last executing test programs:

4m0.492337971s ago: executing program 1 (id=27):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

4m0.239920185s ago: executing program 1 (id=31):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r1}, &(0x7f0000000440)=0x8)

3m59.92324525s ago: executing program 1 (id=36):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef)

3m59.416678707s ago: executing program 1 (id=39):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000002c0)={0x4, 0x10000000, 0x7, 0xffff})

3m57.706344522s ago: executing program 1 (id=51):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x14)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

3m55.669319101s ago: executing program 1 (id=66):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000002000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r2, 0x325, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)

3m54.905933152s ago: executing program 32 (id=66):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000002000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x20, r2, 0x325, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)

3m22.300274316s ago: executing program 4 (id=241):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18)
r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000000, 0x4})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1)

3m22.054305629s ago: executing program 4 (id=235):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1Z2CVnUBFFUVExEiWIKEFAJEhUUECQLDkoQUkiEhQFAUVAcs4555xzzjnnnPmeZXeVux7Q+373ffF6znme3Zmurq6p/v+6qmamerqXnGexOQcGxhgY1hQDI3fzHXMutPGOc16+9057njzFWBNMPnzy8BtMOvzipIOGfxxlYGBglOHLGT5t7EdOOHGUgcHvTP97Y4851qBxBwamG35x9uEfZxr2YeJHR8z39kiNvKKD/nZx0PbD/r3T+EO/xNBPlr7pgrMHBgYmeNfth95kmn+4o9KWnGPeef5u9Te3oVZDhn/+7n+jDfs38f0DAxPfM8CPj3fPO+gDuEtDv+YEOz4wxrofwNf+X9eSc8w730j+Q7fFUYdPm2noNj7yNmhs5Mf5TavMuvvwIXzn8TYwMHQX91+2lf8VLTnHPAsMvPd+fuChscY7/e139ptjPzMwMPazAwNjPzcwMPbzAwNjvzAwMPaLH7RL/f9rjjmnn3Po9j7i8nD2EY/lCehxsffqL+w1MDAw+rB5xn5r2PFinClGHBOqqqrq37s55px+Ljj+j/F+x/+ttp7jlo7/VVVV/3ubb445px96HB/p+D/O+x3/v3vDDWsM+93/7DMNu9VbH+ydqKqqqv9W88yHx/8J3u/4P/4O1+3X8b+qqup/b4su+M7xf5yRjv+TvN/xf43577h0+Hwjvm94812LfOf5Y8Onv/6u6aO+a/pr75o+5F3Leff8o71r+ivvmj7GwMDYjwyf/sbfJ4/9zNDb/ONyxn7p78/HmXTwu6a//K7po71r+ivD12no9NHfNf3Nd80/xt+njzP0vymGf91X32eoq6qq/m1adPp55hp41/Psh08e8cR+fF7o0UdvfecHtb5VVVVVVVVV9d/vrSdPO+vvf/P9iYF3/e3q3/6GdfjvBQYdc84113xgK/rv0aB//H3IFh/0Ov3/bajzGIdNMTCw1hIf9KrUB9D/mr9Vr/8r5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4t7j/P/f/v5/4J4v7jB81lkmu+Pexf5+y0kHVhv+2c13zLnQah/Aun8A/aee/x9YbdDAwHDfCYZaLjTHootPNTAwsNi9d0w248Dfrpt56HWzTjTqO3/MOTAw1Tv/D5n0PZY8/F0W3nlzh0n+toxj3ln+fG/vO+qgkVbiXc129n0HrrrkyzOM/PHz730//vb+Eku9tO+UI/6WZZSRZhrjPW48Yvkj7svIzsPXfaqh6z71BmuuM/X6G2/yldXWXH6VlVZZaa3pppt2hulnnGG6r80y9cqrrbHSNMP+f48xG/bWFaP+K2M2zshj9uQc7x6zke/bhCcdiGP2j+/q8V8W8c4Sz53toctGjNngf3HMRny9Ud9/zKZYbfgXmnRgyMBy7wzNoIGBSQcPGdho6IVpRx8YmHTI8HknHTrvNyYaZWBgx7/f0UHDX2x02DyDthg6z7/Z+5bMMnxENh0x38ivsz7yiv6z9y05fpxd7hjpfUv+b/V/dPz/B6+ZB/1toEa8AcLweYZ5fcDvM/EP6zvF4HcOcu+1vu/zujjvRI+vNVd9dIn/qdfFofUd533W931ex+8913eqaZ/eY9ii/sfWd6R93QLDrvxX9nUD77+vG5Vuv9KVk4+8r5v/vVfxv2zHI8Zo9JFmeq993Y7zn7v50OUPvP++boHVhr94wN/3daMMDEw66oh93dAd32hDBnYcemG6oRdGHzJwyNAL079zYcyBc4Ze+OoKa6+x4qB3XmZg+HKnGbrc2ScaNGwDuvHAVUff5e23Bw9fl5fG/q/rOvzxMcW7j+dzTDR8MIffdsRyh846YrmvbDPsutGGL/fl/8ZyR9yW1nfSM4ddN/rw5b4y0nKHvM9yR9z2H7aHqQb9lyeqwv7mA31fI9p+x3if9X2f1+HGx9s77lMu+9D/wOtwD3qv9R38/uv7Xu8b8p7r+9hlj+/zP/W64fQ4u2fvYY+VMYY/zt78bzx+R9x25P3YsBcCGbbbH+Nf2Y9N8Q/7sS1HHWWkwX5X7/V97oow//At4m9LW/GAl1cbMfZDRlruP/s+9133ZRDsxyYY6ee5QZvvMzCIxvyRNZ7f8K2d33/Mhwz8158tRoz5iNu+35iP/q+M+cfff8xH/j75vcZ8qs8Mu37ISOv/7jFfZLfZbxwx5qONtNx/Nuajv/+x4x/HfGBgCI35jpMNG7f325++15iPuO2IMR/6dWadaPDA3AMDA1MOH/PR/pUxn/R/5nE+Fsw/7POV/jbpmRkX/vKIMR95jP/ZmI/23xzzze752+N8yneu+/QoA6ONNrDR8htssN60w/4fcXG6Yf/zvuiZFYeN8/sdS9/LaMRt32+7GPyvGE3wLxkN+mdGkw1+L6O/b1qjHrjos/+n+6LB/12jc3hfdMq8w8bt/b4veq8xH3FbOg5O8q7bj/xz6Pu8fhbep3fGZ/5tR/y89+/w+lkjft79X/n6WSN+J7nayDv5+lfr9//u8neXv7v83eUv7j3O/08x4vz/2+Ps/+HhP3QOuXLmW2b/oNf3A+4/+vz/cN//cv5/9ltmvnLoj1bDr3vf87PD5vm3PD8707APEz86Yr6Rzw+OvKL/7Pzs3rtucOX/o/Oz/0eN2Fb/hZ+L2/+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3H+f9pRjwP4MHFF/re8BOhQzad9shNP+j1/YD7jz7/P9z3v5z/3/TIaTcdZeBv173v+f9h8zjO/9+34ObL/Duf/x+xrXb+v/5J+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uPc4/z/7iOcBHD7b3J8d8XyA67fbd48Pen0/4P5Tz//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ0//z8w0tskLtzjAoPz//+7ew//RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/9/DGL/w/yxyz+S+aPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/LH/M4v/z/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/yJ/zOL/y/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/1X+mMV/q/wxi/+v88cs/lvnj1n8f5M/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5o9Z/H+XP2bx3yF/zOL/+/wxi/8f8scs/jvmj1n8d8ofs/j/MX/M4r9z/pjFf5f8MYv/rvljFv8/5Y9Z/P+cP2bx3y1/zOL/l/wxi//u+WMW/z3yxyz+e+aPWfz/mj9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR/0ED+mMV/UP6YxX+U/DGL/6j5Yxb/wfljFv8h+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/h/LHLP4fzh+z+H8kf8ziP2n+mMX/o/ljFv/J8scs/h/LH7P4fzx/zOI/ef6Yxf8T+WMW/0/mj1n8p8gfs/h/Kn/M4v/p/DGL/2fyxyz+U+aPWfw/mz9m8f9c/pjF//P5Yxb/qfLHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8tf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X88fs/jPmj9m8f9G/pjFf7b8MYv/N/PHLP7fyh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/7fzxyz+c+ePWfznyR+z+M+bP2bx/07+mMV/vvwxi/9388cs/vPnj1n8F8gfs/gvmD9m8V8of8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/D/LHLP5L5o9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8sf8zi//P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/In/M4v/L/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/Vf6YxX+r/DGL/6/zxyz+W+ePWfx/kz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/mj1n8f5c/ZvHfIX/M4v/7/DGL/x/yxyz+O+aPWfx3yh+z+P8xf8ziv3P+mMV/l/wxi/+u+WMW/z/lj1n8/5w/ZvHfLX/M4v+X/DGL/+75Yxb/PfLHLP575o9Z/P+aP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyr/d7fliE8s/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n83/k0/3/M4j8of8ziP0r+mMV/1Pwxi//g/DGL/5D8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/2T5Yxb/j+WPWfw/nj9m8Z88f8zi/4n8MYv/J/PHLP5T5I9Z/D+VP2bx/3T+mMX/M/ljFv8p88cs/p/NH7P4fy5/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOI/W/6Yxf+b+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/2/ljFv+588cs/vPkj1n8580fs/h/J3/M4j9f/pjF/7v5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/Xv6YxX/h/DGL/yL5YxL/eo8k/qMs1vaPWfwXzx+z+C+RP2bx/37+mMX/B/ljFv8l88cs/kvlj1n8f5g/ZvH/Uf6YxX/p/DGL/zL5Yxb/ZfPHLP4/zh+z+C+XP2bxXz5/zOL/k/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf+n+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+WP2bx/3n+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/kT9m8f9l/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Kn/M4r9