last executing test programs:

2.534143656s ago: executing program 0 (id=12169):
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10)

2.381358754s ago: executing program 0 (id=12173):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

2.213916992s ago: executing program 2 (id=12177):
capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1})
mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff)

2.147760705s ago: executing program 0 (id=12178):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

2.107386477s ago: executing program 2 (id=12180):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0)

2.011784052s ago: executing program 3 (id=12182):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

2.011262082s ago: executing program 2 (id=12183):
r0 = syz_open_dev$amidi(&(0x7f00000002c0), 0x2, 0xa40)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000300))

1.867757429s ago: executing program 2 (id=12184):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.375381703s ago: executing program 1 (id=12188):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19)

1.196631611s ago: executing program 2 (id=12189):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x53, &(0x7f0000001500)=""/4067, &(0x7f0000000040)=0x4)

1.071741358s ago: executing program 3 (id=12190):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x3231564e, 0x0, 0x3, 0xfffffffa, 0x0, 0x7, 0x0, 0x4, 0x1}})

972.040343ms ago: executing program 1 (id=12191):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setgroups(0x0, 0x0)

690.769166ms ago: executing program 3 (id=12192):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080))

680.251747ms ago: executing program 2 (id=12193):
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff", 0x21}], 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904"], 0x0)

595.544471ms ago: executing program 1 (id=12194):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)

515.371665ms ago: executing program 3 (id=12195):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x35510}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x40}}, 0x0)

431.378249ms ago: executing program 1 (id=12196):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}}, 0x0)

363.086532ms ago: executing program 3 (id=12197):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0)

227.763859ms ago: executing program 1 (id=12198):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x15, 0x0, &(0x7f0000000880)="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"})

215.59726ms ago: executing program 0 (id=12199):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000180), &(0x7f0000000240)=ANY=[@ANYBLOB='\'C'], 0x1, 0x0)

