEEIIIcR/HoICDQYCyASZIQGyQCJcBVkhG2SHHBCDqyEnXAO54FrIDXkgL+SD/FAACkIIBBYYIigEhSEO10ERuB6KQjEoDiXAQUkoBTdAabgRysBNUBZuhnJwC5SHChfOme52qAwKqsCdcBfcDVWhGtwD1eFeqAH3QU24H2rBA1AbHoQ68BDUhXpQHx6GBvAINIRG0BiaQFNoBs0vk5+c45/lvwjd4CXoDj0gCXpCL3gZekMf6Av9oD+8AgPgVRgIr8EgGAxD4HUYCm/AMHgThsMIGAlvwSgYDWNgLIyD8ZAMb8MEeAcmwruPZIPJMAWmwjSYDjPgPZgJs2A2vA9zYC7Mg+QsC2AhLIIPYDF8CCnwESyBjyEVlsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAU+ga2wDbbDDtgJu2A3fAp74DPYC59DGn7xL+af/n0+dEFAQIUKDRrMhJkwARMwERMxK2bF7JgdYxjDnJgTc2EuzI25MS/mxSTMjwWxIBISMjIWwkIYxzgWwSJYFIticSyODh2WwlJYGm/EMlgGy2JZLIflsDxWwAp4K96KlbASVsbKWAWr4F14F1bFqngP3oP3Yg2sgTWxJtbCWlgba2MdrIN1sS7Wx/rYABtgQ2yIjbExNsWm2BybYwtsgS2xJbbG1tgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AVfwBfwRXwRX8KXsAfepXpiL+yFvbE39sV+2A9fwQH4Kr6Kr+EgHIxD8HV8Hd/AYXgKh+MIHIkjsZIajWNwLLIaj8mYjJlhAk7EiTgJJ+NknIrTcDrOwBk4E2fhLHwf5+BcnIvzcT4uxEW4CBfjh5iCKbgET2MqLsVluBxX4EpcgatxDa7Gdbge1+FG3IibcTN+gp/gNtyGO3AH7sJd+Cl+ip/hZzgI0zAN9+E+3I/78QAewIN4EA/hITyMh/EIHsGjeBSP4XE8gcfxJJ7EU3gazwDAWTyL5/Acnsfz6Re/SmeUUZlUJpWgElSiSlRZVVaVXWVXMRVTOVVOlUvlUrlVbpVX5VX5VX5VUBVUpEixilQhVUjFVVwVUUVUUVVUFVfFlVNOlVKlVGlVWpVRZVRZdbMqp25R5VUF1crdqm5VlVRrV1ndoaqoKpkAQFVV1VQ1VV1VVzVUDVVT1VS1VC1VWz2o6qie2BfrqfTONFCDsaEago1VE9VUNVNv4KOqhRqGLVUr1Vo9rkbgcGyrWrh26inVXo3BDuoZNRafVZ3UeOysnldd1Auqq3pRdVMtXXfVQ03CnqqXmoq9VR/VV/VTM/Fuld6xquo19WLmwWqIel0txDfUMPWmGq5GqJHqLTVKjVZj1Fg1To1XyeptNUG9oyaqd9UkNVlNUVPVNDVdzVDvqZlqlpqt3ldz1Fw1T81XC9RCtUh9oBarD1WK+kgtUR+rVLVULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Rb1idqqtqntaofaqXap3epTtUd9pvaqz1Wa+kLtU39T+9WX6oD6Sh1UX6tD6ht1WH2rjqjv1FH1vTqmjqsT6gd1Uv2oTqnT6oz6SZ1VP6tz6hd1XnkFGrXSWhsd6Ew6s07QWXSivkpn1dl0dp1Dx/TVOqe+RufS1+rcOo/Oa/Lp/LqALqhDTdpq1pEupAvruL5OF9HX66K6mC6uS2inS+pS+gZdWt+oy+ibdFl9sy6nb9HldQVd0YO+TVfSt+vK+g5dRd+p79J366q6mr5HV9f36hr6Pl1T369r6Qd0bf2grqMf0nV1PV1fP6wb6Ed0Q91IN9ZNdFPdTDfXj+oW+jHdUrfSrfXjuo1+QrfVT+p2+indXj+tO+hndEf9rO6kn9Od9fO6i35Bd9W/6PPa6+66h07SPXUv/bLurfvovrqf7q9f0QP0q3qgfk0P0oP1EP26Hqrf0MP0m3q4HqFH6rf0KD1aj9Fj9Tg9Xifrt/UE/Y6eqN/Vk/RkPUVP1dP0dN334kyz/0D+O/8kf+CFs2/WW/QneqveprfrHXqn3qV36916j96j9+q9Ok2n6X16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+rj+Sf+gT+of9Sl9Wp/WP+mz+qw+d/FvAAaNMtoYE5hMJrNJMFlMornKZDXZTHaTw8TM1SanucbkMtea3CaPyWvymfymgCloQkPGGjaRKWQKm7i5zhQx15uippgpbkoYZ0qaUuaG/3X+5eprbpqbFqaFaWlamtamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPpYrqYrqar6Wa6me6mu0kySaaXedn0Nn1MX9PP9DevmAFmgBloBppBZpAZYoaYoWaoGWaGmeFmuBlpRppRZpQZY8aYcWacSfY5zAQzwUw0E80kM8lM6Z/DTDPTzAwzw8w0M81sM9vMMXPMPDPPLDALzCKzyCw2i02KSTFLzBKTapaapWa5WW5WmpVmtVlt1pq1Zr1ZbzaajSbVbDFbzFaz1Ww3281Os9PsNrvNHrPH7DV7TZpJM/vMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFzwpwwJ81Jc8qcMmfMGXPWnDXnzDlz3pxPv+0LVKACE5ggU5ApSAgSgsQgMcgaZA2yB9mDWBALcgY5g1zBtUHuIE+QN8gX5A8KBAWDMKDABhxEQaGgcBAPrguKBNcHRYNiQfGgROCCkkGp4IagdHBjUCa4KSgb3ByUC24JygcVgorBrcFtQaXg9qBycEdQJbgzuCu4O6gaVAvuCaoH9wY1gvuCmsH9Qa3ggaB28GBQJ3goqBvUC+oHDwcNgkeChkGjoHHQJGgaNAua/6nze38qz2Oue9gjTAp7hr3Cl8PeYZ+wb9gv7B++Eg4IXw0Hhq+Fg8LB4ZDw9XBo+EY4LHwzHB6OCEeGb4WjwtHhmHBsOC4cHyaHb4cTwnfCieG74aRwcjglmBpOC6eHM8L3wpnhrHB2+H44J5wbzgvnhwvChSH+eksMKeFH4ZLw4zA1XBouC5eHK8KV4apwdbgmXBuuC9eHG8KNZQf8emi4NdwWbg93hDvDXeHu8NNwT/hZuDf8PEwLvwj3hX8L94dfhgfCr8KD4dfhofCb8HD4bXgk/C48Gn4fHguPhyfCH8KT4Y/hqfB0eCb8KTwb/hyeC38Jz4c+/eY+/e2dDBnKRJkogRIokRIpK2Wl7JSdYhSjnJSTclEuyk25KS/lpfyUnwpSQUrHxFSIClGc4lSEilBRKkrFqTg5clSKSlFpKk1lqAyVpbJUjspReSpPFaki3Ua30e10O91Bd9CddCfdTXdTNapG1ak61aAaVJNqUi2qRbWpNtWhOlSX6lJ9qk8NqAE1pIbUmBpTU2pKzak5taAW1JJaUmtqTW2oDbWlttSO2lF7ak8dqAN1pI7UiTpRZ+pMXagLdaWu1I26UXfqTkmURL2oF/Wm3tSX+lJ/6k8DaAANpIE0iAbREBpCQ2koDaNhNJxG0Eh6i0bRaBpDY2kcjadkSqYJNIEm0kSaRJNoCk2haTSNZtAMmkkzaTbNpjk0h+bRPFpAC2gRLaLFtJhSKIWW0BJKpVRaRstoBa2gVbSK1tAaWkfraANtoE20ibbQFtpKW2k7baedtJN2027aQ3toL+2lNEqjfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIxO0Ak6SSfpFJ2iM3SGztLPdI5+ofPkKcFmsYn2KpvVZrPZbQ7793Fem8/mtwVsQRva3DbP72Ky1ha1xWxxW8I6W9KWsjf8Q1zeVrAV7a32NlvJ3m4r2/I2C/zXuLq919aw99ma9n5bzd7zu7iWfcDWto/YOraRrWub2Pq2mW1gH7ENbSPb2DaxTW0z28Y+YdvaJ207+5Rtb5/+h3ix/dCusWvtOrve7rGf2TP2J3vYfmvP2p9td9vD9rev2AH2VTvQvmYH2cG/jwHsSPuWHWVH2zF2rB1nx/9DPMVOtdPsdDvDvmdn2ln/EC+yH9g5NsXOs/PtArvwQpxeU4r9yC6xH9tUu9Qus8vtiouvC3Cx1uV2o91kN9vd9lO71W6z2+0Ou9PuuhCnr2Ov/dym2S/sIfuN3W+/tAfsEXvQfn0hTl/fEfudPWq/t8fscXvC/mBP2h/tKXv6wvrT1/6D/cWet94CIyvWbDjgTJyZEzgLJ/JVnJWzcXbOwTG+mnPyNZyLr+XcnIfzcj7OzwW4IIdMbJk54kJcmON8HRfh67koF+PiXIIdl+RSfAOX5hu5DN/EZflmLse3cHmuwBX5Vr6NK/HtXJnv4Cp8J9/Fd3NVrsb3cHW+l2vwfVyT7+da/ADX5ge5Dj/Edbke1+eHuQE/wg25ETfmJtyUm3FzfpRb8GPckltxa36c2/AT3Jaf5Hb8FLfnp7kDP8Md+VnuxM9xZ36eu/AL3JVf5G78EnfnHpzEPbkXv8y9uQ/35X7cn1/hAfwqD+TXeBAP5iH8Og/lN3gYv8nDeQSP5Ld4FI/mMTyWx/F4Tua3eQK/wxP5XZ7Ek3kKT+VpPJ1n8Hs8k2fxbH6f5/BcnsfzeQEv5EX8AS/mDzmFP+Il/DGn8lJexst5Ba/kVbya1/BaXsfreQNv5E28mbfwJ7yVt/F23sE7eRfv5k95D3/Ge/lzTuMveB//jffzl3yAv+KD/DUf4m/4MH/LR/g7Psrf8zE+zif4Bz7JP/IpPs1n+Cc+yz/zOf6Fz7NniDBSkY5MFESZosxRQpQlSoyuirJG2aLsUY4oFl0d5YyuiXJF10a5ozxR3ihflD8qEBWMwogiG3EURYWiwlE8ui4qEl2fDaJiUfGoROSiklGp6IaodHRjVCa6KSob3RyVi26JykcVoorRrdFtUaXo9qhydEdUJbozuiu6O6oaVYvuiapH90Y1ovuimtH9UZnogah29GBUJ3ooqhvVi+pHD0cNokeihlGjqHHUJGoaNYuaR49GLaLHopZRq6h19HjUJnoiahs9GbWLnoraR09f2l8s+PX6+rv9SVHPSF+89O7TC+IL44viH8QXxz+Mp8Q/ii+JfxxPjS+NL4svj6+Ir4yviq+Or4mvja+Lr49viG+Mb4pvjntfLTM4TH8QBuMCl8lldgkui0t0V7msLpvL7nK4mLva5XTXuFzuWpfb5XF5XT6X3xVwBV3oyFnHLnKFXGEXd9e5Iu56V9QVc8VdCedcSVfKNXPNXXPXwj3mWrpWrrV73D3unnBPuCcTLhbuOrhnXEf3rOvknnPPueddF/eC6+pedN3cS6676+GSXJLr5Xq53q636+v6uv6uvxvgBriBbqAb5Aa5IW6IG+qGumFumBvuhruRbqQb5Ua5MW6MG+fGuWSX7Ca4CW6im+gmuUluipviprlpboab4Wa6mW62m+3muDlunpvnFrgFbpFb5Ba7xS7FpbglbolLdalumVvmVrgVbpVb5da4NW6dW+c2uA1uk9vktrgtbqvb6ra77W6n2+l2u91uj9vj9rq9Ls2luX1un9vv9rsD7it30H3tDrlv3GH3rTvivnNH3ffumDvuTjivT7of3Sl32p1xP7mz7md3zv3izjvvkmNvxybE3olNjL0bmxSbHJsSmxqbFpsemxF7LzYzNis2O/Z+bE5sbmxebH5sQWxhbFHsg9ji2IexlNhHsSWxj2OpsaWxZbHlsRWxlTHvC2yNfCFf2Mf9db6Iv94X9cV8cV/CO1/Sl/I3+NL+Rl/G3+TL+pt9OX+LL+8r+Iq+kW/sm/imvplv7h/1LfxjvqVv5Vv7x30b/4Rv65/07fxTvr1/2nfwz/iO/lnfyT/nO/vn517ssu/mX/LdfQ+f5Hv6Xv5l39v38X19P9/fv+IH+Ff9QP+aH+QH+yH+dT/Uv+GH+Tf9cD/Cj/Rv+VF+tB/jx/pxfrxP9m/7Cf4dP9G/6yf5yX6Kn+qn+el+hn/Pz/Sz/Gz/vp/j5/p5fr5f4Bf6Rf4Dv9h/6FP8R36J/9in+qV+mV/uV/iVfpVf7df4tX6dX+83+I1+k9/st/hP/Fa/zW/3O/xOv8vv9p/6Pf4zv9d/7tP8F36f/5vf77/0B/xX/qD/2h/y3/jD/lt/xH/nj/rv/TF/3J/wP/iT/kd/yp/2Z/xP/qz/2Z/zv/jz8j9rQgghhBB/iL7M/p7/5Hfq4pauFwBk25bv4N/PuSH3r+M+ak/7GAA81aNzvd+2evWSkpIuHpuqISg8HwBil/IvfP/AxXgptIYnoB20gtL/tL4+quKF+77/af74zQCJAFl+y0l/PEqEv5//xkuL+938jT7gy80/H6Bo4Us56Sf6Lb40f5n/pv5dbS4zf5YvkwFa/pecrHApvjR/KXgMnoZ2vztSCCGEEEIIIYT4VR91tsvlnm/Tn8/zm0s5meFSfLnn88uo/GesQQghhBBCCCGEEP+zZ1/o+uSj7dq16niZAfyBY/6yg8x/jTL+AgMEgL9AGTL46w+u9CuTEEIIIYQQ4s926ab/SlcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJkXP/+N4SpP3zwlV6jEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIcaX9nwAAAP//6kRQ4A==")
r1 = openat(r0, &(0x7f0000001780)='./file2\x00', 0x107042, 0x80)
pwritev2(r1, &(0x7f00000017c0)=[{&(0x7f0000001800)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000000040)="6a6eea", 0x3)

6.115255766s ago: executing program 1 (id=1959):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x3ff, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)

4.95446514s ago: executing program 1 (id=1962):
r0 = syz_mount_image$msdos(&(0x7f0000000900), &(0x7f0000000940)='./file1\x00', 0x80c406, &(0x7f0000000980)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000f2ffffff3030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b7669743a7ee10d0b9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x294, &(0x7f0000000a80)="$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")
syz_mount_image$msdos(&(0x7f0000000d40), &(0x7f0000000d80)='.\x00', 0x19624bc, &(0x7f0000003040)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="1b90a31e71106767fafc03f28515d318d5a1f69fe58fe91fde28f07dad832c003829dc41a41bbfd781e19416060652272929e8aaf084ac4e01cc2d518302a5aebbff6c9b2f06f6210cadf0cf1020151d72b38992d7e5ac55d93987162a6796ec5e65bd8742cc826022a90c911a724e743cf2aae3507daf30c114d43dc960c5500c478f664c0a3ecff5097a341408fa64b6b373a0a376ff838ab8d323bd87d41974c6a05e54f6b8fd4f21ae7722ec5300035a6dbb5ed3932a8c2d891e148a832a3af468d8a967e01d2cf3edc30b8288d70e3e0c42c61938125c806ae4bf818898bba4c66dae9e3cbc89b30f3c57ad", @ANYRES8=r0], 0x0, 0x0, &(0x7f0000000ec0))
mknodat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0x8000, 0x103)
openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x800, 0x8)

4.428538185s ago: executing program 1 (id=1966):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20a02, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

3.941430564s ago: executing program 1 (id=1969):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\\\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

3.511014984s ago: executing program 1 (id=1972):
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)

2.880864052s ago: executing program 5 (id=1980):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009c}]})

2.577337135s ago: executing program 5 (id=1985):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f0000005580)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x52)
flock(r0, 0x2)
mknodat(r0, &(0x7f0000000000)='./mnt\x00', 0x200, 0x0)

1.906866151s ago: executing program 2 (id=1989):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000300), 0x4000095, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0)

1.803351287s ago: executing program 4 (id=1990):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000240)={0x3, [[0xffffffff, 0x1, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xc, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0x10001, 0xffffffff, 0xa3, 0xe8e2, 0xffffffff, 0xffdffffc]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x9e, 0xac44, 0x0, 0x0, 0x1}, {0x5, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4002, 0x0, 0x0, 0x1}, {0x0, 0xf0240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
poll(&(0x7f0000000580)=[{r0, 0x400}], 0x1, 0x7)