V/pjF/9f5Yxb/rfPHLP6/yR+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/2/zxyz+v8sfs/jvkD9m8f99/pjF/w/5Yxb/HfPHLP475Y9Z/P+YP2bx3zl/zOK/S/6YxX/X/DGL/5/yxyz+f84fs/jvlj9m8f9L/pjFf/f8MYv/HvljFv8988cs/n/NH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH3vHf9DAf7z/W/ljlu3/7fwxif+oA/ljFv9B+WMW/1Hyxyz+o+aPWfwH549Z/Ifkj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A9T+b89/r86p8X/cJX/v57F/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePSfwHD+SPWfwH5Y9Z/EfJH7P4j5o/ZvEfnD9m8R+SP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/KH/M4v/h/DGL/0fyxyz+k+aPWfw/mj9m8Z8sf8zi/7H8MYv/x/PHLP6T549Z/D+RP2bx/2T+mMV/ivwxi/+n8scs/p/OH7P4fyZ/zOI/Zf6Yxf+z+WMW/8/lj1n8P58/ZvGfKn/M4v+F/DGL/xfzxyz+X8of+8/2H2vE1MFfzh/7z/b/W4O/kj9m8f9q/pjFf+r8MYv/NPlj/8n+Q/4+dfC0+WP/yf7v3v6nyx+z+E+fP2bxnyF/zOL/tfwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/t/MH7P4fyt/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP7fzh+z+M+dP2bxnyd/zOI/b/6Yxf87+WMW//nyxyz+380fs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/j/IH7P4L5k/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P80fs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/s/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/4v8MYv/L/PHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/1f5Yxb/rfLHLP6/zh+z+G+dP2bx/03+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx/mz9m8f9d/pjFf4f8MYv/7/PHLP5/yB+z+O+YP2bx3yl/zOL/x/wxi//O+WMW/13yxyz+u+aPWfz/lD9m8f9z/pjFf7f8MYv/X/LHLP67549Z/PfIH7P475k/ZvH/a/6YxX+v/DGL/975Yxb/ffLHLP77Sv1H/yfXW/z3k/r/syz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1Q+/rth/USv37ZvG/ru0fs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv8hA/ljFv9B+WMW/1Hyxyz+o+aPWfwH549Z/Ifkj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D8+0AOAsvg/ET9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/aAP5Yxb/QfljFv9R8scs/qPmj1n8B+ePWfyH5I9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+H8ofs/h/OH/M4v+R/DGL/6T5Yxb/j+aPWfwnyx+z+H8sf8zi//H8MYv/5PljFv9P5I9Z/D+ZP2bxnyJ/zOL/qfwxi/+n88cs/p/JH7P4T5k/ZvH/bP6Yxf9z+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/9nyxyz+38wfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/i/wxi/8v88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/V/ljFv+t8scs/r/OH7P4b50/ZvH/Tf6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/H+bP2bx/13+mMV/h/wxi//v88cs/n/IH7P475g/ZvHfKX/M4v/H/DGL/875Yxb/XfLHLP675o9Z/P+UP2bx/3P+mMV/t/wxi/9f8scs/rvnj1n898gfs/jvmT9m8f9r/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv/RB/LHLP6D8scs/qPkj1n8R80fs/gPzh+z+A/JH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/lD9m8f9w/pjF/yP5Yxb/SfPHLP4fzR+z+E+WP2bx/1j+mMX/4/ljFv/J88cs/p/IH7P4fzJ/zOI/Rf6Yxf9T+WMW/0/nj1n8P5M/ZvGfMn/M4v/Z/DGL/+fyxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+ePWfx/kD9m8V8yf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/2f5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf8X+WMW/1/mj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v8scs/lvlj1n8f50/ZvHfOn/M4v+b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zZ/zOL/u/wxi/8O+WMW/9/nj1n8/5A/ZvHfMX/M4r9T/pjF/4/5Yxb/nfPHLP675I9Z/HfNH7P4/yl/zOL/5/wxi/9u+WMW/7/kj1n8d88fs/jvkT9m8d8zf8zi/9f8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/mMM5I9Z/Aflj1n8R8kfs/iPmj9m8R+cP2bxH5I/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nE/m9v/t7XWfwnFvu/Xxb/SfLHLP4fyh+z+H84f8zi/5H8MYv/pPljFv+P5o9Z/CfLH7P4fyx/zOL/8fwxi//k+WMW/0/kj1n8P5k/ZvGfIn/M4v+p/DGL/6fzxyz+n8kfs/hPmT9m8f9s/pjF/3P5Yxb/z+ePWfynyh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP7fzB+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+384fs/jPnT9m8Z8nf8ziP2/+mMX/O/ljFv/58scs/t/NH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/9/LHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/9/PHLP4/yB+z+C+ZP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/7P8MYv/z/PHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v+L/DGL/y/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8f9N/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8f5s/ZvH/Xf6YxX+H/DGL/+/zxyz+f8gfs/jvmD9m8d8pf8zi/8f8MYv/zvljFv9d8scs/rvmj1n8/5Q/ZvH/c/6YxX+3/DGL/1/yxyz+u+ePWfz3yB+z+O+ZP2bx/2v+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/zEH8scs/oPyxyz+o+SPWfxHzR+z+A/OH7P4D8kfs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+UP2bx/3D+mMX/I/ljFv9J88cs/h/NH7P4T5Y/ZvH/WP6Yxf/j+WMW/8nzxyz+n8gfs/h/Mn/M4j9F/pjF/1P5Yxb/T+ePWfw/kz9m8Z8yf8zi/9n8MYv/5/LHLP6fzx+z+E+VP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/a/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/L+ZP2bx/1b+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/938scs/vPlj1n8v5s/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv/v5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv/v549Z/H+QP2bxXzJ/zOK/VP6Yxf+H+WMW/x/lj1n8l84fs/gvkz9m8V82f8zi/+P8MYv/cvljFv/l88cs/j/JH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5o/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/Z/ljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/xf5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/6/yxyz+W+WPWfx/nT9m8d86f8zi/5v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/Nn/M4v+7/DGL/w75Yxb/3+ePWfz/kD9m8d8xf8ziv1P+mMX/j/ljFv+d88cs/rvkj1n8d80fs/j/KX/M4v/n/DGL/275Yxb/v+SPWfx3zx+z+O+RP2bx3zN/zOL/1/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+Yw3kj1n8B+WPWfxHyR+z+I+aP2bxH5w/ZvEfkj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fyh/zOL/4fwxi/9H8scs/pPmj1n8P5o/ZvGfLH/M4v+x/DGL/8fzxyz+k+ePWfw/kT9m8f9k/pjFf4r8MYv/p/LHLP6fzh+z+H8mf8ziP2X+mMX/s/ljFv/P5Y9Z/D+fP2bxnyp/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi//X8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi//X8MYv/rPljFv9v5I9Z/GfLH7P4fzN/zOL/rfwxi//s+WMW/znyxyz+c+aPWfznyh+z+H87f8ziP3f+mMV/nvwxi/+8+WMW/+/kj1n858sfs/h/N3/M4j9//pjFf4H8MYv/gvljFv+F8scs/t/LH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/PH7P4/yB/zOK/ZP6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMX/x/ljFv/l8scs/svnj1n8f5I/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/NH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P8scs/j/PH7P4b5g/ZvHfSOY/+r84n8V/Y5n/v5rFf5P8MYv/L/LHLP6/zB+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+WPWfy3yh+z+P86f8ziv3X+mMX/N/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9t/pjF/3f5Yxb/HfLHLP6/zx+z+P8hf8ziv2P+mMV/p/wxi/8f88cs/jvnj1n8d8kfs/jvmj9m8f9T/pjF/8/5Yxb/3fLHLP5/yR+z+O+eP2bx3yN/zOK/Z/6Yxf+v+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePSfzHHsgfs/gPyh+z+I+SP2bxHzV/zOI/OH/M4j8kf8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4j9Z/pjF/2P5Yxb/j+ePWfwnzx+z+H8if8zi/8n8MYv/FPljFv9P5Y9Z/D+dP2bx/0z+mMV/yvwxi/9n88cs/p/LH7P4fz5/zOI/Vf6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/6/lj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/6/ljFv9Z88cs/t/IH7P4z5Y/ZvH/Zv6Yxf9b+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bx/3b+mMV/7vwxi/88+WMW/3nzxyz+38