128.730214ms ago: executing program 1 (id=12200):
r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000080)='./file0\x00', 0x249, &(0x7f00000000c0), 0x0, 0x97b1, &(0x7f0000009640)="$eJzs3AnYpXPhuPHzzmKXMVRSaiqiRdYsUc0MZigkS7QjSyoqqWgdlZQ2WrQvkiUlyhLK1kqyqyhFqGSJtNiG+V/vzDuMcZPq92/kvu/res/ynOc87/d8P8/3OTOaq22mbDF5MFhgMKsJg7k79dKp08ddvOn1h2y/+OGrHHPzAffccdmJI/eTRu4nDwaDUSMvD83aNn5w7HGjBmNmbr+7hRdcaGjRwWDVkacjxxmsOetu0fNn7zdjruYe6NDdN/vN+pnZYsO/YvjBVw7Y5+DBYDBujvcPDQZD0+71QaVtM2nqlLut7nIbtho78njOn/lm/Sx61mCw6AkDPj/m3HdoHnyk4d857SmnjN10Hvzu/7m2mTR1o7n8h9fi6JFtaw6v8bnXoLG5z/Nrl9t27ZEpnHm+DQbDl7h7rJX/ibaZNGXjwX1f5weHrHPGfjNmXTfnH8z6olhwMBgsNHJ9XWReu9R/1qTJq838zp79fIR99rk8jc6Lb7z8qDuHv6QHg8ESg8H4DWd/F1RVVdX/RpMmr7YefP8vcH/f/0cfvfQJff9XVVX977bRpMmrDX/Xz/X9v8j9ff/vvvSZ75713/4nrjnrXXfO2w9RVVVV/1JTNsLv/3H39/2/5nrnbtz3f1VV1f9um28y8/t/kbm+/5e8v+//lxy1zjIj+83+c8MdcxxyaI7/PeH2ObaPnmP7bXNsHzvHcebcf745tt8yx/b5h1+D/ScMBuNn/3vB6XdvHj9h+LWR7bfOsX3i3f9OZ9n159g+aY7tU+bYPnlkrMPbp86xfeoc+294P1NdVVX1oGnz1aasN5jj39mPbF5q9uv0/X/6ib9dcV6Nt6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqv43u/P6k04ZDAZDg8Fg1GAwfTDyeM77wYwZM2YMPz/6tPPOm2cDfXA0dOqlU6ePu3jT6w/ZfvHDVznm5gPunqX/2f73P0H9Jw37L3DEhMFgt63m9VBqHtT6d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3F3Xn/SKSPnwKjBYPpg5PG02fcn7v/il47suvbWx9x44N3vXHbiLiOPTr106vRd5sHY50FDw5913MWbXn/I9osfvsoxNx/wEFg9//ufoP6TZvrvMjQYjKzvccNredNJm2+5wmAwOPDGY7ZeY3DXa2sNv7bO+NGD0TPfusLM2w2W5QNP23DW/cThmyXvOsbRM4+/0YyDRg/NNYg5etapVxzyqm1uXn3u++Xv+3OMmv3g4MuOv2nGjBkz7rFxpAXu482zjz/7s8y9zkfGvsLw2FfaY9fXr/TGvd664i67brfzjjvvuNsqq621+hqrrrLG2s9YaaddXrvjyrNu72POJsy8Xe+BzNkic8/Z9ZPmnLO5P9t9zdmE+5+zmUec/tahLWfP2Zh/cc7Wu/85m7DLyC9aduLYwbYzp2ZoMFh2/bGDPYefrDL/YLDsBiP7LjW877rjRw0G+9/9QYcfzX/XOTg0bXifbaZsMfnukd37E97rOn2PHZedOHI/aeR+8qwhThjcfSqOHxx73KjhubjHNC+84EJDiw4Gq448HTnOYO2RV788e78ZczX3QIfuvtlv1s/MFhs+yPCDV6980iXDa3Gu9///6N+6/t/La62huyZqaORnZJ9ZXpOmbnT375o5DcNzN3pk25rDJnPP2f9l9xrvhDGDcfcz3ikbTV5tePNc8z/7LXh+3bDcGW+bdW5NXHPWu+78t1FovIvcz3g3moTjXeT+xnvE2885btah/s/GO9e1buOZtxMfyLVucP/XutF0gB3PXmbua93z7nuI91jHs+do/rl2uq9r3Z6fWnXa8PEn3v+1buPhsY+9x7Vu1GCw7Hqzr3XDF74pYwf7Dz9ZdfjJ1LGDw4efrDbzyYKD04afPP2Vr3vtDsMbNpw9JysPH3fi+KGZ7mesec3yMz4+Y8b6I2OZOP6eYx05PybM+X0+afysyZz93tnHHd519nGvfuSs16aMHHfSv3Dc2e+l8d642KzXpo4cd/Jcxx17P8ed/d57rYcVhu66cN3H9WbKXNebkb/jzP519/iZb9bPomcNBoueQL5z7ftPr5m0fhe4n/FOmrzaesPjm2v93nU60vo9Z+rFw98Viw4GgyUGg/Ebzh77v9jQfY13zP2PdzKMd8z9jfeCr+26yf/BeAdzjPce59k2m886VzYcOc+m/gvn7+z3zn0dGzvz1VmX/Q0fyHVswr2uY3uPHjXXZM/Rff2ZbQfYf9bjpe7+c+6l3zxs9tyPneu4/+zPbHN8liG4jo2b6+/zoza8fDBEcz7tiHXPHfrEjBkbjgyA5nzs4J5/t5g957Pfe39zPvWBzPlj7n/OH+ifk1d44qzXx841/jnnfLMPPfqDs+d8vrmO+8/mfOr9f3fce84nDsbSnK9826x5u7/r6X3N+ez3zp7z4Y+4zvgxgw2Gv7NG5nzKA5nzpf5vzvOFYP9Zj3e8a9PJhxzzwtlzPvcc/7M5n/KvzvmEu87zZWe+9oRRg/nmG+y53R577L7KrNvZT1eddcvXolsunTXP9/ddel9Gs997f+ti/QdiNO4BGQ39M6Olx9yX0d1L66uv2/0R/+61aP1/1WjA16KLD5s1b/f356L7mvPZ76XvwSXneP/cfw/dfJOZf+5eZK7vwdlvwe/Bk0/ceN/Zhxx52x1zDXP29+rtc2wfPcf22+bYPnaO48y5/3xzbL9lju3DH2G+OfafzTph+O+8I9un3737+OE/PE0Y2X7rHNsn3v3eZdefY/ukObZPmWP75LtPjWWnzrF96hz7bzj4F5v936R3mfsiXw+0/vuvu/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7If4F5MI6aN7X+3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i7vz+pNOGTkHRg0G0wezHg+N3A+mDW123XOG7weDwdg1j5yx2bwe7zxu6NRLp04fd/Gm1x+y/eKHr3LMzQc8BFbP//4nqP+kmf67DA0GI+t73C6DwWDTSZtvucJgMNhsxpFrjhrc9dpSw6+tO37UYLD/0D0OMP9d+wxNG95nmylbTL77n5FPuNcvvdc6useOy04cuZ80cj951vVpwuDu83X84NjjRg3GzNx+dwsvuNDQooPBqiNPR44zWHPW3aLnz95vxlzNPdChu2/2m/Uzs8WGf8Xwgz13nvrY4bma6/0PmmZfq3cZ9U93bf27y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uDuvP+mUkXNg1GAwfTDr8dC0kfvB0FHHPnnkFBm714WHHjSvxzuPGzr10qnTx1286fWHbL/44ascc/MBD4HV87//Ceo/aab/LkODwcj6HrfLYDDYdNLmW64wGAwOOvTCvUYN7nptqeHX1h0/ajDYf+geB5j/rn2Gpg3vs82ULSYPBguM7DHhXr/0XuvoHjsuO3HkftLI/eRZ16cJg7vP1/GDY48bNRgzc/vdLbzgQkOLDgarjjwdOc5gzVl3i54/e78ZczX3QIfuvtlv1s/MFhv+FcMP9lnk0qOG52qu9//Xu6/FO/tavcuof/sQ5Sh/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXv7t/1H/N/PI6aN7X+3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/4b/P/8/la7/mVr/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/k3/GaP/rwdS86TWv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLu/P6k04ZOQdGDQbTB7Mejxq5H5p21ZXv3HL4fvj54hvue+m8Hu88bujUS6dOH3fxptcfsv3ih69yzM0HPARWz//+J6j/pGH/BY6YMBjsttW8HkrNg1r/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7O6086ZeThqLu3jprWeYENnXrp1OnjLt70+kO2X/zwVY65+YB5PaD/tPvw3zt/zOL/7vwxi/978scs/u/NH7P475M/ZvF/X/6YxX/f/DGL//vzxx6q/uPm8v9A/thD1X8wl/9++WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n890f/If05YfE/oPWPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwPzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/QfljFv+v5I9Z/A/OH7P4fzV/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5fyx+z+B+RP2bx/3r+mMX/G/ljFv8j88cs/t/MH7P4H5U/ZvE/On/M4v+t/DGL/7fzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/nfwxi/8J+WMW/xPzxyz+J+WPWfy/mz9m8f9e/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/h/P39oPo3/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP5n5I9Z/M/MH7P4/zR/zOJ/Vv6Yxf9n+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/n+ePWfx/kT9m8f9l/pjF/+L8MYv/JfljFv9f5Y9Z/H+dP2bxvzR/zOL/m/wxi/9v88cs/pflj1n8L88fs/j/Ln/M4n9F/pjF/8r8MYv/VfljFv/f549Z/P+QP2bx/6POf4EHtJfF/2qd/wPL4v+n/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zl/zOJ/Q/6Yxf/G/DGL/1/yxyz+N+WPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL//T8MYv/HfljFv8788cs/jPyxyT+owf5Yxb/ofwxi/+o/DGL/+j8MYv/mPwxi//Y/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/w/LHLP6L5Y9Z/Mflj1n8F88fs/iPzx+z+C+RP2bxXzJ/zOL/8Pwxi/8j8scs/o/MH7P4L5U/ZvF/VP6YxX/p/DGL/6Pzxyz+j8kfs/gvkz9m8X9s/pjF/3H5Yxb/CfljFv/H549Z/J+QP2bxf2L+mMV/2fwxi/9y+WMW/yflj1n8l88fs/ivkD9m8X9y/pjF/yn5Yxb/p+aPWfyflj9m8V8xf8zi//T8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8zi/4z8MYv/GvljFv8188cs/mvlj1n8184fs/g/M3/M4r9O/pjFf93852qBmbcW/2flj1n8n50/ZvF/Tv6YxX9i/pjFf1L+mMV/cv6YxX+9/DGL//r5Yxb/DfLHLP5T8scs/lPzxyz+G+aPWfw3yh+z+D83f8zi/7z8MYv/xvljFv9N8scs/pvmj1n8n58/ZvHfLH/M4v+C/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4vzB/zOK/df6YxX+b/DGL/4vyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+L88fs/i/In/M4r9t/pjFf7v8MYv/9vljFv9X5o9Z/HfIH7P475g/ZvHfKX/M4r9z/pjF/1X5Yxb/XfLHLP6vzh+z+L8mf8zi/9r8MYv/rvljFv/d8scs/q/LH7P4vz5/zOL/hvwxi//u+WMW/zfmj1n898gfs/i/KX/M4v/m/DGL/1vyxyz+e+aPWfz3yh+z+L81f8zi/7b8MYv/2/PHLP7vyB+z+L8zf8zi/678MYv/tPwxi//e+WMW/3fnj1n835M/ZvF/b/6YxX+f/DGL//vyxyz+++aPWfzfnz9m8f9A/pjFf7/8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP77549Z/A/IH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4H5g/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/4Pyxyz+X8kfs/gfnD9m8f9q/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8v5Y/ZvE/In/M4v/1/DGL/zfyxyz+R+aPWfy/mT9m8T8qf8zif3T+mMX/W/ljFv9v549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/zv5Yxb/E/LHLP4n5o9Z/E/KH7P4fzd/zOL/vfwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv8z8scs/mfmj1n8f5o/ZvE/K3/M4v+z/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/PHLP6/yB+z+P8yf8zif3H+mMX/kvwxi/+v8scs/r/OH7P4X5o/ZvH/Tf6Yxf+3+WMW/8vyxyz+l+ePWfx/lz9m8b8if8zif2X+mMX/qvwxi//v88cs/n/IH7P4/zF/zOJ/df6Yxf9P9/Kf/787rgdpFv9rWv+Yxf/a/DGL/3X5Yxb/6/PHLP5/zh+z+N+QP2bxvzF/zOL/l/wxi/9N+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOI/PX/M4n9H/pjF/878MYv/jPwxif+YQf6YxX8of8ziPyp/zOI/On/M4j8mf8ziPzZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4v+w/DGL/2L5Yxb/cfljFv/F88cs/uPzxyz+S+SPWfyXzB+z+D88f8zi/4j8MYv/I/PHLP5L5Y9Z/B+VP2bxXzp/zOL/6Pwxi/9j8scs/svkj1n8H5s/ZvF/XP6YxX9C/pjF//H5Yxb/J+SPWfyfmD9m8V82f8ziv1z+mMX/SfljFv/l88cs/ivkj1n8n5w/ZvF/Sv6Yxf+p+WMW/6flj1n8V8wfs/g/PX/M4r9S/pjFf+X8MYv/KvljD23/MbO3jlk1f+yh7X9XY1bLH7P4r54/ZvF/Rv6YxX+N/DGL/5r5Yxb/tfLHLP5rz/IfPa+G9WDN4v/M1j9m8V8nf8ziv27+mMX/WfljFv9n549Z/J+TP2bxn5g/ZvGflD9m8Z+cP2bxXy9/zOK/fv6YxX+D/DGL/5T8MYv/1Pwxi/+G+WMW/43yxyz+z80fs/g/L3/M4r9x/pjFf5P8MYv/pvljFv/n549Z/DfLH7P4vyB/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP4vzB+z+G+dP2bx3yZ/zOL/ovwxi/+L88cs/i/JH7P4vzR/zOL/svwxi//L88cs/q/IH3to+p+wyFxbx2ybP/bQ9J/VnOt/u/wxi//2+WMW/1fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/VfljFv9d8scs/q/OH7P4vyZ/zOL/2vwxi/+u+WMW/93yxyz+r8sfs/i/Pn/M4v+G/DGL/+75Yxb/N+aPWfz3yB+z+L8pf8zi/+b8MYv/W/LHLP575o9Z/PfKH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4vzN/zOL/rvwxi/+0/DGL/975Yxb/d+ePWfzfkz9m8X9v/pjFf5/8MYv/+/LHLP775o9Z/N+fP2bx/0D+mMV/v/wxi/8H8x+MgW0W/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW//3zxyz+B+SPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwPzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/QfljFv+v5I9Z/A/OH7P4fzV/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5fyx+z+B+RP2bx/3r+mMX/G/ljFv8j88cs/t/MH7P4H5U/ZvE/On/M4v+t/DGL/7fzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/nfwxi/8J+WMW/xPzxyz+J+WPWfy/mz9m8f9e/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/xn5Yxb/M/PHLP4/zR+z+J+VP2bx/1n+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/n+WMW/1/kj1n8f5k/ZvG/OH/M4n9J/pjF/1f5Yxb/X+ePWfwvzR+z+P8mf8zi/9s5/XdacB4M7MGZxf+y1j9m8b88f8zi/7v8MYv/FfljFv8r88cs/lflj1n8f58/ZvH/Q/6Yxf+P+WMW/6vzxyz+f8ofs/hfkz9m8b82f8zif13+mMX/+vwxi/+f88cs/jfkj1n8b8wfs/j/JX/M4n9T/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/hPzx+z+N+RP2bxvzN/zOI/I39M4j92kD9m8R/KH7P4j8ofs/iPzh+z+I/JH7P4j80fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+D8sf8ziv1j+mMV/XP6YxX/x/DGL//j8MYv/EvljFv8l88cs/g/PH7P4PyJ/zOL/yPwxi/9S+WMW/0flj1n8l84fs/g/On/M4v+Y/DGL/zL5Yxb/x+aPWfwflz9m8Z+QP2bxf3z+mMX/CfljFv8n5o9Z/JfNH7P4L5c/ZvF/Uv6YxX/5/DGL/wr5Yxb/J+ePWfyfkj9m8X9q/pjF/2n5Yxb/FfPHLP5Pzx+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP7PyB+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zPzxyz+6+SPWfzXzR+z+D8rf8zi/+z8MYv/c/LHLP4T88cs/pPyxyz+k/PHLP7r5Y9Z/NfPH7P4b5A/ZvGfkj9m8Z+aP2bx3zB/zOK/Uf6Yxf+5+WNz+4+Z1wP6T7sP/+flj1nW/8b5Yxb/TfLHLP6b5o9Z/J+fP2bx3yx/zOL/gvwxi//m+WMW/y3yxyz+W+aPWfy3yh+z+L8wf8ziv3X+mMV/m/wxi/+L8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/i/PH7P4vyJ/zOK/bf6YxX+7/DGL//b5Yxb/V+aPWfx3yB+z+O+YP2bx3yl/zOK/c/6Yxf9V+WMW/13yxyz+r84fs/i/Jn/M4v/a/DGL/675Yxb/3R6I/7j/j+N6kGbxf13rH7P4vz5/zOL/hvwxi//u+WMW/zfmj1n898gfs/i/KX/M4v/m/DGL/1vyxyz+e+aPWfz3yh+z+L81f8zi/7b8MYv/2/PHLP7vyB+z+L8zf8zi/678MYv/tPwxi//e+WMW/3fnj1n835M/ZvF/b/7YQ9t/7OytY/fJH3to+9/V2Pflj1n8980fs/i//379R///H9eDNIv/B1r/mMV/v/wxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/vvnj1n8D8gfs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/gfmD9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/g/LHLP5fyR+z+B+cP2bx/2r+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfy/lj9m8T8if8zi//X8MYv/N/LHLP5H5o9Z/L+ZP2bxPyp/zOJ/dP6Yxf9b+WMW/2/nj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/O/ljFv8T8scs/ifmj1n8T8ofs/h/N3/M4v+9/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/zPyxyz+Z+aPWfx/mj9m8T8rf8zi/7P8MYv/2fljFv9z8seG/Yfn5aHuf27+mGX9n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+f549Z/H+RP2bx/2X+mMX/4vwxi/8l+WMW/1/lj1n8f50/ZvG/NH/M4v+b/DGL/2/zxyz+l+WPWfwvzx+z+P8uf8zif0X+mMX/yvwxi/9V+WMW/9/nj1n8/5A/ZvH/Y/6Yxf/q/DGL/5/yxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOL/5/wxi/8N+WMW/xvzxyz+f8kfs/jflD9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+0/PHLP535I9Z/O/MH7P4z8gfk/jPN8gfs/gP5Y9Z/Eflj1n8R+ePWfzH5I9Z/Mfmj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwflj9m8V8sf8ziPy5/zOK/eP6YxX98/pjFf4n8MYv/kvljFv+H549Z/B+RP2bxf2T+mMV/qfwxi/+j8scs/kvnj1n8H50/ZvF/TP6YxX+Z/DGL/2Pzxyz+j8sfs/hPyB+z+D8+f8zi/4T8MYv/E/PHLP7L5o9Z/Jeby//OGTNm/LeH9mDM4v+k1j9m8V8+f8ziv0L+mMX/yfljFv+n5I9Z/J+aP2bxf1r+mMV/xfwxi//T88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8z8scs/mvkj1n818wfs/ivlT9m8V87f8zi/8z8MYv/OvljFv9188cs/s/KH7P4Pzt/zOL/nPwxi//E/DGL/6T8MYv/5Pwxi/96+WMW//Xzxyz+G+SPWfyn5I9Z/Kfmj1n8N8wfs/hvlD9m8X9u/pjF/3n5Yxb/jfPHLP6b5I9Z/DfNH7P4Pz9/zOK/Wf6Yxf8F+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bxf2H+mMV/6/wxi/82+WMW/xflj1n8X5w/ZvF/Sf6Yxf+l+WMW/5flj1n8X273H8WbLf6vsPvfRxb/bfPHLP7b5Y9Z/LfPH7P4vzJ/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6vyh+z+O+SP2bxf3X+mMX/NfljFv/X5o9Z/HfNH7P475Y/ZvF/Xf6Yxf/1+WMW/zfkj1n8d88fs/i/MX/M4r9H/pjF/035Yxb/N+ePWfzfkj9m8d8zf8ziv1f+mMX/rfljFv+35Y9Z/N+eP2bxf0f+mMX/nfljFv935Y9Z/Kflj1n8935g/qP/v43rQZrF/92tf8zi/578MYv/e/PHLP775I9Z/N+XP2bx3zd/zOL//vwxi/8H8scs/vvlj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvHfP3/M4n9A/pjF/2P5Yxb/j+ePWfw/kT9m8f9k/pjF/8D8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+B+UP2bx/0r+mMX/4Pwxi/9X88cs/ofkj1n8D80fs/gflj9m8T88f8zi/7X8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOL/zfwxi/9R+WMW/6Pzxyz+38ofs/h/O3/M4n9M/pjF/9j8MYv/cfljFv/j88cs/t/JH7P4n5A/ZvE/MX/M4n9S/pjF/7v5Yxb/7+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/ifkT9m8T8zf8zi/9P8MYv/WfljFv+f5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8f54/ZvH/Rf6Yxf+X+WMW/4vzxyz+l+SPWfx/lT9m8f91/pjF/9L8MYv/b/LHLP6/zR+z+F+WP2bxvzx/zOL/u/wxi/8V+WMW/yvzxyz+V+WPWfx/nz9m8f9D/pjF/4/5Yxb/q/PHLP5/yh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/5/zxyz+N+SPWfxvzB+z+P8lf8zif1P+mMX/r/ljFv+/5Y9Z/P+eP2bx/0f+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+E/PH7P435E/ZvG/M3/M4j8jf0ziP/8gf8ziP5Q/ZvEflT9m8R+dP2bxH5M/ZvEfmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxf1j+mMV/sfwxi/+4/DGL/+L5Yxb/8fljFv8l8scs/kvmj1n8H54/ZvF/RP6Yxf+R+WMW/6Xyxyz+j8ofs/gvnT9m8X90/pjF/zH5Yxb/ZfLHLP6PzR+z+D8uf8ziPyF/zOL/+Pwxi/8T8scs/k/MH7P4L5s/ZvFfLn/M4v+k/DGL//L5Yxb/FfLHLP5Pzh+z+D8lf8zi/9T8MYv/0/LHLP4r5o9Z/J+eP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/J+RP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/Z+aPPeT852Ce03+d/LGHnP99rP9188cs/s/KH7P4Pzt/zOL/nPwxi//E/DGL/6T8MYv/5Pwxi/96+WMW//Xzxyz+G+SPWfyn5I9Z/Kfmj1n8N8wfs/hvlD9m8X9u/pjF/3n5Yxb/jfPHLP6b5I9Z/DfNH7P4Pz9/zOK/Wf6Yxf8F+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bxf2H+mMV/6/wxi/82+WMW/xc5/Uf/sx0s/i92+v/TLP4vyR+z+L80f8zi/7L8MYv/y/PHLP6vyB+z+G+bP2bx3y5/zOK/ff6Yxf+V+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bxf1X+mMV/l/wxi/+r88cs/q/JH7P4vzZ/zOK/a/6YxX+3/DGL/+vyxyz+r88fs/i/IX/M4r97/pjF/435Yxb/PfLHHsL+0+b0f1P+2EPY/x7r/835Yxb/t+SPWfz3zB+z+O+VP2bxf2v+mMX/bfljFv+3549Z/N+RP2bxf2f+mMX/XfljFv9p+WMW/73zxyz+784fs/i/J3/M4v/e/DGL/z75Yxb/9+WPWfz3zR+z+L8/f8zi/4H8MYv/fvljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/PfPH7P4H5A/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvE/MH/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxx56/vOj/0H5Yw89f17/X8kfs/gfnD9m8f9q/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8v5Y/ZvE/In/M4v/1/DGL/zfyxyz+R+aPWfy/mT9m8T8qf8zif3T+mMX/W/ljFv9v549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/zv5Yxb/E/LHLP4n5o9Z/E/KH7P4fzd/zOL/vfwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv8z8scs/mfmj1n8f5o/ZvE/K3/M4v+z/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/PHLP6/yB+z+P8yf8zif3H+mMX/kvwxi/+v8scs/r/OH7P4X5o/ZvH/Tf6YxP9dg/wxif/8l+WPWfwvzx+z+P8uf8zif0X+mMX/yvwxi/9V+WMW/9/nj1n8/5A/ZvH/Y/5zNWbmrcX/6vwxi/+f8scs/tfkj1n8r80fs/hflz9m8b8+f8zi/+f8MYv/DfljFv8b88cs/n/JH7P435Q/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/tPzxyz+d+SPWfzvzB+z+M/IH5P4LzDIH7P4D+WPWfxH5Y9Z/Efnj1n8x+SPWfzH5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8H5Y/ZvFfLH/M4j8uf8ziv3j+mMV/fP6YxX+J/DGL/5L5Yxb/h+ePWfwfkT9m8X9k/pjFf6n8MYv/o/LHLP5L549Z/B+dP2bxf0z+mMV/mfwxi/9j88cs/o/LH7P4T8gfs/g/Pn/M4v+E/DGL/xPzxyz+y+aPWfyXyx+z+D8pf8ziv3z+mMV/hfwxi/+T88cs/k/JH7P4PzV/zOL/tPwxi/+K+WMW/6fnj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/2fkj1n818gfs/ivmT9m8V8rf8ziv3b+mMX/mfljFv918scs/uvmj1n8n5U/ZvF/dv6Yxf85+WMW/4n5Yxb/SfljFv/J+WMW//X+uf/yxvPD4r9+6x+z+G+QP2bxn5I/ZvGfmj9m8d8wf8ziv1H+mMX/ufljFv/n5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/8/DGL/2b5Yxb/F+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+F+WMW/63zxyz+2+SPWfxflD9m8X9x/pjF/yX5Yxb/l+aPWfxflj9m8X95/pjF/xX5Yxb/bfPHLP7b5Y9Z/LfPH7P4vzJ/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6vyh+z+O+SP2bxf3X+mMX/NfljFv/X5o9Z/HfNH7P475Y/ZvF/Xf6Yxf/1+WMW/zeo/B/4J7X4767yf+BZ/N+YP2bx3yN/zOL/pvwxi/+b88cs/m/JH7P475k/ZvHfK3/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4v/O/DGL/7vyxyz+0/LHLP57549Z/N+dP2bxf0/+mMX/vfljFv998scs/u/LH7P475s/ZvF/f/6Yxf8D+WMW//3yxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+H53tP20ejetBmsV//9Y/ZvE/IH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4n9g/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfwPyh+z+H8lf8zif3D+mMX/q/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8f9a/pjF/4j8MYv/1/PHLP7fyB+z+B+ZP2bx/2b+mMX/qPwxi//R+WMW/2/lj1n8v50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv/v5I9Z/E/IH7P4n5g/ZvE/KX/M4v/d/DGL//fyxyz+J+ePWfxPyR+z+J+aP2bxP+2e/gv818f1IM3if3rrH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/8Z+WMW/zPzxyz+P80fs/iflT9m8f9Z/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/5/ljFv9f5I9Z/H+ZP2bxvzh/zOJ/Sf6Yxf9X+WMW/1/nj1n8L80fs/j/Jn/M4v/b/DGL/2X5Yxb/y/PHLP6/yx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/3+WMW/z/kj1n8/5g/ZvG/On/M4v+n/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zl/zOJ/Q/6Yxf/G/DGL/1/yxyz+N+WPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL//T8MYv/HfljFv8788cs/jPyxyT+Cw7yxyz+Q/ljFv9R+WMW/9H5Yxb/MfljFv+x+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/h+WPWfwXyx+z+I/LH7P4L54/ZvEfnz9m8V8if8ziv2T+mMX/4fljFv9H5I9Z/B+ZP2bxXyp/zOL/qPwxi//S+WMW/0fnj1n8H5M/ZvFfJn/M4v/Y/DGL/+Pyxyz+E/LHLP6Pzx+z+D8hf8zi/8T8MYv/svljFv/l8scs/k/KH7P4L58/ZvFfIX/M4v/k/DGL/1Pyxyz+T80fs/g/LX/M4r9i/pjF/+n5Yxb/le7Lf+//0rgepFn8V279Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvF/Rv6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/J+ZP2bxXyd/zOK/bv6Yxf9Z+WMW/2fnj1n8n5M/ZvGfmD9m8Z+UP2bxn5w/ZvFfL3/M4r9+/pjFf4P8MYv/lPwxi//U/DGL/4b5Yxb/jfLHLP7PzR+z+D8vf8ziv3H+mMV/k/wxi/+m+WMW/+fnj1n8N8sfs/i/IH/M4r95/pjFf4v8MYv/lvljFv+t8scs/i/MH7P4b50/ZvHfJn/M4v+i/DGL/4vzxyz+L8kfs/i/NH/M4v+y/DGL/8vzxyz+r8gfs/hvmz9m8d8uf8ziv33+mMX/lfljFv8d8scs/jvmj1n8d8ofs/jvnD9m8X9V/pjFf5f8MYv/q/PHLP6vyR+z+L82f8ziv2v+mMV/t/wxi//r8scs/q/PH7P4vyF/zOK/e/6Yxf+N+WMW/z3yxyz+b8ofs/i/OX/M4v+W/DGL/575Yxb/vfLHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP7vzB+z+L8rf8ziPy1/zOK/d/6Yxf/d+WMW//fkj1n835s/ZvHfJ3/M4v++/DGL/775Yxb/9+ePWfw/kD9m8d8vf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv//vljFv8D8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/gfmj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf+g/DGL/1fyxyz+B+ePWfy/mj9m8T8kf8zif2j+mMX/sPwxi//h+WMW/6/lj1n8j8gfs/h/PX/M4v+N/DGL/5H5Yxb/b+aPWfyPyh+z+B+dP2bx/1b+mMX/2/ljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9O/pjF/4T8MYv/ifljFv+T8scs/t/NH7P4fy9/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/jPwxi/+Z+WMW/5/mj1n8z8ofs/j/LH/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zi//P8MYv/L/LHLP6/zB+z+F+cP2bxvyR/zOL/q/wxi/+v88cs/pfmj1n8f5M/ZvH/bf6Yxf+y/DGL/+X5Yxb/3+WPWfyvyB+z+F+ZP2bxvyp/zOL/+/wxi/8f8scs/n/MH7P4X50/ZvH/U/6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/P+cP2bxvyF/zOJ/Y/6Yxf8v+WMW/5vyxyz+f80fs/j/LX/M4v/3/DGL/z/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6YxX96/pjF/478MYv/nfljFv8Z+WMS/4UG+WMW/6H8MYv/qPwxi//o/DGL/5j8MYv/2Pwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/8Pyxyz+i+WPWfzH5Y9Z/BfPH7P4j88fs/gvkT9m8V8yf8zi//D8MYv/I/LHLP6PzB+z+C+VP2bxf1T+mMV/6fwxi/+j88cs/o/JH7P4L5M/ZvF/bP6Yxf9x+WMW/wn5Yxb/x+ePWfyfkD9m8X9i/pjFf9n8MYv/cvljFv8n5Y9Z/JfPH7P4r5A/ZvF/cv6Yxf8p+WMW/6fmj1n8n5Y/ZvFfMX/M4v/0/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4v+M/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4PzN/zOK/Tv6YxX/d/DGL/7Pyxyz+z84fs/g/J3/M4j8xf8ziPyl/zOI/OX/M4r9e/pjFf/38MYv/BvljFv8p+WMW/6n5Yxb/DfPHLP4b5Y9Z/J+bP2bxf17+mMV/4/wxi/8m+WMW/03zxyz+z88fs/hvlj9m8X9B/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8X5g/ZvHfOn/M4r9N/pjF/0X5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/l+ePWfxfkT9m8d82f8ziv13+mMV/+/wxi/8r88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/6r8MYv/LvljFv9X39v/2f/VcT1Is/i/pvWPWfxfmz9m8d81f8ziv1v+mMX/dfljFv/X549Z/N+QP2bx3z1/zOL/xvwxi/8e+WMW/zflj1n835w/ZvF/S/6YxX/P/DGL/175Yxb/t+aPWfzflj9m8X97/pjF/x35Yxb/d+aPWfzflT9m8Z+WP2bx3zt/zOL/7vwxi/97XP6jH+iOFv/3uvwfcBb/ffLHLP7vyx+z+O+bP2bxf3/+mMX/A/ljFv/98scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4758/ZvE/IH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4n9g/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfwPyh+z+H8lf8zif3D+mMX/q/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8f9a/pjF/4j8MYv/1/PHLP7fyB+z+B+ZP2bx/2b+mMX/qPwxi//R+WMW/2/lj1n8v50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv/v5I9Z/E/IH7P4n5g/ZvE/KX/M4v/d/DGL//fyxyz+J9+3/5j/yrgepFn8T2n9Yxb/U/PHLP6n5Y9Z/E/PH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/8Z+WMW/zPzxyz+P80fs/iflT9m8f9Z/pjF/+z8MYv/OfljFv9z79t/xp3/lYE9OLP4n9f6xyz+5+ePWfwvyB+z+F+YP2bxvyh/zOL/8/wxi/8v8scs/r8c/qwzZsyrUT1os/hf3PrHLP6X5I9Z/H+VP2bx/3X+mMX/0vwxi/9v8scs/r/NH7P4X5Y/ZvG/PH/M4v+7/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+fP2bx/0P+mMX/j/ljFv+r88cs/n/KH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/n/PHLP435I9Z/G/MH7P4/yV/zOJ/U/6Yxf+v+WMW/7/lj1n8/54/ZvH/R/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P4T88fs/jfkT9m8b8zf8ziPyN/TOK/8CB/zOI/lD9m8R+VP2bxH50/ZvEfkz9m8R+bP2bxny9/bOjUS4fn5SHvP3/+mGX9L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/g/LH7P4L5Y/ZvEflz9m8V88f8ziPz5/zOK/RP6YxX/J/DGL/8Pzxyz+j8gfs/g/Mn/M4r9U/pjF/1H5Yxb/pfPHLP6Pzh+z+D8mf8ziv0z+mMX/sfljFv/H5Y9Z/Cfkj1n8H58/ZvF/Qv6Yxf+J+WMW/2Xzxyz+y+WPWfyflD9m8V8+f8ziv0L+mMX/yfljFv+n5I9Z/J+aP2bxf1r+mMV/xfwxi//T88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8z8scs/mvkj1n818wfs/ivlT9m8V87f8zi/8z8MYv/OvljFv9188cs/s/KH7P4Pzt/zOL/nPwxi//E/DGL/6T8MYv/5Pwxi/96+WMW//Xzxyz+G+SPWfynqP3H3OcrFv+pav/7zuK/Yf6YxX+j/DGL/3Pzxyz+z8sfs/hvnD9m8d8kf8ziv2n+mMX/+fljFv/N8scs/i/IH7P4b54/ZvHfIn9sbv/R83pA/2n34b9l/phl/W+VP2bxf2H+mMV/6/wxi/82+WMW/xflj1n8X5w/ZvF/Sf6Yxf+l+WMW/5flj1n8X54/ZvF/Rf6YxX/b/DGL/3b5Yxb/7fPHLP6vzB+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/6vyxyz+u+SPWfxfnT9m8X9N/pjF/7X5Yxb/XfPHLP675Y9Z/F+XP2bxf33+mMX/DfljFv/d88cs/m/MH7P475E/ZvF/U/6Yxf/N+WMW/7fkj1n898wfs/jvlT9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8X9n/pjF/135Yxb/afljFv+988cs/u/OH7P4vyd/zOL/3vwxi/8++WMW//flj1n8980fs/i/P3/M4v+B/DGL/375Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfz3zx+z+B+QP2bx/1j+mMX/4/ljFv9P5I9Z/D+ZP2bxPzB/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/gflj1n8v5I/ZvE/OH/M4v/V/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4fy1/zOJ/RP6Yxf/r+WMW/2/kj1n8j8wfs/h/M3/M4n9U/pjF/+j8MYv/t/LHLP7fzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/3fyxyz+J+SPWfxPzB+z+J+UP2bx/27+mMX/e/ljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP5n5I9Z/M/MH7P4/zR/zOJ/Vv6Yxf9n+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/n+ePWfx/kT9m8f9l/pjF/+L8MYv/JfljFv9f5Y9Z/H+dP2bxvzR/zOL/m/wxi/9v88cs/pflj1n8L88fs/j/Ln/M4n9F/pjF/8r8MYv/VfljFv/f549Z/P+QP2bx/2P+mMX/6vwxi/+f8scs/tfkj1n8r80fs/hflz9m8b8+f8zi/+f8MYv/DfljFv8b88cs/n/JH7P435Q/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/tPzxyz+d+SPPYT95+Re+M78sYew/z3W/4z8MYn/IoP8MYv/UP6YxX9U/pjFf3T+mMV/TP6YxX9s/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+0EWLzLp/6Ps/LH/Msv4Xyx+z+I/LH7P4L54/ZvEfnz9m8V8if8ziv2T+mMX/4fljFv9H5I9Z/B+ZP2bxXyp/zOL/qPwxi//S+WMW/0fnj1n8H5M/ZvFfJn/M4v/Y/DGL/+Pyxyz+E/LHLP6Pzx+z+D8hf8zi/8T8MYv/svljFv/l8scs/k/KH7P4L58/ZvFfIX/M4v/k/DGL/1Pyxyz+T80fs/g/LX/M4r9i/pjF/+n5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/xn5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvF/Zv6YxX+d/DGL/7r5Yxb/Z+WPWfyfnT9m8X9O/pjFf2L+mMV/Uv6YxX9y/pjFf738MYv/+vljFv8N8scs/lPyxyz+U/PHLP4b5o9Z/DfKH7P4Pzd/zOL/vPwxi//G+WMW/03yxyz+m+aPWfyfnz9m8d8sf8zi/4L8MYv/5vljFv8t8scs/lvmj1n8t8ofs/i/MH/M4r91/pjFf5v8MYv/i/LHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP4vzx+z+L8if8ziv23+mMV/u/wxi//2+WMW/1fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/VfljFv9d8scs/q/OH7P4vyZ/zOL/2vwxi/+u+WMW/93yxyz+r8sfs/i/Pn/M4v+G/DGL/+75Yxb/N+aPWfz3yB+z+L8pf8zi/+b8MYv/W/LHLP575o9Z/PfKH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4vzN/zOL/rvwxi/+0/DGL/975Yxb/d+ePWfzfkz9m8X9v/pjFf5/8MYv/+/LHLP775o9Z/N+fP2bx/0D+mMV/v/wxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/vvnj1n8D8gfs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/gfmD9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/tiw/2AwmPZQ9/98/phl/X8hf8zi/8X8MYv/l/LHLP5fzh+z+B+UP2bx/0r+mMX/4Pwxi/9X88cs/ofkj1n8D80fs/gflj9m8T88f8zi/7X8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOL/zfwxi/9R+WMW/6Pzxyz+38ofs/h/O3/M4n9M/pjF/9j8MYv/cfljFv/j88cs/t/JH7P4n5A/ZvE/MX/M4n9S/pjF/7v5Yxb/7+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/ifkT9m8T8zf8zi/9P8MYv/WfljFv+f5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8f54/ZvH/Rf6Yxf+X+WMW/4vzxyz+l+SPWfx/lT9m8f91/pjF/9L8MYv/b/LHLP6/zR+z+F+WP2bxvzx/zOL/u/wxi/8V+WMW/yvzxyz+V+WPWfx/nz9m8f9D/pjF/4/5Yxb/q/PHLP5/yh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6e/jfOeO/P7AHZxb/P7f+MYv/DfljFv8b88cs/n/JH7P435Q/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/tPzxyz+d+SPWfzvzB+z+M/IH5P4LzrIH7P4D+WPWfxH5Y9Z/Efnj1n8x+SPWfzH5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8H5Y/ZvFfLH/M4j8uf8ziv3j+mMV/fP6YxX+J/DGL/5L5Yxb/h+ePWfwfkT9m8X9k/pjFf6n8MYv/o/LHLP5L549Z/B+dP2bxf0z+mMV/mfwxi/9j88cs/o/LH7P4T8gfs/g/Pn/M4v+E/DGL/xPzxyz+y+aPWfyXyx+z+D8pf8ziv3z+mMV/hfwxi/+T88cs/k/JH7P4PzV/zOL/tPwxi/+K+WMW/6fnj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/2fkj1n818gfs/ivmT9m8V8rf8ziv3b+mMX/mfljFv918scs/uvmj1n8n5U/ZvF/dv6Yxf85+WMW/4n5Yxb/SfljFv/J+WMW//Xyxyz+6+ePWfw3yB+z+E/JH7P4T80fs/hv+AD8F/j/Oa4HaRb/jVr/mMX/ufljFv/n5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/8/DGL/2b5Yxb/F+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+F+WMW/63zxyz+2+SPWfxflD9m8X9x/pjF/yX5Yxb/l+aPWfxflj9m8X95/pjF/xX5Yxb/bfPHLP7b5Y9Z/LfPH7P4vzJ/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6vyh+z+O+SP2bxf3X+mMX/NfljFv/X5o9Z/HfNH7P475Y/ZvF/Xf6Yxf/1+WMW/zfkj1n8d88fs/i/MX/M4r9H/pjF/035Yxb/N+ePWfzfkj9m8d8zf8ziv1f+mMX/rfljFv+35Y9Z/N+eP2bxf0f+mMX/nfljFv935Y9Z/Kflj1n8984fs/i/O3/M4v+e/DGL/3vzxyz+++SPWfzflz9m8d83f8zi//78MYv/B/LHLP775Y9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx3z9/zOJ/QP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf/A/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/gflD9m8f9K/pjF/+D8MYv/V/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4v+1/DGL/xH5Yxb/r+ePWfy/kT9m8T8yf8zi/838MYv/UfljFv+j88cs/t/KH7P4fzt/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fyR+z+J+QP2bxPzF/zOJ/Uv6Yxf+7+WMW/+/lj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5E/ZvE/M3/M4v/T/DGL/1n5Yxb/n+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/H+eP2bx/0X+mMX/l/ljFv+L88cs/pfkj1n8f5U/ZvH/df6Yxf/S/DGL/2/yxyz+v80fs/hflj9m8b88f8zi/7v8MYv/FfljFv8r88cs/lflj1n8f58/ZvH/Q/6Yxf+P+WMW/6vzxyz+f8ofs/hfkz9m8b82f8zif13+mMX/+vwxi/+f88cs/jfkj1n8b8wfs/j/JX/M4n9T/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/hPzx+z+N+RP2bxvzN/zOI/I39M4v+wQf6YxX8of8ziPyp/zOI/On/M4j8mf8ziPzZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4v+w/DGL/2L5Yxb/cfljFv/F88cs/uPzxyz+S+SPWfyXzB+z+D88f8zi/4j8MYv/I/PHLP5L5Y9Z/B+VP2bxXzp/zOL/6Pwxi/9j8scs/svkj1n8H5s/ZvF/XP6YxX9C/pjF//H5Yxb/J+SPWfyfmD9m8V82f8ziv1z+mMX/SfljFv/l88cs/ivkj1n8n5w/ZvF/Sv6Yxf+p+WMW/6flj1n8V8wfs/g/PX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/g/I3/M4r9G/pjFf838MYv/WvljFv+188cs/s/MH7P4r5M/ZvFfN3/M4v+s/DGL/7Pzxyz+z8kfs/hPzB+z+E/KH7P4T84fs/ivlz9m8V8/f8ziv0H+mMV/Sv6YxX9q/pjFf8P8MYv/RvljFv/n5o9Z/J+XP2bx3zh/zOK/Sf6YxX/T/DGL//Pzxyz+m+WPWfxfkD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/xfmj1n8t84fs/hvkz9m8X9R/pjF/8X5Yxb/l+SPWfxfmj9m8X9Z/pjF/+X5Yxb/V+SPWfy3zR+z+G+XP2bx3z5/zOL/yvwxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+L8qf8ziv0v+mMX/1fljFv/X5I9Z/F+bP2bx3zV/zOK/W/6Yxf91+WMW/9fnj1n835A/ZvHfPX/M4v/G/DGL/x75Yxb/N+WPWfzfnD9m8X9L/pjFf8/8MYv/XvljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv935o9Z/N+VP2bxn5Y/ZvHfO3/M4v/u/DGL/3vyxyz+780fs/jvkz9m8X9f/pjFf9/8MYv/+/PHLP4fyB+z+O+XP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV///wxi/8B+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/wPzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4n9Q/pjF/yv5Yxb/g/PHLP5fzR+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/9fyxyz+R+SPWfy/nj9m8f9G/pjF/8j8MYv/N/PHLP5H5Y9Z/I/OH7P4fyt/zOL/7fwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+H8nf8zif0L+mMX/xPwxi/9J+WMW/+/mj1n8v5c/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Rv6Yxf/M/DGL/0/zxyz+Z+WPWfx/lj9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/3n+mMX/F/ljFv9f5o9Z/C/OH7P4X5I/ZvH/Vf6Yxf/X+WMW/0vzxyz+v8kfs/j/Nn/M4n9Z/pjF//L8MYv/7/LHLP5X5I9Z/K/MH7P4X5U/ZvH/ff6Yxf8P+WMW/z/mj1n8r84fs/j/KX/M4n9N/pjF/9r8MYv/dfljFv/r88cs/n/OH7P435A/ZvG/MX/M4v+X/DGL/035Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4j89f8zif0f+mMX/zvwxi/+M/DGJ/2KD/DGL/1D+mMV/VP6YxX90/pjFf0z+mMV/bP6YxX++/DGL//z35S8/KSz+C0SNWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/8Pyxyz+i+WPWfzH5Y9Z/BfPH7P4j88fs/gvkT9m8V8yf8zi//D8MYv/I/LHLP6PzB+z+C+VP2bxf1T+mMV/6fwxi/+j88cs/o/JH7P4L5M/ZvF/bP6Yxf9x+WMW/wn5Yxb/x+ePWfyfkD9m8X9i/pjFf9n8MYv/cvljFv8n5Y9Z/JfPH7P4r5A/ZvF/cv6Yxf8p+WMW/6fmj1n8n5Y/ZvFfMX/M4v/0/DGL/0r5Yxb/lWf6j55Xo3rQZvFfpfWPWfxXzR+z+K+WP2bxXz1/zOL/jPwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+D8zf8ziv07+mMV/3fwxi/+z8scs/s/OH7P4Pyd/zOI/MX/M4j8pf8ziPzl/zOK/Xv6YxX/9/DGL/wb5Yxb/KfljFv+p+WMW/w3zxyz+G+WPWfyfmz9m8X9e/pjFf+P8MYv/JvljFv9N88cs/s/PH7P4b5Y/ZvF/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/F+YP2bx3zp/zOK/Tf6Yxf9F+WMW/xfnj1n8X5I/ZvF/af6Yxf9l+WMW/5fnj1n8X5E/ZvHfNn/M4r9d/pjFf/v8MYv/K/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4v+q/P8f+/QUPAZiRXH43zZpmzK1bdu2jbUZ21rbtm3btm3bdvZ1d+dkJs853/d8X+785kQt/YfpH7X0H65/1NJ/hP5RS/+R+kct/UfpH7X0H61/1NJ/jP5RS/+x+kct/cfpH7X0H69/1NJ/gv5RS/+J+kct/SfpH7X0n6x/1NJ/iv5RS/+p+kct/afpH7X0n65/1NJ/hv5RS/+Z+kct/WfpH7X0n61/1NJ/jv5RS/9V9I9a+q+qf9TSfzX9o5b+q+sftfRfQ/+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0n89/aOW/uvrH7X030D/qKX/hvpHLf030j9q6b+x/lFL/030j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvrH7X030P/qKX/nvpHLf330j9q6b+3/lFL/330j1r676t/1NJ/P/2jlv776x+19D9A/6il/4H6Ry39D9I/aul/sP5RS/9D9I9a+h+qf/TK/kMGBgYW1P6H6R+17P9w/aOW/kfoH7X0P1L/qKX/UfpHLf2P1j9q6X+M/lFL/2P1j1r6H6d/1NL/eP2jlv4n6B+19D9R/6il/0n6Ry39T9Y/aul/iv5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/hfoH7X0v1D/qKX/RfpHLf0v1j9q6X+J/lFL/0v1j1r6X6Z/1NL/cv2jlv5X6B+19L9S/6il/1X6Ry39r9Y/aul/TVf/QfN72NL/2q7+862l/3X6Ry39r9c/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+t+gftfS/Vf+opf9t+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/vfoH7X0v1f/qKX/ffpHLf3v1z9q6f+A/lFL/wf1j1r6P6R/1NL/Yf2jlv6P6B+19H9U/6il/2P6Ry39H9f/tebOLer/hP5RS/8n9Y9a+j+lf9TS/2n9o5b+z+gftfR/Vv+opf9z+kct/Z/XP2rp/4L+UUv/F/WPWvq/pH/U0n+u/lFJ/6ED+kct/V+nf9TS//X6Ry3936B/1NJ/kP5RS//B+kct/d+of9TS/036Ry3936x/1NJ/iP5RS/+36B+19H+r/lFL/7fpH7X0f7v+UUv/d+gftfR/p/5RS/+h+kct/d+lf9TS/936Ry3939Pefx7Pt/R/b3v/eWjp/z79o5b+79c/aun/Af2jlv4f1D9q6f8h/aOW/h/WP2rp/xH9o5b+H9U/aun/Mf2jlv4f1z9q6f8J/aOW/p/UP2rp/yn9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/p/XP2rp/wX9o5b+X9Q/aun/Jf2jlv5f1j9q6f8V/aOW/l/VP2rp/zX9o5b+X9c/aun/Df2jlv7f1D9q6f8t/aOW/t/WP2rp/x39o5b+39U/aun/Pf2jlv7f1z9q6f8D/aOW/j/UP2rp/yP9o5b+P9Y/aun/E/2jlv4/1T9q6f8z/aOW/j/XP2rp/wv9o5b+v9Q/aun/K/2jlv6/1j9q6f8b/aOW/r/VP2rp/zv9o5b+v9c/aun/B/2jlv5/1D9q6f8n/aOW/n/WP2rp/xf9o5b+f9U/aun/N/2jlv5/1z9q6f8P/aOW/v/UP2rp/y/9o5b+/9Y/aun/H/2jlv7/1T9q6f8//aOW/v/XP2rpv5D+0av6D15w+y+sf9Sy/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39l9I/aum/tP5RS/9l9I9a+i+rf9TSfzn9o5b+y+sftfRfQf+opf+K+kct/VfSP2rpv7L+UUv/YfpHLf2H6x+19B+hf9TSf6T+UUv/UfpHLf1H6x+19B+jf9TSf6z+UUv/cfpHLf3H6x+19J+gf9TSf6L+UUv/SfpHLf0n6x+19J+if9TSf6r+UUv/afpHLf2n6x+19J+hf9TSf6b+UUv/WfpHLf1n6x+19J+jf7TA9QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeZt9uY+ssCz+O393WMfbnn4y44DI02eRCIRFmu4eMF4RNxrY66MbzGODYQzc21m12HXYF3MOLSYTwIMkkS5QoW4YSZkIjMRCsIKJBFzXR4AMgClE0ToSgW+JizWnPKe2xazxXva6h+3xe9PS+z373uibf3fdSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjv1dQ89/DoukGnRg88+OChlt7XGUeW3rz/t90XVl7Lby8a4pKjBh709PT0zHhu+vby4SlFUZR+tx3l43HV49L1dzR+oaPvKMzpfmnBsQk/bz68f+XpjzR0Hbm/vvdsfXHTmnUbWj42qijCxfVFR+mgoa4owvz64r7SQWPpYEF98UjpYHrvwanFt0sH56/atGF16cTC6O8Z/K9oat5RjB5UbDHob4OB/e9o/NadlddhLlm52pii3P8Vnd9/q+q9iuP0X7l+mFvdf81/QOC4auv/hTmV12Eu+S/3//FPLXtlqPeO33/l+uHj+od0hnj+H9Ro9XN/1fP/lCEu2b+/qq7zWKn/S297dmr51Jh/5/n/3euHi6v7HzXo+b/0HD+v8vx/SlGES0b47YCTSlPzzsPD3f+H73/M5KpN3cD+z2jbtK/U/+MLvvdE+VR9jf3PG+b+P2ph1dcK1Kap+cs9Vff/GvovPjLEJfv7f/uJXz9c6v+x3z9w5oD3aun/kur+p7W3bp62ZVvneetaV6xtWduysWH67BmzGhtmXTBzWu8jQd/HEX5X4OQwsvt/Mb5qU1cULf37a7r2P13qf+aDD84onxpXY//zh73/T3H/hyF9aFQxdmzRsaK9va2h72PlsLHvY98vG6L/Gv79f9Y55V9WX36tK4pJ/fu7zrx7San/dw4+u6t8amyN/S8Ytv85/b8vEGGE9//VVZtB/R84+FLv8/+iew+cUT5V67//Fw7b/6vu/zASTc1V/8HPf1ip/53FZZGdhiY//4N0cvT/2Ds3dMetwyf0D+nk6P93nztybtw6LNI/pJOj/zHrH3g+bh0u1T+kk6P/xRNnL4lbh8v0D+nk6H/Vq+f+OW4dmvUP6eTo/5wv7eqIW4fF+od0cvT/UNuMrXHrsET/kE6O/n962kOvxa3D5fqHdHL0f/ToPTfGrcMV+od0cvTftfvsH8Stw5X6h3Ry9H/5mrkhbh2u0j+kk6P/yZP++HjcOlytf0gnR/+z/vT30+LW4Rr9Qzo5+r/j80v2xq3DtfqHdHL0P/r6V16MW4el+od0cvS/8Oytc+PW4Tr9Qzo5+l/9k9U9ceuwTP+QTo7+p339R+vi1uF6/UM6Ofo/tPjR3XHrcIP+IZ0c/e9uKCbErcON+od0cvT/te+efjBuHT6pf0gnR/+/eerJ2XHrsFz/kE6O/p/7wO3fiFuHm/QP6eTo/96VL54Vtw4r9A/p5Oj/4T3PfzFuHVbqH9LJ0f8bb7T+X9w6rNI/pJOj//HjTn09bh1W6x/SydH/3Fu/0ha3Di36h3Ry9N+6q+uHceuwRv+QTo7+P3xs0rK4dVirf0gnR/9LZ+55f9w63Kx/SCdH/+9bdOHOuHVYp39IJ0f/F3V/9KK4dVivf0gnR//tz3z2q3HrcIv+IZ0c/e+Z+tr8uHXYoH9IJ0f/Ly9f+OO4dWjVP6STo/+3Hr1uY9w6bNQ/pJOj/yd/9vbRuHXYpH9IJ0f//3/BvL/GrcNm/UM6Ofqfv+DNVXHr8Cn9Qzo5+l/f9Y+X49ahTf+QTo7+px66elHcOmzRP6STo//vnNewL24d2vUP6eTo/84r9zbGrcNW/UM6Ofrfd+Cuu+PW4Vb9Qzo5+n/zF1Mmx63Dp/UP6eTo//4JB6+NW4cO/UM6Ofr/5cb6Z+LWYZv+IZ0c/f9t78TtcevQqX9IJ0f/T7/e/Ye4dbhN/5BOjv6Xj/nV2Lh1uF3/kE6O/id2br4vbh3u0D+kk6P/2fesOD9uHT6jf0gnR/9b/vLCN+PWYbv+IZ0t2zpvWbFhQ0ubT3xyUn1S+ZHUe+Xrea99coL/YgKSezf6E/2VAAAAAAAAAAAAAAAAx5Pjfyc60X9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRO8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwAAAP//A8XgeQ==")
ioctl$FS_IOC_GETFSMAP(r0, 0xc080583d, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX])