1.531263207s ago: executing program 4 (id=1991):
syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x3a00041, &(0x7f0000000180)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f00000009c0)="$eJxUk9Mf54W7BzfvZtt2TbZt27Y9ue/HRrZt1yLbtrHZbRvP63d5nj/guXjPzJi51t3wngHeO8D7Bnj/AB8Y4IMDHD7AEQMcOcBRA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXAxw9wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D3DMAP8Y4NgB/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAoQEOC3DiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkACXCpAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAA3w5ABPCfDUAE8L8PQAzwjwzADPCnAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/g2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAQ4PcESAIwMcFeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhng6AC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AMcE+EeAYwP8M8C/Avw7wH8C/DfA/wIcEuI4IY4b4nghjh/iBCFOGOJEIQ4NcViIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhkiIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4VoiCeHeEqIp4Z4Woinh3hGiGeGeFaIgxCDEMMQoxDjEJMQ0xCHjIN5iEWIZYhViHWITYhtiF2IfYhnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiFeGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+GODzEESGODHFUiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYijQ/wqxK9D/CbEb0P8LsTvQ/whxB9D/CnEn0P8JcRfQ/wtxN9DHBPiHyGODfHPEP8K8e8Q/wnx3xD/+x/TCMeJcNwIx4tw/AgniHDCCCeKcGiEwyKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwyQiJcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM8KUIjPDnCUyI8NcLTIjw9wjMiPDPCsyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YITDIxwR4cgIR0X4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYQfRvhRhB9H+EmEn0b4WYSfR/hFhF9GODrCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcIxEf4R4dgI/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYxDYxwW48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhHjkjES41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbj/+kCH/23fHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjj8BhHxDgyxlExPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMY6O8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf49xTIx/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTg0ASHJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJUwwZMgQZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEEl0hwyQRJcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE9M8KQETfDkBE9J8NQET0vw9ATPSPDMBM9KcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+DZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJDk9wRIIjExyV4EMJPpzgIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meDoBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcExyT4R4JjE/wzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4kQpDk1xWIoTpzhJipOmOFmKk6c4RYpTpjhVilOnOE2K06Y4XYrTpzhDijOmOFOKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQigunuEiKi6a4WIqLp7hEikumSIpLpbh0isukuGyKy6W4fIorpLhiiiuluHKKq6S4aoqrpbh6imukuGaKa6W4dorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6R4YoonpWiKJ6d4SoqnpnhaiqeneEaKZ6Z4VoqDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTHF4iiNSHJniqBQfSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2ZTkuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9McXSKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4pjUvwjxbEp/pniXyn+neI/Kf6b4n8pDslwnAzHzXC8DMfPcIIMJ8xwogyHZjgsw4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCLDJTMkw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyNMOTMzwlw1MzPC3D0zM8I8MzMzwrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9mODzDERmOzHBUhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYajM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98zHJPhHxmOzfDPDP/K8O8M/8nw3wz/y3BIjuPkOG6O4+U4fo4T5DhhjhPlODTHYTlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOS6ZIzkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rjV0yJD/bbFOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjuZ4co6n5HhqjqfleHqOZ+R4Zo5n5TjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/x7BzPyfHcHM/L8fwcL8jxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzv+h+v0WePvSfHe//n8pD/f8NzHJHjyBxH5fjQ/9wfMmTIIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzl+mePoHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fccx+T4R45jc/wzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFDi1wWIETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgUsWSIFLFbh0gcsUuOGMzdjlCly+wBUKXLHAlQpcucBVCvyfB6sVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEb/O9fgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYddhIcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgRZ4coGnFHhqgacVeHqBZxR4ZoFnFTgoMCgwLDAqMC4wKTAtMCswL7AosCywKrAusCmwLbArsC/w7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAocXOKLAkQWOKvChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyxwdIFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gWMK/KPAsQX+WeBfBf5d4D8F/lvgf/9rocRxShy3xPFKHL/ECUqcsMSJShxa4rASJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnLHGmEmcucZYSZy1xthJnL3GOEucsca4S5y5xnhLnLXG+EucvcYESFyxxoRIXLnGREhctcbESFy9xiRKXLJESlypx6RKXKXHZEpcrcfkSVyhxxRJXKnHlElcpcdUSVytx9RLXKHHNEtcqce0S1ylx3RLXK3H9EjcoccMSNypx4xI3KXHTEjcrcfMStyhxyxK3KnHrErcpcdsStytx+xJ3KHHHEncqcecSdylx1xJ3K3H3Evcocc8S9ypx7xL3KXHfEvcrcf8SDyjxwBIPKvHgEg8p8dASDyvx8BKPKPHIEo8q8egSjynx2BKPK/H4Ek8o8cQSTyrREk8u8ZQSTy3xtBJPL/GMEs8s8awSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JZ5dLjl0yBA8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0q8u8R7Sry3xPtKvL/EB0p8sMThJY4ocWSJo0p8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9LHF3iVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuKYEv8ocWyJf5b4V4l/l/hPif+W+F+JQyocp8JxKxyvwvErnKDCCSucqMKhFQ6rcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqpcKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoCo+u8JgKj63wuAqPr/CECk+s8KQKrfDkCk+p8NQKT6vw9ArPqPDMCs+qcFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+HZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVDq9wRIUjKxxV4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeHoCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcKx1T4R4VjK/yzwr8q/LvCfyr8t8L/KhxS4zg1jlvjeDWOX+MENU5Y40Q1Dq1xWI0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjUvWSI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9R4Yo0n1WiNJ9d4So2n1nhajafXeEaNZ9Z4Vo2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrHF4jSNqHFnjqBofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csaR9f4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1zimxj9qHFvjnzX+VePfNf5T4781/lfjkAbHaXDcBsdrcPwGJ2hwwgYnanBog8ManLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxs8rsHjGzyhwRMbPKlBGzy5wVMaPLXB0xo8vcEzGjyzwbMaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3h2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDwxsc0eDIBkc1+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNji6wa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BMQ3+0eDYBv9s8K8G/27wnwb/bfC/Boe0OE6L47Y4XovjtzhBixO2OFGLQ1sc1uLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLS7R4pIt0uJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS2e2OJJLdriyS2e0uKpLZ7W4uktntHimS2e1eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxze4ogWR7Y4qsWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+Zdj/unmxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxdEtftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y2OafGPaXBsi3+2+FeLf7f4T4v/tvhfi0M6HKfDcTscr8PxO5ygwwk7nKjDoR0O63DiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFjmFDhgxxpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQO7fDkDk/p8NQOT+vw9A7P6PDMDs/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXh1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdDu9wRIcjOxzV4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eHoDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcOx3T4R4djO/yzw786/LvDfzr8t8P/OhzS4zg9jtvjeD2O3+MEPU7Y40Q9Du1xWI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2SI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9WiPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvsez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7HF4jyN6HNnjqJ7/Y9kem/A8GAUIp7Ztm1vbtm3b3hqp/dw2atttWNu2bTc5c2bev3DNfl2HDXD4AEcMcOQARw1w9AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+Abg/GHvDnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgGMGOHaAQwIcJ8BxAxwvwPEDnCDACQOcKMCJA5wkwEkDnCzAyQOcIsApA5wqwKkDnCbAaQOcLsDpA5whwBkDnCnAmQOcJcBZA5wtwNkDnCPAOQOcK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLMDFA1wiwCUDXCrApQMkwGUCXDbA5QJcPsAVAlwxwJUCXDnAVQJcNcDVAlw9wDUCXDPAtQJcO8B1Alw3wPUCXD/ADQLcMMCNAtw4wE0C3DTAzQLcPMAtAtwywK0C3DrAbQLcNsDtAtw+wB0C3DHAnQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8McCTAjw5wFMCNMBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/AoQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAhwW4PAARwQ4MsBRAY4O8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8J8N8A/wtwTIBjAxwS4jghjhvieCGOH+IEIU4Y4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGOJMIc4c4iwhzhribCHOHuIcIc4Z4lwhzh3iPCHOG+J8Ic4f4gIhLhjiQiEuHOIiIS4a4mIhLh7iEiEuGeJSIS4dIiEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iGuEeKaIa4V4tohrhPiuiGuF+L6IW4Q4oYhbhTixiFuEuKmIW4W4uYhbhHiliFuFeLWIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiriHuFuLuIe4R4p4h7hXi3iHuE+K+Ie4X4v4hHhDigSEeFOLBIR4S4qEhHhbi4SEeEeKRIR4V4tEhHhPisSEeF+LxIZ4Q4okhnhTiySGeEqIhnhriaSGeHuIZIZ4Z4lkhnh3iOSGeG+J5IQ4N8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOLDIT4S4qMhPhbisBCHhzgixJEhjgpxdIiP/7/nEHwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhKdEaISnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6EQyM8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2E10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgswuERjohwZISjIhwd4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYlw6RmJcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M8JUZjPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYhwa4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGYTEOj3FEjCNjHBXj6Bgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpXg0gmS4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6c4CkJmuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg0ATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCQ5LcHiCIxIcmeCoBEcn+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTHGpFJdOkRSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUT0rx5BRPSdEUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FIemeH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0txWIrDUxyR4sgUR6U4OsXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2T4ToaLZbh4hktkuGSGS2W4dIZkuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoYnZnhShidneEqGZnhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52U4NMPzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYhsMyHJ7hiAxHZjgqw9EZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+/b+G383wvQzfz/CDDD/M8KMMP87wkww/zfCzDD/P8IsMv8zwqwy/zvCbDL/N8LsMv8/whwx/zPCnDH/O8JcMf83wtwx/z/CPDP/M8K8M/87wnwz/zfC/DMdkODbDITmOk+O4OY6X4/g5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5LpXj0jmS4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e/+//zfGoHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBzN8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy3FojufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfnOMgxyDHMMcoxHjPWJMc0xyzHPMcixzLHKsc6xybHNscuxz7Ha3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHchyW4/AcR+Q4MsdROY7O8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txTI5jcxxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BQ4t8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbgsAKHFziiwJEFjipwdIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBv/6/z6T4e4F/FPhngX8V+HeB/xT4b4H/FTimwLEFDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSh5Z4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYmDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK3FYicNLHFHiyBJHlTi6xMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EMSWOLXFIheNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVbh0hVS4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1d4SoVWeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVTi0wvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrHFQYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFwyocXuGICkdWOKrC0RU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6pcGyFQ2ocp8ZxaxyvxvFrnKDGCWucqMaJa5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKrGpWukxmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3PR/JpvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Ti0xvNrvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNw2ocXuOIGkfWOKrG0TU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NY6pcWyNQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcfsIhrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ2e0qANntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DQ5t8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbgsAaHNziiwZENjmpwdIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg2MaHNvgkBbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2px6RZpcZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u8ZQWbfHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2txaIvnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXtzhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFoe1OLzFES2ObHFUi6NbfLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc0+LYFod0OE6H43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh0t3SIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4coendGiHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh0M7PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h9d0eG2H13V4fYc3dHhjhzd1eHOHt3R4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3U4rMPhHY7ocGSHozoc3eHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvQ4f4R4d/dvhXh393+E+H/3b4X4djOhzb4ZAex+lx3B7H63H8HifoccIeJ+px4h4n6XHSHifrcfIep+hxyh6n6nHqHqfpcdoep+tx+h5n6HHGHmfqceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6nHhHhfpcdEeF+tx8R6X6HHJHpfqceke6XGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7fG4Ho/v8YQeT+zxpB5P7vGUHu3x1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/rcWiP5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHh/u8ZEeH+3xsR6H9Ti8xxE9juxxVI+je/6Ppnfu4fxwnG+3W2xt29apbdu2bZ/ato33y0ZtL7q7tW3bvPnmfn4PYU4yf0wyyfGZAT47wOEDHDHAkQMcNcDnBjh6gGMGOHaAzw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwIcJ8ChAY4b4HgBjh/gBAEOC3DCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQAJcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IBh/xNXBHhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKAJwVogCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDfC+AO8P8IEAHwzwoQAfDvCRAB8N8LEAHw/wiQCfDPCpAJ8O8JkAnw1weIAjAhwZ4KgAnwtwdIBjAhwb4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/Af4XjOuQEMcJcWiI44Y4XojjhzhBiMNCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyREJcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KURDPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcRbQrw1xNtCvD3EO0K8M8S7QhyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjDQxwR4sgQR4X4XIijQxwT4tgQnw/xhRBf/H+ioRBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEODTCcSMcL8LxI5wgwmERThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EZ4b4XkRnh/hBRFeGOFFEV4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEQ4iDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CO8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLhEY6IcGSEoyJ8LsLREY6JcGyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ahMY4b43gxjh/jBDEOi3HCGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3HTpkyP9x2zzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I0xpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8ZBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4PMYRMY6McVSMz8U4OsYxMY6N8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcUiC4yQ4NMFxExwvwfETnCDBYQlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgkumuBiCS6e4BIJLpkgCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6UoAmenOAp503sqQmeluDpCZ6R4JkJnpXg2Qmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BuxO8J8F7E7wvwfsTfCDBBxN8KMGHE3wkwUcTfCzBxxN8IsEnE3wqwacTfCbBZxMcnuCIBEcmOCrB5xIcneCYBMcm+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyT4ZYJfJfh1gt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgv8lOCTFcVIcmuK4KY6X4vgpTpDisBQnTHGiFCdOcZIUJ01xshQnT3GKFKdMcaoUp05xmhSnTXG6FKdPcYYUZ0xxphRnTnGWFGdNcbYUZ09xjhTnTHGuFOdOcZ4U501xvhTnT3GBFBdMcaEUF05xkRQXTXGxFBdPcYkUl0yRFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U9/kf7/1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6Y4PMURKY5McVSKz6U4OsUxKY5N8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcUiG42Q4NMNxMxwvw/EznCDDYRlOmOFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZLpkhGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvtn/DQzcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjTDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZ3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZjg8wxEZjsxwVIbPZTg6wzEZjs3w+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twSI7j5Dg0x3FzHC/H8XOcIMdhOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumSM5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npSjOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHJ3J8Msencnw6x2dyfDbH4TmOyHFkjqNyfC7H0TmOyXFsjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjkMKHKfAoQWOW+B4BY5f4AQFDitwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqcOECFylw0QIXK3DxApcocMkCKXCpApcucJkCly1wuQKXL3CFAlcscKUCVy5wlQJXLXC1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3LHCjAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAi3w5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8qcFBgUGBYYFRgXGBSYFpgVmBeYFFgWTBsyJAh1gU2BbYFdgX2Bd5d4D0F3lvgfQXeX+ADBT5Y4EMFPlzgIwU+WuBjBT5e4BMFPlngUwU+XeAzBT5b4PACRxQ4ssBRBT5X4OgCxxQ4tsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhJY5T4tASxy1xvBLHL3GCEoeVOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJi5W4eIlLlLhkiZS4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJJ5Z4UomWeHKJp5R4aomnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x7hLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8q8ekSnynx2RKHlziixJEljirxuRJHlzimHOrYEp8v8YUSXyzxpRJfLvGVEl8t8bUSX5/of7+AEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUiF41Q4tMJxKxyvwvErnKDCYRVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlkhFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5UoRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0VDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK7y7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wuEVjqhwZIWjKnyuwtEVjqlwbIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDahynxqE1jlvjeDWOX+MENQ6rccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGqlxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBqt8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqnFQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszUOr3FEjSNrHFXjczWOrnFMjWNrfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHNLgOA0ObXDcBsdrcPwGJ2hwWIMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSzZIg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1aIMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bu9u8J4G723wvgbvb/CBBh9s8KEGH27wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9tcHiDIxoc2eCoBp9rcHSDYxoc2+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+CQFsdpcWiL47Y4XovjtzhBi8NanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyRVpcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qUVbPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Why0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvDWxzR4sgWR7X/f19GtzimxbEtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+OSF+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf73f3k6HKfDoR2O2+F4HY7f4QQdDutwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA6P7vCYDo/t8LgOj+/whA5P7PCkDu3w5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+nw0g4v6/DyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDm/p8NYOb+vw9g7v6PDODu/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHQ7vcESHIzsc1eFzHY7ucEyHYzt8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfD/zoc0uM4PQ7tcdwex+tx/B4n6HFYjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI9L9kiPS/W4dI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/W4cY+b9Lhpj5v1uHmPW/S4ZY9b9bh1j9v0uG2P2/W4fY879Lhjjzv1uHOPu/S4a4+79bh7j3v0uGePe/W4d4/79Lhvj/v1uH+PB/R4YI8H9Xhwj4f0eGiPh/V4eI9H9Hhkj0f1eHSPx/R4bI/H9Xh8jyf0eGKPJ/Vojyf3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To/n9nhej+f3eEGPF/Z4UY8X93hJj5f2eFmPl/d4RY9X9nhVj1f3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V4+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7+7xnh7v7fG+Hu/v8YEeH+zxoR4f7vGRHh/t8bEeH+/xiR6f7PGpHp/u8Zken+1xeI8jehzZ46gen+txdI9jehzb/380nGPz2AcDZZM2RWrbdntq27Zt26dtatu23eb/s1HbRmobabjzzO7eb3Bn7n135uDrA/jGAL45gG8N4NsD+M4AvjuA7w3g+wP4wQB+OIAfDeDHA/jJAH46gJ8N4OcDOGIAvxjALwfwqwH8egC/GcBvB/C7Afx+AH8YwB8H8KcB/HkAfxnAXwfwtwH8fQD/GMA/B/CvAfx7AP8ZwH8HcOQA/jeAowZw9ACOGcCxAzhuAMcP4KAABwc4QYATBjgkwIkCnDjASQKcNMChAU4W4OQBThHglAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4MwBzhLgrAHOFuDsAc4R4JwBzhXg3AHOE+C8Ac4X4PwBLhDgggEuFODCAS4S4KIBLhbg4gEuEeCSAS4V4NIBLhMgAS4b4HIBLh/gCgGuGOBKAa4c4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHOApAZ4aoAGeFuDpAZ4R4LAAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQCfDnB4gAMBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBjgjwiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSA/wU4KsDRAY4JcGyA4wIcH+CgEAeHOEGIE4Y4JMSJQpw4xElCnDTEoSFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4TIiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhziKSGeGqIhnhbi6SGeEeKwEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw5xeIgDIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIY4I8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DXFkiP+FOCrE0SGOCXFsiONCHB/ioAgHRzhBhBNGOCTCiSKcOMJJIpw0wqERThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIRLhXh0hEuEyERLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBv/f5RDhxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRnhThyRGeEuGpERrhaRGeHuEZEQ6L8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QiHRzgQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hMxE+G+FzET4f4QsRvhjhSxG+HOErEb4a4WsRvh7hGxG+GeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxF+GuFnEX4e4YgIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCEdG+F+EoyIcHeGYCMdGOC7C8REOinFwjBPEOGGMQ2KcKMaJY0aO/79xaIyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxbh0jMvESIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SoynxmiMp8V4eoxnxDgsxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa/+3n0GDBl0f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HePwGAdiDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9jHBHjFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b48gY/4txVIyjYxwT49gYx8U4PsZBCQ5OcIIEJ0xwSIITJThxgpMkOGmCQxOcLMHJE5wiwSkTnCrBqROcJsFpE5wuwekTnCHBGROcKcGZE5wlwVkTnC3B2ROcI8E5E5wrwbkTnCfBeROcL8H5E1wgwQUTXCjBhRNcJMFFE1wswcUTXCLBJRNcKsGlE1wmQRJcNsHlElw+wRUSXDHBlRJcOcFVElw1wdUSXD3BNRJcM8G1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjwxwZMSPDnBUxI8NUETPC3B0xM8I8FhCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3g8AQHEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCbBZxN8LsHnE3whwRcTfCnBlxN8JcFXE3wtwdcTfCPBNxN8K8G3E3wnwXcTfC/B9xP8IMEPE/wowY8T/CTBTxP8LMHPExyR4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+DIBP9LcFSCoxMck+DYBMclOD7BQSkOTnGCFCdMcUiKE6U4cYqTpDhpikNTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJkVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5xVNSPDVFUzwtxdNTPCPFYSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4vAUB1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1MckeIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pviyBT/S3FUiqNTHJPi2BTHpTg+xUEZDs5wggwnzHBIhhNlOHGGk2Q4aYZDM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTNcIsMlM1wqw6UzXCZDMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDHDkzI8OcNTMjw1QzM8LcPTMzwjw2EZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neHwDAcyDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88zHJHhFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4cgM/8twVIajMxyT4dgMx2U4PsNBOQ7OcYIcJ8xxSI4T5ThxjpPkOGmOQ3OcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXNcKselc1wmR3JcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyPDnHU3I8NUdzPC3H03M8I8dhOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3j8BwHcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuyHDhr0v088m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e44gcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHEfm+F+Oo3IcneOYHMfmOC7H8TkOKnBwgRMUOGGBQwqcqMCJC5ykwEkLHFrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgUuWuBiBS5e4BIFLlngUgUuXeAyBVLgsgUuV+DyBa5Q4IoFrlTgygWuUuCqBa5W4OoFrlHgmgWuVeDaBa5T4LoFrlfg+gVuUOCGBW5U4MYFblLgpgVuVuDmBW5R4JYFblXg1gVuU+C2BW5X4PYF7lDgjgXuVODOBe5S4K4F7lbg7gXuUeCeBe5V4N4F7lPgvgXuV+D+BR5Q4IEFHlTgwQUeUuChBR5W4OEFHlHgkQUeVeDRBR5T4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQVa4GkFnl7gGQUOK/DMAs8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkChxc4UGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuCIAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ynw3wJHFvhfgaMKHF3gmALHFjiuwPEFDipxcIkTlDhhiUNKnKjEiUucpMRJSxxa4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiVS4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSWeVOLJJZ5S4qklWuJpJZ5e4hklDivxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKvHpEoeXOFBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+IzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iiBK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8SR5b4X4mjShxd4pgSx5Y4rsTxJQ6qcHCFE1Q4YYVDKpyowokrnKTCSSscWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeVzFi+KBBnlDhiRWeVOHJFZ5S4akVWuFpFZ5e4RkVDqvwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCodXOFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+EzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hiAq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8KR1b4X4WjKhxd4ZgKx1Y4rsLxFQ6qcXCNE9Q4YY1DapyoxolrnKTGSWscWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1UuOyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTWeUuOpNVrjaTWeXuMZNQ6r8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckan6rx6RqH1zhQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e44gav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8a/6rx7xr/qfHfGkfW+F+No2ocXeOYGsfWOK7G8TUOanBwgxM0OGGDQxqcqMGJG5ykwUkbHNrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2uBiDS7e4BINLtngUg0u3eAyDdLgsg0u1+DyDa7Q4IoNrtTgyg2u0uCqDa7W4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7U4MkNntLgqQ3a4GkNnt7gGQ0Oa/DMBs9q8OwGz2nw3AbPa/D8Bi9o8MIGL2rw4gYvafDSBi9r8PIGr2jwygavavDqBq9p8NoGr2vw+gZvaPDGBm9q8OYGb2nw1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGhzc40GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uCIBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNvhfg6MaHN3gmAbHNjiuwfENDmpxcIsTtDhhi0NanKjFiVucpMVJWxza4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lItLt3iMi3S4rItLjdmsMu3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7d4SountmiLp7V4eotntDisxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1sc3uJAi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lz7T4bIvPtfh8iy+0+GKLL7X4couvtPj/2Nhhr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBix+2+FGLH7f4SYuftvhZi5+3OKLFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xZEt/tfiqBZHtzimxbEtjvtfhxYHdTi4wwk6nLDDIR1O1OHEHU7S4aQdDu1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/oGDJo0CAP6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o8MQOT+rw5A5P6fDUDu3wtA5P7/CMDod1eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090+GSHT3X4dIfDOxzoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/vcESHX3T4ZYdfdfh1h990+G2H33X4fYc/dPhjhz91+HOHv3T4a4e/dfh7h390+GeHf3X4d4f/dPhvhyM7/K/DUR2O7nBMh2M7HNfh+A4H9Ti4xwl6nLDHIT1O1OPEPU7S46Q9Du1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx7Pjx4/frcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQeT+rx5B5P6fHUHu3xtB5P7/GMHof1eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/Dexzo8f8EAAD//9eYyt4=")
r0 = openat(0xffffffffffffff9c, &(0x7f000000a800)='.\x00', 0x82000, 0x24)
getdents64(r0, &(0x7f00000004c0)=""/51, 0x33)
getdents64(r0, 0xfffffffffffffffe, 0x7d)

1.41503719s ago: executing program 5 (id=1992):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0xff, 0x8, 0x100, 0xffa9}, 'syz1\x00', 0x52})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1.320022916s ago: executing program 2 (id=1993):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='0x8', 0x3)