kfs/jPlz9m8f9u/pjFf/78MYv/AvljFv8F88cs/gvlj1n8v5c/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v58/ZvH/Qf6YxX/J/DGL/1L5Yxb/H+aPWfx/lD9m8V86f8ziv0z+mMV/2fwxi/+P88cs/svlj1n8l88fs/j/JH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9p/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/lj1n8f54/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f5I9Z/H+ZP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/yh+z+G+VP2bx/3X+mMV/6/wxi/9v8scs/tvkj1n8t80fs/hvlz9m8d8+f8zi/9v8MYv/7/LHLP475I9Z/H+fP2bx/0P+mMV/x/wxi/9O+WMW/z/mj1n8d84fs/jvkj9m8d81f8zi/6f8MYv/n/PHLP675Y9Z/P+SP2bx3z1/zOK/R/6YxX/P/DGL/1/zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I8zkD9m8R+UP2bxHyV/zOI/av6YxX9w/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4v+h/DGL/4ff0/+tt99++//Nqv07ZvH/SNs/ZvGfNH/M4v/R/DGL/2T5Yxb/j+WPWfw/nj9m8Z88f8zi/4n8MYv/J/PHLP5T5I9Z/D+VP2bx/3T+mMX/M/ljFv8p88cs/p/NH7P4fy5/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOI/W/6Yxf+b+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/2/ljFv+588cs/vPkj1n8580fs/h/J3/M4j9f/pjF/7v5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvH/Xv6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/fv6Yxf8H+WMW/yXzxyz+S+WPWfx/mD9m8f9R/pjFf+n8MYv/MvljFv9l88cs/j/OH7P4L5c/ZvFfPn/M4v+T/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/6f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8f5Y/ZvH/ef6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/H+RP2bx/2X+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+P8qf8ziv1X+mMX/1/ljFv+t88cs/r/JH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/b/PHLP6/yx+z+O+QP2bx/33+mMX/D/ljFv8d88cs/jvlj1n8/5g/ZvHfOX/M4r9L/pjFf9f8MYv/n/LHLP5/zh+z+O+WP2bx/0v+mMV/9/wxi/8e+WMW/z3zxyz+f80fs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8x/aINGHgOL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHJP7jDuSPWfwH5Y9Z/EfJH7P4j5o/ZvEfnD9m8R+SP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/KH/M4v/h/DGL/0fyxyz+k+aPWfw/mj9m8Z8sf8zi/7H8MYv/x/PHLP6T549Z/D+RP2bx/2T+mMV/ivwxi/+n8scs/p/OH7P4fyZ/zOI/Zf6Yxf+z+WMW/8/lj1n8P58/ZvGfKn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/9fwxi/+s+WMW/2/kj1n8Z8sfs/h/M3/M4v+t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/7+SPWfznyx+z+H83f8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+38sfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+388fs/j/IH/M4r9k/pjFf6n8MYv/D/PHLP4/yh+z+C+dP2bxXyZ/zOK/bP6Yxf/H+WMW/+Xyxyz+y+ePWfx/kj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P80f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/yxyz+P88fs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v8scs/r/MH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f5Y9Z/LfKH7P4/zp/zOK/df6Yxf83+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/23+mMX/d/ljFv8d8scs/r/PH7P4/yF/zOK/Y/6YxX+n/DGL/x/zxyz+O+ePWfx3yR+z+O+aP2bx/1P+mMX/z/ljFv/d8scs/n/JH7P4754/ZvHfI3/M4r9n/pjF/6/5Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549J/McbyB+z+A/KH7P4j5I/ZvEfNX/M4j84f8ziPyR/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8f9Q/pjF/8P5Yxb/j+SPWfwnzR+z+H80f8ziP1n+mMX/Y/ljFv+P549Z/CfPH7P4fyJ/zOL/yfwxi/8U+WMW/0/lj1n8P50/ZvH/TP6YxX/K/DGL/2fzxyz+n8sfs/h/Pn/M4j9V/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/r+WPWfxnzB+z+M+UP2bxnzl/zOI/S/6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8f9m/pjF/1v5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/dv6YxX/u/DGL/zz5Yxb/efPHLP7fyR+z+M+XP2bx/27+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfy/lz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfx/nj9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/1/kj1n8f5k/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/r/KH7P4b5U/ZvH/df6YxX/r/DGL/2/yxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOL/2/wxi//v8scs/jvkj1n8f58/ZvH/Q/6YxX/H/DGL/075Yxb/P+aPWfx3zh+z+O+SP2bx3zV/zOL/p/wxi/+f88cs/rvlj1n8/5I/ZvHfPX/M4r9H/pjFf8/8MYv/X/PHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF/3Sx/5D3uc7if4bY//2y+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR//IH8MYv/oPwxi/8o+WMW/1Hzxyz+g/PHLP5D8scs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL///HHj1lgWIYUAB8bV9jfcS2bdu2bdu2bdu2bdu2bSf/OXcFuTNbmOH9Ry3/I/iPWv5H9B+1/I/kP2r5H9l/1PI/iv+o5X9U/1HL/2j+o5b/0f1HLf9j+I9a/sf0H7X8j+U/avkf23/U8j+O/6jlf1z/Ucv/eP6jlv/x/Uct/xP4j1r+J/QftfxP5D9q+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/v9p4ICi/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T8q+R9ugP+o5f8//qOW///6j1r+/+c/avkf6D9q+f+//6jlfxD/Ucv/oP6jlv/B/Ect/4P7j1r+h/AftfwP6T9q+R/Kf9TyP7T/qOV/GP9Ry/+w/qN/3T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/s3e3sXmVhR/HT9d2T3/27+YcXkMGg003cWVrVyaDzYf6WDBVx2LABLKFlVEpzD0EN1CrQYnBGCYjQUTdpm4CiTHjxTABYSVRiVPROBENcQjqIqaGiYxoXGrutndp77XNetXr2ot9Pi/a+5zyO92WfHdO2ZoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ0uZtt9ywtqOjbZMXXnjhxcCLU/07E5Daa9Gf6h8JAAAAAAAAAAAAAAAwkhzfTnSqf44AAAAAAHC6aWl9V3d11ZBT1YMP5vy8rfd906tXXr/n+cdXlt/3f/jyYS45YfBBT09Pz0vNXTP7DycVRVH6bNP7jydXjkvX7+y6fHvfUSh++2xz67btzQd3fuXrD8+dOn1Obe/Z2mLNde0dbUsmFEWori22lg4aqooiTKwttpcOGksHk2qL+0sHS3sPphQHSgcXXruhY13pxAmfGk47La2fLaqHFFsM+d1gcP+dXZt2ld+Pcsny1WqK/v7rmn+4t+JjZSP0X75+qKrsf8w/QWBEY+v/9oXl96Nc8oT7/6PtdauG+9jI/ZevHyboH9IZ5vl/SKO9z/t79s8Y4fl/7jCXHNj/9C8ru0r93/TLF+r7T9WczPN/6fP1HYXqyv4nDHn+Lz3H15Sf/ycVRagd5y8HnFZaWj/XPdr9v7L7of3XnFWxqRrc/9FVe6pL/R++64H395+qPan+B64faka5/1d95sDQHyswNi2tu3sq7v9j6L9YMMwlB/qfv/vYVaX+z9h5ZN+gj42l/9rK/hdvufETizdvu6W+/ca169vWt93U2NjQtHRZU+NFyxf3PhL0vR3nrwqcHsZ3/y+mVmyqiqJtYL/ow8teKvV/8Nx//K3/1OQx9j9x1Pv/c+7/MKzzJxQTJxZb127Zsqmh7235sLHvbd9/Nkz/J379P2L/88r/H7D8dXfpC/KB/W/e+dWPlPq/d9KqB/pPTRxj/5NG67/ztc8LRBjn/X9dxWZI/+2vfmddqf8/vXL8UP+psX79P3nU/ne5/8N4tLRW/IWf/7FS/6v/dXi4Pyc4CWGKP/+DdHL0v3XaL74Ztw5T9Q/p5Oh/6ea2yL9sG/5P/5BOjv5/taPqSNw6nKF/SCdH/1/rfnBj3DpM0z+kk6P//bMfeSpuHf5f/5BOjv6Pr59+Vdw61Okf0snR/2Vf2rs6bh2m6x/SydF/1SvTnohbhxn6h3Ry9F9fdfan4tbhdfqHdHL0f13nwy/GrcNM/UM6Ofr//M5fR36fTni9/iGdHP0/9cetO+LWYZb+IZ0c/b8wq70+bh3O1D+kk6P/+2944pG4dXiD/iGdHP0//a0PHotbh6B/SCdH/9949siauHWYrX9IJ0f/+xYe+0PcOpylf0gnR////ujVH4hbhzfqH9LJ0X/Yv/y7cetwtv4hnRz9X/HkXQ1x6zBH/5BOjv47V9x2Z9w6nKN/SCdH/03NC2fHrcO5+od0cvQ/489/vztuHebqH9LJ0f/H7ntv5b/7fZLCefqHdHL0f/OG1Y/GrcP5+od0cvS/ckbPBXHrME//kE6O/g8fve9HceswX/+QTo7+775zyRVx6/Am/UM6Ofr/wa3ndcetw5v1D+nk6P/l2jtujVuHBfqHdHL0/+Wf1SyLW4eF+od0cvT/44e+vytuHd6if0gnR/8vvu+xc+LW4QL9Qzo5+t998awvxq3DW/UP6eTo/93PbFwftw6L9A/p5Oh/8t7fH41bh3r9Qzo5+p+/6uCH4tbhQv1DOjn637Boze/i1mGx/iGdHP0/c+DpQ3HrsET/kE6O/nc89unmuHVo0D+kk6P/xy/r+E/cOjTqH9LJ0f8/m37y8bh1WKp/SCdH/2ce+vYX4tahSf+QTo7+r35w8sy4dbhI/5BOjv43XjP7e3HrsEz/kE6O/i+Z+9ClcevwNv1DOjn6f89fV9wctw4X6x/SydF/3T33PBe3Dsv1D+nk6H/etbdfE7cOl+gf0snR//Vz6p+MW4dL9Q/p5Oj/juMtC+LWYYX+IZ0c/Xfd9vy+uHVYqX9IJ0f/3Z98uS5uHd6uf0gnR/97p1x5b9w6vEP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8lx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATwEAAP///rjRtw==")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