28.868509ms ago: executing program 3 (id=12201):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x2, 0x0, 0x1, [@typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5", @typed={0x4, 0x111}]}]}, 0x114}], 0x1}, 0x0)

28.353819ms ago: executing program 0 (id=12202):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x10000009)

0s ago: executing program 0 (id=12203):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
alarm(0x6)

kernel console output (not intermixed with test programs):

g 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[ 1154.234011][ T6574] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1154.244213][ T6574] usb 3-1: config 0 interface 88 has no altsetting 0
[ 1154.255483][ T6574] usb 3-1: string descriptor 0 read error: -22
[ 1154.261912][ T6574] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 1154.279260][ T6574] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[ 1154.328440][ T6574] usb 3-1: config 0 descriptor??
[ 1154.350557][ T6574] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input67
[ 1154.402266][ T6574] input: failed to attach handler mousedev to device input67, error: -5
[ 1154.422000][   T28] gspca_spca508: reg_read err -71
[ 1154.452998][   T28] gspca_spca508: reg_read err -71
[ 1154.465265][   T28] gspca_spca508: reg_read err -71
[ 1154.473751][   T28] gspca_spca508: reg_read err -71
[ 1154.479182][   T28] gspca_spca508: reg write: error -71
[ 1154.485253][   T28] spca508: probe of 1-1:0.0 failed with error -71
[ 1154.495532][   T28] usb 1-1: USB disconnect, device number 33
[ 1154.550755][ T8250] udevd[8250]: Error opening device "/dev/input/event4": Input/output error
[ 1154.601332][ T8250] udevd[8250]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1154.624375][ T8250] udevd[8250]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1154.631080][T29144] loop1: detected capacity change from 0 to 64
[ 1154.636056][ T8250] udevd[8250]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[ 1154.652590][   T27] audit: type=1326 audit(1773835463.350:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29145 comm="syz.3.10642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1154.670831][ T6525] usb 3-1: USB disconnect, device number 55
[ 1154.676364][ T5140] udevd[5140]: worker [8250] terminated by signal 6 (Aborted)
[ 1154.701111][ T5140] udevd[5140]: worker [8250] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input67/event4'
[ 1154.721109][   T27] audit: type=1326 audit(1773835463.350:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29145 comm="syz.3.10642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1154.752283][   T27] audit: type=1326 audit(1773835463.378:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29145 comm="syz.3.10642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1154.776225][   T27] audit: type=1326 audit(1773835463.378:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29145 comm="syz.3.10642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1154.875306][T29150] openvswitch: netlink: EtherType 0 is less than min 600
[ 1154.954161][T29152] vivid-002: disconnect
[ 1154.961478][T29151] vivid-002: reconnect
[ 1155.209709][T29161] netlink: 'syz.3.10650': attribute type 7 has an invalid length.
[ 1155.241003][T29163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10651'.
[ 1155.257716][T29163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10651'.
[ 1155.271563][T29163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10651'.
[ 1156.215007][T29211] netlink: 'syz.3.10673': attribute type 3 has an invalid length.
[ 1156.569874][T29230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10681'.
[ 1156.745517][T29238] loop3: detected capacity change from 0 to 256
[ 1156.794772][T29238] FAT-fs (loop3): Directory bread(block 64) failed
[ 1156.810730][T29238] FAT-fs (loop3): Directory bread(block 65) failed
[ 1156.828419][T29238] FAT-fs (loop3): Directory bread(block 66) failed
[ 1156.847238][T29238] FAT-fs (loop3): Directory bread(block 67) failed
[ 1156.886881][T29238] FAT-fs (loop3): Directory bread(block 68) failed
[ 1156.901290][T29238] FAT-fs (loop3): Directory bread(block 69) failed
[ 1156.918438][T29238] FAT-fs (loop3): Directory bread(block 70) failed
[ 1156.940823][T29238] FAT-fs (loop3): Directory bread(block 71) failed
[ 1156.966891][T29238] FAT-fs (loop3): Directory bread(block 72) failed
[ 1156.993581][T29238] FAT-fs (loop3): Directory bread(block 73) failed
[ 1158.281957][T29296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10715'.
[ 1158.457892][   T28] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1158.568197][T29306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10719'.
[ 1158.674443][T29312] loop2: detected capacity change from 0 to 64
[ 1158.686386][   T28] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1158.695502][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.733628][   T28] usb 4-1: config 0 descriptor??
[ 1158.890546][T29318] netlink: 'syz.1.10725': attribute type 10 has an invalid length.
[ 1158.914185][T29318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10725'.
[ 1158.939903][T29318] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1158.956623][T29318] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1158.982319][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1158.996034][T29318] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1159.008674][T29322] netlink: 'syz.2.10727': attribute type 1 has an invalid length.
[ 1159.019166][T29322] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.10727'.
[ 1159.234496][   T28] [drm:udl_init] *ERROR* Selecting channel failed
[ 1159.284062][   T28] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[ 1159.308329][   T28] [drm] Initialized udl on minor 2
[ 1159.316258][   T28] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1159.351979][   T28] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1159.362340][ T6418] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1159.376122][ T6418] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1159.393548][   T28] usb 4-1: USB disconnect, device number 54
[ 1159.474441][T29338] netlink: 'syz.1.10736': attribute type 1 has an invalid length.
[ 1159.499481][T29338] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10736'.
[ 1159.668538][T29346] netlink: 4168 bytes leftover after parsing attributes in process `syz.0.10739'.
[ 1159.958263][T29359] netlink: 'syz.2.10745': attribute type 10 has an invalid length.
[ 1160.002563][T29362] ubi0: attaching mtd0
[ 1160.019466][T29362] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585)
[ 1160.209579][T29359] team0 (unregistering): Port device team_slave_0 removed
[ 1160.262637][T29359] team0 (unregistering): Port device team_slave_1 removed
[ 1160.582422][T29376] loop3: detected capacity change from 0 to 164
[ 1160.655593][T29364] loop1: detected capacity change from 0 to 32768
[ 1160.690869][T29364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.10748 (29364)
[ 1160.784199][T29364] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1160.826916][T29364] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1160.855155][T29364] BTRFS info (device loop1): using free space tree
[ 1161.011144][T29389] loop3: detected capacity change from 0 to 4096
[ 1161.018989][T29389] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1161.073570][T29408] netlink: 'syz.0.10763': attribute type 3 has an invalid length.
[ 1161.081981][T29408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10763'.
[ 1161.101934][T29364] BTRFS info (device loop1): enabling ssd optimizations
[ 1161.125378][T29364] BTRFS info (device loop1): auto enabling async discard
[ 1161.141452][T29389] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1161.204766][T29411] netlink: 'syz.0.10764': attribute type 10 has an invalid length.
[ 1161.319105][ T6487] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1161.543015][T29411] team0 (unregistering): Port device team_slave_0 removed
[ 1161.688046][T29411] team0 (unregistering): Port device team_slave_1 removed
[ 1161.772675][T29416] loop1: detected capacity change from 0 to 4096
[ 1161.861636][T29419] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1162.004866][T29416] syz.1.10766: attempt to access beyond end of device
[ 1162.004866][T29416] loop1: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096
[ 1162.062753][T29416] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[ 1162.527797][T29435] SET target dimension over the limit!
[ 1162.592274][T29437] netlink: 'syz.0.10776': attribute type 3 has an invalid length.
[ 1162.607060][   T27] audit: type=1326 audit(1773835470.686:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29438 comm="syz.2.10777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1162.629256][T29418] loop3: detected capacity change from 0 to 32768
[ 1162.634963][T29437] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.10776'.
[ 1162.654641][   T27] audit: type=1326 audit(1773835470.686:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29438 comm="syz.2.10777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1162.730919][   T27] audit: type=1326 audit(1773835470.704:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29438 comm="syz.2.10777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1162.732868][T29418] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1162.764044][   T27] audit: type=1326 audit(1773835470.704:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29438 comm="syz.2.10777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1162.787485][   T27] audit: type=1326 audit(1773835470.704:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29438 comm="syz.2.10777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1162.898451][T29418] XFS (loop3): Ending clean mount
[ 1163.011775][T29456] netlink: 'syz.0.10782': attribute type 3 has an invalid length.
[ 1163.063751][ T6489] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1163.210508][T29465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10787'.
[ 1163.963499][    T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1164.192305][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1164.205937][    T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1164.229173][    T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1164.257202][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1164.276566][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1164.287214][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1164.342824][    T9] usb 1-1: Product: syz
[ 1164.350645][    T9] usb 1-1: Manufacturer: syz
[ 1164.358071][    T9] usb 1-1: SerialNumber: syz
[ 1164.369702][    T9] usb 1-1: config 0 descriptor??
[ 1164.383177][    T9] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[ 1164.612633][    T9] snd_usb_toneport 1-1:0.0: cannot get proper max packet size
[ 1164.639071][    T9] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1164.676308][    T9] snd_usb_toneport: probe of 1-1:0.0 failed with error -22
[ 1164.686179][T29519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1164.741058][T29526] ieee802154 phy0 wpan0: encryption failed: -22
[ 1164.890866][T29530] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10816'.
[ 1164.900477][   T28] usb 1-1: USB disconnect, device number 34
[ 1165.592872][T29559] loop1: detected capacity change from 0 to 4096
[ 1165.610176][T29559] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[ 1166.578182][T29597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10850'.
[ 1166.600444][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10851'.
[ 1166.774020][T29608] ieee802154 phy0 wpan0: encryption failed: -90
[ 1166.894618][T29610] netlink: 'syz.0.10857': attribute type 9 has an invalid length.
[ 1166.916307][T29610] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10857'.
[ 1167.236692][T29626] netlink: 'syz.0.10864': attribute type 4 has an invalid length.
[ 1167.582123][T29644] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10873'.
[ 1167.796131][T29652] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1167.815500][T29655] loop2: detected capacity change from 0 to 8
[ 1168.076985][T29666] netlink: 'syz.0.10885': attribute type 21 has an invalid length.
[ 1168.155555][T29669] loop1: detected capacity change from 0 to 512
[ 1168.211913][T29669] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.10884: Invalid inode bitmap blk 4 in block_group 0
[ 1168.215421][T29674] IPv6: sit1: Disabled Multicast RS
[ 1168.231754][T29674] sit1: entered allmulticast mode
[ 1168.303215][T29669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1168.540557][ T6487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1168.858052][T29701] loop2: detected capacity change from 0 to 256
[ 1168.897611][T29701] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[ 1168.990205][T29705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1169.013281][T29701] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[ 1169.036298][   T27] audit: type=1326 audit(1773835476.619:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.1.10902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1169.067643][T29701] exFAT-fs (loop2): Filesystem has been set read-only
[ 1169.143125][   T27] audit: type=1326 audit(1773835476.619:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.1.10902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1169.209014][   T27] audit: type=1326 audit(1773835476.637:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.1.10902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1169.231467][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1169.283118][   T27] audit: type=1326 audit(1773835476.637:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.1.10902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1169.360178][   T27] audit: type=1326 audit(1773835476.637:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29706 comm="syz.1.10902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1169.437144][T29719] netlink: 'syz.1.10908': attribute type 3 has an invalid length.
[ 1169.454888][T29719] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10908'.
[ 1169.680243][T29727] netlink: 'syz.2.10912': attribute type 9 has an invalid length.
[ 1169.721254][T29727] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10912'.
[ 1170.358262][T29760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10928'.
[ 1170.407693][T29762] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10929'.
[ 1170.448304][T29762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10929'.
[ 1170.474653][T29762] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10929'.
[ 1170.493094][T29762] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10929'.
[ 1170.502811][T29762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10929'.
[ 1170.516775][T29765] loop3: detected capacity change from 0 to 1024
[ 1170.523864][T29766] cgroup: Invalid name
[ 1170.706087][   T79] hfsplus: b-tree write err: -5, ino 25
[ 1170.711861][   T79] hfsplus: b-tree write err: -5, ino 4
[ 1170.729165][   T79] hfsplus: b-tree write err: -5, ino 2
[ 1170.821720][T29777] loop2: detected capacity change from 0 to 256
[ 1170.881411][T29777] FAT-fs (loop2): Directory bread(block 64) failed
[ 1170.888024][T29777] FAT-fs (loop2): Directory bread(block 65) failed
[ 1170.902801][T29777] FAT-fs (loop2): Directory bread(block 66) failed
[ 1170.909475][T29777] FAT-fs (loop2): Directory bread(block 67) failed
[ 1170.936637][T29777] FAT-fs (loop2): Directory bread(block 68) failed
[ 1170.949577][T29777] FAT-fs (loop2): Directory bread(block 69) failed
[ 1170.981695][T29777] FAT-fs (loop2): Directory bread(block 70) failed
[ 1170.995990][T29777] FAT-fs (loop2): Directory bread(block 71) failed
[ 1171.025943][T29777] FAT-fs (loop2): Directory bread(block 72) failed
[ 1171.025979][T29777] FAT-fs (loop2): Directory bread(block 73) failed
[ 1171.035006][T29777] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1171.349727][T29791] loop1: detected capacity change from 0 to 4096
[ 1171.362851][T29791] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[ 1171.385412][T29793] loop2: detected capacity change from 0 to 512
[ 1171.422345][T29793] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1171.424633][T29791] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[ 1171.714029][ T6495] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1171.802315][T29802] netlink: 'syz.3.10948': attribute type 10 has an invalid length.
[ 1171.839563][T29802] team0: Device vxcan1 is of different type
[ 1171.889521][T29807] loop1: detected capacity change from 0 to 1024
[ 1172.022829][   T12] hfsplus: b-tree write err: -5, ino 25
[ 1172.032348][   T12] hfsplus: b-tree write err: -5, ino 4
[ 1172.048597][   T12] hfsplus: b-tree write err: -5, ino 2
[ 1172.153660][T29815] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1172.178753][T29815] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1172.335228][T29800] loop0: detected capacity change from 0 to 32768
[ 1172.399675][T29800] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1172.483454][T29800] XFS (loop0): Ending clean mount
[ 1172.663002][ T6491] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1172.724445][T29841] loop3: detected capacity change from 0 to 256
[ 1172.809679][T29841] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[ 1173.000818][T29841] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[ 1173.023945][T29841] exFAT-fs (loop3): Filesystem has been set read-only
[ 1173.801931][T29879] loop2: detected capacity change from 0 to 1024
[ 1173.834959][T29879] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1173.883543][T29879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1173.924755][T29879] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop
[ 1174.082595][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10986'.
[ 1174.115048][ T6495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1174.272263][T29894] netlink: 'syz.2.10987': attribute type 1 has an invalid length.
[ 1174.326291][T29897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10989'.
[ 1174.504198][T29871] loop1: detected capacity change from 0 to 40427
[ 1174.532047][T29871] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[ 1174.566847][T29871] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1174.593319][T29871] F2FS-fs (loop1): heap/no_heap options were deprecated
[ 1174.651511][T29871] F2FS-fs (loop1): invalid crc value
[ 1174.663177][T29871] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[ 1174.703643][T29871] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1174.805339][T29912] loop0: detected capacity change from 0 to 256
[ 1174.839079][T29912] exfat: Deprecated parameter 'namecase'
[ 1174.844926][T29871] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30
[ 1174.844952][T29871] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1174.951984][T29912] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d)
[ 1175.180791][    T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1175.397296][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1175.405283][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1175.417826][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1175.430462][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1175.441282][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1175.480253][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1175.490898][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1175.500764][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.511400][    T9] usb 3-1: config 0 descriptor??
[ 1175.517731][T29914] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1175.581575][ T6574] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1175.776709][T29941] autofs4:pid:29941:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375)
[ 1175.798268][ T6574] usb 4-1: Using ep0 maxpacket: 16
[ 1175.806095][ T6574] usb 4-1: config index 0 descriptor too short (expected 18, got 14)
[ 1175.816431][ T6574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1175.825260][T29941] autofs4:pid:29941:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[ 1175.850729][ T6574] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1175.863113][ T6574] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1175.879152][ T6574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.896361][ T6574] usb 4-1: Product: syz
[ 1175.900759][ T6574] usb 4-1: Manufacturer: syz
[ 1175.905408][ T6574] usb 4-1: SerialNumber: syz
[ 1175.915476][ T6574] r8152-cfgselector 4-1: config 0 descriptor??
[ 1176.064808][ T1188] usb 3-1: USB disconnect, device number 56
[ 1176.068402][T16432] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[ 1176.180695][ T6574] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 1176.215410][T29955] __nla_validate_parse: 2 callbacks suppressed
[ 1176.215426][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11017'.
[ 1176.230939][T29955] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11017'.
[ 1176.293508][T29954] loop1: detected capacity change from 0 to 8192
[ 1176.327493][T29954] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1176.351469][T29954] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[ 1176.369056][T29954] REISERFS (device loop1): using ordered data mode
[ 1176.376443][T29954] reiserfs: using flush barriers
[ 1176.390317][T29954] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1176.415087][ T6574] usb 4-1: USB disconnect, device number 55
[ 1176.449194][T29954] REISERFS (device loop1): checking transaction log (loop1)
[ 1176.465468][T29954] REISERFS (device loop1): Using rupasov hash to sort names
[ 1176.492605][T29954] REISERFS (device loop1): using 3.5.x disk format
[ 1176.499400][T29954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1176.514129][T29954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1176.548503][T29954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1176.573687][T29954] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[ 1176.588356][T29954] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[ 1176.648728][T29964] netlink: 'syz.0.11021': attribute type 1 has an invalid length.
[ 1176.657601][T29954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1176.678538][T29964] netlink: 'syz.0.11021': attribute type 3 has an invalid length.
[ 1176.698388][T29964] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11021'.
[ 1176.707546][T29964] NCSI netlink: No device for ifindex 0
[ 1176.708865][T29954] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1177.291543][T29988] loop3: detected capacity change from 0 to 1764
[ 1177.544872][T29998] loop0: detected capacity change from 0 to 1024
[ 1177.691304][   T79] hfsplus: b-tree write err: -5, ino 25
[ 1177.710697][   T79] hfsplus: b-tree write err: -5, ino 4
[ 1177.716317][   T79] hfsplus: b-tree write err: -5, ino 2
[ 1177.802132][   T27] audit: type=1326 audit(1773835484.702:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30013 comm="syz.0.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc39c799 code=0x7ffc0000
[ 1177.878051][   T27] audit: type=1326 audit(1773835484.739:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30013 comm="syz.0.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc39c799 code=0x7ffc0000
[ 1177.954747][   T27] audit: type=1326 audit(1773835484.739:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30013 comm="syz.0.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f9bfc39c799 code=0x7ffc0000
[ 1178.015982][   T27] audit: type=1326 audit(1773835484.739:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30013 comm="syz.0.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc39c799 code=0x7ffc0000
[ 1178.091761][   T27] audit: type=1326 audit(1773835484.739:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30013 comm="syz.0.11044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bfc39c799 code=0x7ffc0000
[ 1178.137316][T30026] loop3: detected capacity change from 0 to 256
[ 1178.917380][T30032] loop2: detected capacity change from 0 to 32768
[ 1179.002964][T30050] loop3: detected capacity change from 0 to 8192
[ 1179.041470][T30050] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1179.065688][T30050] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[ 1179.078431][T30050] REISERFS (device loop3): using ordered data mode
[ 1179.085611][T30050] reiserfs: using flush barriers
[ 1179.101959][T30050] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1179.133634][T30050] REISERFS (device loop3): checking transaction log (loop3)
[ 1179.191730][T30050] REISERFS (device loop3): Using rupasov hash to sort names
[ 1179.210428][T30050] REISERFS (device loop3): using 3.5.x disk format
[ 1179.220263][T30050] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1179.245055][ T6574] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1179.256124][T30050] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1179.288254][T30050] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1179.334895][T30050] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[ 1179.374842][T30050] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1179.483179][ T6574] usb 2-1: Using ep0 maxpacket: 16