929.023359ms ago: executing program 2 (id=1994):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000078c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002380)=""/223, 0xdf}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002940)=""/155, 0x9b}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/40, 0x28}], 0x1}}], 0x4, 0x400122a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

928.753102ms ago: executing program 4 (id=1995):
mkdir(&(0x7f0000004280)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f00000042c0)='./my_configfs\x00', &(0x7f0000004300)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004340)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000004380)=[{0x0, 0x53}, {&(0x7f00000043c0)="000000e6e150425d120b6b932acaa3ab3246005fa433fc0fb0897cc35be685656bf21c809ed2c15c1cd939c4a156f81bcb6c027f9b7d97f38046798a62eadc0ca2638b36e8c787c7c214f465a23666b772b45aea12417483517eb366a338d047494d5e0aed18297ea90e6e132a1f51e3ec47adce9f0324af3c685d1d19fa8002312e0deffaac95efe6b247072ae0b2067708635d975f10d09d7514cf410a4122de4bc22502708b9510d8cf532a32b32ffeedf844fe47000000000000000000", 0xbf}], 0x2, 0x1002, 0xab75)

778.766023ms ago: executing program 4 (id=1996):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file1\x00', 0x14, &(0x7f0000000280)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000002c0)="$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")
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@resuid}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x4a2, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(&(0x7f0000001340), &(0x7f0000001380)='.\x00', 0x84406d, &(0x7f00000013c0)=ANY=[], 0x0, 0x0, 0x0)

508.833278ms ago: executing program 2 (id=1997):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001080)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)={0x1c, r2, 0x303, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

411.169755ms ago: executing program 5 (id=1998):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0)
lseek(r0, 0xfff, 0x1)

354.314579ms ago: executing program 1 (id=1999):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e27, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0)

354.002707ms ago: executing program 4 (id=2000):
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb})
r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a000100e83a", 0x18, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

308.682923ms ago: executing program 2 (id=2001):
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc/sys/kernel/hostname\x00', 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x2012}], 0x1, &(0x7f0000000a00)={0x0, 0x3938700}, 0x0, 0x0)

246.325768ms ago: executing program 5 (id=2002):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='testdomain / 2147483647\n', 0x18)

72.543973ms ago: executing program 4 (id=2003):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x9})

63.70812ms ago: executing program 5 (id=2004):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@noblock_validity}, {@jqfmt_vfsold}, {@acl}, {@noload}, {@acl}, {@nodelalloc}]}, 0xfe, 0x478, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file0/file0\x00', 0x22042, 0x20)
syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./bus\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000940))
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000014c0)={0x17c04, 0xffffffffffffffff, 0xeb, 0x100000002, 0x20, 0xfbf})

0s ago: executing program 2 (id=2005):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1c5}]})

kernel console output (not intermixed with test programs):

tdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.967377][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.967398][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.125073][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.125123][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.578865][ T9146] loop2: detected capacity change from 0 to 256
[  208.588473][ T9146] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b39636, utbl_chksum : 0xe619d30d)
[  208.596474][ T9146] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  208.841007][ T9148] loop4: detected capacity change from 0 to 8192
[  208.860405][ T9148] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.611648][ T9144] loop5: detected capacity change from 0 to 32768
[  209.668639][ T9144] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.831603][ T9144] XFS (loop5): Ending clean mount
[  209.867839][ T9144] XFS (loop5): Quotacheck needed: Please wait.
[  210.112442][ T9180] loop4: detected capacity change from 0 to 128
[  210.152258][ T9144] XFS (loop5): Quotacheck: Done.
[  210.199576][ T5645] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  210.414585][ T8718] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.608840][ T9231] netlink: 'syz.4.1260': attribute type 96 has an invalid length.
[  211.668388][ T9205] loop2: detected capacity change from 0 to 32768
[  212.147739][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1267'.
[  212.161812][   T53] wiimote 0005:057E:0306.0007: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  212.172528][   T53] wiimote 0005:057E:0306.0007: New device registered (Wiimote 1)
[  212.403233][   T28] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  212.561171][   T28] usb 3-1: unable to get BOS descriptor or descriptor too short
[  212.562036][   T28] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  212.563080][   T28] usb 3-1: unable to read config index 0 descriptor/start: -71
[  212.563112][   T28] usb 3-1: can't read configurations, error -71
[  212.572062][ T9250] wiimote 0005:057E:0306.0007: Device removed
[  212.994715][ T9266] Illegal XDP return value 4294967294 on prog  (id 72) dev N/A, expect packet loss!
[  213.035006][ T9268] loop4: detected capacity change from 0 to 4096
[  213.040293][ T9268] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  213.040319][ T9268] NILFS (loop4): mounting unchecked fs
[  213.126334][ T9268] NILFS (loop4): recovery complete
[  213.135855][ T9271] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.204753][ T9273] sd 0:0:1:0: PR command failed: 1026
[  213.204799][ T9273] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  213.204838][ T9273] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  213.208914][ T1220] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1) (1)
[  213.619693][ T1220] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input15
[  213.644796][ T9285] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  213.742914][ T1220] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input16
[  213.823685][ T1220] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input14
[  214.078434][ T9290] program syz.4.1284 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  214.401404][ T9281] loop3: detected capacity change from 0 to 32768
[  214.572566][ T9288] loop1: detected capacity change from 0 to 32768
[  214.804150][ T9298] loop3: detected capacity change from 0 to 256
[  214.840290][ T9298] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fcb6, chksum : 0x64b32e36, utbl_chksum : 0xe619d30d)
[  214.861448][ T9298] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  215.322347][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'.
[  216.032040][ T9331] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1299'.
[  216.032312][ T9331] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  216.195484][ T9335] loop5: detected capacity change from 0 to 33280
[  216.257261][ T9335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.417728][ T9344] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1302'.
[  216.421086][ T9344] gretap0: entered promiscuous mode
[  216.490080][ T9344] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1302'.
[  216.490350][ T9344] 0ªî{X¹¦: renamed from gretap0
[  216.503613][ T8718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.505518][ T9344] 0ªî{X¹¦: left promiscuous mode
[  216.505536][ T9344] 0ªî{X¹¦: entered allmulticast mode
[  216.555853][ T9344] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  216.930834][ T9360] ieee802154 phy0 wpan0: encryption failed: -22
[  218.083143][   T28] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  218.255279][   T28] usb 4-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  218.260080][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.260104][   T28] usb 4-1: Product: syz
[  218.260117][   T28] usb 4-1: Manufacturer: syz
[  218.260130][   T28] usb 4-1: SerialNumber: syz
[  218.263734][   T28] usb 4-1: config 0 descriptor??
[  218.344682][ T9411] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  218.392081][ T9413] loop4: detected capacity change from 0 to 33280
[  218.470896][ T9413] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1322: iget: bad extended attribute block 134217728
[  218.470934][ T9413] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  218.474268][ T9413] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1322: couldn't read orphan inode 15 (err -117)
[  218.474322][ T9413] loop4: lost filesystem error report for type 5 error -117
[  218.488686][ T9413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.532048][   T28] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 009
[  218.562115][ T9419] loop1: detected capacity change from 0 to 128
[  218.649181][ T9423] loop5: detected capacity change from 0 to 7
[  218.735795][ T9394] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read)
[  218.737127][ T5750] usb 4-1: USB disconnect, device number 9
[  218.812269][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.903842][ T9423] Dev loop5: unable to read RDB block 7
[  218.903886][ T9423]  loop5: unable to read partition table
[  218.904084][ T9423] loop5: partition table beyond EOD, truncated
[  218.904147][ T9423] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  219.103887][ T9425] Dev loop5: unable to read RDB block 7
[  219.103931][ T9425]  loop5: unable to read partition table
[  219.104175][ T9425] loop5: partition table beyond EOD, truncated
[  219.270497][ T5003] Dev loop5: unable to read RDB block 7
[  219.270538][ T5003]  loop5: unable to read partition table
[  219.271921][ T5003] loop5: partition table beyond EOD, truncated
[  219.748229][ T9463] loop4: detected capacity change from 0 to 2048
[  219.816417][ T9466] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.998670][ T9463] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  220.004963][ T9463] Remounting filesystem read-only
[  220.051399][ T5640] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  220.256509][ T9474] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1348'.
[  220.551929][ T9487] program syz.1.1355 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  221.096390][ T9491] loop1: detected capacity change from 0 to 32768
[  221.099642][ T9491] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1356 (9491)
[  221.140956][ T5750] logitech-hidpp-device 0003:046D:C082.0008: hidraw1: USB HID v0.00 Device [syz0] on syz0
[  221.178594][ T9491] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  221.178627][ T9491] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  221.229868][ T9516] profile_transition: unconfined exec no attachment
[  221.327587][ T9491] BTRFS info (device loop1): enabling ssd optimizations
[  221.327613][ T9491] BTRFS info (device loop1): turning on async discard
[  221.327628][ T9491] BTRFS info (device loop1): enabling free space tree
[  221.405887][ T9516] fido_id[9516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  221.493066][ T9529] profile_transition: unconfined exec no attachment
[  221.844410][ T5636] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  222.027465][ T9543] loop5: detected capacity change from 0 to 64
[  222.135951][ T9545] xt_hashlimit: size too large, truncated to 1048576
[  222.277635][ T9549] profile_transition: unconfined exec no attachment
[  222.280145][ T9550] profile_transition: unconfined exec no attachment
[  222.537790][ T9533] loop4: detected capacity change from 0 to 32768
[  222.578022][ T9533] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  222.664415][ T9533] XFS (loop4): Ending clean mount
[  222.719575][ T9547] loop1: detected capacity change from 0 to 32768
[  222.731057][ T9563] ima: policy update failed
[  222.731419][   T33] audit: type=1802 audit(1794420512.144:30): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=policy_update cause=failed comm="syz.2.1378" res=0 errno=-22
[  222.795434][ T9547] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  222.897796][ T5640] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  223.273405][ T5636] ocfs2: Unmounting device (7,1) on (node local)
[  223.470771][ T9584] vivid-000: disconnect
[  223.471350][ T9583] vivid-000: reconnect
[  223.580929][ T9590] profile_transition: unconfined exec no attachment
[  223.788538][ T9602] aa_policy_admin_capable: cap_mac_admin? 1
[  223.788748][ T9602] aa_policy_admin_capable: policy locked? 0
[  223.792161][ T9602] unpack_pdb: unpacking tags
[  223.792300][ T9602] unpack_pdb: done unpacking tags
[  223.792437][   T33] audit: type=1400 audit(1794420513.204:31): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=223A6F pid=9600 comm="syz.3.1393" name=223A6F offset=45
[  223.842789][ T9602] aa_free_profile: aa_free_profile(ffff888033f2e000)
[  224.034153][ T9594] loop4: detected capacity change from 0 to 40427
[  224.039487][ T9594] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  224.039511][ T9594] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  224.070871][ T9594] F2FS-fs (loop4): invalid crc value
[  224.110191][ T9609] loop3: detected capacity change from 0 to 33280
[  224.156200][ T9609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.156295][ T9609] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.266963][ T5645] Bluetooth: hci4: failed to read key size for handle 0
[  224.270361][ T5645] Bluetooth: hci4: unexpected event for opcode 0x1408
[  224.467225][ T9607] loop1: detected capacity change from 0 to 32768
[  224.505848][ T9594] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  224.560501][ T9594] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  224.560529][ T9594] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  225.028395][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.420864][ T9645] loop3: detected capacity change from 0 to 4096
[  225.536755][   T33] audit: type=1326 audit(1794420514.954:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9651 comm="syz.2.1415" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c6e7a8fd9 code=0x0
[  225.672087][ T9658] loop4: detected capacity change from 0 to 33280
[  225.738174][ T9658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.799243][ T9658] EXT4-fs (loop4): Online defrag not supported for non-extent files
[  225.891588][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.351857][ T9674] loop3: detected capacity change from 0 to 64
[  226.427599][ T9659] loop5: detected capacity change from 0 to 32768
[  226.457576][ T9678] loop2: detected capacity change from 0 to 33280
[  226.553847][ T9678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.553967][ T9678] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.555539][ T9674] bio_check_eod: 8 callbacks suppressed
[  226.555556][ T9674] syz.3.1424: attempt to access beyond end of device
[  226.555556][ T9674] loop3: rw=8423425, sector=57, nr_sectors = 8 limit=64
[  226.676678][ T9685] profile_transition: unconfined exec no attachment
[  226.848037][ T9678] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1426: bg 0: block 448: padding at end of block bitmap is not set
[  226.938460][ T9678] Quota error (device loop2): write_blk: dquota write failed
[  226.938484][ T9678] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  226.940416][ T9678] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  226.940456][ T9678] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.1426: Failed to acquire dquot type 1
[  227.059948][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.703484][ T9698] loop3: detected capacity change from 0 to 32768
[  228.326223][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  228.443824][ T9734] profile_transition: unconfined exec no attachment
[  228.797531][ T9719] loop5: detected capacity change from 0 to 32768
[  228.947180][ T9719] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  228.947180][ T9719] 
[  229.020213][ T9742] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  229.201402][ T9750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1456'.
[  229.215134][ T9750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1456'.
[  229.219091][ T9727] loop1: detected capacity change from 0 to 40427
[  229.225181][ T9750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1456'.
[  229.234697][ T9727] F2FS-fs (loop1): invalid crc value
[  229.362861][ T1220] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  229.514246][ T1220] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[  229.515845][ T1220] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.518842][ T1220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  229.518864][ T1220] usb 6-1: Product: syz
[  229.518877][ T1220] usb 6-1: Manufacturer: syz
[  229.552886][ T9727] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.590787][ T9727] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  229.602500][ T1220] usb 6-1: selecting invalid altsetting 1
[  229.638921][ T1220] dvb_ttusb_budget: ttusb_init_controller: error
[  229.639084][ T1220] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  229.693697][ T9764] profile_transition: unconfined exec no attachment
[  229.756119][ T1220] DVB: Unable to find symbol cx22700_attach()
[  229.757253][ T9767] profile_transition: unconfined exec no attachment
[  229.770927][ T9765] loop4: detected capacity change from 0 to 256
[  229.861199][ T9765] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d)
[  229.861520][ T9765] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  229.861717][ T1220] DVB: Unable to find symbol tda10046_attach()
[  229.861727][ T1220] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  229.862013][ T9765] exFAT-fs (loop4): failed to load alloc-bitmap
[  229.862024][ T9765] exFAT-fs (loop4): failed to recognize exfat type
[  229.951598][ T5636] syz-executor: attempt to access beyond end of device
[  229.951598][ T5636] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  229.980311][ T5636] CPU: 0 UID: 0 PID: 5636 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  229.980357][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  229.980374][ T5636] Call Trace:
[  229.980381][ T5636]  <TASK>
[  229.980390][ T5636]  dump_stack_lvl+0xe8/0x150
[  229.980424][ T5636]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  229.980455][ T5636]  f2fs_write_end_bio+0xf7d/0x1310
[  229.980502][ T5636]  __submit_merged_bio+0x258/0x6a0
[  229.980527][ T5636]  ? rcu_is_watching+0x16/0xb0
[  229.980552][ T5636]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  229.980581][ T5636]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  229.980629][ T5636]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  229.980671][ T5636]  ? __lock_acquire+0x747/0x2de0
[  229.980718][ T5636]  ? __lock_acquire+0x747/0x2de0
[  229.980747][ T5636]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  229.980766][ T5636]  ? __lock_acquire+0x747/0x2de0
[  229.980832][ T5636]  ? rcu_is_watching+0x16/0xb0
[  229.980854][ T5636]  ? rcu_is_watching+0x16/0xb0
[  229.980869][ T5636]  ? __kasan_check_byte+0x12/0x40
[  229.980902][ T5636]  ? is_bpf_text_address+0x292/0x2b0
[  229.980925][ T5636]  ? is_bpf_text_address+0x26/0x2b0
[  229.980949][ T5636]  ? kernel_text_address+0xa5/0xe0
[  229.980974][ T5636]  ? __kernel_text_address+0xd/0x30
[  229.980997][ T5636]  ? unwind_get_return_address+0x4d/0x90
[  229.981019][ T5636]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  229.981044][ T5636]  ? arch_stack_walk+0xfb/0x150
[  229.981083][ T5636]  ? stack_trace_save+0xa9/0x100
[  229.981110][ T5636]  ? __pfx_stack_trace_save+0x10/0x10
[  229.981138][ T5636]  ? check_path+0x21/0x40
[  229.981161][ T5636]  ? add_lock_to_list+0xc7/0x100
[  229.981181][ T5636]  ? lockdep_unlock+0x5c/0xd0
[  229.981201][ T5636]  ? __lock_acquire+0x1511/0x2de0
[  229.981253][ T5636]  ? do_raw_spin_lock+0x12b/0x2f0
[  229.981287][ T5636]  ? do_raw_spin_unlock+0xf5/0x200
[  229.981308][ T5636]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.981339][ T5636]  do_writepages+0x338/0x560
[  229.981372][ T5636]  ? do_raw_spin_unlock+0xf5/0x200
[  229.981397][ T5636]  filemap_fdatawrite+0x1e9/0x2f0
[  229.981423][ T5636]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  229.981500][ T5636]  ? do_raw_spin_unlock+0xf5/0x200
[  229.981527][ T5636]  f2fs_sync_dirty_inodes+0x471/0x970
[  229.981574][ T5636]  f2fs_write_checkpoint+0x867/0x24d0
[  229.981633][ T5636]  kill_f2fs_super+0x2df/0x700
[  229.981667][ T5636]  ? rcu_do_enqueue+0x60d/0x870
[  229.981690][ T5636]  ? lockdep_hardirqs_on+0x7b/0x110
[  229.981714][ T5636]  ? __pfx_kill_f2fs_super+0x10/0x10
[  229.981759][ T5636]  ? __pfx_call_rcu+0x10/0x10
[  229.981785][ T5636]  ? shrinker_free+0x2a7/0x3b0
[  229.981810][ T5636]  deactivate_locked_super+0xbe/0x110
[  229.981839][ T5636]  cleanup_mnt+0x204/0x2a0
[  229.981862][ T5636]  task_work_run+0x1d9/0x260
[  229.981890][ T5636]  ? __pfx_task_work_run+0x10/0x10
[  229.981925][ T5636]  exit_to_user_mode_loop+0x204/0x770
[  229.981951][ T5636]  ? rcu_is_watching+0x16/0xb0
[  229.981973][ T5636]  do_syscall_64+0x336/0x540
[  229.981995][ T5636]  ? trace_irq_disable+0x3b/0x140
[  229.982012][ T5636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.982032][ T5636]  ? clear_bhb_loop+0x70/0xc0
[  229.982056][ T5636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.982075][ T5636] RIP: 0033:0x00007f6b0e1aa217
[  229.982094][ T5636] Code: a2 c7 05 dc 34 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  229.982110][ T5636] RSP: 002b:00007ffe3e312168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  229.982130][ T5636] RAX: 0000000000000000 RBX: 00007f6b0e2373e3 RCX: 00007f6b0e1aa217
[  229.982142][ T5636] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3e312220
[  229.982154][ T5636] RBP: 00007ffe3e312220 R08: 00007ffe3e313220 R09: 00000000ffffffff
[  229.982167][ T5636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3e3132b0
[  229.982178][ T5636] R13: 00007f6b0e2373e3 R14: 000000000003817e R15: 00007ffe3e3132f0
[  229.982212][ T5636]  </TASK>
[  230.011334][ T5636] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  230.231804][ T9774] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  230.690382][ T9761] loop2: detected capacity change from 0 to 32768
[  230.707654][ T9773] loop3: detected capacity change from 0 to 32768
[  230.735540][ T9761] JBD2: Ignoring recovery information on journal
[  230.909485][ T9761] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  231.189658][ T5641] ocfs2: Unmounting device (7,2) on (node local)
[  231.833842][ T9808] loop1: detected capacity change from 0 to 64
[  231.836273][ T9808] hfs: unable to locate alternate MDB
[  231.836285][ T9808] hfs: continuing without an alternate MDB
[  231.854456][ T1147] wlan1: Trigger new scan to find an IBSS to join
[  231.858215][ T9807] netlink: 'syz.2.1478': attribute type 3 has an invalid length.
[  231.858232][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'.
[  232.041044][ T5750] hid-generic 8005:057E:0306.0009: unknown main item tag 0x0
[  232.096515][ T5750] input: syz0 as /devices/virtual/misc/uhid/8005:057E:0306.0009/input/input17
[  232.231556][ T5750] hid-generic 8005:057E:0306.0009: input,hidraw0: <UNKNOWN> HID v0.03 Gamepad [syz0] on syz0
[  232.270596][ T9813] profile_transition: unconfined exec no attachment
[  232.289637][ T5750] usb 6-1: USB disconnect, device number 2
[  232.354801][  T995] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  232.468396][ T9822] block2mtd: error: cannot open device /dev÷ÿoop0j¤+ÿÈE[äj~œøÖî®Á0|—n±
[  232.468396][ T9822] Fè
[  232.529815][  T995] usb 3-1: unable to get BOS descriptor or descriptor too short
[  232.545807][  T995] usb 3-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00
[  232.545854][  T995] usb 3-1: no configurations
[  232.545867][  T995] usb 3-1: can't read configurations, error -22
[  233.053099][ T1220] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  233.203332][ T1220] usb 4-1: Using ep0 maxpacket: 16
[  233.204170][ T1220] usb 4-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  233.205454][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  233.235624][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.235652][ T1220] usb 4-1: Product: syz
[  233.235666][ T1220] usb 4-1: Manufacturer: syz
[  233.235680][ T1220] usb 4-1: SerialNumber: syz
[  233.241551][ T1220] usb 4-1: config 0 descriptor??
[  233.281342][ T1220] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  233.281376][ T1220] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  233.316668][ T9840] serio: Serial port ttyS3
[  233.616127][ T9847] loop1: detected capacity change from 0 to 33280
[  233.654554][  T995] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  233.716463][ T9847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.716578][ T9847] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.803432][  T995] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  233.804456][  T995] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.804497][  T995] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  233.804518][  T995] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  233.804540][  T995] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  233.808321][  T995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.808343][  T995] usb 3-1: Product: syz
[  233.808356][  T995] usb 3-1: Manufacturer: syz
[  233.808370][  T995] usb 3-1: SerialNumber: syz
[  233.885747][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.912818][ T1220] em28xx 4-1:0.0: chip ID is em28178
[  234.036947][ T9842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  234.056005][ T9845] loop5: detected capacity change from 0 to 40427
[  234.073522][ T9845] F2FS-fs (loop5): invalid crc value
[  234.210026][ T1220] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  234.210058][ T1220] em28xx 4-1:0.0: board has no eeprom
[  234.302826][ T1220] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  234.302870][ T1220] em28xx 4-1:0.0: dvb set to bulk mode.
[  234.303309][   T53] em28xx 4-1:0.0: Binding DVB extension
[  234.333825][ T9845] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  234.368494][ T9861] profile_transition: unconfined exec no attachment
[  234.371411][ T1220] usb 4-1: USB disconnect, device number 10
[  234.386043][ T1220] em28xx 4-1:0.0: Disconnecting em28xx
[  234.414083][ T9845] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  234.524752][   T53] em28xx 4-1:0.0: Registering input extension
[  234.529374][ T9866] profile_transition: unconfined exec no attachment
[  234.602889][   T53] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  234.602908][   T53] Registered IR keymap rc-empty
[  234.645476][   T53] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  234.665840][   T53] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18
[  234.680256][  T995] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed
[  234.697341][   T53] em28xx 4-1:0.0: Input extension successfully initialized
[  234.697594][ T1220] em28xx 4-1:0.0: Closing input extension
[  234.704409][  T995] cdc_ncm 3-1:1.0: bind() failure
[  234.736525][  T995] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  234.736566][  T995] cdc_ncm 3-1:1.1: bind() failure
[  234.771856][  T995] usb 3-1: USB disconnect, device number 6
[  235.255763][ T1220] em28xx: Freeing device
[  235.275265][ T9872] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  236.044518][ T9893] loop4: detected capacity change from 0 to 36864
[  236.053027][ T9893] EXT4-fs (loop4): Test dummy encryption mode enabled
[  236.080524][ T9893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.128944][ T9898] loop2: detected capacity change from 0 to 64
[  236.228844][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.297970][ T9886] loop5: detected capacity change from 0 to 32768
[  236.301491][ T9886] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1499 (9886)
[  236.349452][ T9886] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.349573][ T9886] BTRFS info (device loop5): using sha256 checksum algorithm
[  236.556171][ T9886] BTRFS info (device loop5): enabling ssd optimizations
[  236.556199][ T9886] BTRFS info (device loop5): turning on async discard
[  236.556215][ T9886] BTRFS info (device loop5): enabling free space tree
[  236.556365][ T9886] BTRFS info (device loop5): use zlib compression, level 3
[  236.715154][ T8718] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.758122][ T9921] profile_transition: unconfined exec no attachment
[  236.886916][ T1150] wlan1: Trigger new scan to find an IBSS to join
[  237.060603][ T9915] loop4: detected capacity change from 0 to 32768
[  237.186148][ T9915] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  237.232503][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1520'.
[  237.283489][ T9915] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  237.320939][ T9915] XFS (loop4): Starting recovery (logdev: internal)
[  237.349266][ T9915] XFS (loop4): Ending recovery (logdev: internal)
[  237.404436][ T9900] loop3: detected capacity change from 0 to 40427
[  237.432785][ T9900] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  237.432807][ T9900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  237.446953][ T9900] F2FS-fs (loop3): invalid crc value
[  237.454012][ T9915] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8
[  237.454056][ T9915] XFS (loop4): Unmount and run xfs_repair
[  237.518071][ T9915] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  237.518122][ T9915] XFS (loop4): Unmount and run xfs_repair
[  237.518134][ T9915] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  237.518150][ T9915] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  237.518164][ T9915] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  237.518177][ T9915] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  237.518190][ T9915] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  237.518203][ T9915] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  237.518216][ T9915] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  237.518229][ T9915] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  237.518242][ T9915] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  237.518257][ T9915] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 8 error 117