3m20.044645368s ago: executing program 4 (id=248):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

3m18.641618769s ago: executing program 4 (id=246):
unshare(0x400)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f000000ee40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fdatasync(r0)

3m17.527563285s ago: executing program 4 (id=251):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

3m15.971346708s ago: executing program 4 (id=255):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000480)="09e4", 0x2}], 0x1}, 0x24004015)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1, &(0x7f0000000340)=""/205, 0xcd}}], 0x1, 0x0, 0x0)

3m15.325155387s ago: executing program 33 (id=255):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000480)="09e4", 0x2}], 0x1}, 0x24004015)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1, &(0x7f0000000340)=""/205, 0xcd}}], 0x1, 0x0, 0x0)

1m59.163668168s ago: executing program 5 (id=677):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
read(r0, &(0x7f00000002c0)=""/200, 0x39)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

1m58.925083191s ago: executing program 5 (id=680):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000080)="b301d506", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4)
recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/239, 0xef}, 0x2}], 0xa, 0x10162, 0x0)

1m58.590290506s ago: executing program 5 (id=682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280)="aa", &(0x7f0000000400)=@udp=r1}, 0x20)
close(0x4)

1m58.367707811s ago: executing program 5 (id=684):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc84, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x214, &(0x7f0000000a00)="$eJzs3cFuElEUANBLS8tgXHRnYmIyxoWuGvULakxNjCQmNSx010RWsIINsGk/w1/wv/wA0xWbZgzOTEFKKRIBredsuMx9d3iPBwMbLlnkvj34EklSiZ2jOIpRJQ5iJ0rnAQDcJaMsi+9Z7verq+uYEgCwZkt8/l9ueEoAwJp9+Pjp3atG4/gkTZOIi/N+s9/Mb/P8m7eN4+fpTweTqot+v7l7lX+Rzn53GOf34l6Rf5nXp1fp/Yho7sezJ3l+nHv9vpH+Wl+Lz2teOwAAAAAAAAAAAAAAAAAAAAAAbMujSEtz+/scHs7m60U+vzfVH2imf081HpbtgSftgbKzTSwKAAAAAAAAAAAAAAAAAAAA/jG9wbB92um0upOgFhHTR6pzxtwcVIoTLzV4+8FOfbXyerHMqdRllrutvFI8RetdYH3+5i4TRPVv2Z1Vg/RPnbBWbvP1VD0qC8qzbBzMfxeUbTFuLN+PiMUTe3qy6rpG41fo18fd3iCyhYMn14jaxq5GAAAAAAAAAAAAAAAAAADwf5v61fc1ye42ZgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm9cbDMt/+R+2TzudVrc3GLZPk+LY5Mi84Cwi7t8yptXtlY+1F8l2FgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd9yMAAP//lJodvA==")
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000000000030000000000000000000100", "2809e8dbe108598948224b084afbc11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992c61ac00", "91be8b2cb00000406c7f306003d8a0f4bd004ab3fde5000000004000", [0x7, 0x9]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c03, 0xffffffffffffffff)

1m57.945748876s ago: executing program 5 (id=687):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="14", 0x1}], 0x1}, 0x0)

1m57.65933396s ago: executing program 5 (id=689):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000a9b8f1f2"], 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
read$alg(r0, &(0x7f0000000000)=""/46, 0x2e)

1m57.171735247s ago: executing program 34 (id=689):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000a9b8f1f2"], 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x15, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
read$alg(r0, &(0x7f0000000000)=""/46, 0x2e)

2.741225772s ago: executing program 3 (id=1390):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.605921283s ago: executing program 2 (id=1392):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

2.495543715s ago: executing program 0 (id=1394):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRESHEX], 0x11, 0x6b8, &(0x7f0000000c40)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

2.258384428s ago: executing program 3 (id=1396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x40000)
syz_emit_ethernet(0x1fc, &(0x7f0000000100)=ANY=[@ANYBLOB="ff"], 0x0)

2.167681009s ago: executing program 6 (id=1397):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18)

2.14607051s ago: executing program 0 (id=1398):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000740000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r0}, 0x10)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

2.1270471s ago: executing program 2 (id=1399):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7)

1.987428722s ago: executing program 6 (id=1400):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.695374677s ago: executing program 0 (id=1401):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000001280)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a5", 0xe}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af675712339f7fcdf", 0x1f}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801)
sendmmsg$inet6(r1, &(0x7f0000019880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2604082c)

1.609420927s ago: executing program 3 (id=1402):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x8, 0x2}, 0x8)

1.546478388s ago: executing program 0 (id=1403):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xff}, 0x18)

1.492084349s ago: executing program 6 (id=1404):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYRESHEX=r1], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

1.295075462s ago: executing program 6 (id=1405):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x17b}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d79515ed013b4664253d3804bf1877f18388d7054aa3bf345bbb74377cd019eb8d5294b42bce5511ddbded4c12b4945c39510aafdc664833262f20a650a2101116f625f18e5dbc2412dc411b90f73e7eb0391ad372be5c5701acd97fa67aeefc8347ec24071f4a5af78ea30b0e3c4171eff58bcf976022b363d9d6d3be78d12b6afd47c8ca6e9e5032df8da904f85e2b6b130dbb484f45a8d3a0c61f431932caa843eb5cc79cd741e0119a9deb81bfa1e9217b1be19242e8fe489fe6a0d03ac85f11bb4c6d029f0091110917e1bd175d1382d341eb56d0645f4056442c20c398d9c1b6acd8b55c4cc272ba50cacfb06473577ba82c3c518628c86c3df02a8479a00574e46a711fce33db"}}}}, 0xfdef)

1.221291833s ago: executing program 0 (id=1406):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil)
read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020)

985.403516ms ago: executing program 6 (id=1407):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)

866.279908ms ago: executing program 2 (id=1408):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)={0x1c, r2, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0x13c}]}, 0x1c}}, 0x0)

763.80925ms ago: executing program 2 (id=1409):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

658.046961ms ago: executing program 2 (id=1410):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x5, 0x1517, &(0x7f0000001300)="$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")
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x440, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
rmdir(&(0x7f0000000100)='./control\x00')

630.405561ms ago: executing program 3 (id=1411):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="1800000000000000290000003b000000850000000000000018"], 0x30}, 0x24000004)

437.379004ms ago: executing program 3 (id=1412):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

397.198955ms ago: executing program 2 (id=1413):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})

225.409557ms ago: executing program 0 (id=1414):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x47, 0xc23, &(0x7f0000000c80)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0)

222.574817ms ago: executing program 3 (id=1415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000191"], 0xfdef)

0s ago: executing program 6 (id=1416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000480)=@generic={0x0, r1}, 0x18)

kernel console output (not intermixed with test programs):