[ 1179.501226][ T6574] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1179.521989][T30050] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1179.522615][ T6574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1179.542340][T30067] loop2: detected capacity change from 0 to 4096
[ 1179.544223][ T6574] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1179.561210][T30067] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[ 1179.575100][T30050] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1179.587131][ T6574] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14
[ 1179.598902][ T6574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.617269][ T6574] usb 2-1: Product: syz
[ 1179.620125][T30067] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[ 1179.627128][ T6574] usb 2-1: Manufacturer: syz
[ 1179.647397][ T6574] usb 2-1: SerialNumber: syz
[ 1179.658270][ T6574] usb 2-1: config 0 descriptor??
[ 1179.663993][T30056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1179.701924][ T6574] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed!
[ 1179.709023][ T6574] mceusb: probe of 2-1:0.0 failed with error -12
[ 1179.924854][ T6574] usb 2-1: USB disconnect, device number 40
[ 1180.779144][ T1188] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[ 1180.869842][T30113] netlink: 'syz.0.11094': attribute type 1 has an invalid length.
[ 1180.871768][T30090] loop3: detected capacity change from 0 to 40427
[ 1180.877893][T30113] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11094'.
[ 1180.917401][T30090] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288)
[ 1180.975099][T30090] F2FS-fs (loop3): invalid crc value
[ 1180.991224][ T1188] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1180.999534][ T1188] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[ 1181.022332][T30090] F2FS-fs (loop3): invalid crc value
[ 1181.034248][T30090] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[ 1181.039232][ T1188] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1181.086445][ T1188] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1181.119597][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 1181.164856][ T1188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1181.191248][ T1188] usb 3-1: string descriptor 0 read error: -22
[ 1181.203619][ T1188] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1181.239056][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.283295][ T1188] usb 3-1: config 0 descriptor??
[ 1181.289959][T30099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1181.329729][ T1188] hub 3-1:0.0: bad descriptor, ignoring hub
[ 1181.335721][ T1188] hub: probe of 3-1:0.0 failed with error -5
[ 1181.383785][ T1188] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input68
[ 1181.681939][   T28] usb 3-1: USB disconnect, device number 57
[ 1182.034670][T30143] loop0: detected capacity change from 0 to 8192
[ 1182.072405][T30143] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1182.095023][T30143] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 1182.116176][T30143] REISERFS (device loop0): using ordered data mode
[ 1182.138057][T30143] reiserfs: using flush barriers
[ 1182.164197][T30154] loop3: detected capacity change from 0 to 64
[ 1182.181808][T30143] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1182.292962][T30143] REISERFS (device loop0): checking transaction log (loop0)
[ 1182.354827][T30143] REISERFS (device loop0): Using rupasov hash to sort names
[ 1182.394470][T30143] REISERFS (device loop0): using 3.5.x disk format
[ 1182.442137][T30143] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1182.464669][T30143] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1182.498127][T30143] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1182.534794][T30143] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[ 1182.554875][T30143] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1182.563618][T30156] loop2: detected capacity change from 0 to 4096
[ 1182.593560][T30156] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 1182.626485][T30149] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.11112 (30149)
[ 1182.665280][T30143] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1182.689346][T30149] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1182.721903][T30149] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[ 1182.738338][T30143] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 1182.745462][T30149] BTRFS info (device loop1): enabling auto defrag
[ 1182.788412][T30149] BTRFS info (device loop1): use no compression
[ 1182.842120][T30149] BTRFS info (device loop1): force clearing of disk cache
[ 1182.878028][T30149] BTRFS info (device loop1): max_inline at 4096
[ 1182.903848][T30149] BTRFS info (device loop1): disabling free space tree
[ 1183.135482][T30149] BTRFS info (device loop1): enabling ssd optimizations
[ 1183.142572][T30149] BTRFS info (device loop1): auto enabling async discard
[ 1183.191142][T30149] BTRFS info (device loop1): rebuilding free space tree
[ 1183.231580][T30149] BTRFS info (device loop1): disabling free space tree
[ 1183.239594][T30149] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1183.262284][T30149] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1183.483846][ T6487] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1183.697221][   T27] audit: type=1400 audit(1773835490.146:109): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=30201 comm="syz.3.11131"
[ 1184.361766][T30225] set_capacity_and_notify: 1 callbacks suppressed
[ 1184.361779][T30225] loop3: detected capacity change from 0 to 512
[ 1184.446332][   T27] audit: type=1326 audit(1773835490.838:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.2.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1184.497445][T30225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1184.510720][T30225] ext4 filesystem being mounted at /2488/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1184.572316][   T27] audit: type=1326 audit(1773835490.838:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.2.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1184.594956][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1184.604125][   T27] audit: type=1326 audit(1773835490.847:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.2.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1184.628243][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1184.655254][   T27] audit: type=1326 audit(1773835490.847:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.2.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1184.766503][   T27] audit: type=1326 audit(1773835490.847:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30228 comm="syz.2.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67bd19c799 code=0x7ffc0000
[ 1184.958569][T30241] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1185.047038][T30217] loop1: detected capacity change from 0 to 32768
[ 1185.155823][T30217] ea_get: invalid extended attribute
[ 1185.250846][T30226] loop0: detected capacity change from 0 to 32768
[ 1185.348060][T30253] loop2: detected capacity change from 0 to 1024
[ 1185.360359][T30226] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1185.429855][   T27] audit: type=1800 audit(1773835491.742:115): pid=30253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11153" name="file1" dev="loop2" ino=20 res=0 errno=0
[ 1185.470646][ T2915] hfsplus: b-tree write err: -5, ino 25
[ 1185.509168][ T2915] hfsplus: b-tree write err: -5, ino 4
[ 1185.517554][ T2915] hfsplus: b-tree write err: -5, ino 2
[ 1185.802385][T30226] XFS (loop0): Starting recovery (logdev: internal)
[ 1185.876115][T30226] XFS (loop0): Ending recovery (logdev: internal)
[ 1185.964095][    T9] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[ 1186.034683][ T6491] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1186.115871][ T1188] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1186.182527][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1186.202503][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1186.214959][T30271] loop3: detected capacity change from 0 to 40427
[ 1186.222103][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1186.241665][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.265895][T30271] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[ 1186.274854][T30271] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1186.290427][    T9] hub 3-1:4.0: USB hub found
[ 1186.295692][T30271] F2FS-fs (loop3): heap/no_heap options were deprecated
[ 1186.311797][T30271] F2FS-fs (loop3): invalid crc value
[ 1186.322019][ T1188] usb 2-1: Using ep0 maxpacket: 16
[ 1186.336731][ T1188] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1186.377168][T30271] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1186.384466][ T1188] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1186.427656][ T1188] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1186.452550][ T1188] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1186.468084][ T1188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.484072][ T1188] usb 2-1: Product: syz
[ 1186.488569][ T1188] usb 2-1: Manufacturer: syz
[ 1186.495078][ T1188] usb 2-1: SerialNumber: syz
[ 1186.503984][T30271] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1186.520942][    T9] hub 3-1:4.0: 9 ports detected
[ 1186.532480][    T9] usb 3-1: selecting invalid altsetting 1
[ 1186.538563][T30271] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1186.546467][    T9] hub 3-1:4.0: Using single TT (err -22)
[ 1186.553566][ T1188] usb 2-1: config 0 descriptor??
[ 1186.581437][    T9] hub 3-1:4.0: insufficient power available to use all downstream ports
[ 1186.612087][T30281] loop0: detected capacity change from 0 to 1024
[ 1186.693117][ T3460] hfsplus: b-tree write err: -5, ino 25
[ 1186.706635][ T3460] hfsplus: b-tree write err: -5, ino 4
[ 1186.715295][ T3460] hfsplus: b-tree write err: -5, ino 2
[ 1186.742475][    T9] hub 3-1:4.0: hub_hub_status failed (err = -71)
[ 1186.752934][    T9] hub 3-1:4.0: config failed, can't get hub status (err -71)
[ 1186.801782][    T9] usb 3-1: USB disconnect, device number 58
[ 1186.947533][T30285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11164'.
[ 1186.976857][T30285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1187.069222][ T6418] usb 2-1: USB disconnect, device number 41
[ 1187.218165][T30295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11168'.
[ 1187.231477][T30297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11169'.
[ 1187.244150][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11169'.
[ 1187.277653][T30297] ip6gretap1: entered allmulticast mode
[ 1187.367581][T30301] loop0: detected capacity change from 0 to 512
[ 1187.374757][T30301] EXT4-fs: Ignoring removed i_version option
[ 1187.385505][T30301] EXT4-fs error (device loop0): __ext4_iget:5071: inode #11: block 1: comm syz.0.11171: invalid block
[ 1187.402417][T30301] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.11171: couldn't read orphan inode 11 (err -117)
[ 1187.430189][T30301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1187.491967][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1187.624769][T30304] loop3: detected capacity change from 0 to 8192
[ 1187.640511][T30304] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1187.655214][T30304] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[ 1187.677401][T30304] REISERFS (device loop3): using ordered data mode
[ 1187.683944][T30304] reiserfs: using flush barriers
[ 1187.697275][T30304] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1187.714583][T30304] REISERFS (device loop3): checking transaction log (loop3)
[ 1187.904208][ T6418] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[ 1187.982669][T30304] REISERFS (device loop3): Using tea hash to sort names
[ 1188.012989][T30304] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 1188.132170][ T6418] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[ 1188.150211][ T6418] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.196862][ T6418] usb 1-1: config 0 has no interface number 0
[ 1188.229877][ T6418] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1188.258325][ T6418] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1188.296158][ T6418] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1188.331906][ T6418] usb 1-1: config 0 interface 52 has no altsetting 0
[ 1188.356596][ T6418] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1188.379379][ T6418] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[ 1188.397545][ T6418] usb 1-1: Product: syz
[ 1188.401835][ T6418] usb 1-1: Manufacturer: syz
[ 1188.407072][ T6418] usb 1-1: SerialNumber: syz
[ 1188.426801][ T6418] usb 1-1: config 0 descriptor??
[ 1188.678413][ T6418] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1188.696734][ T6418] synaptics_usb: probe of 1-1:0.52 failed with error -5
[ 1188.710153][T30342] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11189'.
[ 1188.911726][ T6418] usb 1-1: USB disconnect, device number 35
[ 1189.510721][T30379] loop2: detected capacity change from 0 to 16
[ 1189.548186][T30379] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1189.570157][T30379] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1189.613045][T30379] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1189.655694][T30379] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1189.731619][T30379] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1189.752545][   T27] audit: type=1800 audit(1773835495.737:116): pid=30379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11209" name="file3" dev="loop2" ino=89 res=0 errno=0
[ 1189.775028][T30390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11214'.
[ 1189.796174][T30388] loop0: detected capacity change from 0 to 64
[ 1189.820242][T30388] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1190.254984][   T27] audit: type=1326 audit(1773835496.199:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30407 comm="syz.3.11222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1190.264834][T30411] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1190.306814][T30410] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.11223'.
[ 1190.312016][   T27] audit: type=1326 audit(1773835496.199:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30407 comm="syz.3.11222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1190.375101][T30410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11223'.
[ 1190.379334][   T27] audit: type=1326 audit(1773835496.226:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30407 comm="syz.3.11222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1190.527244][   T27] audit: type=1326 audit(1773835496.226:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30407 comm="syz.3.11222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1190.580427][   T27] audit: type=1326 audit(1773835496.226:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30407 comm="syz.3.11222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1190.655923][T30427] loop0: detected capacity change from 0 to 512
[ 1190.753851][T30427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1190.774970][T30427] ext4 filesystem being mounted at /2681/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1190.815111][T30436] loop3: detected capacity change from 0 to 256
[ 1190.834454][T30427] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1190.903202][T30436] FAT-fs (loop3): Directory bread(block 64) failed
[ 1190.913657][T30429] loop1: detected capacity change from 0 to 8192
[ 1190.920489][T30436] FAT-fs (loop3): Directory bread(block 65) failed
[ 1190.928915][T30436] FAT-fs (loop3): Directory bread(block 66) failed
[ 1190.950645][T30429] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1190.976860][T30436] FAT-fs (loop3): Directory bread(block 67) failed
[ 1191.004675][T30436] FAT-fs (loop3): Directory bread(block 68) failed
[ 1191.010852][T30429] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[ 1191.036319][T30429] REISERFS (device loop1): using ordered data mode
[ 1191.042872][T30429] reiserfs: using flush barriers
[ 1191.053839][T30436] FAT-fs (loop3): Directory bread(block 69) failed
[ 1191.060530][T30429] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1191.061047][T30429] REISERFS (device loop1): checking transaction log (loop1)
[ 1191.077989][T30436] FAT-fs (loop3): Directory bread(block 70) failed
[ 1191.089009][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1191.091420][T30436] FAT-fs (loop3): Directory bread(block 71) failed
[ 1191.107059][T30436] FAT-fs (loop3): Directory bread(block 72) failed
[ 1191.117913][T30436] FAT-fs (loop3): Directory bread(block 73) failed
[ 1191.321986][T30429] REISERFS (device loop1): Using tea hash to sort names
[ 1191.340097][T30429] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[ 1191.702434][T30456] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11245'.
[ 1191.718721][T30456] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1191.957486][T30465] binder: 30464:30465 ioctl c018620c 2000000004c0 returned -1
[ 1192.141882][T30475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11254'.
[ 1192.279395][T30483] loop2: detected capacity change from 0 to 256
[ 1192.300686][T30483] exfat: Deprecated parameter 'utf8'
[ 1192.346662][T30483] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[ 1192.520619][T30479] loop0: detected capacity change from 0 to 8192
[ 1192.562767][T30479] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1192.597345][T30479] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 1192.606705][T30479] REISERFS (device loop0): using ordered data mode
[ 1192.614071][T30479] reiserfs: using flush barriers
[ 1192.636547][T30479] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1192.655318][T30479] REISERFS (device loop0): checking transaction log (loop0)
[ 1192.898070][T30479] REISERFS (device loop0): Using tea hash to sort names
[ 1192.933285][T30479] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1193.495194][T30524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11275'.
[ 1193.595668][T30528] sctp: [Deprecated]: syz.1.11281 (pid 30528) Use of int in max_burst socket option.
[ 1193.595668][T30528] Use struct sctp_assoc_value instead
[ 1193.639878][T30531] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 1193.961823][T30540] loop3: detected capacity change from 0 to 4096
[ 1194.352570][    T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1194.570391][T30570] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1194.586810][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 1194.605982][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.630539][    T9] usb 2-1: Product: syz
[ 1194.638488][    T9] usb 2-1: Manufacturer: syz
[ 1194.643136][    T9] usb 2-1: SerialNumber: syz
[ 1194.668032][    T9] usb 2-1: config 0 descriptor??
[ 1194.687388][    T9] gspca_main: sonixb-2.14.0 probing 0c45:6005
[ 1194.743219][    T8] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[ 1194.962521][    T8] usb 1-1: config 0 has an invalid interface number: 11 but max is 0
[ 1194.983439][    T8] usb 1-1: config 0 has no interface number 0
[ 1194.992341][    T8] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[ 1195.013708][    T8] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 1195.035372][    T8] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64
[ 1195.056003][    T8] usb 1-1: config 0 interface 11 has no altsetting 0
[ 1195.073773][    T8] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1195.095731][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.112388][    T8] usb 1-1: config 0 descriptor??
[ 1195.121247][T30592] netlink: 'syz.2.11312': attribute type 1 has an invalid length.
[ 1195.126724][T30564] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1195.137829][T30564] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1195.152389][    T8] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected
[ 1195.164231][    T9] sonixb 2-1:0.0: Error writing register 01: -71
[ 1195.185113][    T9] sonixb: probe of 2-1:0.0 failed with error -71
[ 1195.197459][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81
[ 1195.209124][    T9] usb 2-1: USB disconnect, device number 42
[ 1195.216924][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82
[ 1195.233805][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1
[ 1195.252920][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2
[ 1195.260685][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85
[ 1195.260751][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5
[ 1195.289744][    T8] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1195.312229][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83
[ 1195.321529][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84
[ 1195.330875][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3
[ 1195.342117][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4
[ 1195.351235][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86
[ 1195.397820][    T8] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6
[ 1195.426213][    T8] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1195.454566][    T8] usb 1-1: USB disconnect, device number 36
[ 1195.471280][    T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1195.504025][    T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1195.537754][    T8] keyspan 1-1:0.11: device disconnected
[ 1195.726919][T30610] overlayfs: missing 'lowerdir'
[ 1195.780973][T30612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11322'.
[ 1195.933638][T30618] loop3: detected capacity change from 0 to 2048
[ 1195.987210][T30618] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1195.991910][T30620] loop2: detected capacity change from 0 to 1024
[ 1196.038332][T30618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1196.046275][T30620] EXT4-fs: Ignoring removed bh option
[ 1196.179300][T30620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1196.283476][T30620] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.11326: bg 0: block 195: padding at end of block bitmap is not set
[ 1196.322262][T30620] EXT4-fs (loop2): Remounting filesystem read-only
[ 1196.347554][T30620] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.2.11326: cleanup dec ref error -28
[ 1196.478897][ T6495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1197.121083][T30667] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[ 1197.145367][T30667] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[ 1197.468201][T30657] loop1: detected capacity change from 0 to 40427
[ 1197.489443][T30657] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[ 1197.500465][T30657] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1197.512786][T30657] F2FS-fs (loop1): heap/no_heap options were deprecated
[ 1197.529824][T30657] F2FS-fs (loop1): invalid crc value
[ 1197.543766][T30657] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1197.599514][T30657] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1197.618804][T30684] ip6erspan0: entered allmulticast mode
[ 1197.631594][T30657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1197.640711][T30687] loop3: detected capacity change from 0 to 2048
[ 1197.686248][T30687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1197.733000][T30687] ext4 filesystem being mounted at /2553/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1197.792324][T30691] loop0: detected capacity change from 0 to 1024
[ 1197.855976][T30687] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.11355: bg 0: block 345: padding at end of block bitmap is not set
[ 1197.885736][   T48] hfsplus: b-tree write err: -5, ino 25
[ 1197.916361][   T48] hfsplus: b-tree write err: -5, ino 4
[ 1197.935268][   T48] hfsplus: b-tree write err: -5, ino 2
[ 1197.947058][   T48] hfsplus: b-tree write err: -5, ino 26
[ 1198.007136][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1198.431359][T30709] loop1: detected capacity change from 0 to 1764
[ 1198.431552][T30706] loop0: detected capacity change from 0 to 1024
[ 1198.494127][T30709] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1198.520290][   T27] audit: type=1800 audit(1773835503.829:122): pid=30706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11362" name="file1" dev="loop0" ino=20 res=0 errno=0
[ 1198.554797][T30712] netlink: 508 bytes leftover after parsing attributes in process `syz.2.11367'.
[ 1198.610180][T15079] hfsplus: b-tree write err: -5, ino 25
[ 1198.642725][T15079] hfsplus: b-tree write err: -5, ino 4
[ 1198.659297][T15079] hfsplus: b-tree write err: -5, ino 2
[ 1199.040250][T30731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11376'.
[ 1199.066281][T30731] netlink: 'syz.2.11376': attribute type 1 has an invalid length.
[ 1199.278660][T30745] loop3: detected capacity change from 0 to 64
[ 1199.402407][T30749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11385'.
[ 1200.018796][T30776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11399'.
[ 1200.066629][T30777] loop0: detected capacity change from 0 to 1764
[ 1200.117680][T30777] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1200.463423][T30798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11408'.
[ 1200.660984][T30807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11413'.
[ 1200.686570][T30809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11415'.
[ 1200.704052][T30809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11415'.