[  237.697948][ T5640] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  237.723796][ T9938] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  237.723841][ T9938] XFS (loop4): Unmount and run xfs_repair
[  237.723852][ T9938] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  237.723867][ T9938] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  237.723880][ T9938] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  237.723893][ T9938] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  237.723905][ T9938] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  237.723917][ T9938] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  237.723929][ T9938] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  237.723941][ T9938] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  237.723967][ T9938] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  237.724382][ T9938] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_buf_submit+0x350/0xda0 (fs/xfs/xfs_buf.c:1416).  Shutting down filesystem.
[  237.724422][ T9938] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  237.724436][ T9938] loop4: lost filesystem error report for type 5 error -108
[  237.780280][ T1220] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  237.894585][ T9900] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.900757][ T9950] profile_transition: unconfined exec no attachment
[  237.960031][ T9900] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  237.960201][ T9900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  238.004792][ T1220] usb 6-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00
[  238.008665][ T1220] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.042531][ T1220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  238.042556][ T1220] usb 6-1: Product: syz
[  238.042569][ T1220] usb 6-1: Manufacturer: syz
[  238.082232][ T1220] navman 6-1:1.0: navman converter detected
[  238.093872][ T1220] usb 6-1: navman converter now attached to ttyUSB0
[  238.128276][ T9900] syz.3.1513: attempt to access beyond end of device
[  238.128276][ T9900] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  238.279842][ T5638] syz-executor: attempt to access beyond end of device
[  238.279842][ T5638] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  238.318049][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  238.318074][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  238.318084][ T5638] Call Trace:
[  238.318093][ T5638]  <TASK>
[  238.318100][ T5638]  dump_stack_lvl+0xe8/0x150
[  238.318133][ T5638]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  238.318160][ T5638]  f2fs_write_end_bio+0xf7d/0x1310
[  238.318190][ T5638]  __submit_merged_bio+0x258/0x6a0
[  238.318208][ T5638]  ? rcu_is_watching+0x16/0xb0
[  238.318229][ T5638]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  238.318251][ T5638]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  238.318295][ T5638]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  238.318328][ T5638]  ? __lock_acquire+0x747/0x2de0
[  238.318368][ T5638]  ? __lock_acquire+0x747/0x2de0
[  238.318395][ T5638]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  238.318411][ T5638]  ? __lock_acquire+0x747/0x2de0
[  238.318494][ T5638]  ? rcu_is_watching+0x16/0xb0
[  238.318508][ T5638]  ? __kasan_check_byte+0x12/0x40
[  238.318525][ T5638]  ? rcu_is_watching+0x16/0xb0
[  238.318541][ T5638]  ? lock_release+0x4b/0x3c0
[  238.318559][ T5638]  ? lock_release+0x4b/0x3c0
[  238.318586][ T5638]  ? is_bpf_text_address+0x292/0x2b0
[  238.318605][ T5638]  ? is_bpf_text_address+0x26/0x2b0
[  238.318623][ T5638]  ? kernel_text_address+0xa5/0xe0
[  238.318642][ T5638]  ? __kernel_text_address+0xd/0x30
[  238.318658][ T5638]  ? unwind_get_return_address+0x4d/0x90
[  238.318677][ T5638]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  238.318698][ T5638]  ? arch_stack_walk+0xfb/0x150
[  238.318729][ T5638]  ? stack_trace_save+0xa9/0x100
[  238.318749][ T5638]  ? __pfx_stack_trace_save+0x10/0x10
[  238.318776][ T5638]  ? check_path+0x21/0x40
[  238.318794][ T5638]  ? add_lock_to_list+0xc7/0x100
[  238.318809][ T5638]  ? lockdep_unlock+0x5c/0xd0
[  238.318824][ T5638]  ? __lock_acquire+0x1511/0x2de0
[  238.318867][ T5638]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.318893][ T5638]  do_writepages+0x338/0x560
[  238.318922][ T5638]  ? do_raw_spin_unlock+0xf5/0x200
[  238.318943][ T5638]  filemap_fdatawrite+0x1e9/0x2f0
[  238.318965][ T5638]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  238.319029][ T5638]  ? do_raw_spin_unlock+0xf5/0x200
[  238.319048][ T5638]  f2fs_sync_dirty_inodes+0x471/0x970
[  238.319084][ T5638]  f2fs_write_checkpoint+0x867/0x24d0
[  238.319130][ T5638]  kill_f2fs_super+0x2df/0x700
[  238.319160][ T5638]  ? rcu_do_enqueue+0x60d/0x870
[  238.319180][ T5638]  ? lockdep_hardirqs_on+0x7b/0x110
[  238.319201][ T5638]  ? __pfx_kill_f2fs_super+0x10/0x10
[  238.319244][ T5638]  ? __pfx_call_rcu+0x10/0x10
[  238.319267][ T5638]  ? shrinker_free+0x2a7/0x3b0
[  238.319292][ T5638]  deactivate_locked_super+0xbe/0x110
[  238.319318][ T5638]  cleanup_mnt+0x204/0x2a0
[  238.319342][ T5638]  task_work_run+0x1d9/0x260
[  238.319371][ T5638]  ? __pfx_task_work_run+0x10/0x10
[  238.319405][ T5638]  exit_to_user_mode_loop+0x204/0x770
[  238.319431][ T5638]  ? rcu_is_watching+0x16/0xb0
[  238.319454][ T5638]  do_syscall_64+0x336/0x540
[  238.319483][ T5638]  ? trace_irq_disable+0x3b/0x140
[  238.319499][ T5638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.319519][ T5638]  ? clear_bhb_loop+0x70/0xc0
[  238.319543][ T5638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.319561][ T5638] RIP: 0033:0x00007f81187aa217
[  238.319582][ T5638] Code: a2 c7 05 dc 34 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  238.319597][ T5638] RSP: 002b:00007ffda8e7df68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  238.319618][ T5638] RAX: 0000000000000000 RBX: 00007f81188373e3 RCX: 00007f81187aa217
[  238.319632][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda8e7e020
[  238.319644][ T5638] RBP: 00007ffda8e7e020 R08: 00007ffda8e7f020 R09: 00000000ffffffff
[  238.319657][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda8e7f0b0
[  238.319669][ T5638] R13: 00007f81188373e3 R14: 000000000003a248 R15: 00007ffda8e7f0f0
[  238.319702][ T5638]  </TASK>
[  238.327707][ T5638] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  238.336486][  T995] usb 6-1: USB disconnect, device number 3
[  238.363873][  T995] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  238.364439][  T995] navman 6-1:1.0: device disconnected
[  238.527786][ T9959] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.973491][ T9972] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  238.973491][ T9972] The task syz.3.1529 (9972) triggered the difference, watch for misbehavior.
[  239.010995][ T9976] loop2: detected capacity change from 0 to 512
[  239.016241][ T9977] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  239.216313][ T1147] wlan1: Creating new IBSS network, BSSID 02:ea:5f:8f:71:80
[  241.674817][T10009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1547'.
[  244.084060][T10004] loop4: detected capacity change from 0 to 32768
[  244.125519][T10004] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  244.128435][T10004] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  244.215855][T10004] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  244.218656][T10039] block nbd5: NBD_DISCONNECT
[  244.252035][T10004] XFS (loop4): Tail block (0x10) overwrite detected. Updated to 0x30
[  244.272400][T10004] XFS (loop4): Ending clean mount
[  244.329020][T10004] XFS (loop4): Quotacheck needed: Please wait.
[  244.455577][T10004] XFS (loop4): Quotacheck: Done.
[  244.541013][T10048] loop5: detected capacity change from 0 to 4096
[  244.553211][T10048] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  244.606140][ T5640] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  244.627752][T10048] ntfs3(loop5): ino=19, mi_enum_attr
[  244.627793][T10048] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  244.628985][T10048] ntfs3(loop5): ino=1a, mi_enum_attr
[  244.629130][T10048] ntfs3(loop5): ino=1a, mi_enum_attr
[  244.629147][T10048] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  245.131627][T10066] loop4: detected capacity change from 0 to 1024
[  245.299781][T10064] Process accounting resumed
[  245.399640][T10072] loop2: detected capacity change from 0 to 2048
[  245.425075][T10072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.685174][T10087] loop2: detected capacity change from 0 to 4096
[  245.688501][T10087] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  245.750896][T10087] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  245.762862][T10087] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  246.080228][T10101] can0: slcan on ttyS3.
[  246.132267][T10103] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1586'.
[  246.132290][T10103] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1586'.
[  246.157749][T10104] profile_transition: unconfined exec no attachment
[  246.173628][T10101] can0 (unregistered): slcan off ttyS3.
[  246.182734][  T995] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  246.245889][T10106] profile_transition: unconfined exec no attachment
[  246.327479][T10112] profile_transition: unconfined exec no attachment
[  246.334332][  T995] usb 5-1: Using ep0 maxpacket: 16
[  246.335192][  T995] usb 5-1: New USB device found: idVendor=258a, idProduct=0033, bcdDevice=0.00
[  246.336646][  T995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.336690][  T995] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.336713][  T995] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.336734][  T995] usb 5-1: config 0 interface 0 has no altsetting 0
[  246.336764][  T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.350597][  T995] usb 5-1: config 0 descriptor??
[  246.391995][T10114] batadv_slave_1: entered promiscuous mode
[  246.393917][T10113] batadv_slave_1: left promiscuous mode
[  246.438812][   T33] audit: type=1326 audit(1794420535.854:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10082 comm="syz.3.1579" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81187a8fd9 code=0x7fc00000
[  246.565442][T10119] profile_transition: unconfined exec no attachment
[  246.640408][T10123] jffs2: notice: (10123) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  246.680566][T10123] jffs2: error: (10123) jffs2_do_read_inode: requested to read a nonexistent ino 4096
[  246.698227][T10128] profile_transition: unconfined exec no attachment
[  246.822158][  T995] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  246.822198][  T995] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  246.822223][  T995] glorious 0003:258A:0033.000A: unknown main item tag 0x2
[  246.822248][  T995] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  246.822272][  T995] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  246.822297][  T995] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  246.822322][  T995] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  246.822346][  T995] glorious 0003:258A:0033.000A: item fetching failed at offset 10/40
[  246.825436][  T995] glorious 0003:258A:0033.000A: probe with driver glorious failed with error -22
[  246.885922][T10135] loop3: detected capacity change from 0 to 256
[  246.935778][T10136] profile_transition: unconfined exec no attachment
[  247.010438][ T5837] usb 5-1: USB disconnect, device number 14
[  247.022777][T10137] syz.3.1596: attempt to access beyond end of device
[  247.022777][T10137] loop3: rw=2049, sector=1832, nr_sectors = 32 limit=256
[  247.024142][T10137] syz.3.1596: attempt to access beyond end of device
[  247.024142][T10137] loop3: rw=2049, sector=1896, nr_sectors = 32 limit=256
[  247.037993][T10137] syz.3.1596: attempt to access beyond end of device
[  247.037993][T10137] loop3: rw=2049, sector=1960, nr_sectors = 24 limit=256
[  247.104302][T10138] profile_transition: unconfined exec no attachment
[  247.219215][T10139] profile_transition: unconfined exec no attachment
[  247.374588][T10142] profile_transition: unconfined exec no attachment
[  247.428560][T10133] loop5: detected capacity change from 0 to 40427
[  247.459726][T10133] F2FS-fs (loop5): invalid crc value
[  247.570752][T10149] profile_transition: unconfined exec no attachment
[  247.577925][T10133] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.624206][T10133] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  247.899381][T10162] loop2: detected capacity change from 0 to 2
[  247.900227][T10162] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  247.985194][T10133] syz.5.1594: attempt to access beyond end of device
[  247.985194][T10133] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  248.035050][T10133] CPU: 0 UID: 0 PID: 10133 Comm: syz.5.1594 Not tainted syzkaller #0 PREEMPT(full) 
[  248.035081][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  248.035094][T10133] Call Trace:
[  248.035100][T10133]  <TASK>
[  248.035106][T10133]  dump_stack_lvl+0xe8/0x150
[  248.035129][T10133]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  248.035149][T10133]  f2fs_write_end_bio+0x2c0/0x1310
[  248.035165][T10133]  ? blkg_put+0x18d/0x240
[  248.035236][T10133]  ? bio_endio+0x984/0xac0
[  248.035247][T10133]  ? f2fs_write_end_io+0x258/0x300
[  248.035260][T10133]  __submit_merged_bio+0x258/0x6a0
[  248.035274][T10133]  ? rcu_is_watching+0x16/0xb0
[  248.035289][T10133]  f2fs_submit_merged_write+0x2cc/0x610
[  248.035307][T10133]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  248.035328][T10133]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  248.035342][T10133]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  248.035363][T10133]  f2fs_writeback_node_caches+0xf8c/0x1160
[  248.035398][T10133]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  248.035432][T10133]  ? f2fs_write_checkpoint+0xe25/0x24d0
[  248.035447][T10133]  ? up_write+0x19d/0x4a0
[  248.035462][T10133]  f2fs_write_checkpoint+0xe5b/0x24d0
[  248.035497][T10133]  f2fs_issue_checkpoint+0x424/0x6f0
[  248.035516][T10133]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  248.035527][T10133]  ? __pfx_from_kgid+0x10/0x10
[  248.035548][T10133]  ? rcu_is_watching+0x16/0xb0
[  248.035558][T10133]  ? __up_read+0x29c/0x930
[  248.035597][T10133]  ? f2fs_sync_fs+0x1f2/0x3c0
[  248.035612][T10133]  f2fs_unlink+0x1f1/0x5a0
[  248.035627][T10133]  vfs_rmdir+0x3e6/0x6f0
[  248.035638][T10133]  ? bpf_lsm_path_rmdir+0x9/0x20
[  248.035654][T10133]  filename_rmdir+0x276/0x500
[  248.035670][T10133]  ? __pfx_filename_rmdir+0x10/0x10
[  248.035687][T10133]  ? do_getname+0x151/0x250
[  248.035702][T10133]  __se_sys_rmdir+0x2e/0x140
[  248.035716][T10133]  do_syscall_64+0x171/0x540
[  248.035729][T10133]  ? trace_irq_disable+0x3b/0x140
[  248.035739][T10133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.035750][T10133]  ? clear_bhb_loop+0x70/0xc0
[  248.035764][T10133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.035775][T10133] RIP: 0033:0x00007ffa4e7a8fd9
[  248.035788][T10133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.035797][T10133] RSP: 002b:00007ffa4f675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  248.035810][T10133] RAX: ffffffffffffffda RBX: 00007ffa4ea25fa0 RCX: 00007ffa4e7a8fd9
[  248.035818][T10133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  248.035825][T10133] RBP: 00007ffa4e837fed R08: 0000000000000000 R09: 0000000000000000
[  248.035831][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.035838][T10133] R13: 00007ffa4ea26038 R14: 00007ffa4ea25fa0 R15: 00007ffe2c1a6568
[  248.035858][T10133]  </TASK>
[  248.035884][T10133] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  248.141771][  T156] kworker/u8:7: attempt to access beyond end of device
[  248.141771][  T156] loop3: rw=8388609, sector=1980, nr_sectors = 4 limit=256
[  248.141808][  T156] buffer_io_error: 21 callbacks suppressed
[  248.141818][  T156] Buffer I/O error on dev loop3, logical block 495, lost async page write
[  248.141901][  T156] kworker/u8:7: attempt to access beyond end of device
[  248.141901][  T156] loop3: rw=1, sector=1984, nr_sectors = 8 limit=256
[  248.142048][  T156] kworker/u8:7: attempt to access beyond end of device
[  248.142048][  T156] loop3: rw=1, sector=2024, nr_sectors = 32 limit=256
[  248.142211][  T156] kworker/u8:7: attempt to access beyond end of device
[  248.142211][  T156] loop3: rw=1, sector=2088, nr_sectors = 32 limit=256
[  248.142343][  T156] kworker/u8:7: attempt to access beyond end of device
[  248.142343][  T156] loop3: rw=1, sector=2152, nr_sectors = 32 limit=256
[  248.142494][  T156] kworker/u8:7: attempt to access beyond end of device
[  248.142494][  T156] loop3: rw=1, sector=2216, nr_sectors = 32 limit=256
[  248.675963][T10178] Format for deleting device is "id" (uint).
[  249.201588][T10171] loop2: detected capacity change from 0 to 32768
[  249.216693][T10171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1603 (10171)
[  249.253066][T10171] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  249.253132][T10171] BTRFS info (device loop2): using crc32c checksum algorithm
[  249.355849][T10171] BTRFS info (device loop2): enabling ssd optimizations
[  249.355882][T10171] BTRFS info (device loop2): turning on flush-on-commit
[  249.355898][T10171] BTRFS info (device loop2): enabling free space tree
[  249.355913][T10171] BTRFS info (device loop2): enabling auto defrag
[  249.355932][T10171] BTRFS info (device loop2): use lzo compression, level 1
[  249.355953][T10171] BTRFS info (device loop2): max_inline set to 4096
[  249.437256][T10171] BTRFS info (device loop2 state M): max_inline set to 4096
[  249.477415][ T5641] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.206599][T10230] loop4: detected capacity change from 0 to 33280
[  250.267082][T10230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.267225][T10230] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.314011][T10230] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  250.462375][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.690035][T10247] loop3: detected capacity change from 0 to 33792
[  250.740729][T10247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.819164][T10226] loop1: detected capacity change from 0 to 32768
[  250.823389][T10226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1623 (10226)
[  250.871995][T10226] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  250.872038][T10226] BTRFS info (device loop1): using sha256 checksum algorithm
[  250.909211][T10253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.1631: missing EA_INODE flag
[  250.911691][T10255] xt_hashlimit: size too large, truncated to 1048576
[  250.962407][T10253] EXT4-fs (loop3): Remounting filesystem read-only
[  250.963611][T10253] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1235: inode #18: comm syz.3.1631: ea_inode dec ref err=-30
[  250.963698][T10253] EXT4-fs warning (device loop3): ext4_evict_inode:355: xattr delete (err -30)
[  251.101937][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.169106][T10226] BTRFS info (device loop1): enabling ssd optimizations
[  251.169142][T10226] BTRFS info (device loop1): turning on async discard
[  251.169157][T10226] BTRFS info (device loop1): enabling free space tree
[  251.169219][T10226] BTRFS info (device loop1): use zlib compression, level 3
[  251.359210][T10241] loop5: detected capacity change from 0 to 40427
[  251.397972][T10241] F2FS-fs (loop5): invalid crc value
[  251.456295][ T5636] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.550798][T10241] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  251.587547][T10241] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  251.744774][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'.
[  251.802132][T10285] profile_transition: 9 callbacks suppressed
[  251.802155][T10285] profile_transition: unconfined exec no attachment
[  251.865443][ T8718] CPU: 1 UID: 0 PID: 8718 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  251.865484][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  251.865498][ T8718] Call Trace:
[  251.865506][ T8718]  <TASK>
[  251.865515][ T8718]  dump_stack_lvl+0xe8/0x150
[  251.865558][ T8718]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  251.865592][ T8718]  f2fs_write_end_bio+0x2c0/0x1310
[  251.865619][ T8718]  ? blkg_put+0x18d/0x240
[  251.865669][ T8718]  ? bio_endio+0x984/0xac0
[  251.865688][ T8718]  ? f2fs_write_end_io+0x258/0x300
[  251.865710][ T8718]  __submit_merged_bio+0x258/0x6a0
[  251.865736][ T8718]  ? rcu_is_watching+0x16/0xb0
[  251.865762][ T8718]  f2fs_submit_merged_write+0x2cc/0x610
[  251.865795][ T8718]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  251.865832][ T8718]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  251.865856][ T8718]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  251.865893][ T8718]  f2fs_writeback_node_caches+0xf8c/0x1160
[  251.865943][ T8718]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  251.866002][ T8718]  ? f2fs_write_checkpoint+0xe25/0x24d0
[  251.866026][ T8718]  ? up_write+0x19d/0x4a0
[  251.866045][ T8718]  ? trace_f2fs_write_checkpoint+0x82/0x200
[  251.866067][ T8718]  f2fs_write_checkpoint+0xe5b/0x24d0
[  251.866134][ T8718]  f2fs_issue_checkpoint+0x424/0x6f0
[  251.866166][ T8718]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  251.866187][ T8718]  ? sync_inodes_sb+0xb6d/0xbf0
[  251.866293][ T8718]  ? __mutex_unlock_slowpath+0x731/0x900
[  251.866324][ T8718]  ? do_raw_spin_lock+0x12b/0x2f0
[  251.866344][ T8718]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  251.866397][ T8718]  ? __pfx___writeback_inodes_sb_nr+0x10/0x10
[  251.866430][ T8718]  ? f2fs_sync_fs+0x1f2/0x3c0
[  251.866454][ T8718]  sync_filesystem+0x1d2/0x240
[  251.866475][ T8718]  generic_shutdown_super+0x7a/0x2d0
[  251.866503][ T8718]  kill_block_super+0x44/0xa0
[  251.866519][ T8718]  kill_f2fs_super+0x3b5/0x700
[  251.866548][ T8718]  ? rcu_do_enqueue+0x60d/0x870
[  251.866568][ T8718]  ? lockdep_hardirqs_on+0x7b/0x110
[  251.866609][ T8718]  ? __pfx_kill_f2fs_super+0x10/0x10
[  251.866643][ T8718]  ? __pfx_shrinker_free_rcu_cb+0x10/0x10
[  251.866665][ T8718]  ? call_rcu+0x20e/0x300
[  251.866688][ T8718]  ? __pfx_call_rcu+0x10/0x10
[  251.866712][ T8718]  ? shrinker_free+0x2a7/0x3b0
[  251.866737][ T8718]  deactivate_locked_super+0xbe/0x110
[  251.866767][ T8718]  cleanup_mnt+0x204/0x2a0
[  251.866793][ T8718]  task_work_run+0x1d9/0x260
[  251.866825][ T8718]  ? __pfx_task_work_run+0x10/0x10
[  251.866862][ T8718]  exit_to_user_mode_loop+0x204/0x770
[  251.866891][ T8718]  ? rcu_is_watching+0x16/0xb0
[  251.866915][ T8718]  do_syscall_64+0x336/0x540
[  251.866939][ T8718]  ? trace_irq_disable+0x3b/0x140
[  251.866958][ T8718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.866979][ T8718]  ? clear_bhb_loop+0x70/0xc0
[  251.867004][ T8718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.867023][ T8718] RIP: 0033:0x00007ffa4e7aa217
[  251.867045][ T8718] Code: a2 c7 05 dc 34 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  251.867063][ T8718] RSP: 002b:00007ffe2c1a57d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  251.867087][ T8718] RAX: 0000000000000000 RBX: 00007ffa4e8373e3 RCX: 00007ffa4e7aa217
[  251.867100][ T8718] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2c1a5890
[  251.867112][ T8718] RBP: 00007ffe2c1a5890 R08: 00007ffe2c1a6890 R09: 00000000ffffffff
[  251.867131][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2c1a6920
[  251.867143][ T8718] R13: 00007ffa4e8373e3 R14: 000000000003d6f3 R15: 00007ffe2c1a6960
[  251.867179][ T8718]  </TASK>
[  251.878296][ T8718] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  251.965331][T10289] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1640'.
[  253.033163][T10293] loop1: detected capacity change from 0 to 32768
[  253.038921][T10293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1652 (10293)
[  253.072520][T10293] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.072552][T10293] BTRFS info (device loop1): using sha256 checksum algorithm
[  253.176164][T10293] BTRFS info (device loop1): enabling ssd optimizations
[  253.176191][T10293] BTRFS info (device loop1): turning on async discard
[  253.176205][T10293] BTRFS info (device loop1): enabling free space tree
[  253.206052][   T33] audit: type=1326 audit(1794420542.624:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.237656][   T33] audit: type=1326 audit(1794420542.624:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.242497][   T33] audit: type=1326 audit(1794420542.654:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.242558][   T33] audit: type=1326 audit(1794420542.654:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.242833][   T33] audit: type=1326 audit(1794420542.654:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.242874][   T33] audit: type=1326 audit(1794420542.654:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.242912][   T33] audit: type=1326 audit(1794420542.654:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.242949][   T33] audit: type=1326 audit(1794420542.654:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.242987][   T33] audit: type=1326 audit(1794420542.654:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.243025][   T33] audit: type=1326 audit(1794420542.654:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10322 comm="syz.4.1649" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ff3a8fd9 code=0x7ffc0000
[  253.562171][ T5636] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.564396][T10333] profile_transition: unconfined exec no attachment
[  254.077764][T10351] loop5: detected capacity change from 0 to 16
[  254.135585][T10351] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  254.661776][ T1220] hid-generic 0003:0001:0001.000B: hidraw0: USB HID v0.01 Mouse [syz1] on syz0
[  254.684052][T10374] profile_transition: unconfined exec no attachment
[  254.712734][ T5750] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  254.716715][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1672'.
[  254.772794][ T5733] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  254.774299][T10374] fido_id[10374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  254.833233][T10378] FAULT_INJECTION: forcing a failure.
[  254.833233][T10378] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  254.833264][T10378] CPU: 1 UID: 0 PID: 10378 Comm: syz.3.1673 Not tainted syzkaller #0 PREEMPT(full) 
[  254.833286][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  254.833297][T10378] Call Trace:
[  254.833306][T10378]  <TASK>
[  254.833314][T10378]  dump_stack_lvl+0xe8/0x150
[  254.833351][T10378]  should_fail_ex+0x3eb/0x540
[  254.833377][T10378]  _copy_from_user+0x2d/0xb0
[  254.833462][T10378]  kstrtouint_from_user+0xd6/0x180
[  254.833489][T10378]  ? lock_acquire+0x115/0x350