0x7ffc0000
[  187.731821][   T28] audit: type=1326 audit(1752526032.290:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464c32ab19 code=0x7ffc0000
[  187.812089][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  187.830533][   T28] audit: type=1326 audit(1752526032.290:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464c32ab19 code=0x7ffc0000
[  187.954755][   T28] audit: type=1326 audit(1752526032.290:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464c32ab19 code=0x7ffc0000
[  188.071845][   T28] audit: type=1326 audit(1752526032.290:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f464c32ab19 code=0x7ffc0000
[  189.289640][ T7852] loop2: detected capacity change from 0 to 512
[  189.303004][ T7852] EXT4-fs: Ignoring removed orlov option
[  189.324221][ T7852] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  189.371810][ T7852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  189.472014][ T7852] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.497: corrupted in-inode xattr: e_value size too large
[  189.575123][ T7852] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.497: couldn't read orphan inode 15 (err -117)
[  189.606240][ T7852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.802055][ T7852] System zones: 1-12
[  189.806844][ T7852] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  189.825173][ T7847] loop5: detected capacity change from 0 to 32768
[  189.977259][ T7847] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.026938][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.477375][ T7847] XFS (loop5): Ending clean mount
[  190.506765][ T7847] XFS (loop5): Quotacheck needed: Please wait.
[  190.623052][ T7847] XFS (loop5): Quotacheck: Done.
[  190.964349][ T6899] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.808346][ T7899] loop2: detected capacity change from 0 to 32768
[  191.932053][ T7899] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.149951][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'.
[  192.579777][ T7899] XFS (loop2): Ending clean mount
[  192.596633][ T7899] XFS (loop2): Quotacheck needed: Please wait.
[  192.759589][ T7899] XFS (loop2): Quotacheck: Done.
[  193.259702][ T5797] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.451457][    T8] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  193.629389][ T7944] loop2: detected capacity change from 0 to 256
[  193.649953][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.650011][ T7944] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  193.681760][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.709908][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  193.719392][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.751744][    T8] usb 1-1: Product: syz
[  193.755994][    T8] usb 1-1: Manufacturer: syz
[  193.760632][    T8] usb 1-1: SerialNumber: syz
[  194.048808][    T8] usb 1-1: 0:2 : does not exist
[  194.062094][    T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  194.098673][ T7942] loop5: detected capacity change from 0 to 40427
[  194.113352][    T8] usb 1-1: USB disconnect, device number 10
[  194.178522][ T7942] F2FS-fs (loop5): Found nat_bits in checkpoint
[  194.195047][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.286936][ T7942] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  194.337544][ T7942] syz.5.528: attempt to access beyond end of device
[  194.337544][ T7942] loop5: rw=2049, sector=53248, nr_sectors = 136 limit=40427
[  194.414881][ T6899] syz-executor: attempt to access beyond end of device
[  194.414881][ T6899] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  194.433674][ T6899] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  194.688983][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.697405][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  195.060592][ T7961] all (unregistering): Released all slaves
[  195.108638][ T7966] netlink: 'syz.3.536': attribute type 16 has an invalid length.
[  195.118251][ T7966] netlink: 'syz.3.536': attribute type 3 has an invalid length.
[  195.128367][ T7966] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.536'.
[  195.811896][    T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  196.014750][    T8] usb 6-1: Using ep0 maxpacket: 16
[  196.035885][    T8] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  196.050503][    T8] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  196.061755][    T8] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  196.070169][    T8] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  196.081576][    T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  196.091592][    T8] usb 6-1: config 0 has no interface number 0
[  196.100273][    T8] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  196.111435][    T8] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  196.121451][    T8] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  196.131786][    T8] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  196.149371][    T8] usb 6-1: config 0 interface 125 has no altsetting 0
[  196.157915][    T8] usb 6-1: config 0 interface 125 has no altsetting 2
[  196.167825][    T8] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  196.177048][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.186909][    T8] usb 6-1: Product: syz
[  196.191123][    T8] usb 6-1: Manufacturer: syz
[  196.195870][    T8] usb 6-1: SerialNumber: syz
[  196.223655][    T8] usb 6-1: config 0 descriptor??
[  196.235407][    T8] usb 6-1: selecting invalid altsetting 2
[  197.069425][    T8] parport0: fix this legacy no-device port driver!
[  197.341168][    T8] usb 6-1: USB disconnect, device number 4
[  197.370248][ T5780] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  197.585430][ T5780] usb 3-1: config 171 has an invalid interface number: 109 but max is 0
[  197.604745][ T5780] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[  197.644352][ T5780] usb 3-1: config 171 has no interface number 0
[  197.661023][ T5780] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[  197.684660][ T5780] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 768, setting to 64
[  197.708132][ T5780] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  197.724957][ T5780] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[  197.739598][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.747900][ T5780] usb 3-1: Product: syz
[  197.756768][ T5780] usb 3-1: Manufacturer: syz
[  197.761430][ T5780] usb 3-1: SerialNumber: syz
[  197.777677][ T8000] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  198.045636][ T5780] ath6kl: Failed to submit usb control message: -71
[  198.058889][ T5780] ath6kl: unable to send the bmi data to the device: -71
[  198.070495][ T5780] ath6kl: Unable to send get target info: -71
[  198.098047][ T5780] ath6kl: Failed to init ath6kl core: -71
[  198.107904][ T5780] ath6kl_usb: probe of 3-1:171.109 failed with error -71
[  198.149667][ T5780] usb 3-1: USB disconnect, device number 6
[  198.312531][ T5836] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0
[  198.324384][ T5836] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0
[  198.348286][ T5836] hid-generic 0000:0003:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  198.525387][ T8025] fido_id[8025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  198.617283][ T8029] input: syz1 as /devices/virtual/input/input6
[  198.814347][ T8033] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  198.839328][ T8033] macvtap1: entered allmulticast mode
[  198.871878][ T8033] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  198.886946][ T8033] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  198.908359][ T8033] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  198.948967][ T8037] netlink: 300 bytes leftover after parsing attributes in process `syz.0.567'.
[  199.702013][ T5836] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  199.902159][ T5836] usb 3-1: Using ep0 maxpacket: 32
[  199.914090][ T5836] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  199.932981][ T5836] usb 3-1: config 0 has no interface number 0
[  199.951852][ T5836] usb 3-1: config 0 interface 184 has no altsetting 0
[  199.979610][ T5836] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  199.989086][ T5836] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3
[  200.013108][ T5836] usb 3-1: Product: syz
[  200.017371][ T5836] usb 3-1: Manufacturer: syz
[  200.062472][ T5836] usb 3-1: SerialNumber: syz
[  200.074663][ T5836] usb 3-1: config 0 descriptor??
[  200.087327][ T5836] smsc75xx v1.0.0
[  200.716990][ T5836] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  200.746670][ T5836] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  200.969544][ T5836] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  201.007294][ T5836] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  201.028581][ T5836] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  201.034792][ T8079] loop5: detected capacity change from 0 to 1024
[  201.045351][ T5836] smsc75xx: probe of 3-1:0.184 failed with error -71
[  201.068600][ T5836] usb 3-1: USB disconnect, device number 7
[  201.128344][ T8079] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  201.256014][ T8079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.355110][ T8079] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.451919][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  201.526306][ T6899] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.653841][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.668545][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.704617][ T5857] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  201.732878][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.804057][ T5857] usb 1-1: config 0 descriptor??
[  202.063930][ T5857] usbhid 1-1:0.0: can't add hid device: -71
[  202.070030][ T5857] usbhid: probe of 1-1:0.0 failed with error -71
[  202.095408][ T5857] usb 1-1: USB disconnect, device number 11
[  202.491915][ T5843] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  202.538387][ T8095] loop5: detected capacity change from 0 to 40427
[  202.549447][ T8095] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  202.557972][ T8095] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  202.579112][ T8095] F2FS-fs (loop5): invalid crc value
[  202.616342][ T8095] F2FS-fs (loop5): Found nat_bits in checkpoint
[  202.641822][ T5857] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  202.695082][ T5843] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  202.712888][ T5843] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  202.724048][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  202.740808][ T5843] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  202.757778][ T8095] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  202.766084][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  202.777379][ T8095] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  202.786307][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  202.797536][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  202.815921][ T5843] usb 4-1: string descriptor 0 read error: -22
[  202.832892][ T5843] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  202.851763][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.861785][ T5857] usb 1-1: Using ep0 maxpacket: 16
[  202.869670][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.881939][ T5843] usb 4-1: config 0 descriptor??
[  202.913302][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.927284][   T28] kauditd_printk_skb: 166 callbacks suppressed
[  202.927302][   T28] audit: type=1800 audit(1752526048.170:200): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.594" name="file1" dev="loop5" ino=10 res=0 errno=0
[  202.955406][ T5843] hub 4-1:0.0: bad descriptor, ignoring hub