[ 1200.813413][T30811] xt_bpf: check failed: parse error
[ 1200.934869][T30819] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1200.963175][T30819] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1201.016786][T30823] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11422'.
[ 1201.020015][T30819] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1201.072787][T30819] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1201.191077][T30825] loop1: detected capacity change from 0 to 4096
[ 1201.263433][T30825] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[ 1201.682171][T30845] syz.1.11432 (30845): drop_caches: 0
[ 1202.074939][T30864] binder: 30863:30864 ioctl c018620c 200000000380 returned -22
[ 1202.272633][T30874] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[ 1202.298127][T30874] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€
[ 1202.349736][T30880] gtp0: entered promiscuous mode
[ 1202.356068][T30880] gtp0: entered allmulticast mode
[ 1202.937125][   T27] audit: type=1326 audit(1773835507.898:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30905 comm="syz.3.11462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1202.980204][T30909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11463'.
[ 1202.988757][   T27] audit: type=1326 audit(1773835507.926:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30905 comm="syz.3.11462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1203.000211][T30909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11463'.
[ 1203.016439][   T27] audit: type=1326 audit(1773835507.926:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30905 comm="syz.3.11462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1203.049235][   T27] audit: type=1326 audit(1773835507.935:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30905 comm="syz.3.11462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1203.092883][   T27] audit: type=1326 audit(1773835507.935:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30905 comm="syz.3.11462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1203.115320][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1203.128032][T30911] loop1: detected capacity change from 0 to 2048
[ 1203.180775][T30911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1203.250488][   T27] audit: type=1800 audit(1773835508.184:128): pid=30911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11464" name="bus" dev="loop1" ino=1367 res=0 errno=0
[ 1203.624299][T30932] netlink: 'syz.3.11474': attribute type 1 has an invalid length.
[ 1204.098036][T30951] loop2: detected capacity change from 0 to 4096
[ 1204.140855][T30951] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 1204.175041][T30954] netlink: zone id is out of range
[ 1204.216654][T30951] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[ 1204.221941][T30954] netlink: set zone limit has 4 unknown bytes
[ 1204.635396][T30940] loop1: detected capacity change from 0 to 32768
[ 1204.690438][T30940] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1204.840313][T30940] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 1204.936344][T30940] XFS (loop1): Ending clean mount
[ 1205.070220][ T6487] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1205.389795][T30998] x_tables: duplicate underflow at hook 2
[ 1205.462178][T31000] ip6gre1: entered promiscuous mode
[ 1205.467512][T31000] ip6gre1: entered allmulticast mode
[ 1205.668032][T31012] __nla_validate_parse: 2 callbacks suppressed
[ 1205.668048][T31012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11509'.
[ 1205.692837][T31012] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1205.850304][T31020] loop0: detected capacity change from 0 to 512
[ 1205.897819][T31020] FAT-fs (loop0): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1)
[ 1206.060617][T31028] tc_dump_action: action bad kind
[ 1206.512605][   T28] usb 3-1: new low-speed USB device number 59 using dummy_hcd
[ 1206.580021][T31056] loop3: detected capacity change from 0 to 8
[ 1206.669920][T31056] SQUASHFS error: Failed to read block 0x2fc: -5
[ 1206.693348][T31056] SQUASHFS error: Unable to read metadata cache entry [2fa]
[ 1206.704106][T31056] SQUASHFS error: Unable to read directory block [247:26]
[ 1206.720447][   T28] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1206.739356][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1206.772525][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1206.792574][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1206.833399][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1206.871902][   T28] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1206.886892][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1206.922981][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1206.941367][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1206.970047][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1207.033474][   T28] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1207.041885][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1207.059218][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1207.084720][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1207.107512][   T28] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1207.174361][   T28] usb 3-1: string descriptor 0 read error: -22
[ 1207.180717][   T28] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1207.208517][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.260957][   T28] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1207.417571][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11545'.
[ 1207.525590][   T23] usb 3-1: USB disconnect, device number 59
[ 1207.603104][T31069] loop3: detected capacity change from 0 to 32768
[ 1207.618059][   T28] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1207.631715][T31069] (syz.3.11539,31069,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1207.661829][T31069] (syz.3.11539,31069,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1207.723652][T31069] JBD2: Ignoring recovery information on journal
[ 1207.792753][T31069] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1207.825639][   T28] usb 2-1: Using ep0 maxpacket: 32
[ 1207.844952][   T28] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1207.921027][   T28] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40
[ 1207.954068][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.973076][   T28] usb 2-1: Product: syz
[ 1207.986230][   T28] usb 2-1: Manufacturer: syz
[ 1207.991555][   T28] usb 2-1: SerialNumber: syz
[ 1208.044236][ T6489] ocfs2: Unmounting device (7,3) on (node local)
[ 1208.069807][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1208.076226][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1208.254567][T31102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11555'.
[ 1208.464850][   T28] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1208.520346][   T28] usb 2-1: USB disconnect, device number 43
[ 1208.580392][ T7422] udevd[7422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1209.016091][   T23] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1209.044875][T31134] ipt_REJECT: ECHOREPLY no longer supported.
[ 1209.222897][   T23] usb 3-1: Using ep0 maxpacket: 32
[ 1209.237995][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1209.264829][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1209.307889][   T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1209.334006][   T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1209.346815][   T23] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1209.364458][   T23] usb 3-1: Product: syz
[ 1209.373483][   T23] usb 3-1: Manufacturer: syz
[ 1209.382953][   T23] usb 3-1: SerialNumber: syz
[ 1209.407346][   T23] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input72
[ 1209.665474][T31156] loop0: detected capacity change from 0 to 512
[ 1209.694758][T31156] EXT4-fs: Ignoring removed i_version option
[ 1209.739437][T31156] EXT4-fs error (device loop0): __ext4_iget:5071: inode #11: block 1: comm syz.0.11579: invalid block
[ 1209.756051][ T6525] usb 3-1: USB disconnect, device number 60
[ 1209.767185][T31156] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.11579: couldn't read orphan inode 11 (err -117)
[ 1209.772154][T31160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1209.787782][T31160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1209.801802][ T6525] appletouch 3-1:1.0: input: appletouch disconnected
[ 1209.809076][T31156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1209.865621][T31160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1209.904960][T31160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1209.944126][T31160] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1209.969777][T31160] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1209.999007][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1210.235219][T31175] loop0: detected capacity change from 0 to 164
[ 1210.486389][T31184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11594'.
[ 1210.665109][T31191] loop0: detected capacity change from 0 to 256
[ 1210.672413][T31191] exfat: Deprecated parameter 'namecase'
[ 1210.728345][T31191] exfat: Deprecated parameter 'namecase'
[ 1210.796011][T31191] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[ 1210.905834][T31191] exFAT-fs (loop0): invalid start cluster (4278190088)
[ 1211.064430][    T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1211.271734][    T8] usb 2-1: Using ep0 maxpacket: 16
[ 1211.289231][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1211.310612][    T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[ 1211.331544][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.360473][    T8] usb 2-1: config 0 descriptor??
[ 1211.375620][    T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1211.515263][T31204] loop2: detected capacity change from 0 to 32768
[ 1211.555643][T31229] loop3: detected capacity change from 0 to 128
[ 1211.557606][T31204] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1211.596339][    T8] usb 2-1: USB disconnect, device number 44
[ 1211.713377][T31204] XFS (loop2): Ending clean mount
[ 1211.754064][T31204] XFS (loop2): Quotacheck needed: Please wait.
[ 1211.913928][T31204] XFS (loop2): Quotacheck: Done.
[ 1212.092927][ T6495] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1212.318502][T31253] loop1: detected capacity change from 0 to 16
[ 1212.401367][T31253] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1212.866597][T31273] xt_CT: No such helper "netbios-ns"
[ 1213.109789][T31286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1213.128575][T31286] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1213.159514][T31286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1213.178276][T31286] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1213.487586][T31279] loop1: detected capacity change from 0 to 32768
[ 1213.517582][T31279] (syz.1.11635,31279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1213.532584][T31279] (syz.1.11635,31279,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1213.554622][T31279] JBD2: Ignoring recovery information on journal
[ 1213.666563][T31279] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1214.015104][ T6487] ocfs2: Unmounting device (7,1) on (node local)
[ 1214.096077][T31320] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1214.274739][T31325] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1214.439072][T31327] loop1: detected capacity change from 0 to 736
[ 1214.747275][T31316] loop0: detected capacity change from 0 to 32768
[ 1214.839280][T31316] syz.0.11653: attempt to access beyond end of device
[ 1214.839280][T31316] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[ 1214.879781][T31316] lbmIODone: I/O error in JFS log
[ 1214.884858][T31316] *** Log Format Error ! ***
[ 1214.889886][T31316] lmLogInit: exit(-22)
[ 1214.939788][T31316] lmLogOpen: exit(-22)
[ 1215.494004][T31364] netlink: 'syz.3.11676': attribute type 2 has an invalid length.
[ 1215.524931][T31364] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.11676'.
[ 1215.540153][T31360] loop0: detected capacity change from 0 to 4096
[ 1215.560462][T31360] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 1215.621491][T31360] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1215.674517][T31360] ntfs3: loop0: failed to convert "c46c" to cp874
[ 1215.834753][T31374] netlink: 'syz.1.11681': attribute type 1 has an invalid length.
[ 1216.039311][T31385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1216.047019][T31385] IPv6: NLM_F_CREATE should be set when creating new route
[ 1216.054325][T31385] IPv6: NLM_F_CREATE should be set when creating new route
[ 1216.904773][T31400] loop2: detected capacity change from 0 to 40427
[ 1216.919485][   T27] audit: type=1326 audit(1773835520.807:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1216.949984][T31400] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x7ffff
[ 1216.980370][T31400] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[ 1216.981076][T31404] loop1: detected capacity change from 0 to 32768
[ 1217.007776][   T27] audit: type=1326 audit(1773835520.825:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1217.013197][T31400] F2FS-fs (loop2): Image doesn't support compression
[ 1217.060230][T31400] F2FS-fs (loop2): invalid crc value
[ 1217.069884][T31400] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1217.073415][T31404] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1217.096594][   T27] audit: type=1326 audit(1773835520.825:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1217.132757][   T27] audit: type=1326 audit(1773835520.844:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1217.156002][T31400] F2FS-fs (loop2): Start checkpoint disabled!
[ 1217.163070][   T27] audit: type=1326 audit(1773835520.844:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f5881d9c799 code=0x7ffc0000
[ 1217.196556][   T27] audit: type=1326 audit(1773835520.918:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5881d5cfce code=0x7ffc0000
[ 1217.207406][T31400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[ 1217.241407][   T27] audit: type=1326 audit(1773835520.918:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5881d5cfce code=0x7ffc0000
[ 1217.306903][   T27] audit: type=1326 audit(1773835520.927:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5881d5cfce code=0x7ffc0000
[ 1217.333358][T31404] XFS (loop1): Ending clean mount
[ 1217.404033][T31400] syz.2.11693: attempt to access beyond end of device
[ 1217.404033][T31400] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1217.421268][   T27] audit: type=1326 audit(1773835520.927:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5881d5cfce code=0x7ffc0000
[ 1217.472417][   T27] audit: type=1326 audit(1773835520.927:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.3.11702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5881d5cfce code=0x7ffc0000
[ 1217.562414][ T6487] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1217.570653][T31434] loop0: detected capacity change from 0 to 4096
[ 1217.605167][T31434] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[ 1217.893391][ T2915] kworker/u4:8: attempt to access beyond end of device
[ 1217.893391][ T2915] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1217.934056][ T2915] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[ 1218.275377][T31451] loop0: detected capacity change from 0 to 128
[ 1218.377389][T31454] loop3: detected capacity change from 0 to 2048
[ 1218.420072][T31454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1218.510518][T31458] netlink: 'syz.2.11707': attribute type 10 has an invalid length.
[ 1218.518472][T31458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11707'.
[ 1218.544760][T31458] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[ 1218.560313][T31456] loop1: detected capacity change from 0 to 4096
[ 1218.563574][T31458] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[ 1218.587585][T31458] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1218.604722][T31456] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[ 1218.711389][T31463] netlink: 'syz.0.11720': attribute type 2 has an invalid length.
[ 1219.004297][T31476] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1219.206341][T31484] xt_l2tp: v2 doesn't support IP mode
[ 1219.876941][T31525] pim6reg: entered allmulticast mode
[ 1220.073637][T31535] xt_hashlimit: invalid interval
[ 1220.232355][T31546] loop3: detected capacity change from 0 to 128
[ 1220.250837][T31546] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1220.319994][T31546] hpfs: filesystem error: improperly stopped
[ 1220.355483][T31546] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1220.396200][T31546] hpfs: You really don't want any checks? You are crazy...
[ 1220.403867][T31546] hpfs: hpfs_map_sector(): read error
[ 1220.451859][T31546] hpfs: code page support is disabled
[ 1220.457435][T31546] hpfs: hpfs_map_4sectors(): unaligned read
[ 1220.498198][T31546] hpfs: hpfs_map_4sectors(): unaligned read
[ 1220.510066][T31546] hpfs: filesystem error: unable to find root dir
[ 1221.107300][T31579] loop0: detected capacity change from 0 to 512
[ 1221.126753][T31579] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1221.141464][T31553] loop1: detected capacity change from 0 to 32768
[ 1221.151204][T31579] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[ 1221.161552][T31579] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.11765: Corrupt directory, running e2fsck is recommended
[ 1221.189301][T31579] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[ 1221.198255][T31579] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.11765: corrupted in-inode xattr: e_name out of bounds
[ 1221.214775][T31579] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.11765: couldn't read orphan inode 15 (err -117)
[ 1221.237676][T31553] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1221.253621][T31579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1221.383876][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1221.517514][T31553] XFS (loop1): Ending clean mount
[ 1221.665383][ T6487] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1221.928334][T31619] xt_connbytes: Forcing CT accounting to be enabled
[ 1221.940888][T31619] xt_bpf: check failed: parse error
[ 1222.109455][T31624] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11782'.
[ 1222.130096][T31624] netlink: 6 bytes leftover after parsing attributes in process `syz.0.11782'.
[ 1222.162273][T31624] netlink: 6 bytes leftover after parsing attributes in process `syz.0.11782'.
[ 1222.273311][T31629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11785'.
[ 1222.644169][T31615] loop2: detected capacity change from 0 to 32768
[ 1222.678727][T31645] loop0: detected capacity change from 0 to 128
[ 1222.717721][T31615] syz.2.11778: attempt to access beyond end of device
[ 1222.717721][T31615] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[ 1222.766730][T31615] lbmIODone: I/O error in JFS log
[ 1222.776822][T31615] *** Log Format Error ! ***
[ 1222.792146][T31615] lmLogInit: exit(-22)
[ 1222.802288][T31615] lmLogOpen: exit(-22)
[ 1223.211306][T31661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11802'.
[ 1223.222494][T31661] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 1223.389994][T31665] loop3: detected capacity change from 0 to 2048
[ 1223.397818][    T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1223.458407][T31665]  loop3: p2 p3 p7
[ 1223.574409][ T6424] udevd[6424]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[ 1223.586832][T22591] udevd[22591]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[ 1223.588036][T31651] loop0: detected capacity change from 0 to 40427
[ 1223.611316][ T7422] udevd[7422]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[ 1223.642631][T31651] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff
[ 1223.658123][    T8] usb 2-1: Using ep0 maxpacket: 16
[ 1223.669062][    T8] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 1223.675770][T31651] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[ 1223.677889][    T8] usb 2-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config
[ 1223.677914][    T8] usb 2-1: config 0 has no interface number 0
[ 1223.706845][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1223.720981][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.735952][    T8] usb 2-1: Product: syz
[ 1223.740860][    T8] usb 2-1: Manufacturer: syz
[ 1223.750474][    T8] usb 2-1: SerialNumber: syz
[ 1223.766207][T31651] F2FS-fs (loop0): Image doesn't support compression
[ 1223.774326][    T8] usb 2-1: config 0 descriptor??
[ 1223.799841][T31651] F2FS-fs (loop0): invalid crc value
[ 1223.840184][T31651] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1223.959435][T31651] F2FS-fs (loop0): Start checkpoint disabled!
[ 1223.987823][T31651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[ 1224.025434][ T6525] usb 2-1: USB disconnect, device number 45
[ 1224.078755][T31651] syz.0.11796: attempt to access beyond end of device
[ 1224.078755][T31651] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1224.217494][T31671] loop3: detected capacity change from 0 to 32768
[ 1224.251918][T31671] syz.3.11806: attempt to access beyond end of device
[ 1224.251918][T31671] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[ 1224.284791][ T3460] kworker/u4:9: attempt to access beyond end of device
[ 1224.284791][ T3460] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 1224.299274][T31671] lbmIODone: I/O error in JFS log
[ 1224.304335][T31671] *** Log Format Error ! ***
[ 1224.309847][T31671] lmLogInit: exit(-22)
[ 1224.313987][T31671] lmLogOpen: exit(-22)
[ 1224.318218][ T3460] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1224.330267][ T3460] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[ 1224.676818][T31677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11808'.
[ 1224.701889][T31677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11808'.
[ 1225.311410][T31705] netlink: 'syz.0.11820': attribute type 21 has an invalid length.
[ 1225.325016][T31705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11820'.
[ 1225.355383][T31705] netlink: 'syz.0.11820': attribute type 1 has an invalid length.
[ 1225.884657][T31736] loop2: detected capacity change from 0 to 512
[ 1225.892140][T31736] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1225.905894][T31733] delete_channel: no stack
[ 1225.953854][T31739] loop1: detected capacity change from 0 to 512
[ 1225.990793][T31736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1226.009934][T31739] EXT4-fs: Ignoring removed orlov option
[ 1226.074700][T31736] ext4 filesystem being mounted at /2815/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1226.085910][T31739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1226.146528][T31739] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1226.190010][T31754] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11842'.
[ 1226.199550][T31754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11842'.
[ 1226.201301][T31739] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.11835: bg 0: block 248: padding at end of block bitmap is not set
[ 1226.210032][T31754] netlink: 'syz.0.11842': attribute type 3 has an invalid length.
[ 1226.309048][T31739] __quota_error: 155 callbacks suppressed
[ 1226.309064][T31739] Quota error (device loop1): write_blk: dquota write failed
[ 1226.341876][ T6495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1226.368489][T31739] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1226.395095][T31739] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.11835: Failed to acquire dquot type 1
[ 1226.433853][T31739] EXT4-fs (loop1): 1 truncate cleaned up
[ 1226.471822][T31739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1226.584064][T31739] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[ 1226.628842][T31739] EXT4-fs error (device loop1): __ext4_remount:6752: comm syz.1.11835: Abort forced by user
[ 1226.662779][T31739] EXT4-fs (loop1): Remounting filesystem read-only
[ 1226.684397][T31739] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1226.716068][T31739] ext4 filesystem being remounted at /2817/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1226.739217][T31773] loop3: detected capacity change from 0 to 512
[ 1226.793157][T31775] loop2: detected capacity change from 0 to 2048
[ 1226.810438][ T6487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1226.834495][   T28] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1226.866407][T31775] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1226.909870][T31776] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1227.033431][   T28] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1227.054665][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.068624][   T28] usb 1-1: Product: syz
[ 1227.074087][   T28] usb 1-1: Manufacturer: syz
[ 1227.094027][   T28] usb 1-1: SerialNumber: syz
[ 1227.101583][   T28] usb 1-1: config 0 descriptor??
[ 1227.202230][T31784] loop2: detected capacity change from 0 to 1024
[ 1227.287457][T15079] hfsplus: b-tree write err: -5, ino 25
[ 1227.293641][T15079] hfsplus: b-tree write err: -5, ino 4