[  254.833517][T10378]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  254.833551][T10378]  ? get_pid_task+0x20/0x1f0
[  254.833575][T10378]  ? get_pid_task+0x20/0x1f0
[  254.833603][T10378]  proc_fail_nth_write+0x8e/0x210
[  254.833653][T10378]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  254.833677][T10378]  ? iov_iter_iovec_advance+0x1e0/0x290
[  254.833718][T10378]  vfs_writev+0x4bc/0x9a0
[  254.833744][T10378]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  254.833772][T10378]  ? __pfx_vfs_writev+0x10/0x10
[  254.833810][T10378]  ? __fget_files+0x2a/0x420
[  254.833834][T10378]  ? __fget_files+0x3a2/0x420
[  254.833870][T10378]  ? fdget+0x1ac/0x250
[  254.833905][T10378]  do_writev+0x154/0x2e0
[  254.833931][T10378]  ? __pfx_do_writev+0x10/0x10
[  254.833976][T10378]  do_syscall_64+0x171/0x540
[  254.834000][T10378]  ? trace_irq_disable+0x3b/0x140
[  254.834018][T10378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.834040][T10378]  ? clear_bhb_loop+0x70/0xc0
[  254.834065][T10378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.834086][T10378] RIP: 0033:0x00007f81187a8fd9
[  254.834104][T10378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.834120][T10378] RSP: 002b:00007f8119694028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  254.834142][T10378] RAX: ffffffffffffffda RBX: 00007f8118a25fa0 RCX: 00007f81187a8fd9
[  254.834157][T10378] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003
[  254.834169][T10378] RBP: 00007f8118837fed R08: 0000000000000000 R09: 0000000000000000
[  254.834182][T10378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.834194][T10378] R13: 00007f8118a26038 R14: 00007f8118a25fa0 R15: 00007ffda8e7ecf8
[  254.834230][T10378]  </TASK>
[  254.862744][ T5750] usb 6-1: Using ep0 maxpacket: 8
[  254.863824][ T5750] usb 6-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  254.865417][ T5750] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  254.869007][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.869028][ T5750] usb 6-1: Product: syz
[  254.869042][ T5750] usb 6-1: Manufacturer: syz
[  254.869055][ T5750] usb 6-1: SerialNumber: syz
[  254.875997][ T5750] usb 6-1: config 0 descriptor??
[  254.884222][ T5750] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  254.887348][ T5750] usb 6-1: setting power ON
[  254.887944][ T5750] dvb-usb: bulk message failed: -22 (2/0)
[  254.901845][ T5750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  254.903534][ T5750] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  254.903592][ T5750] usb 6-1: media controller created
[  254.947872][ T5750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  254.979788][ T5733] usb 3-1: Using ep0 maxpacket: 8
[  255.000199][ T5750] usb 6-1: selecting invalid altsetting 6
[  255.000220][ T5750] usb 6-1: digital interface selection failed (-22)
[  255.000234][ T5750] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  255.000751][ T5733] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  255.006778][T10382] loop4: detected capacity change from 0 to 128
[  255.012121][T10382] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  255.014878][ T5750] usb 6-1: setting power OFF
[  255.014937][ T5750] dvb-usb: bulk message failed: -22 (2/0)
[  255.014950][ T5750] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  255.014963][ T5750] (NULL device *): no alternate interface
[  255.041338][ T5733] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  255.041362][ T5733] usb 3-1: config 179 has no interface number 0
[  255.041400][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  255.041423][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  255.041447][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  255.041470][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  255.041494][ T5733] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  255.041530][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.126883][T10362] dvb-usb: bulk message failed: -22 (4/0)
[  255.126902][T10362] cxusb: i2c read failed
[  255.278997][T10382] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  255.343635][ T5750] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  255.355969][ T5750] usb 6-1: USB disconnect, device number 4
[  255.390969][T10366] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  255.518918][T10386] nfsd: exp_rootfh path not found \
[  255.687333][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  255.687457][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  255.742312][ T5733] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input20
[  255.828721][ T5837] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  255.873354][ T5750] usb 3-1: USB disconnect, device number 7
[  255.873444][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  255.873792][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  255.978620][ T5837] usb 4-1: Using ep0 maxpacket: 32
[  255.980809][ T5837] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  255.982434][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  255.989626][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  255.989649][ T5837] usb 4-1: Product: syz
[  255.989661][ T5837] usb 4-1: Manufacturer: syz
[  255.989674][ T5837] usb 4-1: SerialNumber: syz
[  255.998490][ T5837] usb 4-1: config 0 descriptor??
[  256.000708][T10388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  256.008249][ T5837] hub 4-1:0.0: bad descriptor, ignoring hub
[  256.008272][ T5837] hub 4-1:0.0: probe with driver hub failed with error -5
[  256.019137][T10399] ip_tables: iptables: counters copy to user failed while replacing table
[  256.114139][T10401] bond0: option slaves: interface -bave_0 does not exist!
[  256.161765][T10403] rxe_eth0 speed is unknown, defaulting to 1000
[  256.353047][ T5837] usb 4-1: USB disconnect, device number 11
[  256.748825][T10425] ./dev/sda1: Can't open blockdev
[  256.760059][T10428] profile_transition: unconfined exec no attachment
[  256.843447][T10431] profile_transition: unconfined exec no attachment
[  256.915473][T10436] loop1: detected capacity change from 0 to 33280
[  256.915595][T10434] loop5: detected capacity change from 0 to 64
[  256.924759][T10434] hfs: unable to locate alternate MDB
[  256.924771][T10434] hfs: continuing without an alternate MDB
[  256.956859][T10436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  256.956972][T10436] System zones: 1-12
[  256.979737][T10436] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1700: missing EA_INODE flag
[  256.979762][T10436] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  256.982448][T10436] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1700: error while reading EA inode 12 err=-117
[  256.982476][T10436] loop1: lost filesystem error report for type 5 error -117
[  256.982649][    C0] EXT4-fs (loop1): error count since last fsck: 2
[  256.982666][    C0] EXT4-fs (loop1): initial error at time 1794420546: ext4_xattr_inode_iget:437: inode 12
[  256.982693][    C0] EXT4-fs (loop1): last error at time 1794420546: ext4_xattr_inode_iget:442
[  257.056313][T10436] EXT4-fs (loop1): 1 orphan inode deleted
[  257.059782][T10436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.089626][T10436] fscrypt (loop1, inode 15): Unsupported log2_data_unit_size in encryption policy: 232
[  257.199686][T10441] profile_transition: unconfined exec no attachment
[  257.382247][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.446048][T10446] profile_transition: unconfined exec no attachment
[  257.607965][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1704'.
[  257.626517][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  257.702141][T10453] device-mapper: ioctl: only supply one of name or uuid, cmd(6)
[  257.772831][ T5837] usb 4-1: Using ep0 maxpacket: 8
[  257.774275][ T5837] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  257.775393][ T5837] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  257.775443][ T5837] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  257.775463][ T5837] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  257.775486][ T5837] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  257.775506][ T5837] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.775543][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.850519][T10457] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  257.855586][T10457] netlink: 'syz.2.1706': attribute type 12 has an invalid length.
[  258.027868][ T5837] usb 4-1: GET_CAPABILITIES returned 0
[  258.043624][ T5837] usbtmc 4-1:16.0: can't read capabilities
[  258.135712][T10430] loop4: detected capacity change from 0 to 40427
[  258.151386][T10430] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  258.151412][T10430] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  258.267516][ T1220] usb 4-1: USB disconnect, device number 12
[  258.297946][T10430] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.330499][T10430] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  258.330524][T10430] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  258.439896][ T5640] bio_check_eod: 64 callbacks suppressed
[  258.439916][ T5640] syz-executor: attempt to access beyond end of device
[  258.439916][ T5640] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  258.453320][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  258.453346][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  258.453357][ T5640] Call Trace:
[  258.453364][ T5640]  <TASK>
[  258.453372][ T5640]  dump_stack_lvl+0xe8/0x150
[  258.453407][ T5640]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  258.453438][ T5640]  f2fs_write_end_bio+0xf7d/0x1310
[  258.453476][ T5640]  __submit_merged_bio+0x258/0x6a0
[  258.453499][ T5640]  ? rcu_is_watching+0x16/0xb0
[  258.453524][ T5640]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  258.453552][ T5640]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  258.453602][ T5640]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  258.453643][ T5640]  ? __lock_acquire+0x747/0x2de0
[  258.453689][ T5640]  ? __lock_acquire+0x747/0x2de0
[  258.453718][ T5640]  ? __lock_acquire+0x747/0x2de0
[  258.453740][ T5640]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  258.453808][ T5640]  ? rcu_is_watching+0x16/0xb0
[  258.453829][ T5640]  ? rcu_is_watching+0x16/0xb0
[  258.453844][ T5640]  ? __kasan_check_byte+0x12/0x40
[  258.453879][ T5640]  ? is_bpf_text_address+0x292/0x2b0
[  258.453901][ T5640]  ? is_bpf_text_address+0x26/0x2b0
[  258.453925][ T5640]  ? kernel_text_address+0xa5/0xe0
[  258.453955][ T5640]  ? __kernel_text_address+0xd/0x30
[  258.453978][ T5640]  ? unwind_get_return_address+0x4d/0x90
[  258.454007][ T5640]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  258.454032][ T5640]  ? arch_stack_walk+0xfb/0x150
[  258.454070][ T5640]  ? stack_trace_save+0xa9/0x100
[  258.454094][ T5640]  ? __pfx_stack_trace_save+0x10/0x10
[  258.454125][ T5640]  ? check_path+0x21/0x40
[  258.454147][ T5640]  ? add_lock_to_list+0xc7/0x100
[  258.454167][ T5640]  ? lockdep_unlock+0x5c/0xd0
[  258.454186][ T5640]  ? __lock_acquire+0x1511/0x2de0
[  258.454240][ T5640]  ? do_raw_spin_lock+0x12b/0x2f0
[  258.454272][ T5640]  ? do_raw_spin_unlock+0xf5/0x200
[  258.454298][ T5640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.454328][ T5640]  do_writepages+0x338/0x560
[  258.454359][ T5640]  ? do_raw_spin_unlock+0xf5/0x200
[  258.454385][ T5640]  filemap_fdatawrite+0x1e9/0x2f0
[  258.454410][ T5640]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  258.454480][ T5640]  ? do_raw_spin_unlock+0xf5/0x200
[  258.454505][ T5640]  f2fs_sync_dirty_inodes+0x471/0x970
[  258.454549][ T5640]  f2fs_write_checkpoint+0x867/0x24d0
[  258.454607][ T5640]  kill_f2fs_super+0x2df/0x700
[  258.454639][ T5640]  ? rcu_do_enqueue+0x60d/0x870
[  258.454662][ T5640]  ? lockdep_hardirqs_on+0x7b/0x110
[  258.454685][ T5640]  ? __pfx_kill_f2fs_super+0x10/0x10
[  258.454730][ T5640]  ? __pfx_call_rcu+0x10/0x10
[  258.454754][ T5640]  ? shrinker_free+0x2a7/0x3b0
[  258.454778][ T5640]  deactivate_locked_super+0xbe/0x110
[  258.454805][ T5640]  cleanup_mnt+0x204/0x2a0
[  258.454829][ T5640]  task_work_run+0x1d9/0x260
[  258.454855][ T5640]  ? __pfx_task_work_run+0x10/0x10
[  258.454889][ T5640]  exit_to_user_mode_loop+0x204/0x770
[  258.454916][ T5640]  ? rcu_is_watching+0x16/0xb0
[  258.454938][ T5640]  do_syscall_64+0x336/0x540
[  258.454959][ T5640]  ? trace_irq_disable+0x3b/0x140
[  258.454975][ T5640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.454994][ T5640]  ? clear_bhb_loop+0x70/0xc0
[  258.455017][ T5640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.455035][ T5640] RIP: 0033:0x00007fe6ff3aa217
[  258.455053][ T5640] Code: a2 c7 05 dc 34 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  258.455068][ T5640] RSP: 002b:00007ffe71ef72b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  258.455088][ T5640] RAX: 0000000000000000 RBX: 00007fe6ff4373e3 RCX: 00007fe6ff3aa217
[  258.455100][ T5640] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe71ef7370
[  258.455112][ T5640] RBP: 00007ffe71ef7370 R08: 00007ffe71ef8370 R09: 00000000ffffffff
[  258.455124][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe71ef8400
[  258.455136][ T5640] R13: 00007fe6ff4373e3 R14: 000000000003f156 R15: 00007ffe71ef8440
[  258.455168][ T5640]  </TASK>
[  258.457615][ T5640] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  258.968696][T10482] tun0: tun_chr_ioctl cmd 1074025681
[  259.189015][T10494] loop1: detected capacity change from 0 to 128
[  259.216604][T10494] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  259.232745][T10494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.372308][T10500] ieee802154 phy0 wpan0: encryption failed: -22
[  259.569473][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1728'.
[  259.947049][T10530] loop5: detected capacity change from 0 to 33280
[  259.969947][T10530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  260.029755][T10530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.029865][T10530] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  260.293719][ T8718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.504746][T10541] profile_transition: unconfined exec no attachment
[  260.679302][T10515] loop1: detected capacity change from 0 to 32768
[  260.814082][T10528] loop2: detected capacity change from 0 to 40427
[  260.839913][T10528] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  260.839941][T10528] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  260.968344][T10515] ERROR: (device loop1): duplicateIXtree: 
[  260.968344][T10515] 
[  260.968644][T10515] ERROR: (device loop1): remounting filesystem as read-only
[  261.267750][T10528] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.276428][T10558] device-mapper: table: 248:3: multipath: invalid number of priority groups (-EINVAL)
[  261.276478][T10558] device-mapper: ioctl: error adding target to table
[  261.307739][T10528] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  261.307767][T10528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  261.365290][T10565] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.528032][ T5641] syz-executor: attempt to access beyond end of device
[  261.528032][ T5641] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  261.539851][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  261.539882][ T5641] Tainted: [L]=SOFTLOCKUP
[  261.539889][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  261.539900][ T5641] Call Trace:
[  261.539907][ T5641]  <TASK>
[  261.539916][ T5641]  dump_stack_lvl+0xe8/0x150
[  261.539952][ T5641]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  261.539983][ T5641]  f2fs_write_end_bio+0xf7d/0x1310
[  261.540021][ T5641]  __submit_merged_bio+0x258/0x6a0
[  261.540045][ T5641]  ? rcu_is_watching+0x16/0xb0
[  261.540070][ T5641]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  261.540101][ T5641]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  261.540151][ T5641]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  261.540192][ T5641]  ? __lock_acquire+0x747/0x2de0
[  261.540238][ T5641]  ? __lock_acquire+0x747/0x2de0
[  261.540267][ T5641]  ? __lock_acquire+0x747/0x2de0
[  261.540290][ T5641]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  261.540359][ T5641]  ? rcu_is_watching+0x16/0xb0
[  261.540380][ T5641]  ? rcu_is_watching+0x16/0xb0
[  261.540395][ T5641]  ? __kasan_check_byte+0x12/0x40
[  261.540430][ T5641]  ? is_bpf_text_address+0x292/0x2b0
[  261.540452][ T5641]  ? is_bpf_text_address+0x26/0x2b0
[  261.540476][ T5641]  ? kernel_text_address+0xa5/0xe0
[  261.540507][ T5641]  ? __kernel_text_address+0xd/0x30
[  261.540531][ T5641]  ? unwind_get_return_address+0x4d/0x90
[  261.540556][ T5641]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  261.540582][ T5641]  ? arch_stack_walk+0xfb/0x150
[  261.540619][ T5641]  ? stack_trace_save+0xa9/0x100
[  261.540643][ T5641]  ? __pfx_stack_trace_save+0x10/0x10
[  261.540672][ T5641]  ? check_path+0x21/0x40
[  261.540693][ T5641]  ? add_lock_to_list+0xc7/0x100
[  261.540713][ T5641]  ? lockdep_unlock+0x5c/0xd0
[  261.540733][ T5641]  ? __lock_acquire+0x1511/0x2de0
[  261.540787][ T5641]  ? do_raw_spin_lock+0x12b/0x2f0
[  261.540819][ T5641]  ? do_raw_spin_unlock+0xf5/0x200
[  261.540840][ T5641]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  261.540869][ T5641]  do_writepages+0x338/0x560
[  261.540900][ T5641]  ? do_raw_spin_unlock+0xf5/0x200
[  261.540926][ T5641]  filemap_fdatawrite+0x1e9/0x2f0
[  261.540952][ T5641]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  261.541021][ T5641]  ? do_raw_spin_unlock+0xf5/0x200
[  261.541046][ T5641]  f2fs_sync_dirty_inodes+0x471/0x970
[  261.541091][ T5641]  f2fs_write_checkpoint+0x867/0x24d0
[  261.541149][ T5641]  kill_f2fs_super+0x2df/0x700
[  261.541181][ T5641]  ? rcu_do_enqueue+0x60d/0x870
[  261.541204][ T5641]  ? lockdep_hardirqs_on+0x7b/0x110
[  261.541227][ T5641]  ? __pfx_kill_f2fs_super+0x10/0x10
[  261.541272][ T5641]  ? __pfx_call_rcu+0x10/0x10
[  261.541296][ T5641]  ? shrinker_free+0x2a7/0x3b0
[  261.541320][ T5641]  deactivate_locked_super+0xbe/0x110
[  261.541348][ T5641]  cleanup_mnt+0x204/0x2a0
[  261.541371][ T5641]  task_work_run+0x1d9/0x260
[  261.541398][ T5641]  ? __pfx_task_work_run+0x10/0x10
[  261.541432][ T5641]  exit_to_user_mode_loop+0x204/0x770
[  261.541457][ T5641]  ? rcu_is_watching+0x16/0xb0
[  261.541481][ T5641]  do_syscall_64+0x336/0x540
[  261.541508][ T5641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.541527][ T5641]  ? clear_bhb_loop+0x70/0xc0
[  261.541550][ T5641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.541569][ T5641] RIP: 0033:0x00007f9c6e7aa217
[  261.541587][ T5641] Code: a2 c7 05 dc 34 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  261.541602][ T5641] RSP: 002b:00007ffe330c5598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  261.541622][ T5641] RAX: 0000000000000000 RBX: 00007f9c6e8373e3 RCX: 00007f9c6e7aa217
[  261.541635][ T5641] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe330c5650
[  261.541647][ T5641] RBP: 00007ffe330c5650 R08: 00007ffe330c6650 R09: 00000000ffffffff
[  261.541659][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe330c66e0
[  261.541671][ T5641] R13: 00007f9c6e8373e3 R14: 000000000003fcd7 R15: 00007ffe330c6720
[  261.541703][ T5641]  </TASK>
[  261.549821][ T5641] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  262.006341][ T5750] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  262.152695][ T5750] usb 5-1: Using ep0 maxpacket: 8
[  262.153439][ T5750] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  262.154619][ T5750] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  262.154647][ T5750] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  262.154670][ T5750] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  262.154691][ T5750] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  262.154730][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.248301][T10582] loop2: detected capacity change from 0 to 128
[  262.256182][T10582] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  262.256211][T10582] hpfs: filesystem error: improperly stopped
[  262.256224][T10582] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  262.256237][T10582] hpfs: You really don't want any checks? You are crazy...
[  262.256273][T10582] hpfs: Code page index out of array
[  262.256281][T10582] hpfs: code page support is disabled
[  262.258133][T10582] hpfs: hpfs_map_4sectors(): unaligned read
[  262.258268][T10582] hpfs: hpfs_map_4sectors(): unaligned read
[  262.258279][T10582] hpfs: filesystem error: unable to find root dir
[  262.375405][ T5750] usb 5-1: GET_CAPABILITIES returned 0
[  262.375454][ T5750] usbtmc 5-1:16.0: can't read capabilities
[  262.454315][T10587] geneve2: entered promiscuous mode
[  262.454330][T10587] geneve2: entered allmulticast mode
[  262.456862][T10589] loop5: detected capacity change from 0 to 33280
[  262.478196][   T54] netdevsim netdevsim10 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  262.478242][   T54] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  262.478277][   T54] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  262.478310][   T54] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  262.478343][   T54] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  262.541436][T10589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.541547][T10589] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.632081][ T5733] usb 5-1: USB disconnect, device number 15
[  262.690163][T10596] loop1: detected capacity change from 0 to 33792
[  262.708945][T10596] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  262.724604][ T8718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.741673][T10598] loop3: detected capacity change from 0 to 2048
[  262.763021][T10596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  262.763132][T10596] System zones: 0-1, 3-36
[  262.763395][T10596] EXT4-fs (loop1): orphan cleanup on readonly fs
[  262.855909][T10602] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.907408][T10596] EXT4-fs (loop1): 1 orphan inode deleted
[  262.934071][T10596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.006297][T10596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  263.038802][T10596] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  263.049797][T10596] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:521: comm syz.1.1762: Block bitmap for bg 0 marked uninitialized
[  263.117999][T10607] loop2: detected capacity change from 0 to 256
[  263.123419][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.317517][T10613] loop1: detected capacity change from 0 to 128
[  263.389399][T10617] loop4: detected capacity change from 0 to 33792
[  263.452840][T10617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.630498][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.682117][T10630] loop5: detected capacity change from 0 to 128
[  263.905171][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'.
[  264.012717][  T995] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  264.162751][  T995] usb 5-1: Using ep0 maxpacket: 8
[  264.164573][  T995] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  264.166558][  T995] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  264.166582][  T995] usb 5-1: config 179 has no interface number 0
[  264.166626][  T995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  264.166650][  T995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  264.166675][  T995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  264.166697][  T995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  264.166720][  T995] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  264.166759][  T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.242510][T10635] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  264.453048][T10646] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1784 (10646)
[  264.477958][T10646] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  264.477989][T10646] BTRFS info (device loop2): using blake2b checksum algorithm
[  264.558395][  T995] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input21
[  264.633469][T10646] BTRFS info (device loop2): enabling ssd optimizations
[  264.633499][T10646] BTRFS info (device loop2): turning on async discard
[  264.633515][T10646] BTRFS info (device loop2): enabling free space tree
[  264.633533][T10646] BTRFS info (device loop2): use zstd compression, level 3
[  264.660091][T10670] profile_transition: unconfined exec no attachment
[  264.806552][   T53] usb 5-1: USB disconnect, device number 16
[  264.806591][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  264.806643][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  264.873401][ T5641] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  265.532813][ T1220] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  265.686846][ T1220] usb 4-1: not running at top speed; connect to a high speed hub
[  265.686885][ T1220] usb 4-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00
[  265.698501][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.698528][ T1220] usb 4-1: Product: syz
[  265.698541][ T1220] usb 4-1: Manufacturer: syz
[  265.698555][ T1220] usb 4-1: SerialNumber: syz
[  265.747577][ T1220] keyspan 4-1:1.0: Keyspan 4 port adapter converter detected
[  265.774067][T10692] kAFS: bad VL server IP address
[  265.794912][ T1220] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  265.809673][ T1220] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  265.829487][ T1220] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  265.858536][ T1220] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  266.041377][    C1] usb 4-1: malformed indat packet
[  266.041653][    C1] usb 4-1: malformed indat packet
[  266.041906][    C1] usb 4-1: malformed indat packet
[  266.042206][    C1] usb 4-1: malformed indat packet
[  266.042472][    C1] usb 4-1: malformed indat packet
[  266.042735][    C1] usb 4-1: malformed indat packet
[  266.042976][    C1] usb 4-1: malformed indat packet
[  266.043233][    C1] usb 4-1: malformed indat packet
[  266.256324][ T1220] usb 4-1: USB disconnect, device number 13
[  266.321135][ T1220] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  266.388130][ T1220] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  266.427637][ T1220] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  266.456587][ T1220] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  266.460033][ T1220] keyspan 4-1:1.0: device disconnected
[  266.789802][T10715] raw_sendmsg: syz.2.1806 forgot to set AF_INET. Fix it!
[  267.177982][T10730] set_capacity_and_notify: 1 callbacks suppressed
[  267.178003][T10730] loop3: detected capacity change from 0 to 33792
[  267.220067][T10732] loop5: detected capacity change from 0 to 34816
[  267.222344][T10732] ext4: Unknown parameter 'dont_measure'
[  267.228601][T10730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.474849][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.035549][ T5733] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  268.113820][T10741] loop5: detected capacity change from 0 to 32768