[  202.962177][ T5843] hub: probe of 4-1:0.0 failed with error -5
[  202.970359][ T5857] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40
[  202.986838][ T5843] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  202.999202][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.010760][ T5857] usb 1-1: config 0 descriptor??
[  203.245881][   T27] usb 4-1: USB disconnect, device number 7
[  203.445760][ T5857] kye 0003:0458:5016.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  203.475929][ T5857] kye 0003:0458:5016.0008: unknown main item tag 0x0
[  203.495071][ T5857] kye 0003:0458:5016.0008: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0
[  203.515066][ T5857] kye 0003:0458:5016.0008: tablet-enabling feature report not found
[  203.524213][ T5857] kye 0003:0458:5016.0008: tablet enabling failed
[  203.665468][ T8119] loop5: detected capacity change from 0 to 256
[  203.723301][ T5780] usb 1-1: USB disconnect, device number 12
[  203.758583][ T8119] FAT-fs (loop5): Directory bread(block 64) failed
[  203.769225][ T8119] FAT-fs (loop5): Directory bread(block 65) failed
[  203.777231][ T8119] FAT-fs (loop5): Directory bread(block 66) failed
[  203.784510][ T8119] FAT-fs (loop5): Directory bread(block 67) failed
[  203.791278][ T8119] FAT-fs (loop5): Directory bread(block 68) failed
[  203.800421][ T8119] FAT-fs (loop5): Directory bread(block 69) failed
[  203.807596][ T8119] FAT-fs (loop5): Directory bread(block 70) failed
[  203.815395][ T8119] FAT-fs (loop5): Directory bread(block 71) failed
[  203.822457][ T8119] FAT-fs (loop5): Directory bread(block 72) failed
[  203.829128][ T8119] FAT-fs (loop5): Directory bread(block 73) failed
[  203.971174][   T28] audit: type=1800 audit(1752526049.220:201): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.602" name="file0" dev="loop5" ino=1048615 res=0 errno=0
[  203.981038][ T8119] syz.5.602: attempt to access beyond end of device
[  203.981038][ T8119] loop5: rw=0, sector=1160, nr_sectors = 4 limit=256
[  204.103993][   T28] audit: type=1800 audit(1752526049.360:202): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.602" name="file0" dev="loop5" ino=1048615 res=0 errno=0
[  204.249773][ T8129] syz.3.606 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  204.283810][ T5780] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  204.473826][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.502006][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.536237][ T5780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  204.571905][ T5780] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  204.602422][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.623859][ T5780] usb 3-1: config 0 descriptor??
[  204.727897][ T8141] loop5: detected capacity change from 0 to 256
[  205.078194][ T5780] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  205.111886][ T5780] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  205.146815][ T5780] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  205.458146][ T8149] process '/newroot/152/file0' started with executable stack
[  205.665241][ T8155] program syz.3.617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  206.044716][ T8161] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  208.429878][ T1098] tipc: Subscription rejected, illegal request
[  209.332748][ T5843] usb 3-1: USB disconnect, device number 8
[  211.021687][    C1] sched: RT throttling activated
[  213.163254][ T8202] loop2: detected capacity change from 0 to 32768
[  213.188613][ T8202] (syz.2.636,8202,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  213.236767][ T8202] (syz.2.636,8202,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  213.389117][ T8202] JBD2: Ignoring recovery information on journal
[  213.549426][ T8202] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  214.013411][ T5797] ocfs2: Unmounting device (7,2) on (node local)
[  214.301799][ T5780] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  214.355157][ T8233] loop2: detected capacity change from 0 to 512
[  214.399675][ T8233] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.647: Invalid block bitmap block 0 in block_group 0
[  214.435896][ T8233] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  214.490358][ T8233] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.647: attempt to clear invalid blocks 983261 len 1
[  214.515060][ T8233] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.647: invalid indirect mapped block 2683928664 (level 0)
[  214.522816][ T5780] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  214.560160][ T5780] usb 4-1: config 0 interface 0 has no altsetting 0
[  214.579219][ T8233] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.647: Invalid inode table block 0 in block_group 0
[  214.584921][ T5780] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  214.621913][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  214.631317][ T8233] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  214.640555][ T5780] usb 4-1: Product: syz
[  214.645094][ T5780] usb 4-1: Manufacturer: syz
[  214.649741][ T5780] usb 4-1: SerialNumber: syz
[  214.675306][ T8233] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  214.692422][ T8233] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.647: Invalid inode table block 0 in block_group 0
[  214.709331][ T5780] usb 4-1: config 0 descriptor??
[  214.709610][ T8233] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  214.731765][ T8233] EXT4-fs error (device loop2): ext4_truncate:4288: inode #13: comm syz.2.647: mark_inode_dirty error
[  214.739489][ T5780] usb 4-1: selecting invalid altsetting 0
[  214.750975][ T8233] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  214.772463][ T8240] syzkaller1: entered promiscuous mode
[  214.778002][ T8240] syzkaller1: entered allmulticast mode
[  214.783932][ T8233] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.647: Invalid inode table block 0 in block_group 0
[  214.820422][ T8233] EXT4-fs (loop2): 1 truncate cleaned up
[  214.845583][ T8233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.083074][ T5780] usb 4-1: USB disconnect, device number 8
[  215.186217][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.820947][ T8257] netlink: 'syz.5.658': attribute type 21 has an invalid length.
[  215.872164][ T8257] netlink: 176 bytes leftover after parsing attributes in process `syz.5.658'.
[  216.205110][ T5857] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  216.417628][ T5857] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  216.444206][ T5857] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  216.471784][ T5857] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  216.499080][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.535833][ T8260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  216.580532][ T5857] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  217.025497][ T5833] usb 3-1: USB disconnect, device number 9
[  217.126879][ T8282] loop5: detected capacity change from 0 to 256
[  217.201007][ T8282] FAT-fs (loop5): Directory bread(block 64) failed
[  217.221801][ T8282] FAT-fs (loop5): Directory bread(block 65) failed
[  217.246041][ T8282] FAT-fs (loop5): Directory bread(block 66) failed
[  217.274298][ T8282] FAT-fs (loop5): Directory bread(block 67) failed
[  217.281038][ T8282] FAT-fs (loop5): Directory bread(block 68) failed
[  217.312067][ T8282] FAT-fs (loop5): Directory bread(block 69) failed
[  217.327513][ T8282] FAT-fs (loop5): Directory bread(block 70) failed
[  217.339118][ T8282] FAT-fs (loop5): Directory bread(block 71) failed
[  217.347841][ T8282] FAT-fs (loop5): Directory bread(block 72) failed
[  217.355108][ T8282] FAT-fs (loop5): Directory bread(block 73) failed
[  218.878673][ T8316] loop5: detected capacity change from 0 to 256
[  218.929628][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[  219.588856][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.784912][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.889856][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.050198][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.509865][ T8336] loop2: detected capacity change from 0 to 512
[  220.620503][   T11] tipc: Left network mode
[  220.647120][ T8336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.745447][ T8336] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  221.192703][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.207708][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.216730][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.226804][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.251472][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.260766][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.292426][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.101773][ T5843] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  222.282078][ T5843] usb 1-1: Using ep0 maxpacket: 32
[  222.304439][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.341802][ T5843] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  222.377769][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  222.410395][ T5843] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  222.439263][ T5843] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26
[  222.467429][ T5843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.477249][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  222.488921][ T5843] usb 1-1: SerialNumber: syz
[  222.499329][ T8372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.888402][ T5843] usb 1-1: USB disconnect, device number 13
[  222.898991][ T8395] loop2: detected capacity change from 0 to 2048
[  222.913383][ T8395] hpfs: bad mount options.
[  222.982293][ T5789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  223.074370][ T8353] chnl_net:caif_netlink_parms(): no params data found
[  223.325540][ T5793] Bluetooth: hci0: command tx timeout
[  224.237577][ T8429] netlink: 84 bytes leftover after parsing attributes in process `syz.3.718'.
[  224.473510][   T11] hsr_slave_0: left promiscuous mode
[  224.479947][   T11] hsr_slave_1: left promiscuous mode
[  224.497467][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.516143][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.540371][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.573572][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.597908][   T11] bridge_slave_1: left allmulticast mode
[  224.612238][   T11] bridge_slave_1: left promiscuous mode
[  224.630886][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.648123][   T11] bridge_slave_0: left allmulticast mode
[  224.657812][   T11] bridge_slave_0: left promiscuous mode
[  224.669701][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.751304][   T11] veth1_macvtap: left promiscuous mode
[  224.773896][   T11] veth0_macvtap: left promiscuous mode
[  224.785642][   T11] veth1_vlan: left promiscuous mode
[  224.791090][   T11] veth0_vlan: left promiscuous mode
[  225.405255][ T5793] Bluetooth: hci0: command tx timeout
[  225.531946][   T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  225.744093][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.772385][   T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  225.784687][   T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  225.811750][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  225.820365][   T23] usb 1-1: SerialNumber: syz
[  226.072404][   T23] usb 1-1: 0:2 : does not exist
[  226.108239][   T23] usb 1-1: USB disconnect, device number 14
[  226.148624][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.430925][   T11] team0 (unregistering): Port device team_slave_1 removed
[  226.567720][   T11] team0 (unregistering): Port device team_slave_0 removed