[ 1227.299363][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1227.322037][T15079] hfsplus: b-tree write err: -5, ino 2
[ 1227.347219][   T28] usb 1-1: f81604_read: reg: 105 failed: -EPIPE
[ 1227.363421][   T28] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE
[ 1227.382074][   T28] f81604: probe of 1-1:0.0 failed with error -32
[ 1227.403980][   T28] usb 1-1: USB disconnect, device number 37
[ 1227.484394][T31792] vlan0: entered promiscuous mode
[ 1227.530609][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1227.556282][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[ 1227.573131][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.582130][    T9] usb 2-1: Product: syz
[ 1227.587264][    T9] usb 2-1: Manufacturer: syz
[ 1227.592589][    T9] usb 2-1: SerialNumber: syz
[ 1227.617790][    T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1227.824160][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1227.843207][    T9] usb 2-1: 0:3 : does not exist
[ 1227.848455][T31806] __nla_validate_parse: 2 callbacks suppressed
[ 1227.848470][T31806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11866'.
[ 1227.868857][    T9] usb 2-1: 0:4 : does not exist
[ 1227.874615][    T9] usb 2-1: unit 3 not found!
[ 1227.879775][    T9] usb 2-1: unit 13 not found!
[ 1227.912583][    T9] usb 2-1: USB disconnect, device number 46
[ 1228.001646][ T7422] udevd[7422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1228.669788][T31841] IPv6: sit2: Disabled Multicast RS
[ 1228.674429][T31842] xt_limit: Overflow, try lower: 0/0
[ 1228.764770][T31844] loop1: detected capacity change from 0 to 4096
[ 1228.776472][T31844] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[ 1228.803535][T31844] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1228.827704][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1228.836517][T31844] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 1228.858199][T31844] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[ 1228.891454][T31844] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 1228.927531][T31844] ntfs: volume version 3.1.
[ 1228.934134][T31844] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 1228.959002][T31844] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[ 1228.990635][T31844] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 1229.042913][    T9] usb 1-1: config 160 has an invalid interface number: 200 but max is 0
[ 1229.065843][    T9] usb 1-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[ 1229.099309][    T9] usb 1-1: config 160 has no interface number 0
[ 1229.105670][    T9] usb 1-1: config 160 interface 200 has no altsetting 0
[ 1229.122810][    T9] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 1229.139338][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.164593][    T9] usb 1-1: Product: syz
[ 1229.169551][    T9] usb 1-1: Manufacturer: syz
[ 1229.183593][    T9] usb 1-1: SerialNumber: syz
[ 1229.446773][    T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 1229.465522][    T9] usb 1-1: MIDIStreaming interface descriptor not found
[ 1229.469078][T31863] loop3: detected capacity change from 0 to 1024
[ 1229.502385][T31863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1229.555515][    T9] usb 1-1: USB disconnect, device number 38
[ 1229.645170][T31863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1229.647191][ T6421] udevd[6421]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1229.694201][T31869] netlink: 'syz.1.11895': attribute type 10 has an invalid length.
[ 1229.704533][T31869] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11895'.
[ 1229.761944][T31871] loop2: detected capacity change from 0 to 512
[ 1229.777859][T31863] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.11894: missing EA_INODE flag
[ 1229.797401][T31871] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.11896: Failed to acquire dquot type 1
[ 1229.815702][T31871] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.11896: Failed to acquire dquot type 1
[ 1229.832614][T31871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.11896: bg 0: block 248: padding at end of block bitmap is not set
[ 1229.849025][T31863] EXT4-fs (loop3): Remounting filesystem read-only
[ 1229.849730][T31871] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6651: Corrupt filesystem
[ 1229.877450][T31871] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.11896: Failed to acquire dquot type 1
[ 1229.903880][T31871] EXT4-fs (loop2): 1 orphan inode deleted
[ 1229.912665][T31871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1229.953170][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1229.954677][T31871] ext4 filesystem being mounted at /2831/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1230.001447][T31871] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.11896: Failed to acquire dquot type 1
[ 1230.134492][ T6495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1230.237450][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11900'.
[ 1230.246981][T31886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11901'.
[ 1230.313922][T31886] netlink: 30 bytes leftover after parsing attributes in process `syz.2.11901'.
[ 1230.416847][T31889] loop0: detected capacity change from 0 to 512
[ 1230.456853][T31889] EXT4-fs: inline encryption not supported
[ 1230.502709][T31889] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1230.523190][T31889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e02c, mo2=0082]
[ 1230.569036][T31889] System zones: 1-12
[ 1230.580227][T31889] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1230.595087][T31889] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.11904: bad orphan inode 267
[ 1230.641745][T31889] EXT4-fs (loop0): Remounting filesystem read-only
[ 1230.694088][T31889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1230.867846][T31906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11912'.
[ 1230.879758][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1231.014379][T31881] loop3: detected capacity change from 0 to 40427
[ 1231.051347][T31881] F2FS-fs (loop3): invalid crc value
[ 1231.080459][T31881] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1231.235030][T31881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1231.655920][T31936] netlink: 45 bytes leftover after parsing attributes in process `syz.0.11926'.
[ 1232.030645][T31953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11934'.
[ 1232.346565][T31962] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1232.377161][T31962] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1232.733268][T31985] loop0: detected capacity change from 0 to 256
[ 1232.772565][T31985] FAT-fs (loop0): Directory bread(block 64) failed
[ 1232.779192][T31985] FAT-fs (loop0): Directory bread(block 65) failed
[ 1232.806968][T31985] FAT-fs (loop0): Directory bread(block 66) failed
[ 1232.824704][T31985] FAT-fs (loop0): Directory bread(block 67) failed
[ 1232.847647][T31985] FAT-fs (loop0): Directory bread(block 68) failed
[ 1232.877223][T31985] FAT-fs (loop0): Directory bread(block 69) failed
[ 1232.886921][T31985] FAT-fs (loop0): Directory bread(block 70) failed
[ 1232.905644][T31985] FAT-fs (loop0): Directory bread(block 71) failed
[ 1232.924609][T31985] FAT-fs (loop0): Directory bread(block 72) failed
[ 1232.931362][T31985] FAT-fs (loop0): Directory bread(block 73) failed
[ 1233.226384][T32000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11956'.
[ 1233.248702][T31999] binder: 31997:31999 unknown command 1074553619
[ 1233.263858][T31999] binder: 31997:31999 ioctl c0306201 200000000640 returned -22
[ 1233.316725][T31980] loop3: detected capacity change from 0 to 32768
[ 1233.347129][T31980] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.11949 (31980)
[ 1233.367324][T32004] loop1: detected capacity change from 0 to 64
[ 1233.394712][T31980] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1233.419024][T31980] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1233.455190][T31980] BTRFS info (device loop3): force zlib compression, level 3
[ 1233.483753][T31980] BTRFS info (device loop3): turning on flush-on-commit
[ 1233.501438][T31980] BTRFS info (device loop3): max_inline at 4096
[ 1233.508277][T31980] BTRFS info (device loop3): using free space tree
[ 1233.620421][T31980] BTRFS info (device loop3): enabling ssd optimizations
[ 1233.639680][T31980] BTRFS info (device loop3): auto enabling async discard
[ 1233.741797][T32029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11965'.
[ 1234.044396][T32040] nfs: Unknown parameter 'ntext'
[ 1234.080070][T31980] BTRFS info (device loop3): balance: start -d -m
[ 1234.164652][T32044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11971'.
[ 1234.191762][T32044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11971'.
[ 1234.196551][T31980] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[ 1234.445744][T31980] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[ 1234.517487][T31980] BTRFS info (device loop3): balance: canceled
[ 1234.539574][ T6525] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1234.587752][ T6489] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1234.657843][   T28] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1234.790498][ T6525] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1234.800536][ T6525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1234.823046][ T6525] usb 2-1: config 0 descriptor??
[ 1234.853407][   T28] usb 3-1: Using ep0 maxpacket: 16
[ 1234.862250][   T28] usb 3-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30
[ 1234.896119][   T28] usb 3-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[ 1234.931039][   T28] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1234.945903][T32063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11981'.
[ 1234.969355][   T28] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[ 1234.980103][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.001351][   T28] usb 3-1: Product: syz
[ 1235.016951][   T28] usb 3-1: Manufacturer: syz
[ 1235.022412][   T28] usb 3-1: SerialNumber: syz
[ 1235.041048][T32065] xt_TCPMSS: Only works on TCP SYN packets
[ 1235.045442][   T28] usb 3-1: config 0 descriptor??
[ 1235.067213][ T6525] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[ 1235.075223][   T28] usb 3-1: cannot find UAC_HEADER
[ 1235.090823][ T6525] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[ 1235.120377][   T28] snd-usb-audio: probe of 3-1:0.0 failed with error -22
[ 1235.206936][ T7422] udevd[7422]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1235.316840][    T9] usb 3-1: USB disconnect, device number 61
[ 1235.324730][ T6525] [drm:udl_init] *ERROR* Selecting channel failed
[ 1235.367872][ T6525] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[ 1235.386259][ T6525] [drm] Initialized udl on minor 2
[ 1235.403454][ T6525] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1235.417255][ T6525] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1235.425343][    T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1235.440112][    T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1235.451229][ T6525] usb 2-1: USB disconnect, device number 47
[ 1235.625536][T32083] loop3: detected capacity change from 0 to 256
[ 1235.640577][T32083] exfat: Deprecated parameter 'utf8'
[ 1235.657466][T32083] exfat: Deprecated parameter 'utf8'
[ 1235.665524][T32083] exfat: Deprecated parameter 'namecase'
[ 1235.715610][T32083] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1236.015493][T32091] loop0: detected capacity change from 0 to 2048
[ 1236.118423][T32091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1236.211208][T32091] EXT4-fs (loop0): Online resizing not supported with bigalloc
[ 1236.278530][T32112] loop2: detected capacity change from 0 to 256
[ 1236.307242][T32112] exfat: Deprecated parameter 'utf8'
[ 1236.312911][T32112] exfat: Deprecated parameter 'utf8'
[ 1236.349074][T32112] exfat: Deprecated parameter 'namecase'
[ 1236.368761][T32112] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1236.414448][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1236.452260][T32118] loop1: detected capacity change from 0 to 64
[ 1236.763327][T32126] [U] 
[ 1236.766179][T32126] [U] 
[ 1236.768891][T32126] [U] 
[ 1236.771606][T32126] [U] 
[ 1236.785832][T32126] [U] 
[ 1236.788610][T32126] [U] 
[ 1236.791314][T32126] [U] 
[ 1236.794026][T32126] [U] 
[ 1236.801099][T32126] [U] 
[ 1236.803838][T32126] [U] 
[ 1236.806650][T32126] [U] 
[ 1236.809354][T32126] [U] 
[ 1236.818648][T32126] [U] 
[ 1236.821408][T32126] [U] 
[ 1236.824112][T32126] [U] 
[ 1236.826917][T32126] [U] 
[ 1236.839383][T32132] loop0: detected capacity change from 0 to 512
[ 1236.853257][T32125] [U] 
[ 1236.888567][T32132] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1236.941585][T32135] loop3: detected capacity change from 0 to 1024
[ 1236.948592][T32132] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1236.961717][T32132] __quota_error: 17 callbacks suppressed
[ 1236.961746][T32132] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated!
[ 1237.005912][T32132] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[ 1237.016581][T32132] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.12013: Failed to acquire dquot type 1
[ 1237.064387][T32132] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.12013: bg 0: block 40: padding at end of block bitmap is not set
[ 1237.098059][T32135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1237.126263][T32132] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem
[ 1237.152112][   T27] audit: type=1400 audit(1773835539.473:295): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=32142 comm="syz.1.12017"
[ 1237.188783][T32132] EXT4-fs (loop0): 1 truncate cleaned up
[ 1237.207173][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1237.214881][T32132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1237.393098][T32132] EXT4-fs error (device loop0): ext4_get_link:104: inode #16: comm syz.0.12013: bad symlink.
[ 1237.499684][ T6491] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1237.610609][T32137] loop2: detected capacity change from 0 to 32768
[ 1237.648157][T32137] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1237.753163][T32137] XFS (loop2): Ending clean mount
[ 1237.827894][ T6495] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1238.276837][T32175] set_capacity_and_notify: 1 callbacks suppressed
[ 1238.276855][T32175] loop3: detected capacity change from 0 to 512
[ 1238.328365][T32175] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1238.335777][T32169] loop0: detected capacity change from 0 to 32768
[ 1238.354133][T32169] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.12024 (32169)
[ 1238.368731][T32175] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1238.379277][T32175] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.12029: Failed to acquire dquot type 1
[ 1238.397369][T32175] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1238.408176][T32175] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1238.424906][T32169] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1238.442759][T32169] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1238.454080][T32175] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.12029: Failed to acquire dquot type 1
[ 1238.478793][T32175] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.12029: bg 0: block 248: padding at end of block bitmap is not set
[ 1238.486780][T32169] BTRFS info (device loop0): force zlib compression, level 3
[ 1238.508511][T32175] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6651: Corrupt filesystem
[ 1238.538100][T32175] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1238.548299][T32175] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1238.559846][T32169] BTRFS info (device loop0): turning on flush-on-commit
[ 1238.566911][T32175] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.12029: Failed to acquire dquot type 1
[ 1238.578022][T32169] BTRFS info (device loop0): max_inline at 4096
[ 1238.604204][T32169] BTRFS info (device loop0): using free space tree
[ 1238.609609][T32175] EXT4-fs (loop3): 1 orphan inode deleted
[ 1238.626995][T32175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1238.669404][T32175] ext4 filesystem being mounted at /2759/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1238.857566][T32169] BTRFS info (device loop0): enabling ssd optimizations
[ 1238.868584][T32175] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1238.895715][T32169] BTRFS info (device loop0): auto enabling async discard
[ 1238.895895][T32175] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.12029: Failed to acquire dquot type 1
[ 1239.075074][ T6489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1239.097619][T32169] BTRFS info (device loop0): balance: start -d -m
[ 1239.132318][T32169] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata
[ 1239.158866][T32199] loop1: detected capacity change from 0 to 32768
[ 1239.388646][T32169] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata
[ 1239.526387][T32169] BTRFS info (device loop0): balance: canceled
[ 1239.636935][T32220] netlink: 'syz.1.12041': attribute type 32 has an invalid length.
[ 1239.646849][ T6491] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1239.934023][T32228] loop1: detected capacity change from 0 to 256
[ 1239.978457][T32228] exfat: Deprecated parameter 'utf8'
[ 1239.988740][T32228] exfat: Deprecated parameter 'namecase'
[ 1240.075412][T32228] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1240.351581][T32218] loop2: detected capacity change from 0 to 32768
[ 1240.574511][T32245] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12055'.
[ 1240.635433][T32245] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1240.663231][T32245] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1240.965502][T32260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12061'.
[ 1241.911104][T32298] loop0: detected capacity change from 0 to 64
[ 1242.071230][   T28] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1242.245693][    T8] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1242.278842][   T28] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1242.295440][   T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.317611][   T28] usb 4-1: config 0 descriptor??
[ 1242.439633][    T8] usb 2-1: Using ep0 maxpacket: 8
[ 1242.449320][    T8] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1242.459490][    T8] usb 2-1: config 0 has no interface number 0
[ 1242.469643][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1242.483126][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.491253][    T8] usb 2-1: Product: syz
[ 1242.495996][    T8] usb 2-1: Manufacturer: syz
[ 1242.501374][    T8] usb 2-1: SerialNumber: syz
[ 1242.515748][    T8] usb 2-1: config 0 descriptor??
[ 1242.698860][   T27] kauditd_printk_skb: 1 callbacks suppressed
[ 1242.698876][   T27] audit: type=1400 audit(1773835544.585:296): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=32321 comm="syz.2.12090"
[ 1242.776726][    T8] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[ 1242.784326][    T8] usb 2-1: Failed to initialize entity for entity 6
[ 1242.794577][    T8] usb 2-1: Failed to register entities (-22).
[ 1242.799025][   T28] ath6kl: Failed to read usb control message: -71
[ 1242.815530][   T28] ath6kl: Unable to read the bmi data from the device: -71
[ 1242.840599][   T28] ath6kl: Unable to recv target info: -71
[ 1242.851801][   T28] ath6kl: Failed to init ath6kl core: -71
[ 1242.859117][   T28] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[ 1242.938615][   T28] usb 4-1: USB disconnect, device number 56
[ 1243.036795][T32330] IPv6: Can't replace route, no match found
[ 1243.048893][    T8] usb 2-1: USB disconnect, device number 48
[ 1243.318422][T32340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12099'.
[ 1243.477104][T32348] loop0: detected capacity change from 0 to 256
[ 1243.526273][T32346] loop2: detected capacity change from 0 to 4096
[ 1243.571375][T32346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1243.603867][T32346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1243.804773][ T6495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1244.256871][T32378] libceph: resolve '.
[ 1244.256871][T32378] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[ 1244.256871][T32378] ' (ret=-3): failed
[ 1244.315559][T32383] netlink: 'syz.1.12119': attribute type 1 has an invalid length.
[ 1244.323663][T32383] netlink: 236 bytes leftover after parsing attributes in process `syz.1.12119'.
[ 1244.456905][T32389] netlink: 'syz.2.12122': attribute type 1 has an invalid length.
[ 1244.565289][T32397] loop2: detected capacity change from 0 to 8
[ 1244.640815][   T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1244.752541][T32401] loop0: detected capacity change from 0 to 764
[ 1244.778755][T32401] Symlink component flag not implemented
[ 1244.792294][T32401] Symlink component flag not implemented (15)
[ 1244.867264][   T23] usb 4-1: Using ep0 maxpacket: 8
[ 1244.882236][   T23] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 1244.892568][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.901663][   T23] usb 4-1: Product: syz
[ 1244.905953][   T23] usb 4-1: Manufacturer: syz
[ 1244.912253][   T23] usb 4-1: SerialNumber: syz
[ 1245.031211][T32413] loop0: detected capacity change from 0 to 128
[ 1245.039748][T32413] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1245.053952][T32413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1245.116755][ T6525] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1245.323641][ T6525] usb 3-1: Using ep0 maxpacket: 16
[ 1245.336497][ T6525] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1245.360399][ T6525] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1245.364772][   T23] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[ 1245.379563][ T6525] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1245.400997][   T23] mxuport: probe of 4-1:254.0 failed with error -5
[ 1245.405251][ T6525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.426033][   T23] usb 4-1: USB disconnect, device number 57
[ 1245.426870][ T6525] usb 3-1: Product: syz
[ 1245.449932][ T6525] usb 3-1: Manufacturer: syz
[ 1245.460883][ T6525] usb 3-1: SerialNumber: syz
[ 1245.473022][ T6525] r8152-cfgselector 3-1: config 0 descriptor??
[ 1245.489794][T32423] loop1: detected capacity change from 0 to 4096
[ 1245.501915][T32423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1245.523166][T32423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1245.632384][ T6487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1245.736197][ T6525] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[ 1245.813292][T32419] loop0: detected capacity change from 0 to 32768
[ 1245.839084][T32419] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1245.863818][T32419] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1245.902306][T32419] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[ 1245.913362][ T6574] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1245.920520][ T6574] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1246.002030][T32431] loop1: detected capacity change from 0 to 256
[ 1246.012969][ T6574] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 85ms
[ 1246.015364][ T6525] usb 3-1: USB disconnect, device number 62
[ 1246.025192][T32431] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[ 1246.039787][ T6574] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1246.045175][T32419] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1246.095946][T32419] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 1246.128955][T32419] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 1246.128955][T32419]   inode = 12 2341
[ 1246.128955][T32419]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[ 1246.147675][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1246.171231][T32431] fuse: Bad value for 'fd'
[ 1246.199651][T32419] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 1246.222079][T32419] gfs2: fsid=syz:syz.0:  H: s:SH f:H e:0 p:32419 [syz.0.12136] __gfs2_lookup+0xad/0x2a0
[ 1246.254577][T32419] gfs2: fsid=syz:syz.0:  I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 1246.281793][T32419] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 1246.297962][T32419] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 1246.307447][T32436] loop1: detected capacity change from 0 to 128
[ 1246.318387][T32436] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1246.332934][T32419] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 1246.353612][T32436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1246.374338][T32419] gfs2: fsid=syz:syz.0: File system withdrawn
[ 1246.383558][T32419] CPU: 1 PID: 32419 Comm: syz.0.12136 Not tainted syzkaller #0
[ 1246.391200][T32419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1246.401377][T32419] Call Trace:
[ 1246.404689][T32419]  <TASK>
[ 1246.407663][T32419]  dump_stack_lvl+0x18c/0x250
[ 1246.412404][T32419]  ? kobject_uevent_env+0x363/0x8b0
[ 1246.417648][T32419]  ? show_regs_print_info+0x20/0x20
[ 1246.422890][T32419]  ? load_image+0x400/0x400
[ 1246.427431][T32419]  ? kobject_uevent_env+0x363/0x8b0
[ 1246.432679][T32419]  gfs2_withdraw+0xb24/0x13d0
[ 1246.437518][T32419]  ? gfs2_lm+0x240/0x240