[  268.168869][T10743] loop1: detected capacity change from 0 to 32768
[  268.193380][ T5733] usb 3-1: Using ep0 maxpacket: 8
[  268.195131][ T5733] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  268.196455][ T5733] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  268.196484][ T5733] usb 3-1: config 179 has no interface number 0
[  268.196531][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  268.196558][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  268.196581][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  268.196602][ T5733] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  268.196624][ T5733] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  268.196661][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.304013][T10752] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  268.369080][T10741] JBD2: Ignoring recovery information on journal
[  268.575570][T10741] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  268.594979][T10761] ERROR: (device loop1): diAllocBit: iag inconsistent
[  268.594979][T10761] 
[  268.706833][T10761] ERROR: (device loop1): remounting filesystem as read-only
[  268.706945][T10761] ialloc: diAlloc returned -5!
[  268.829761][ T5733] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input22
[  268.997813][ T8718] ocfs2: Unmounting device (7,5) on (node local)
[  269.065563][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  269.065567][ T5837] usb 3-1: USB disconnect, device number 8
[  269.065676][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  269.246839][   T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  269.439322][T10773] input: syz1 as /devices/virtual/input/input23
[  269.742784][ T5837] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  269.893140][ T5837] usb 5-1: Using ep0 maxpacket: 8
[  269.894354][ T5837] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  269.895537][ T5837] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  269.895597][ T5837] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.895620][ T5837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  269.895645][ T5837] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  269.895672][ T5837] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.895720][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.185883][T10774] loop5: detected capacity change from 0 to 32768
[  270.211383][ T5837] usb 5-1: GET_CAPABILITIES returned 0
[  270.211443][ T5837] usbtmc 5-1:16.0: can't read capabilities
[  270.280878][T10774] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  270.386965][T10774] XFS (loop5): Ending clean mount
[  270.421610][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  270.421717][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  270.456906][ T1220] usb 5-1: USB disconnect, device number 17
[  270.529238][T10803] XFS (loop5): User initiated shutdown received.
[  270.529609][T10803] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464).  Shutting down filesystem.
[  270.529648][T10803] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  270.608927][ T8718] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  271.367846][T10826] loop1: detected capacity change from 0 to 33280
[  271.372741][ T5733] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  271.429953][T10808] loop2: detected capacity change from 0 to 32768
[  271.443073][ T5750] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  271.520448][T10828] loop3: detected capacity change from 0 to 4096
[  271.523133][ T5733] usb 5-1: Using ep0 maxpacket: 16
[  271.529940][ T5733] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  271.530469][T10828] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  271.531937][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  271.536955][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.536978][ T5733] usb 5-1: Product: syz
[  271.536992][ T5733] usb 5-1: Manufacturer: syz
[  271.537006][ T5733] usb 5-1: SerialNumber: syz
[  271.541839][T10826] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  271.594081][T10808] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  271.594100][T10808] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  271.594599][ T5750] usb 6-1: Using ep0 maxpacket: 16
[  271.603113][ T5733] usb 5-1: config 0 descriptor??
[  271.624507][ T5750] usb 6-1: unable to get BOS descriptor or descriptor too short
[  271.624560][ T5750] usb 6-1: New USB device found: idVendor=045e, idProduct=0468, bcdDevice=b2.9c
[  271.625636][ T5750] usb 6-1: config 3 has an invalid interface number: 74 but max is 0
[  271.625659][ T5750] usb 6-1: config 3 has no interface number 0
[  271.625697][ T5750] usb 6-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83
[  271.625722][ T5750] usb 6-1: config 3 interface 74 has no altsetting 0
[  271.626530][T10826] EXT4-fs (loop1): orphan cleanup on readonly fs
[  271.626641][T10826] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1849: bad orphan inode 15
[  271.626665][T10826] loop1: lost filesystem error report for type 5 error -117
[  271.627899][ T5750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.627923][ T5750] usb 6-1: Product: syz
[  271.627936][ T5750] usb 6-1: Manufacturer: syz
[  271.627949][ T5750] usb 6-1: SerialNumber: syz
[  271.632630][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  271.632648][    C1] EXT4-fs (loop1): initial error at time 1794420561: ext4_orphan_get:1430
[  271.632672][    C1] EXT4-fs (loop1): last error at time 1794420561: ext4_orphan_get:1430
[  271.646590][ T5733] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  271.646622][ T5733] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  271.664941][T10826] ext4_test_bit(bit=14, block=18) = 1
[  271.664959][T10826] is_bad_inode(inode)=0
[  271.664966][T10826] NEXT_ORPHAN(inode)=1023
[  271.664974][T10826] max_ino=32
[  271.664981][T10826] i_nlink=0
[  271.665947][T10826] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.1849: corrupted xattr block 19: e_value size too large
[  271.665978][T10826] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  271.671835][T10832] profile_transition: unconfined exec no attachment
[  271.721010][T10826] EXT4-fs warning (device loop1): ext4_evict_inode:355: xattr delete (err -117)
[  271.727059][T10828] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  271.752505][T10828] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  271.848203][T10826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  272.031058][T10808] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  272.050476][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.061388][ T1220] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  272.063462][ T1220] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  272.170922][ T5750] usb 6-1: USB disconnect, device number 5
[  272.329959][ T5733] em28xx 5-1:0.0: chip ID is em28178
[  272.355276][ T1220] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 291ms
[  272.368664][ T1220] gfs2: fsid=syz:syz.0: jid=0: Done
[  272.371381][T10808] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  272.443769][T10840] loop3: detected capacity change from 0 to 128
[  272.448039][T10840] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  272.451746][T10840] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  272.633592][ T5733] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  272.633625][ T5733] em28xx 5-1:0.0: board has no eeprom
[  272.679756][ T1147] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  272.702837][ T5733] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  272.702867][ T5733] em28xx 5-1:0.0: dvb set to bulk mode.
[  272.703907][ T1220] em28xx 5-1:0.0: Binding DVB extension
[  272.734324][T10848] profile_transition: unconfined exec no attachment
[  272.748075][ T5733] usb 5-1: USB disconnect, device number 18
[  272.779604][ T5733] em28xx 5-1:0.0: Disconnecting em28xx
[  272.998567][ T1220] em28xx 5-1:0.0: Registering input extension
[  273.002076][T10854] profile_transition: unconfined exec no attachment
[  273.011713][T10846] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.153467][T10856] loop3: detected capacity change from 0 to 34816
[  273.205250][ T1220] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  273.205282][ T1220] Registered IR keymap rc-empty
[  273.206986][ T1220] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  273.221871][ T1220] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24
[  273.242518][ T1220] em28xx 5-1:0.0: Input extension successfully initialized
[  273.242577][ T5733] em28xx 5-1:0.0: Closing input extension
[  273.279544][T10856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.279664][T10856] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.361469][T10865] loop4: detected capacity change from 0 to 16
[  273.390627][T10865] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  273.461038][T10846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.489068][T10846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.491102][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.508594][T10865] CacheFiles: Failed to register: -95
[  273.659110][ T5733] em28xx: Freeing device
[  273.813942][ T1147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.833835][  T156] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.835696][  T156] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.835733][  T156] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.877996][T10869] loop4: detected capacity change from 0 to 33792
[  274.008716][T10869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.244838][T10869] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.1864: missing EA_INODE flag
[  274.246337][T10869] EXT4-fs (loop4): Remounting filesystem read-only
[  274.246453][T10869] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1235: inode #18: comm syz.4.1864: ea_inode dec ref err=-30
[  274.246505][T10869] EXT4-fs warning (device loop4): ext4_evict_inode:355: xattr delete (err -30)
[  274.300125][T10890] profile_transition: unconfined exec no attachment
[  274.317433][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.366565][T10892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1871'.
[  274.367257][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'.
[  274.629356][T10899] xt_hashlimit: size too large, truncated to 1048576
[  274.686880][T10904] profile_transition: unconfined exec no attachment
[  275.233887][T10911] loop4: detected capacity change from 0 to 32768
[  275.268601][T10911] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  275.317205][T10911] XFS (loop4): Ending clean mount
[  275.399207][ T5640] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  275.725169][T10937] loop3: detected capacity change from 0 to 164
[  275.820958][T10939] profile_transition: unconfined exec no attachment
[  276.041769][T10944] bond0: option slaves: interface -bave_0 does not exist!
[  276.063183][T10946] loop4: detected capacity change from 0 to 33280
[  276.083785][T10946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  276.083909][T10946] System zones: 1-12
[  276.087867][T10946] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.1892: missing EA_INODE flag
[  276.087890][T10946] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  276.088272][T10946] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1892: error while reading EA inode 12 err=-117
[  276.088299][T10946] loop4: lost filesystem error report for type 5 error -117
[  276.088615][T10946] EXT4-fs (loop4): 1 orphan inode deleted
[  276.145646][T10946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.225272][T10951] kvm [10950]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2
[  276.249468][T10954] loop3: detected capacity change from 0 to 256
[  276.282291][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.758472][T10974] loop5: detected capacity change from 0 to 33792
[  276.796922][T10974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.888758][T10974] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1899: missing EA_INODE flag
[  276.890778][T10974] EXT4-fs (loop5): Remounting filesystem read-only
[  276.890913][T10974] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1235: inode #18: comm syz.5.1899: ea_inode dec ref err=-30
[  276.890973][T10974] EXT4-fs warning (device loop5): ext4_evict_inode:355: xattr delete (err -30)
[  276.990232][T10978] loop3: detected capacity change from 0 to 764
[  277.029986][ T8718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.061931][T10978] rock: directory entry would overflow storage
[  277.061943][T10978] rock: sig=0x4654, size=5, remaining=4
[  277.279174][T10981] EXT4-fs: Ignoring removed nomblk_io_submit option
[  277.327064][T10981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.354103][T10981] EXT4-fs (loop5): shut down requested (2)
[  277.436269][ T8718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.958891][T10994] set_capacity_and_notify: 1 callbacks suppressed
[  277.958916][T10994] loop5: detected capacity change from 0 to 32768
[  278.001234][T10994] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.039028][T10994] XFS (loop5): Ending clean mount
[  278.112067][ T8718] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.341549][T11004] loop2: detected capacity change from 0 to 8
[  278.455503][T11004] SQUASHFS error: lzo decompression failed, data probably corrupt
[  278.455536][T11004] SQUASHFS error: Failed to read block 0x202: -5
[  278.455550][T11004] SQUASHFS error: Unable to read metadata cache entry [200]
[  278.783911][T11018] loop4: detected capacity change from 0 to 33280
[  278.829289][T11018] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  278.829395][T11018] System zones: 0-2, 18-18, 34-35
[  278.833301][T11018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.833405][T11018] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.841731][T11023] loop1: detected capacity change from 0 to 33280
[  278.852514][T11023] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  279.166776][T11025] Process accounting resumed
[  279.217540][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.475161][T11034] loop4: detected capacity change from 0 to 164
[  279.802932][T11044] loop1: detected capacity change from 0 to 33792
[  279.863662][T11044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.930693][T11052] loop2: detected capacity change from 0 to 32896
[  279.968721][T11044] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1928: missing EA_INODE flag
[  279.987777][T11044] EXT4-fs (loop1): Remounting filesystem read-only
[  279.987912][T11044] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1235: inode #18: comm syz.1.1928: ea_inode dec ref err=-30
[  279.987971][T11044] EXT4-fs warning (device loop1): ext4_evict_inode:355: xattr delete (err -30)
[  280.048153][T11052] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  280.048884][T11052] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  280.172375][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.298016][ T5641] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  280.518867][T11058] loop1: detected capacity change from 0 to 4096
[  280.529532][T11058] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  280.587435][T11058] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  280.597370][T11058] ntfs3(loop1): Failed to load $Extend (-22).
[  280.597391][T11058] ntfs3(loop1): Failed to initialize $Extend.
[  280.720883][T11041] loop5: detected capacity change from 0 to 32768
[  280.735351][T11041] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1927 (11041)
[  280.767835][T11041] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  280.767882][T11041] BTRFS info (device loop5): using xxhash64 checksum algorithm
[  280.838836][T11041] BTRFS info (device loop5): enabling ssd optimizations
[  280.838864][T11041] BTRFS info (device loop5): turning on async discard
[  280.838879][T11041] BTRFS info (device loop5): enabling free space tree
[  281.051646][T11085] profile_transition: unconfined exec no attachment
[  281.167515][ T8718] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  281.228580][T11091] Bluetooth: MGMT ver 1.23
[  281.278953][T11090] loop4: detected capacity change from 0 to 33792
[  281.295135][T11090] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  281.329583][T11090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  281.329698][T11090] System zones: 0-1, 3-36
[  281.329967][T11090] EXT4-fs (loop4): orphan cleanup on readonly fs
[  281.382538][T11090] EXT4-fs (loop4): 1 orphan inode deleted
[  281.395175][T11090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  281.449730][T11090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  281.450161][T11090] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  281.464696][T11090] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:521: comm syz.4.1942: Block bitmap for bg 0 marked uninitialized
[  281.625068][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.784353][T11098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.936322][T11098] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.1943: missing EA_INODE flag
[  281.950155][T11098] EXT4-fs (loop2): Remounting filesystem read-only
[  281.950275][T11098] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1235: inode #18: comm syz.2.1943: ea_inode dec ref err=-30
[  281.950330][T11098] EXT4-fs warning (device loop2): ext4_evict_inode:355: xattr delete (err -30)
[  282.097906][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.282869][T11114] netlink: 'syz.2.1949': attribute type 12 has an invalid length.
[  282.399683][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1951'.
[  283.018601][T11129] profile_transition: unconfined exec no attachment
[  283.083576][T11130] set_capacity_and_notify: 1 callbacks suppressed
[  283.084990][T11130] loop4: detected capacity change from 0 to 2048
[  283.101974][T11130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.282954][ T5645] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  283.284382][T11132] kAFS: Invalid Command on /proc/fs/afs/cells file
[  283.362775][ T5645] Bluetooth: hci0: command 0x0c1a tx timeout
[  283.864775][T11135] loop4: detected capacity change from 0 to 32768
[  283.876181][T11135] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1958 (11135)
[  283.890148][T11135] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  283.890179][T11135] BTRFS info (device loop4): using blake2b checksum algorithm
[  283.966156][T11135] BTRFS info (device loop4): enabling ssd optimizations
[  283.966182][T11135] BTRFS info (device loop4): using spread ssd allocation scheme
[  283.966199][T11135] BTRFS info (device loop4): turning off barriers
[  283.966215][T11135] BTRFS info (device loop4): enabling free space tree
[  283.966230][T11135] BTRFS info (device loop4): enabling auto defrag
[  283.966246][T11135] BTRFS info (device loop4): force zlib compression, level 3
[  284.043006][ T5640] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  284.108117][T11154] profile_transition: unconfined exec no attachment
[  284.190624][T11156] loop2: detected capacity change from 0 to 33792
[  284.212884][T11156] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  284.251631][T11156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  284.251745][T11156] System zones: 0-1, 3-36
[  284.252015][T11156] EXT4-fs (loop2): orphan cleanup on readonly fs
[  284.280788][T11156] EXT4-fs (loop2): 1 orphan inode deleted
[  284.302211][T11156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  284.379124][T11156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  284.380210][T11156] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  284.545772][T11156] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:521: comm syz.2.1971: Block bitmap for bg 0 marked uninitialized
[  284.567978][T11162] loop1: detected capacity change from 0 to 128
[  284.688811][ T5641] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.758337][T11166] loop2: detected capacity change from 0 to 256
[  284.759329][T11166] exfat: Deprecated parameter 'utf8'
[  284.759426][T11166] exfat: Deprecated parameter 'namecase'
[  284.759481][T11166] exfat: Deprecated parameter 'namecase'
[  284.837955][T11166] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  284.862956][ T5777] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  285.034600][ T5777] usb 6-1: Using ep0 maxpacket: 8
[  285.036318][ T5777] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  285.037303][ T5777] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  285.037326][ T5777] usb 6-1: config 179 has no interface number 0
[  285.037369][ T5777] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  285.037394][ T5777] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  285.037418][ T5777] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  285.037442][ T5777] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  285.037466][ T5777] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  285.037503][ T5777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.074185][T11164] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  285.177945][T11170] tun0: tun_chr_ioctl cmd 1074812118
[  285.391914][ T5777] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input25
[  285.562208][ T5883] usb 6-1: USB disconnect, device number 6
[  285.562208][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  285.562255][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  285.610502][T11177] loop1: detected capacity change from 0 to 512
[  285.901277][T11181] profile_transition: unconfined exec no attachment
[  285.994080][T11184] profile_transition: unconfined exec no attachment
[  286.082500][T11180] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes))
[  286.309977][T11195] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1986'.
[  286.599531][T11206] loop2: detected capacity change from 0 to 16
[  286.609003][T11206] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  287.061870][T11216] loop2: detected capacity change from 0 to 128
[  287.491420][T11214] loop5: detected capacity change from 0 to 40427
[  287.506049][T11214] F2FS-fs (loop5): invalid crc value
[  287.767068][T11214] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  287.820991][T11214] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  287.910383][T11231] loop4: detected capacity change from 0 to 128
[  287.950149][T11231] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  287.950183][T11231] hpfs: filesystem error: improperly stopped
[  287.950196][T11231] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  287.950209][T11231] hpfs: You really don't want any checks? You are crazy...
[  287.950221][T11231] hpfs: Code page index out of array
[  287.950228][T11231] hpfs: code page support is disabled
[  287.966671][ T8718] syz-executor: attempt to access beyond end of device
[  287.966671][ T8718] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  287.989836][T11231] hpfs: hpfs_map_4sectors(): unaligned read
[  287.989937][T11231] hpfs: hpfs_map_4sectors(): unaligned read
[  287.989948][T11231] hpfs: filesystem error: unable to find root dir
[  288.032195][T11231] hpfs: hpfs_map_4sectors(): unaligned read
[  288.046458][ T8718] CPU: 1 UID: 0 PID: 8718 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  288.046491][ T8718] Tainted: [L]=SOFTLOCKUP
[  288.046498][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  288.046509][ T8718] Call Trace:
[  288.046517][ T8718]  <TASK>
[  288.046525][ T8718]  dump_stack_lvl+0xe8/0x150
[  288.046562][ T8718]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  288.046594][ T8718]  f2fs_write_end_bio+0xf7d/0x1310
[  288.046631][ T8718]  __submit_merged_bio+0x258/0x6a0
[  288.046655][ T8718]  ? rcu_is_watching+0x16/0xb0
[  288.046680][ T8718]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  288.046708][ T8718]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  288.046759][ T8718]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  288.046779][ T8718]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  288.046814][ T8718]  ? lapic_next_event+0x11/0x20
[  288.046868][ T8718]  ? __lock_acquire+0x747/0x2de0
[  288.046904][ T8718]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  288.046924][ T8718]  ? __lock_acquire+0x747/0x2de0
[  288.047003][ T8718]  ? rcu_is_watching+0x16/0xb0
[  288.047025][ T8718]  ? rcu_is_watching+0x16/0xb0
[  288.047040][ T8718]  ? __kasan_check_byte+0x12/0x40
[  288.047076][ T8718]  ? is_bpf_text_address+0x292/0x2b0
[  288.047097][ T8718]  ? is_bpf_text_address+0x26/0x2b0
[  288.047122][ T8718]  ? kernel_text_address+0xa5/0xe0
[  288.047148][ T8718]  ? __kernel_text_address+0xd/0x30
[  288.047171][ T8718]  ? unwind_get_return_address+0x4d/0x90
[  288.047197][ T8718]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  288.047222][ T8718]  ? arch_stack_walk+0xfb/0x150
[  288.047261][ T8718]  ? stack_trace_save+0xa9/0x100
[  288.047285][ T8718]  ? __pfx_stack_trace_save+0x10/0x10
[  288.047314][ T8718]  ? check_path+0x21/0x40
[  288.047337][ T8718]  ? add_lock_to_list+0xc7/0x100
[  288.047357][ T8718]  ? lockdep_unlock+0x5c/0xd0
[  288.047377][ T8718]  ? __lock_acquire+0x1511/0x2de0
[  288.047427][ T8718]  ? do_raw_spin_lock+0x12b/0x2f0
[  288.047455][ T8718]  ? do_raw_spin_unlock+0xf5/0x200
[  288.047474][ T8718]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  288.047500][ T8718]  do_writepages+0x338/0x560
[  288.047531][ T8718]  ? do_raw_spin_unlock+0xf5/0x200
[  288.047555][ T8718]  filemap_fdatawrite+0x1e9/0x2f0
[  288.047580][ T8718]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  288.047645][ T8718]  ? do_raw_spin_unlock+0xf5/0x200
[  288.047668][ T8718]  f2fs_sync_dirty_inodes+0x471/0x970
[  288.047710][ T8718]  f2fs_write_checkpoint+0x867/0x24d0
[  288.047769][ T8718]  kill_f2fs_super+0x2df/0x700
[  288.047803][ T8718]  ? rcu_do_enqueue+0x60d/0x870
[  288.047826][ T8718]  ? lockdep_hardirqs_on+0x7b/0x110
[  288.047850][ T8718]  ? __pfx_kill_f2fs_super+0x10/0x10
[  288.047895][ T8718]  ? __pfx_call_rcu+0x10/0x10
[  288.047918][ T8718]  ? shrinker_free+0x2a7/0x3b0
[  288.047948][ T8718]  deactivate_locked_super+0xbe/0x110
[  288.047974][ T8718]  cleanup_mnt+0x204/0x2a0
[  288.047994][ T8718]  task_work_run+0x1d9/0x260
[  288.048018][ T8718]  ? __pfx_task_work_run+0x10/0x10
[  288.048051][ T8718]  exit_to_user_mode_loop+0x204/0x770
[  288.048075][ T8718]  ? rcu_is_watching+0x16/0xb0
[  288.048096][ T8718]  do_syscall_64+0x336/0x540
[  288.048118][ T8718]  ? trace_irq_disable+0x3b/0x140
[  288.048132][ T8718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.048150][ T8718]  ? clear_bhb_loop+0x70/0xc0
[  288.048173][ T8718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.048191][ T8718] RIP: 0033:0x00007ffa4e7aa217
[  288.048212][ T8718] Code: a2 c7 05 dc 34 25 00 00 00 00 00 eb 96 e8 c1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  288.048228][ T8718] RSP: 002b:00007ffe2c1a57d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  288.048248][ T8718] RAX: 0000000000000000 RBX: 00007ffa4e8373e3 RCX: 00007ffa4e7aa217