[  226.718338][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.970359][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.224753][   T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  227.381817][ T5836] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  227.441794][   T23] usb 3-1: Using ep0 maxpacket: 16
[  227.462810][   T23] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  227.483672][ T5793] Bluetooth: hci0: command tx timeout
[  227.487146][   T23] usb 3-1: config 0 has no interface number 0
[  227.506584][   T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  227.538451][   T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  227.561435][   T23] usb 3-1: config 0 interface 41 has no altsetting 0
[  227.573785][ T5836] usb 1-1: Using ep0 maxpacket: 16
[  227.574902][   T23] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  227.581490][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.598849][ T5836] usb 1-1: config 0 has no interfaces?
[  227.599732][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.617140][   T23] usb 3-1: Product: syz
[  227.618774][ T5836] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  227.621441][   T23] usb 3-1: Manufacturer: syz
[  227.630659][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.634529][ T5836] usb 1-1: config 0 descriptor??
[  227.652306][   T23] usb 3-1: SerialNumber: syz
[  227.713200][   T23] usb 3-1: config 0 descriptor??
[  227.719284][ T8475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  227.735687][ T8475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  227.953202][ T8475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  227.960704][ T8475] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  227.964889][   T11] bond0 (unregistering): Released all slaves
[  228.010009][ T5836] usb 1-1: USB disconnect, device number 15
[  228.201914][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.209367][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.222180][ T8353] bridge_slave_0: entered allmulticast mode
[  228.231443][ T8353] bridge_slave_0: entered promiscuous mode
[  228.255567][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.277602][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.286993][ T8353] bridge_slave_1: entered allmulticast mode
[  228.307187][ T8353] bridge_slave_1: entered promiscuous mode
[  228.377935][   T23] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  228.431584][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.477339][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.622815][ T8353] team0: Port device team_slave_0 added
[  228.654616][ T8353] team0: Port device team_slave_1 added
[  228.783425][   T23] dm9601 3-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID
[  228.827891][   T23] sr9700: probe of 3-1:0.41 failed with error -71
[  228.851424][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.862794][   T23] usb 3-1: USB disconnect, device number 10
[  228.890703][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.978751][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.006112][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.031787][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.115314][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.453169][ T8353] hsr_slave_0: entered promiscuous mode
[  229.506935][ T8353] hsr_slave_1: entered promiscuous mode
[  229.561860][ T5793] Bluetooth: hci0: command tx timeout
[  230.350934][ T8353] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  230.386960][ T8353] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  230.433105][ T8353] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  230.487420][ T8353] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  230.804966][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.866718][ T8353] 8021q: adding VLAN 0 to HW filter on device team0
[  230.909787][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.917067][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.996487][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.003792][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.525741][ T8526] loop2: detected capacity change from 0 to 32768
[  231.637958][ T8526] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  231.836891][ T8526] XFS (loop2): Ending clean mount
[  231.857597][ T8526] XFS (loop2): Quotacheck needed: Please wait.
[  232.004086][ T8526] XFS (loop2): Quotacheck: Done.
[  232.156804][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.333196][ T8574] netlink: 14 bytes leftover after parsing attributes in process `syz.0.755'.
[  232.371002][ T5797] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  233.325019][ T8574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.380675][ T8574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.433197][ T8574] bond0 (unregistering): Released all slaves
[  233.542384][ T8590] syzkaller1: entered promiscuous mode
[  233.547954][ T8590] syzkaller1: entered allmulticast mode
[  234.270054][ T8353] veth0_vlan: entered promiscuous mode
[  234.349944][ T8353] veth1_vlan: entered promiscuous mode
[  234.430167][ T8624] sch_tbf: burst 32854 is lower than device lo mtu (65550) !
[  234.488297][ T8353] veth0_macvtap: entered promiscuous mode
[  234.525242][ T8353] veth1_macvtap: entered promiscuous mode
[  234.618306][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.631793][ T5843] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  234.672548][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.701821][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.739399][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.771923][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.800071][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.833208][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.851756][ T5843] usb 1-1: Using ep0 maxpacket: 8
[  234.860085][ T5843] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  234.873877][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.888389][ T5843] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  234.908165][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.921802][ T5843] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  234.938615][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.950906][ T5843] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.964888][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.977983][ T5843] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  234.990582][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.998039][ T5843] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  235.020521][ T8353] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.035643][ T5843] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  235.048110][ T8353] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.057635][ T5843] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  235.061851][ T5833] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  235.071886][ T8353] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.088228][ T8353] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.098400][ T5843] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  235.117505][ T5843] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  235.144566][ T5843] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  235.171174][ T5843] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  235.237586][ T5843] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  235.263308][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.282089][ T5843] usb 1-1: Product: syz
[  235.291016][ T5843] usb 1-1: Manufacturer: syz
[  235.302687][ T5843] usb 1-1: SerialNumber: syz
[  235.306539][ T5833] usb 3-1: Using ep0 maxpacket: 32
[  235.331888][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.339815][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.371218][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.412259][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.442719][ T5833] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  235.450249][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.472221][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.483119][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.505157][ T5833] usb 3-1: config 0 descriptor??
[  235.566562][ T5843] adutux 1-1:168.0: interrupt endpoints not found
[  235.591394][ T5843] usb 1-1: USB disconnect, device number 16
[  236.010050][ T5833] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  236.374351][    T8] usb 3-1: USB disconnect, device number 11
[  236.932823][   T28] audit: type=1326 audit(1752526082.190:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.021778][   T28] audit: type=1326 audit(1752526082.190:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.119321][   T28] audit: type=1326 audit(1752526082.200:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.213086][   T28] audit: type=1326 audit(1752526082.200:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.299951][   T28] audit: type=1326 audit(1752526082.200:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.385732][   T28] audit: type=1326 audit(1752526082.210:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.489056][   T28] audit: type=1326 audit(1752526082.210:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.607681][   T28] audit: type=1326 audit(1752526082.210:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.672035][   T28] audit: type=1326 audit(1752526082.210:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.728835][ T8679] loop6: detected capacity change from 0 to 256
[  237.760140][ T8679] exfat: Deprecated parameter 'namecase'
[  237.794393][   T28] audit: type=1326 audit(1752526082.220:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8663 comm="syz.6.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  237.832937][ T8679] exfat: Deprecated parameter 'namecase'
[  237.877146][ T8679] exfat: Deprecated parameter 'utf8'
[  237.957033][ T8679] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d)
[  238.397155][ T8692] netlink: 32 bytes leftover after parsing attributes in process `syz.6.784'.
[  239.514225][ T8723] netlink: 'syz.0.793': attribute type 3 has an invalid length.
[  239.572219][ T5843] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  239.737604][ T8730] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  239.800109][ T5843] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  239.839593][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.896803][ T5843] usb 3-1: config 0 descriptor??
[  239.934266][ T5843] cp210x 3-1:0.0: cp210x converter detected
[  240.398956][ T5843] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  240.669615][ T5843] usb 3-1: cp210x converter now attached to ttyUSB0
[  240.937137][   T23] usb 3-1: USB disconnect, device number 12
[  240.970799][   T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  241.021630][   T23] cp210x 3-1:0.0: device disconnected
[  241.323125][    T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  241.336121][ T8763] loop6: detected capacity change from 0 to 256
[  241.532288][    T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  241.564069][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.620983][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.651620][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  241.690794][    T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  241.704130][    T8] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  241.719904][    T8] usb 1-1: Manufacturer: syz
[  241.738826][    T8] usb 1-1: config 0 descriptor??
[  241.750342][ T8769] loop6: detected capacity change from 0 to 1024
[  241.839864][ T8769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.891960][ T8769] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.944841][ T8768] loop2: detected capacity change from 0 to 4096