[ 1246.441801][T32419]  ? load_image+0x400/0x400
[ 1246.446354][T32419]  ? gfs2_consist_inode_i+0xf5/0x110
[ 1246.451806][T32419]  gfs2_dirent_scan+0x525/0x650
[ 1246.456714][T32419]  ? gfs2_dirent_search+0x7f0/0x7f0
[ 1246.462052][T32419]  gfs2_dirent_search+0x2ed/0x7f0
[ 1246.467134][T32419]  ? gfs2_dirent_search+0x7f0/0x7f0
[ 1246.472492][T32419]  ? gfs2_permission+0x384/0x460
[ 1246.477483][T32419]  ? __might_sleep+0xe0/0xe0
[ 1246.482155][T32419]  ? gfs2_dir_search+0x220/0x220
[ 1246.487134][T32419]  ? gfs2_lookupi+0x640/0x640
[ 1246.491851][T32419]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1246.496928][T32419]  gfs2_dir_search+0x4d/0x220
[ 1246.501665][T32419]  gfs2_lookupi+0x45c/0x640
[ 1246.506191][T32419]  ? gfs2_lookup_meta+0x180/0x180
[ 1246.511232][T32419]  ? d_alloc_parallel+0x13f6/0x1530
[ 1246.516451][T32419]  ? __gfs2_lookup+0xad/0x2a0
[ 1246.521139][T32419]  ? d_alloc_parallel+0x33e/0x1530
[ 1246.526267][T32419]  __gfs2_lookup+0xad/0x2a0
[ 1246.530807][T32419]  ? lockdep_softirqs_off+0x430/0x430
[ 1246.536210][T32419]  ? gfs2_atomic_open+0x220/0x220
[ 1246.541259][T32419]  ? __init_waitqueue_head+0xa9/0x150
[ 1246.546637][T32419]  __lookup_slow+0x2a1/0x400
[ 1246.551258][T32419]  ? lookup_one_len+0x2e0/0x2e0
[ 1246.556122][T32419]  ? crc32_le_base+0x759/0xcf0
[ 1246.560898][T32419]  ? down_read+0x1ac/0x2e0
[ 1246.565392][T32419]  lookup_slow+0x53/0x70
[ 1246.569640][T32419]  link_path_walk+0x990/0xe30
[ 1246.574348][T32419]  ? handle_lookup_down+0x130/0x130
[ 1246.579636][T32419]  path_openat+0x293/0x3230
[ 1246.584242][T32419]  ? do_sys_openat2+0xda/0x1d0
[ 1246.589013][T32419]  ? verify_lock_unused+0x140/0x140
[ 1246.594218][T32419]  ? do_filp_open+0x430/0x430
[ 1246.598896][T32419]  ? __virt_addr_valid+0x18c/0x540
[ 1246.604010][T32419]  do_filp_open+0x1f5/0x430
[ 1246.608515][T32419]  ? vfs_tmpfile+0x490/0x490
[ 1246.613114][T32419]  ? _raw_spin_unlock+0x28/0x40
[ 1246.618160][T32419]  ? alloc_fd+0x58f/0x630
[ 1246.622499][T32419]  do_sys_openat2+0x134/0x1d0
[ 1246.627266][T32419]  ? do_sys_open+0xe0/0xe0
[ 1246.631674][T32419]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1246.637673][T32419]  ? lock_chain_count+0x20/0x20
[ 1246.642522][T32419]  __x64_sys_openat+0x139/0x160
[ 1246.647378][T32419]  do_syscall_64+0x55/0xa0
[ 1246.651841][T32419]  ? clear_bhb_loop+0x40/0x90
[ 1246.656543][T32419]  ? clear_bhb_loop+0x40/0x90
[ 1246.661234][T32419]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1246.667133][T32419] RIP: 0033:0x7f9bfc39c799
[ 1246.671546][T32419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1246.691200][T32419] RSP: 002b:00007f9bfd1da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1246.699624][T32419] RAX: ffffffffffffffda RBX: 00007f9bfc615fa0 RCX: 00007f9bfc39c799
[ 1246.707599][T32419] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[ 1246.715563][T32419] RBP: 00007f9bfc432c99 R08: 0000000000000000 R09: 0000000000000000
[ 1246.723535][T32419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1246.731497][T32419] R13: 00007f9bfc616038 R14: 00007f9bfc615fa0 R15: 00007ffd3c2fdd38
[ 1246.739479][T32419]  </TASK>
[ 1246.742585][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1247.025792][T32437] loop3: detected capacity change from 0 to 32768
[ 1247.079815][T32445] netlink: 'syz.1.12149': attribute type 1 has an invalid length.
[ 1247.144857][T32437] ERROR: (device loop3): diAllocAG: numfree > numinos
[ 1247.144857][T32437] 
[ 1247.201520][T32437] ERROR: (device loop3): remounting filesystem as read-only
[ 1247.229421][T32437] ialloc: diAlloc returned -5!
[ 1248.432596][T16432] Bluetooth: hci1: unexpected event for opcode 0x2028
[ 1248.574175][T32512] binder: 32511:32512 ioctl c018620c 200000000240 returned -1
[ 1248.715115][ T6574] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[ 1248.741236][T32519] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12185'.
[ 1248.913225][ T6574] usb 1-1: config index 0 descriptor too short (expected 69, got 36)
[ 1248.931467][ T6574] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1248.955429][ T6574] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[ 1248.970483][ T6574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1248.986392][ T6574] usb 1-1: Product: syz
[ 1248.990836][ T6574] usb 1-1: Manufacturer: syz
[ 1248.995461][ T6574] usb 1-1: SerialNumber: syz
[ 1249.000477][T32513] loop3: detected capacity change from 0 to 32768
[ 1249.018497][T32513] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.12182 (32513)
[ 1249.039900][ T6574] usb 1-1: config 0 descriptor??
[ 1249.058401][ T6574] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1249.080948][T32513] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1249.095370][T32513] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1249.105674][T32513] BTRFS info (device loop3): using free space tree
[ 1249.141189][T32517] loop2: detected capacity change from 0 to 32768
[ 1249.206189][T32517] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1249.258494][T32513] BTRFS info (device loop3): enabling ssd optimizations
[ 1249.267396][T32513] BTRFS info (device loop3): auto enabling async discard
[ 1249.409849][T32539] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1249.421640][T32539] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1249.424633][ T6495] ocfs2: Unmounting device (7,2) on (node local)
[ 1249.427932][ T6489] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1249.564343][ T6574] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[ 1249.584521][ T6574] gspca_pac7302: probe of 1-1:0.0 failed with error -71
[ 1249.605905][ T6574] usb 1-1: USB disconnect, device number 39
[ 1249.745387][   T27] audit: type=1326 audit(1773835551.090:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.1.12191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1249.809420][   T27] audit: type=1326 audit(1773835551.090:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.1.12191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1249.832076][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1249.874327][   T27] audit: type=1326 audit(1773835551.090:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.1.12191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1249.959316][   T27] audit: type=1326 audit(1773835551.090:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32545 comm="syz.1.12191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9014d9c799 code=0x7ffc0000
[ 1250.096032][T32558] veth1_virt_wifi: entered promiscuous mode
[ 1250.226082][T32562] loop3: detected capacity change from 0 to 64
[ 1250.264789][T32562] hfs: unable to locate alternate MDB
[ 1250.270244][T32562] hfs: continuing without an alternate MDB
[ 1250.286568][    T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1250.381643][   T27] audit: type=1800 audit(1773835551.680:301): pid=32562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12197" name="bus" dev="loop3" ino=21 res=0 errno=0
[ 1250.483331][T15079] 
[ 1250.485712][T15079] ======================================================
[ 1250.492824][T15079] WARNING: possible circular locking dependency detected
[ 1250.499864][T15079] syzkaller #0 Not tainted
[ 1250.504295][T15079] ------------------------------------------------------
[ 1250.511329][T15079] kworker/u4:0/15079 is trying to acquire lock:
[ 1250.517585][T15079] ffff8880573de8f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xff/0x1380
[ 1250.528424][T15079] 
[ 1250.528424][T15079] but task is already holding lock:
[ 1250.535816][T15079] ffff8880318ba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[ 1250.545445][T15079] 
[ 1250.545445][T15079] which lock already depends on the new lock.
[ 1250.545445][T15079] 
[ 1250.555865][T15079] 
[ 1250.555865][T15079] the existing dependency chain (in reverse order) is:
[ 1250.564945][T15079] 
[ 1250.564945][T15079] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[ 1250.573022][T15079]        __mutex_lock+0x136/0xcc0
[ 1250.578051][T15079]        hfs_find_init+0x17e/0x1f0
[ 1250.583327][T15079]        hfs_get_block+0x557/0xc50
[ 1250.588439][T15079]        block_read_full_folio+0x44b/0xf60
[ 1250.594603][T15079]        filemap_read_folio+0x172/0x760
[ 1250.600241][T15079]        do_read_cache_folio+0x468/0x7d0
[ 1250.605910][T15079]        do_read_cache_page+0x32/0x250
[ 1250.611367][T15079]        __hfs_bnode_create+0x4b1/0x7b0
[ 1250.616907][T15079]        hfs_bnode_find+0x222/0xd40
[ 1250.622096][T15079]        hfs_brec_find+0x17c/0x500
[ 1250.627196][T15079]        hfs_brec_read+0x24/0x110
[ 1250.632209][T15079]        hfs_cat_find_brec+0x178/0x3f0
[ 1250.637653][T15079]        hfs_fill_super+0xee2/0x14a0
[ 1250.643026][T15079]        mount_bdev+0x221/0x2d0
[ 1250.648233][T15079]        legacy_get_tree+0xea/0x180
[ 1250.653466][T15079]        vfs_get_tree+0x8c/0x280
[ 1250.658431][T15079]        do_new_mount+0x24b/0xa40
[ 1250.663504][T15079]        __se_sys_mount+0x2e7/0x3d0
[ 1250.668730][T15079]        do_syscall_64+0x55/0xa0
[ 1250.673700][T15079]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1250.680147][T15079] 
[ 1250.680147][T15079] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[ 1250.689539][T15079]        __lock_acquire+0x2df1/0x7d40
[ 1250.694923][T15079]        lock_acquire+0x19e/0x420
[ 1250.700043][T15079]        __mutex_lock+0x136/0xcc0
[ 1250.705086][T15079]        hfs_extend_file+0xff/0x1380
[ 1250.710383][T15079]        hfs_bmap_reserve+0x107/0x430
[ 1250.715769][T15079]        __hfs_ext_write_extent+0x1fa/0x470
[ 1250.721899][T15079]        hfs_ext_write_extent+0x17f/0x210
[ 1250.727637][T15079]        hfs_write_inode+0xdc/0x880
[ 1250.732856][T15079]        __writeback_single_inode+0x705/0xec0
[ 1250.738917][T15079]        writeback_sb_inodes+0x7cd/0xf50
[ 1250.744556][T15079]        wb_writeback+0x46a/0xbf0
[ 1250.749656][T15079]        wb_workfn+0x400/0xe60
[ 1250.754423][T15079]        process_scheduled_works+0xa5d/0x15d0
[ 1250.760493][T15079]        worker_thread+0xa55/0xfc0
[ 1250.765649][T15079]        kthread+0x2fa/0x390
[ 1250.770227][T15079]        ret_from_fork+0x48/0x80
[ 1250.775159][T15079]        ret_from_fork_asm+0x11/0x20
[ 1250.780528][T15079] 
[ 1250.780528][T15079] other info that might help us debug this:
[ 1250.780528][T15079] 
[ 1250.791015][T15079]  Possible unsafe locking scenario:
[ 1250.791015][T15079] 
[ 1250.798489][T15079]        CPU0                    CPU1
[ 1250.803849][T15079]        ----                    ----
[ 1250.809250][T15079]   lock(&tree->tree_lock#2/1);
[ 1250.814213][T15079]                                lock(&HFS_I(tree->inode)->extents_lock);
[ 1250.822786][T15079]                                lock(&tree->tree_lock#2/1);
[ 1250.830157][T15079]   lock(&HFS_I(tree->inode)->extents_lock);
[ 1250.836268][T15079] 
[ 1250.836268][T15079]  *** DEADLOCK ***
[ 1250.836268][T15079] 
[ 1250.844676][T15079] 3 locks held by kworker/u4:0/15079:
[ 1250.850122][T15079]  #0: ffff88801ce77938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1250.861356][T15079]  #1: ffffc90003a27d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1250.873840][T15079]  #2: ffff8880318ba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0
[ 1250.883821][T15079] 
[ 1250.883821][T15079] stack backtrace:
[ 1250.889725][T15079] CPU: 0 PID: 15079 Comm: kworker/u4:0 Not tainted syzkaller #0
[ 1250.897391][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1250.907735][T15079] Workqueue: writeback wb_workfn (flush-7:3)
[ 1250.913761][T15079] Call Trace:
[ 1250.917182][T15079]  <TASK>
[ 1250.920145][T15079]  dump_stack_lvl+0x18c/0x250
[ 1250.924868][T15079]  ? load_image+0x400/0x400
[ 1250.929471][T15079]  ? show_regs_print_info+0x20/0x20
[ 1250.934707][T15079]  ? print_circular_bug+0x12b/0x1a0
[ 1250.939943][T15079]  check_noncircular+0x2fc/0x400
[ 1250.944914][T15079]  ? look_up_lock_class+0x75/0x140
[ 1250.950054][T15079]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1250.955272][T15079]  ? lockdep_lock+0xf5/0x230
[ 1250.959882][T15079]  ? _find_first_zero_bit+0xd3/0x100
[ 1250.965183][T15079]  __lock_acquire+0x2df1/0x7d40
[ 1250.970060][T15079]  ? arch_stack_walk+0x16e/0x190
[ 1250.975110][T15079]  ? ret_from_fork_asm+0x11/0x20
[ 1250.980082][T15079]  ? verify_lock_unused+0x140/0x140
[ 1250.985311][T15079]  ? stack_trace_save+0xaa/0x100
[ 1250.990356][T15079]  ? stack_trace_snprint+0xf0/0xf0
[ 1250.995484][T15079]  ? check_noncircular+0x18a/0x400
[ 1251.000646][T15079]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1251.005876][T15079]  lock_acquire+0x19e/0x420
[ 1251.010408][T15079]  ? hfs_extend_file+0xff/0x1380
[ 1251.015370][T15079]  ? __might_sleep+0xe0/0xe0
[ 1251.019992][T15079]  ? read_lock_is_recursive+0x20/0x20
[ 1251.025477][T15079]  __mutex_lock+0x136/0xcc0
[ 1251.030483][T15079]  ? hfs_extend_file+0xff/0x1380
[ 1251.035632][T15079]  ? verify_lock_unused+0x140/0x140
[ 1251.040870][T15079]  ? hfs_extend_file+0xff/0x1380
[ 1251.045842][T15079]  ? mutex_lock_nested+0x20/0x20
[ 1251.046655][T32571] loop1: detected capacity change from 0 to 32768
[ 1251.050792][T15079]  hfs_extend_file+0xff/0x1380
[ 1251.062017][T15079]  ? hfs_ext_write_extent+0x152/0x210
[ 1251.067412][T15079]  ? hfs_write_inode+0xdc/0x880
[ 1251.072311][T15079]  ? hfs_get_block+0xc50/0xc50
[ 1251.077112][T15079]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1251.083303][T15079]  ? rcu_is_watching+0x15/0xb0
[ 1251.088196][T15079]  ? trace_contention_end+0x39/0xe0
[ 1251.093444][T15079]  ? __asan_memset+0x22/0x40
[ 1251.098070][T15079]  ? hfs_brec_find+0x19b/0x500
[ 1251.102872][T15079]  ? hfs_find_init+0x17e/0x1f0
[ 1251.107663][T15079]  hfs_bmap_reserve+0x107/0x430
[ 1251.112532][T15079]  __hfs_ext_write_extent+0x1fa/0x470
[ 1251.117926][T15079]  hfs_ext_write_extent+0x17f/0x210
[ 1251.123118][T15079]  ? verify_lock_unused+0x140/0x140
[ 1251.128435][T15079]  ? hfs_ext_find_block+0x190/0x190
[ 1251.133642][T15079]  ? blk_start_plug+0x51/0x1a0
[ 1251.138407][T15079]  hfs_write_inode+0xdc/0x880
[ 1251.143172][T15079]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1251.148721][T15079]  ? __writeback_single_inode+0x48d/0xec0
[ 1251.154452][T15079]  ? __lock_acquire+0x7d40/0x7d40
[ 1251.159474][T15079]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1251.164494][T15079]  ? __rwlock_init+0x150/0x150
[ 1251.169260][T15079]  __writeback_single_inode+0x705/0xec0
[ 1251.174807][T15079]  writeback_sb_inodes+0x7cd/0xf50
[ 1251.179930][T15079]  ? queue_io+0x550/0x550
[ 1251.184342][T15079]  ? rcu_is_watching+0x15/0xb0
[ 1251.189106][T15079]  wb_writeback+0x46a/0xbf0
[ 1251.193605][T15079]  ? queue_io+0x3b1/0x550
[ 1251.197937][T15079]  ? percpu_ref_tryget+0x250/0x250
[ 1251.203044][T15079]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1251.209122][T15079]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1251.214408][T15079]  wb_workfn+0x400/0xe60
[ 1251.218642][T15079]  ? try_to_wake_up+0x70a/0x1190
[ 1251.223578][T15079]  ? inode_wait_for_writeback+0x230/0x230
[ 1251.229304][T15079]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1251.235378][T15079]  ? read_lock_is_recursive+0x20/0x20
[ 1251.240757][T15079]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1251.246115][T15079]  ? process_scheduled_works+0x96f/0x15d0
[ 1251.251834][T15079]  ? process_scheduled_works+0x96f/0x15d0
[ 1251.257555][T15079]  process_scheduled_works+0xa5d/0x15d0
[ 1251.263095][T15079]  ? worker_attach_to_pool+0x380/0x380
[ 1251.268547][T15079]  ? assign_work+0x3d2/0x5d0
[ 1251.273142][T15079]  worker_thread+0xa55/0xfc0
[ 1251.277741][T15079]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1251.283632][T15079]  ? _raw_spin_unlock+0x40/0x40
[ 1251.288472][T15079]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1251.294380][T15079]  kthread+0x2fa/0x390
[ 1251.296182][T32571] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1251.298449][T15079]  ? pr_cont_work+0x560/0x560
[ 1251.298479][T15079]  ? kthread_blkcg+0xd0/0xd0
[ 1251.298493][T15079]  ret_from_fork+0x48/0x80
[ 1251.298512][T15079]  ? kthread_blkcg+0xd0/0xd0
[ 1251.325325][T15079]  ret_from_fork_asm+0x11/0x20
[ 1251.330183][T15079]  </TASK>
[ 1251.354695][T15079] hfs: new node 0 already hashed?
[ 1251.360083][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1251.365473][T15079] ------------[ cut here ]------------
[ 1251.371081][T15079] WARNING: CPU: 0 PID: 15079 at fs/hfs/bnode.c:520 hfs_bnode_create+0x3b9/0x440
[ 1251.380552][T15079] Modules linked in:
[ 1251.384936][T15079] CPU: 0 PID: 15079 Comm: kworker/u4:0 Not tainted syzkaller #0
[ 1251.393009][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1251.396068][T32571] XFS (loop1): Ending clean mount
[ 1251.403184][T15079] Workqueue: writeback wb_workfn (flush-7:3)
[ 1251.403227][T15079] RIP: 0010:hfs_bnode_create+0x3b9/0x440
[ 1251.403250][T15079] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c
[ 1251.403263][T15079] RSP: 0000:ffffc90003a26e18 EFLAGS: 00010246
[ 1251.446832][T15079] RAX: 000000000000001f RBX: ffff8880318ba000 RCX: ff0e7b20026ff900
[ 1251.454844][T15079] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1251.463092][T15079] RBP: 0000000000000000 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[ 1251.471413][T15079] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000
[ 1251.479508][T15079] R13: ffff8880318ba0e0 R14: ffff888026ba9500 R15: dffffc0000000000
[ 1251.487606][T15079] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1251.496625][T15079] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1251.503365][T15079] CR2: 000020000000f000 CR3: 000000000cf32000 CR4: 00000000003506f0
[ 1251.511420][T15079] Call Trace:
[ 1251.514754][T15079]  <TASK>
[ 1251.517709][T15079]  hfs_bmap_alloc+0x541/0x5d0
[ 1251.522473][T15079]  ? hfs_bmap_reserve+0x430/0x430
[ 1251.527533][T15079]  ? rcu_is_watching+0x15/0xb0
[ 1251.532335][T15079]  hfs_btree_inc_height+0x101/0xac0
[ 1251.537625][T15079]  ? __rwlock_init+0x150/0x150
[ 1251.542688][T15079]  ? hfs_brec_insert+0xbd0/0xbd0
[ 1251.547715][T15079]  ? do_raw_spin_unlock+0x121/0x230
[ 1251.552952][T15079]  hfs_brec_insert+0x748/0xbd0
[ 1251.558229][T15079]  ? hfs_brec_keylen+0x360/0x360
[ 1251.563172][T15079]  __hfs_ext_write_extent+0x2a1/0x470
[ 1251.568724][T15079]  hfs_ext_write_extent+0x17f/0x210
[ 1251.573955][T15079]  ? verify_lock_unused+0x140/0x140
[ 1251.579317][T15079]  ? hfs_ext_find_block+0x190/0x190
[ 1251.584564][T15079]  ? blk_start_plug+0x51/0x1a0
[ 1251.589415][T15079]  hfs_write_inode+0xdc/0x880
[ 1251.594226][T15079]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1251.597654][T16432] Bluetooth: hci1: command 0x0406 tx timeout
[ 1251.599671][T15079]  ? __writeback_single_inode+0x48d/0xec0
[ 1251.611469][T15079]  ? __lock_acquire+0x7d40/0x7d40
[ 1251.616518][T15079]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1251.621604][T15079]  ? __rwlock_init+0x150/0x150
[ 1251.626397][T15079]  __writeback_single_inode+0x705/0xec0
[ 1251.632010][T15079]  writeback_sb_inodes+0x7cd/0xf50
[ 1251.637155][T15079]  ? queue_io+0x550/0x550
[ 1251.641642][T15079]  ? rcu_is_watching+0x15/0xb0
[ 1251.646428][T15079]  wb_writeback+0x46a/0xbf0
[ 1251.650958][T15079]  ? queue_io+0x3b1/0x550
[ 1251.655381][T15079]  ? percpu_ref_tryget+0x250/0x250
[ 1251.660705][T15079]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1251.666746][T15079]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1251.672388][T15079]  wb_workfn+0x400/0xe60
[ 1251.676806][T15079]  ? try_to_wake_up+0x70a/0x1190
[ 1251.681781][T15079]  ? inode_wait_for_writeback+0x230/0x230
[ 1251.687558][T15079]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1251.693732][T15079]  ? read_lock_is_recursive+0x20/0x20
[ 1251.699199][T15079]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1251.704510][T15079]  ? process_scheduled_works+0x96f/0x15d0
[ 1251.710304][T15079]  ? process_scheduled_works+0x96f/0x15d0
[ 1251.716063][T15079]  process_scheduled_works+0xa5d/0x15d0
[ 1251.721782][T15079]  ? worker_attach_to_pool+0x380/0x380
[ 1251.727317][T15079]  ? assign_work+0x3d2/0x5d0
[ 1251.731986][T15079]  worker_thread+0xa55/0xfc0
[ 1251.736600][T15079]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1251.742599][T15079]  ? _raw_spin_unlock+0x40/0x40
[ 1251.747467][T15079]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1251.753421][T15079]  kthread+0x2fa/0x390
[ 1251.757506][T15079]  ? pr_cont_work+0x560/0x560
[ 1251.762402][T15079]  ? kthread_blkcg+0xd0/0xd0
[ 1251.767016][T15079]  ret_from_fork+0x48/0x80
[ 1251.771585][T15079]  ? kthread_blkcg+0xd0/0xd0
[ 1251.776202][T15079]  ret_from_fork_asm+0x11/0x20
[ 1251.781338][T15079]  </TASK>
[ 1251.784495][T15079] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1251.791781][T15079] CPU: 0 PID: 15079 Comm: kworker/u4:0 Not tainted syzkaller #0
[ 1251.799408][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1251.809566][T15079] Workqueue: writeback wb_workfn (flush-7:3)
[ 1251.815559][T15079] Call Trace:
[ 1251.818837][T15079]  <TASK>
[ 1251.821764][T15079]  dump_stack_lvl+0x18c/0x250
[ 1251.826439][T15079]  ? show_regs_print_info+0x20/0x20
[ 1251.831659][T15079]  ? load_image+0x400/0x400
[ 1251.836188][T15079]  panic+0x2dc/0x730
[ 1251.840095][T15079]  ? bpf_jit_dump+0xd0/0xd0
[ 1251.844640][T15079]  ? ret_from_fork_asm+0x11/0x20
[ 1251.849703][T15079]  __warn+0x2e0/0x470
[ 1251.853699][T15079]  ? hfs_bnode_create+0x3b9/0x440
[ 1251.858723][T15079]  ? hfs_bnode_create+0x3b9/0x440
[ 1251.863735][T15079]  report_bug+0x2be/0x4f0
[ 1251.868051][T15079]  ? hfs_bnode_create+0x3b9/0x440
[ 1251.873073][T15079]  ? hfs_bnode_create+0x3b9/0x440
[ 1251.878081][T15079]  ? hfs_bnode_create+0x3bb/0x440
[ 1251.883094][T15079]  handle_bug+0xcf/0x120
[ 1251.887339][T15079]  exc_invalid_op+0x1a/0x50
[ 1251.891838][T15079]  asm_exc_invalid_op+0x1a/0x20
[ 1251.896684][T15079] RIP: 0010:hfs_bnode_create+0x3b9/0x440
[ 1251.902327][T15079] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c
[ 1251.922224][T15079] RSP: 0000:ffffc90003a26e18 EFLAGS: 00010246
[ 1251.928292][T15079] RAX: 000000000000001f RBX: ffff8880318ba000 RCX: ff0e7b20026ff900
[ 1251.936339][T15079] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1251.944582][T15079] RBP: 0000000000000000 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[ 1251.952719][T15079] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000
[ 1251.960680][T15079] R13: ffff8880318ba0e0 R14: ffff888026ba9500 R15: dffffc0000000000
[ 1251.968651][T15079]  ? hfs_bnode_create+0x3b9/0x440
[ 1251.973768][T15079]  hfs_bmap_alloc+0x541/0x5d0
[ 1251.978453][T15079]  ? hfs_bmap_reserve+0x430/0x430
[ 1251.983471][T15079]  ? rcu_is_watching+0x15/0xb0
[ 1251.988317][T15079]  hfs_btree_inc_height+0x101/0xac0
[ 1251.993503][T15079]  ? __rwlock_init+0x150/0x150
[ 1251.998348][T15079]  ? hfs_brec_insert+0xbd0/0xbd0
[ 1252.003307][T15079]  ? do_raw_spin_unlock+0x121/0x230
[ 1252.008524][T15079]  hfs_brec_insert+0x748/0xbd0
[ 1252.013374][T15079]  ? hfs_brec_keylen+0x360/0x360
[ 1252.018351][T15079]  __hfs_ext_write_extent+0x2a1/0x470
[ 1252.023768][T15079]  hfs_ext_write_extent+0x17f/0x210
[ 1252.028974][T15079]  ? verify_lock_unused+0x140/0x140
[ 1252.034165][T15079]  ? hfs_ext_find_block+0x190/0x190
[ 1252.039358][T15079]  ? blk_start_plug+0x51/0x1a0
[ 1252.044121][T15079]  hfs_write_inode+0xdc/0x880
[ 1252.048821][T15079]  ? hfs_inode_write_fork+0x1a0/0x1a0
[ 1252.054298][T15079]  ? __writeback_single_inode+0x48d/0xec0
[ 1252.060019][T15079]  ? __lock_acquire+0x7d40/0x7d40
[ 1252.065083][T15079]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1252.070112][T15079]  ? __rwlock_init+0x150/0x150
[ 1252.074868][T15079]  __writeback_single_inode+0x705/0xec0
[ 1252.080417][T15079]  writeback_sb_inodes+0x7cd/0xf50
[ 1252.085543][T15079]  ? queue_io+0x550/0x550
[ 1252.089900][T15079]  ? rcu_is_watching+0x15/0xb0
[ 1252.094674][T15079]  wb_writeback+0x46a/0xbf0
[ 1252.099211][T15079]  ? queue_io+0x3b1/0x550
[ 1252.104096][T15079]  ? percpu_ref_tryget+0x250/0x250
[ 1252.109296][T15079]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1252.115320][T15079]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1252.120630][T15079]  wb_workfn+0x400/0xe60
[ 1252.124917][T15079]  ? try_to_wake_up+0x70a/0x1190
[ 1252.129872][T15079]  ? inode_wait_for_writeback+0x230/0x230
[ 1252.135595][T15079]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1252.141572][T15079]  ? read_lock_is_recursive+0x20/0x20
[ 1252.146966][T15079]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1252.152376][T15079]  ? process_scheduled_works+0x96f/0x15d0
[ 1252.158140][T15079]  ? process_scheduled_works+0x96f/0x15d0
[ 1252.163927][T15079]  process_scheduled_works+0xa5d/0x15d0
[ 1252.169529][T15079]  ? worker_attach_to_pool+0x380/0x380
[ 1252.175082][T15079]  ? assign_work+0x3d2/0x5d0
[ 1252.179759][T15079]  worker_thread+0xa55/0xfc0
[ 1252.184514][T15079]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1252.190690][T15079]  ? _raw_spin_unlock+0x40/0x40
[ 1252.195679][T15079]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1252.201881][T15079]  kthread+0x2fa/0x390
[ 1252.206090][T15079]  ? pr_cont_work+0x560/0x560
[ 1252.210756][T15079]  ? kthread_blkcg+0xd0/0xd0
[ 1252.215427][T15079]  ret_from_fork+0x48/0x80
[ 1252.219835][T15079]  ? kthread_blkcg+0xd0/0xd0
[ 1252.224462][T15079]  ret_from_fork_asm+0x11/0x20
[ 1252.229419][T15079]  </TASK>
[ 1252.233012][T15079] Kernel Offset: disabled
[ 1252.238074][T15079] Rebooting in 86400 seconds..