[  288.048261][ T8718] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2c1a5890
[  288.048273][ T8718] RBP: 00007ffe2c1a5890 R08: 00007ffe2c1a6890 R09: 00000000ffffffff
[  288.048285][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2c1a6920
[  288.048297][ T8718] R13: 00007ffa4e8373e3 R14: 0000000000046466 R15: 00007ffe2c1a6960
[  288.048326][ T8718]  </TASK>
[  288.048333][ T8718] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  288.077957][T11231] hpfs: hpfs_map_sector(): read error
[  288.694279][T11242] input: syz1 as /devices/virtual/input/input26
[  288.701509][T11240] loop4: detected capacity change from 0 to 33280
[  288.725559][T11240] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  288.729438][T11240] EXT4-fs (loop4): invalid journal inode
[  288.729522][T11240] EXT4-fs (loop4): can't get journal size
[  288.765659][T11240] EXT4-fs (loop4): 1 truncate cleaned up
[  288.820333][T11240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.886125][T11240] EXT4-fs: Cannot specify journal on remount
[  289.065921][ T5640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.436358][T11260] loop5: detected capacity change from 0 to 33280
[  289.483499][T11260] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.2004: inode has both inline data and extents flags
[  289.483533][T11260] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  289.484421][T11260] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2004: couldn't read orphan inode 15 (err -117)
[  289.484450][T11260] loop5: lost filesystem error report for type 5 error -117
[  289.490208][T11260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.515678][T11260] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  294.154845][T11265] profile_transition: unconfined exec no attachment
[  301.601819][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  305.198857][T11269] profile_transition: unconfined exec no attachment
[  316.250896][T11273] profile_transition: unconfined exec no attachment
[  317.128658][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  317.128715][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  327.298342][T11274] profile_transition: unconfined exec no attachment
[  333.857847][  T156] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  338.344504][T11275] profile_transition: unconfined exec no attachment
[  349.389857][T11276] profile_transition: unconfined exec no attachment
[  360.438727][T11277] profile_transition: unconfined exec no attachment
[  366.118328][ T1147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  371.480024][T11283] profile_transition: unconfined exec no attachment
[  375.522760][ T5645] Bluetooth: hci1: command 0x0406 tx timeout
[  378.574775][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  378.574824][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  382.523921][T11286] profile_transition: unconfined exec no attachment
[  393.563472][T11287] profile_transition: unconfined exec no attachment
[  398.369743][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  404.608866][T11288] profile_transition: unconfined exec no attachment
[  415.658219][T11289] profile_transition: unconfined exec no attachment
[  426.717326][T11290] profile_transition: unconfined exec no attachment
[  430.625433][   T14] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  437.761607][T11297] profile_transition: unconfined exec no attachment
[  438.082940][   T35] INFO: task syz-executor:5625 blocked in I/O wait for more than 143 seconds.
[  438.082986][   T35]       Tainted: G             L      syzkaller #0
[  438.082998][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.083006][   T35] task:syz-executor    state:D stack:22152 pid:5625  tgid:5625  ppid:5624   task_flags:0x440100 flags:0x00080000
[  438.083058][   T35] Call Trace:
[  438.083065][   T35]  <TASK>
[  438.083079][   T35]  __schedule+0x1ba5/0x5f70
[  438.083152][ 
** replaying previous printk message **
[  438.083152][   T35]  ? lock_acquire+0x115/0x350
[  438.083193][   T35]  ? __pfx___schedule+0x10/0x10
[  438.083229][   T35]  ? schedule+0x90/0x2b0
[  438.083255][   T35]  schedule+0x164/0x2b0
[  438.083281][   T35]  io_schedule+0x7f/0xd0
[  438.083306][   T35]  bit_wait_io+0x13/0x110
[  438.083333][   T35]  __wait_on_bit+0xac/0x300
[  438.083357][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.083386][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  438.083412][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.083436][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  438.083465][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  438.083498][   T35]  do_get_write_access+0x658/0x10c0
[  438.083604][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  438.083637][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  438.083694][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  438.083716][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  438.083739][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  438.083775][   T35]  ext4_reserve_inode_write+0x294/0x360
[  438.083826][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  438.083867][   T35]  ext4_dirty_inode+0xd0/0x110
[  438.083890][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  438.083912][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  438.083946][   T35]  file_update_time_flags+0x399/0x440
[  438.083972][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  438.084013][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  438.084035][   T35]  ? __lock_acquire+0x747/0x2de0
[  438.084068][   T35]  do_page_mkwrite+0x147/0x310
[  438.084124][   T35]  do_wp_page+0x1a77/0x4c30
[  438.084165][   T35]  ? __pfx_do_wp_page+0x10/0x10
[  438.084181][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  438.084602][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  438.084639][   T35]  handle_mm_fault+0x19c9/0x2f80
[  438.084675][   T35]  ? handle_mm_fault+0xee/0x2f80
[  438.084705][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  438.084723][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  438.084743][   T35]  ? __pfx_set_user_sigmask+0x10/0x10
[  438.084796][   T35]  do_user_addr_fault+0xb35/0x1480
[  438.084833][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  438.084859][   T35]  exc_page_fault+0x6a/0xc0
[  438.084884][   T35]  asm_exc_page_fault+0x26/0x30
[  438.084904][   T35] RIP: 0033:0x00007fbbd087e311
[  438.084923][   T35] RSP: 002b:00007fff8d8279e0 EFLAGS: 00010202
[  438.084941][   T35] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000
[  438.084952][   T35] RDX: 00007fbbce98c000 RSI: 0000000000000c98 RDI: ffffffff841fffff
[  438.084966][   T35] RBP: 00007fff8d827ee0 R08: 0000000000001000 R09: 000055557d2e58b8
[  438.084979][   T35] R10: 00000000000000a6 R11: 000055557d2e58c8 R12: 00007fff8d827d20
[  438.084992][   T35] R13: 00007fff8d827b10 R14: 585858582e7a7973 R15: 00007fff8d827a60
[  438.085018][   T35]  ? dlmconvert_remote+0x84f/0x1400
[  438.085127][   T35]  </TASK>
[  438.085192][   T35] INFO: task syz.1.1999:11249 blocked in I/O wait for more than 143 seconds.
[  438.085210][   T35]       Tainted: G             L      syzkaller #0
[  438.085220][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.085228][   T35] task:syz.1.1999      state:D stack:24680 pid:11249 tgid:11249 ppid:5636   task_flags:0x440040 flags:0x00080002
[  438.085281][   T35] Call Trace:
[  438.085287][   T35]  <TASK>
[  438.085299][   T35]  __schedule+0x1ba5/0x5f70
[  438.085337][   T35]  ? lock_acquire+0x115/0x350
[  438.085374][   T35]  ? __pfx___schedule+0x10/0x10
[  438.085408][   T35]  ? schedule+0x90/0x2b0
[  438.085433][   T35]  schedule+0x164/0x2b0
[  438.085458][   T35]  io_schedule+0x7f/0xd0
[  438.085482][   T35]  bit_wait_io+0x13/0x110
[  438.085507][   T35]  __wait_on_bit+0xac/0x300
[  438.085530][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.085565][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  438.085590][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.085613][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  438.085641][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  438.085697][   T35]  do_get_write_access+0x658/0x10c0
[  438.085747][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  438.085780][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  438.085810][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  438.085831][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  438.085853][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  438.085889][   T35]  ext4_reserve_inode_write+0x294/0x360
[  438.085922][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  438.085962][   T35]  ext4_dirty_inode+0xd0/0x110
[  438.085984][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  438.086006][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  438.086034][   T35]  file_update_time_flags+0x399/0x440
[  438.086059][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  438.086116][   T35]  ? __pfx_filemap_fault+0x10/0x10
[  438.086149][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  438.086184][   T35]  do_page_mkwrite+0x147/0x310
[  438.086213][   T35]  do_pte_missing+0x6e0/0x3520
[  438.086249][   T35]  ? handle_mm_fault+0xee/0x2f80
[  438.086273][   T35]  handle_mm_fault+0x1807/0x2f80
[  438.086308][   T35]  ? handle_mm_fault+0xee/0x2f80
[  438.086338][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  438.086356][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  438.086403][   T35]  do_user_addr_fault+0xb35/0x1480
[  438.086440][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  438.086467][   T35]  exc_page_fault+0x6a/0xc0
[  438.086491][   T35]  asm_exc_page_fault+0x26/0x30
[  438.086510][   T35] RIP: 0033:0x00007f6b0e074431
[  438.086527][   T35] RSP: 002b:00007ffe3e312f40 EFLAGS: 00010202
[  438.086544][   T35] RAX: 0000001b2d222000 RBX: ffffffff823212e0 RCX: 0000001b2d221ff8
[  438.086565][   T35] RDX: 0000001b2cc24220 RSI: 0000000000000008 RDI: 00007f6b0ef55720
[  438.086578][   T35] RBP: 0000000000000063 R08: 00007f6b0e410000 R09: 00007f6b0e412000
[  438.086590][   T35] R10: 00000000823212e4 R11: 0000000000000002 R12: 00007f6b0e426038
[  438.086602][   T35] R13: 000000000000006a R14: ffffffff82321a7b R15: 00007f6b0ef55720
[  438.086617][   T35]  ? pte_offset_map_lock+0x1ab/0x210
[  438.086639][   T35]  ? pte_free_now+0x430/0x430
[  438.086671][   T35]  </TASK>
[  438.086680][   T35] INFO: task syz.5.2004:11259 blocked in I/O wait for more than 143 seconds.
[  438.086697][   T35]       Tainted: G             L      syzkaller #0
[  438.086706][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.086715][   T35] task:syz.5.2004      state:D stack:24680 pid:11259 tgid:11259 ppid:8718   task_flags:0x440040 flags:0x00080002
[  438.086765][   T35] Call Trace:
[  438.086771][   T35]  <TASK>
[  438.086783][   T35]  __schedule+0x1ba5/0x5f70
[  438.086820][   T35]  ? __lock_acquire+0x747/0x2de0
[  438.086852][   T35]  ? __lock_acquire+0x747/0x2de0
[  438.086880][   T35]  ? __pfx___schedule+0x10/0x10
[  438.086913][   T35]  ? schedule+0x90/0x2b0
[  438.086938][   T35]  schedule+0x164/0x2b0
[  438.086962][   T35]  io_schedule+0x7f/0xd0
[  438.086986][   T35]  bit_wait_io+0x13/0x110
[  438.087012][   T35]  __wait_on_bit+0xac/0x300
[  438.087035][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.087061][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  438.087109][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.087133][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  438.087161][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  438.087190][   T35]  do_get_write_access+0x658/0x10c0
[  438.087238][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  438.087271][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  438.087300][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  438.087322][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  438.087343][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  438.087380][   T35]  ext4_reserve_inode_write+0x294/0x360
[  438.087411][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  438.087450][   T35]  ext4_dirty_inode+0xd0/0x110
[  438.087473][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  438.087496][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  438.087523][   T35]  file_update_time_flags+0x399/0x440
[  438.087554][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  438.087589][   T35]  ? __pfx_filemap_fault+0x10/0x10
[  438.087619][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  438.087653][   T35]  do_page_mkwrite+0x147/0x310
[  438.087681][   T35]  do_pte_missing+0x6e0/0x3520
[  438.087718][   T35]  ? handle_mm_fault+0xee/0x2f80
[  438.087743][   T35]  handle_mm_fault+0x1807/0x2f80
[  438.087777][   T35]  ? handle_mm_fault+0xee/0x2f80
[  438.087807][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  438.087825][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  438.087846][   T35]  ? __pfx_do_futex+0x10/0x10
[  438.087892][   T35]  do_user_addr_fault+0xb35/0x1480
[  438.087924][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  438.087951][   T35]  exc_page_fault+0x6a/0xc0
[  438.087975][   T35]  asm_exc_page_fault+0x26/0x30
[  438.087993][   T35] RIP: 0033:0x00007ffa4e674431
[  438.088010][   T35] RSP: 002b:00007ffe2c1a65b0 EFLAGS: 00010202
[  438.088026][   T35] RAX: 0000001b2d410000 RBX: ffffffff82b558b7 RCX: 0000001b2d40fff8
[  438.088040][   T35] RDX: 0000001b2ce24220 RSI: 0000000000000008 RDI: 00007ffa4f555720
[  438.088052][   T35] RBP: 0000000000000110 R08: 00007ffa4ea10000 R09: 00007ffa4ea12000
[  438.088066][   T35] R10: 0000000082b558bb R11: 0000000000000003 R12: 00007ffa4ea26038
[  438.088078][   T35] R13: 000000000000042a R14: ffffffff82b553d7 R15: 00007ffa4f555720
[  438.088116][   T35]  ? ext4_xattr_get+0x227/0x690
[  438.088145][   T35]  ? ext4_listxattr+0x67/0x680
[  438.088184][   T35]  </TASK>
[  438.088193][   T35] INFO: task syz.2.2005:11262 blocked in I/O wait for more than 143 seconds.
[  438.088209][   T35]       Tainted: G             L      syzkaller #0
[  438.088219][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.088228][   T35] task:syz.2.2005      state:D stack:24680 pid:11262 tgid:11262 ppid:5641   task_flags:0x440040 flags:0x00080002
[  438.088278][   T35] Call Trace:
[  438.088284][   T35]  <TASK>
[  438.088296][   T35]  __schedule+0x1ba5/0x5f70
[  438.088333][   T35]  ? lock_acquire+0x115/0x350
[  438.088370][   T35]  ? __pfx___schedule+0x10/0x10
[  438.088403][   T35]  ? schedule+0x90/0x2b0
[  438.088429][   T35]  schedule+0x164/0x2b0
[  438.088453][   T35]  io_schedule+0x7f/0xd0
[  438.088477][   T35]  bit_wait_io+0x13/0x110
[  438.088503][   T35]  __wait_on_bit+0xac/0x300
[  438.088525][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.088559][   T35]  out_of_line_wait_on_bit+0x13b/0x190
[  438.088585][   T35]  ? __pfx_bit_wait_io+0x10/0x10
[  438.088607][   T35]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  438.088634][   T35]  ? __pfx_wake_bit_function+0x10/0x10
[  438.088665][   T35]  do_get_write_access+0x658/0x10c0
[  438.088713][   T35]  jbd2_journal_get_write_access+0x1d7/0x230
[  438.088745][   T35]  __ext4_journal_get_write_access+0xec/0x620
[  438.088775][   T35]  ? __pfx___ext4_journal_get_write_access+0x10/0x10
[  438.088796][   T35]  ? trace_kmem_cache_alloc+0x29/0xe0
[  438.088818][   T35]  ? jbd2__journal_start+0x145/0x5d0
[  438.088854][   T35]  ext4_reserve_inode_write+0x294/0x360
[  438.088886][   T35]  __ext4_mark_inode_dirty+0x141/0x7e0
[  438.088926][   T35]  ext4_dirty_inode+0xd0/0x110
[  438.088950][   T35]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  438.088972][   T35]  __mark_inode_dirty+0x3a8/0x13b0
[  438.089000][   T35]  file_update_time_flags+0x399/0x440
[  438.089025][   T35]  ext4_page_mkwrite+0x21f/0x1470
[  438.089058][   T35]  ? __pfx_filemap_fault+0x10/0x10
[  438.089110][   T35]  ? __pfx_ext4_page_mkwrite+0x10/0x10
[  438.089146][   T35]  do_page_mkwrite+0x147/0x310
[  438.089175][   T35]  do_pte_missing+0x6e0/0x3520
[  438.089211][   T35]  ? handle_mm_fault+0xee/0x2f80
[  438.089236][   T35]  handle_mm_fault+0x1807/0x2f80
[  438.089270][   T35]  ? handle_mm_fault+0xee/0x2f80
[  438.089300][   T35]  ? __pfx_handle_mm_fault+0x10/0x10
[  438.089319][   T35]  ? lock_vma_under_rcu+0x45a/0x500
[  438.089338][   T35]  ? __hrtimer_get_next_event+0x51c/0x600
[  438.089373][   T35]  ? sched_clock_cpu+0x74/0x440
[  438.089445][   T35]  do_user_addr_fault+0xb35/0x1480
[  438.089481][   T35]  ? trace_page_fault_user+0x84/0x1e0
[  438.089507][   T35]  exc_page_fault+0x6a/0xc0
[  438.089532][   T35]  asm_exc_page_fault+0x26/0x30
[  438.089557][   T35] RIP: 0033:0x00007f9c6e674b92
[  438.089574][   T35] RSP: 002b:00007ffe330c6380 EFLAGS: 00010202
[  438.089590][   T35] RAX: 0000000000004008 RBX: 00007f9c6f555720 RCX: 0000000000000000
[  438.089602][   T35] RDX: 0000001b2d320000 RSI: 0000000000000008 RDI: 00007f9c6f555720
[  438.089615][   T35] RBP: 000000000000054f R08: 00007f9c6ea10000 R09: 00007f9c6ea26038
[  438.089628][   T35] R10: 0000000000000003 R11: ffffffff816fffff R12: ffffffff8264b394
[  438.089641][   T35] R13: 00007f9c6ea26038 R14: 000000000000014a R15: ffffffffffffc000
[  438.089658][   T35]  ? fd_install+0x294/0x4e0
[  438.089682][   T35]  ? __pfx_update_spec_ctrl_cond+0xf/0x10
[  438.089716][   T35]  </TASK>
[  438.089735][   T35] 
[  438.089735][   T35] Showing all locks held in the system:
[  438.089747][   T35] locks held by khungtaskd/35: 1, on CPU#0:
[  438.089761][   T35]  #0: ffffffff9015ad60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  438.089866][   T35] locks held by syz-executor/5625: 3, last CPU#1:
[  438.089881][   T35]  #0: ffff888027e5a088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  438.089925][   T35]  #1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  438.089973][   T35]  #2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  438.090039][   T35] locks held by syz.1.1999/11249: 3, last CPU#0:
[  438.090051][   T35]  #0: ffff888075709088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  438.090120][   T35]  #1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  438.090169][   T35]  #2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  438.090220][   T35] locks held by syz.5.2004/11259: 3, last CPU#0:
[  438.090234][   T35]  #0: ffff88802ae8a808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  438.090278][   T35]  #1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  438.090325][   T35]  #2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  438.090376][   T35] locks held by syz.2.2005/11262: 3, last CPU#0:
[  438.090390][   T35]  #0: ffff88802c12b308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  438.090434][   T35]  #1: ffff8880384c4570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1fe/0x1470
[  438.090481][   T35]  #2: ffff8880384c2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fb0/0x21f0
[  438.090532][   T35] 
[  438.090537][   T35] =============================================
[  438.090537][   T35] 
[  438.090557][   T35] NMI backtrace for cpu 0
[  438.090573][   T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.090597][   T35] Tainted: [L]=SOFTLOCKUP
[  438.090604][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  438.090614][   T35] Call Trace:
[  438.090621][   T35]  <TASK>
[  438.090628][   T35]  dump_stack_lvl+0xe8/0x150
[  438.090659][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  438.090680][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  438.090705][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  438.090729][   T35]  sys_info+0x135/0x170
[  438.090754][   T35]  watchdog+0x1073/0x10f0
[  438.090789][   T35]  ? watchdog+0x209/0x10f0
[  438.090822][   T35]  kthread+0x38b/0x480
[  438.090846][   T35]  ? __pfx_watchdog+0x10/0x10
[  438.090870][   T35]  ? __pfx_kthread+0x10/0x10
[  438.090893][   T35]  ret_from_fork+0x514/0xb70
[  438.090918][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  438.090940][   T35]  ? __switch_to+0xc78/0x1410
[  438.090960][   T35]  ? __pfx_kthread+0x10/0x10
[  438.090984][   T35]  ret_from_fork_asm+0x1a/0x30
[  438.091020][   T35]  </TASK>
[  438.091028][   T35] Sending NMI from CPU 0 to CPUs 1:
[  438.091058][    C1] NMI backtrace for cpu 1
[  438.091074][    C1] CPU: 1 UID: 0 PID: 5638 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  438.091100][    C1] Tainted: [L]=SOFTLOCKUP
[  438.091108][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  438.091119][    C1] RIP: 0010:__lock_acquire+0x115/0x2de0
[  438.091146][    C1] Code: 50 58 48 83 fa 07 77 0c 48 8b 78 40 48 01 d1 48 39 cf 74 16 45 31 f6 48 89 df 31 d2 e8 04 f0 ff ff 48 85 c0 0f 84 b9 13 00 00 <48> 8b 4c 24 08 44 8b b1 a0 0b 00 00 49 83 fe 30 0f 93 c1 83 3d e1
[  438.091164][    C1] RSP: 0018:ffffc900043bf0d8 EFLAGS: 00000046
[  438.091180][    C1] RAX: ffffffff958bef48 RBX: ffffffff9015ad60 RCX: ffffffff9bf2a1e0
[  438.091196][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9bf2a1e0
[  438.091208][    C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  438.091220][    C1] R10: ffffc900043bf398 R11: ffffffff81b3fbb0 R12: ffffffff9015ad60
[  438.091235][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  438.091246][    C1] FS:  000055557c8f3500(0000) GS:ffff8881234cd000(0000) knlGS:0000000000000000
[  438.091263][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  438.091277][    C1] CR2: 00005631c82e4000 CR3: 0000000070cfc000 CR4: 00000000003526f0
[  438.091294][    C1] Call Trace:
[  438.091301][    C1]  <TASK>
[  438.091315][    C1]  ? lock_acquire+0x115/0x350
[  438.091345][    C1]  lock_acquire+0x115/0x350
[  438.091369][    C1]  ? is_module_text_address+0x1d/0x1e0
[  438.091398][    C1]  ? unwind_next_frame+0x8f/0x2550
[  438.091426][    C1]  ? is_module_text_address+0x1d/0x1e0
[  438.091453][    C1]  is_module_text_address+0x39/0x1e0
[  438.091478][    C1]  ? is_module_text_address+0x1d/0x1e0
[  438.091505][    C1]  kernel_text_address+0x94/0xe0
[  438.091531][    C1]  __kernel_text_address+0xd/0x30
[  438.091555][    C1]  unwind_get_return_address+0x4d/0x90
[  438.091582][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  438.091608][    C1]  arch_stack_walk+0xfb/0x150
[  438.091639][    C1]  stack_trace_save+0xa9/0x100
[  438.091664][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  438.091688][    C1]  ? kasan_save_track+0x51/0x90
[  438.091717][    C1]  ? __lock_acquire+0x747/0x2de0
[  438.091744][    C1]  kasan_save_track+0x3f/0x90
[  438.091769][    C1]  ? kasan_save_track+0x3f/0x90
[  438.091794][    C1]  ? kasan_save_free_info+0x40/0x50
[  438.091816][    C1]  ? __kasan_slab_free+0x70/0x90
[  438.091843][    C1]  ? kfree+0x1c7/0x650
[  438.091862][    C1]  ? tomoyo_realpath_from_path+0x608/0x640
[  438.091892][    C1]  ? tomoyo_check_open_permission+0x229/0x470
[  438.091916][    C1]  ? security_file_open+0xa9/0x240
[  438.091938][    C1]  ? do_dentry_open+0x495/0x1360
[  438.091959][    C1]  ? vfs_open_consume+0x4a/0x350
[  438.091979][    C1]  ? path_openat+0x16fc/0x20f0
[  438.091995][    C1]  ? do_file_open+0x23e/0x4a0
[  438.092011][    C1]  ? do_sys_openat2+0x115/0x200
[  438.092037][    C1]  ? __x64_sys_openat+0x138/0x170
[  438.092062][    C1]  ? do_syscall_64+0x171/0x540
[  438.092085][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.092128][    C1]  kasan_save_free_info+0x40/0x50
[  438.092150][    C1]  __kasan_slab_free+0x70/0x90
[  438.092178][    C1]  kfree+0x1c7/0x650
[  438.092197][    C1]  ? tomoyo_encode+0x533/0x570
[  438.092224][    C1]  ? tomoyo_realpath_from_path+0x608/0x640
[  438.092255][    C1]  tomoyo_realpath_from_path+0x608/0x640
[  438.092291][    C1]  tomoyo_check_open_permission+0x229/0x470
[  438.092315][    C1]  ? tomoyo_check_open_permission+0x1d3/0x470
[  438.092339][    C1]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  438.092364][    C1]  ? __asan_memset+0x22/0x50
[  438.092391][    C1]  ? seqcount_lockdep_reader_access+0xea/0x100
[  438.092431][    C1]  ? try_to_unlazy+0x625/0xb50
[  438.092459][    C1]  security_file_open+0xa9/0x240
[  438.092481][    C1]  do_dentry_open+0x495/0x1360
[  438.092507][    C1]  vfs_open_consume+0x4a/0x350
[  438.092528][    C1]  ? path_openat+0x16e1/0x20f0
[  438.092546][    C1]  path_openat+0x16fc/0x20f0
[  438.092573][    C1]  do_file_open+0x23e/0x4a0
[  438.092595][    C1]  ? __pfx_do_file_open+0x10/0x10
[  438.092618][    C1]  ? _raw_spin_unlock+0x28/0x50
[  438.092636][    C1]  ? alloc_fd+0x6af/0x760
[  438.092664][    C1]  do_sys_openat2+0x115/0x200
[  438.092685][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  438.092711][    C1]  ? __se_sys_unlink+0xc2/0x140
[  438.092731][    C1]  ? kmem_cache_free+0x184/0x660
[  438.092759][    C1]  __x64_sys_openat+0x138/0x170
[  438.092784][    C1]  do_syscall_64+0x171/0x540
[  438.092806][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.092825][    C1]  ? clear_bhb_loop+0x70/0xc0
[  438.092846][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.092865][    C1] RIP: 0033:0x00007f811876980e
[  438.092882][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  438.092898][    C1] RSP: 002b:00007ffda8e7deb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  438.092916][    C1] RAX: ffffffffffffffda RBX: 000055557c8f3500 RCX: 00007f811876980e
[  438.092931][    C1] RDX: 0000000000000000 RSI: 00007ffda8e7e020 RDI: ffffffffffffff9c
[  438.092944][    C1] RBP: 00007ffda8e7e020 R08: 0000000000000000 R09: 0000000000000000
[  438.092956][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda8e7f0b0
[  438.092969][    C1] R13: 00007f81188373e3 R14: 000055557c8f34e8 R15: 0000000000000005
[  438.092991][    C1]  </TASK>
[  438.152847][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  440.169204][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.179878][   T35] Tainted: [L]=SOFTLOCKUP
[  440.184206][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  440.194267][   T35] Call Trace:
[  440.197552][   T35]  <TASK>
[  440.200491][   T35]  vpanic+0x26f/0x710
[  440.204483][   T35]  panic+0xc5/0xd0
[  440.208208][   T35]  ? __pfx_panic+0x10/0x10
[  440.212619][   T35]  ? preempt_schedule_common+0x7f/0xd0
[  440.218093][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  440.223483][   T35]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  440.229648][   T35]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  440.235811][   T35]  watchdog+0x10e7/0x10f0
[  440.240160][   T35]  ? watchdog+0x209/0x10f0
[  440.244599][   T35]  kthread+0x38b/0x480
[  440.248682][   T35]  ? __pfx_watchdog+0x10/0x10
[  440.253369][   T35]  ? __pfx_kthread+0x10/0x10
[  440.257966][   T35]  ret_from_fork+0x514/0xb70
[  440.262571][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  440.267688][   T35]  ? __switch_to+0xc78/0x1410
[  440.272374][   T35]  ? __pfx_kthread+0x10/0x10
[  440.276970][   T35]  ret_from_fork_asm+0x1a/0x30
[  440.281756][   T35]  </TASK>
[  440.285259][   T35] Kernel Offset: disabled
[  440.289588][   T35] Rebooting in 86400 seconds..