[  242.012947][ T8768] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  242.146036][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  242.146085][   T28] audit: type=1804 audit(1752526087.400:215): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.806" name="/newroot/14/file1/file1" dev="loop6" ino=15 res=1 errno=0
[  242.240986][ T8777] EXT4-fs error (device loop6): ext4_free_blocks:6681: comm syz.6.806: Freeing blocks not in datazone - block = 0, count = 16
[  242.268565][    T8] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  242.290702][    T8] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  242.337549][    T8] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  242.625249][ T5843] usb 1-1: USB disconnect, device number 17
[  242.659986][ T8353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.978864][ T8793] loop6: detected capacity change from 0 to 1024
[  243.032536][ T8793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.244735][ T8353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.651867][  T965] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  244.842345][  T965] usb 4-1: Using ep0 maxpacket: 32
[  244.863120][  T965] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.882151][  T965] usb 4-1: config 0 interface 0 has no altsetting 0
[  244.902716][  T965] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  244.920073][  T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.951383][  T965] usb 4-1: config 0 descriptor??
[  245.425564][  T965] logitech 0003:046D:C50C.000C: unexpected long global item
[  245.448555][  T965] logitech 0003:046D:C50C.000C: parse failed
[  245.465543][  T965] logitech: probe of 0003:046D:C50C.000C failed with error -22
[  245.669547][  T965] usb 4-1: USB disconnect, device number 9
[  246.147384][ T8850] loop2: detected capacity change from 0 to 64
[  247.030536][ T8873] netlink: 88 bytes leftover after parsing attributes in process `syz.0.844'.
[  247.060707][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'.
[  247.130631][ T8875] loop2: detected capacity change from 0 to 1024
[  247.343932][ T8875] hfsplus: invalid extended attribute record
[  247.368216][ T8875] hfsplus: can't free extent
[  247.499888][   T12] hfsplus: b-tree write err: -5, ino 4
[  247.778628][ T8861] loop6: detected capacity change from 0 to 32768
[  247.892307][ T8861] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  247.940616][ T8890] Illegal XDP return value 4294967274 on prog  (id 135) dev N/A, expect packet loss!
[  248.461383][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'.
[  248.480703][ T8894] netlink: 'syz.3.852': attribute type 30 has an invalid length.
[  248.505336][ T8894] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.515186][ T8894] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.524218][ T8894] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.533016][ T8894] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.592758][ T8353] ocfs2: Unmounting device (7,6) on (node local)
[  248.920158][ T8898] netlink: 'syz.3.854': attribute type 2 has an invalid length.
[  249.251885][   T28] audit: type=1326 audit(1752526094.500:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8907 comm="syz.2.857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f464c38e929 code=0x0
[  250.355360][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  250.367246][ T8943] loop6: detected capacity change from 0 to 512
[  250.421923][ T8943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  250.475222][ T8943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  250.527113][ T8943] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.873: invalid indirect mapped block 4294967295 (level 1)
[  250.631077][ T8943] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.873: invalid indirect mapped block 4294967295 (level 1)
[  250.722092][ T8943] EXT4-fs (loop6): 2 truncates cleaned up
[  250.733983][ T8943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.781847][  T965] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  250.823789][ T8942] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.873: bg 0: block 5: invalid block bitmap
[  251.034604][ T8353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.054257][  T965] usb 4-1: Using ep0 maxpacket: 32
[  251.115338][  T965] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  251.124198][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  251.148569][  T965] usb 4-1: config 0 has no interface number 0
[  251.173427][  T965] usb 4-1: config 0 interface 184 has no altsetting 0
[  251.224258][  T965] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  251.245067][  T965] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3
[  251.358952][  T965] usb 4-1: Product: syz
[  251.368871][  T965] usb 4-1: Manufacturer: syz
[  251.377493][  T965] usb 4-1: SerialNumber: syz
[  251.393047][  T965] usb 4-1: config 0 descriptor??
[  251.456162][  T965] smsc75xx v1.0.0
[  251.722765][ T8940] loop2: detected capacity change from 0 to 32768
[  251.809520][ T8940] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.849892][   T28] audit: type=1326 audit(1752526097.100:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d7fd2ab19 code=0x7ffc0000
[  251.872536][   T28] audit: type=1326 audit(1752526097.100:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7fd8e929 code=0x7ffc0000
[  251.901940][   T28] audit: type=1326 audit(1752526097.100:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7fd8e929 code=0x7ffc0000
[  251.963473][   T28] audit: type=1326 audit(1752526097.100:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7fd8e929 code=0x7ffc0000
[  251.990479][   T28] audit: type=1326 audit(1752526097.150:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d7fd2ab19 code=0x7ffc0000
[  252.013331][   T28] audit: type=1326 audit(1752526097.150:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d7fd2ab19 code=0x7ffc0000
[  252.036914][   T28] audit: type=1326 audit(1752526097.150:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d7fd2ab19 code=0x7ffc0000
[  252.081599][   T28] audit: type=1326 audit(1752526097.150:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d7fd2ab19 code=0x7ffc0000
[  252.151929][  T965] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  252.179123][   T28] audit: type=1326 audit(1752526097.150:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d7fd2ab19 code=0x7ffc0000
[  252.215882][ T8940] XFS (loop2): Ending clean mount
[  252.229184][  T965] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  252.239477][ T8940] XFS (loop2): Quotacheck needed: Please wait.
[  252.383911][ T8940] XFS (loop2): Quotacheck: Done.
[  252.488117][  T965] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  252.500383][  T965] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  252.515556][  T965] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  252.582040][  T965] smsc75xx: probe of 4-1:0.184 failed with error -71
[  252.626825][  T965] usb 4-1: USB disconnect, device number 10
[  252.917413][ T5797] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  255.262587][ T9055] netlink: 48 bytes leftover after parsing attributes in process `syz.2.901'.
[  256.019081][ T9038] loop6: detected capacity change from 0 to 40427
[  256.054747][ T9038] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  256.097287][ T9038] F2FS-fs (loop6): Image doesn't support compression
[  256.113663][ T9038] F2FS-fs (loop6): Image doesn't support compression
[  256.129698][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  256.136124][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  256.188641][ T9038] F2FS-fs (loop6): invalid crc value
[  256.283305][ T9038] F2FS-fs (loop6): Found nat_bits in checkpoint
[  256.542122][ T9038] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  256.668124][   T28] kauditd_printk_skb: 120 callbacks suppressed
[  256.668141][   T28] audit: type=1800 audit(1752526101.920:346): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.896" name="file1" dev="loop6" ino=10 res=0 errno=0
[  256.683607][ T9038] syz.6.896: attempt to access beyond end of device
[  256.683607][ T9038] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  256.784646][ T9038] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  259.643333][ T9174] netlink: 'syz.3.936': attribute type 11 has an invalid length.
[  260.602183][ T5836] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  260.804783][ T5836] usb 1-1: Using ep0 maxpacket: 8
[  260.832728][ T5836] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  260.861816][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.869902][ T5836] usb 1-1: Product: syz
[  260.908156][ T5836] usb 1-1: Manufacturer: syz
[  260.915363][ T5836] usb 1-1: SerialNumber: syz
[  260.948180][ T5836] usb 1-1: config 0 descriptor??
[  260.976189][ T5836] gspca_main: se401-2.14.0 probing 047d:5003
[  261.253911][ T9225] loop2: detected capacity change from 0 to 2048
[  261.332462][ T9227] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.343329][  T965] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  261.403457][ T5836] gspca_se401: ExtraFeatures: 255
[  261.421091][ T5836] gspca_se401: Frame size: 2314x0 bayer
[  261.437509][ T5836] gspca_se401: Frame size: 0x65535 bayer
[  261.446315][ T5836] gspca_se401: Frame size: 224x512 bayer
[  261.462735][ T5836] gspca_se401: Frame size: 0x0 1/16th janggu
[  261.487479][ T5836] gspca_se401: Frame size: 0x0 1/16th janggu
[  261.501745][ T5836] gspca_se401: Frame size: 0x0 1/16th janggu
[  261.515610][ T9227] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  261.532579][ T5836] gspca_se401: Frame size: 0x0 1/16th janggu
[  261.538653][ T5836] gspca_se401: Frame size: 0x0 1/16th janggu
[  261.571945][  T965] usb 7-1: Using ep0 maxpacket: 8
[  261.579615][ T9227] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  261.589651][  T965] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  261.589682][  T965] usb 7-1: config 0 has no interface number 0
[  261.589776][  T965] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  261.619542][ T5836] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  261.664936][  T965] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  261.680727][ T9227] Remounting filesystem read-only
[  261.701419][ T9225] loop7: detected capacity change from 0 to 6
[  261.718110][  T965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.728561][ T5836] usb 1-1: USB disconnect, device number 18
[  261.742289][ T9225] Dev loop7: unable to read RDB block 6
[  261.791832][ T9225]  loop7: unable to read partition table
[  261.799544][ T9225] loop7: partition table beyond EOD, truncated
[  261.824141][ T9225] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[  261.838437][  T965] usb 7-1: config 0 descriptor??
[  262.015474][  T965] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  262.019786][ T5797] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  262.084061][ T5797] NILFS (loop2): discard dirty page: offset=0, ino=2
[  262.115279][ T5797] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  262.127395][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.136902][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.152058][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.161556][ T5797] NILFS (loop2): discard dirty page: offset=0, ino=18
[  262.177699][ T5797] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  262.203712][ T5797] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  262.228334][ T5797] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  262.270570][ T5797] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  262.296763][ T5836] usb 7-1: USB disconnect, device number 2
[  262.301982][ T5797] NILFS (loop2): discard dirty page: offset=0, ino=6
[  262.309458][ T5797] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  262.351054][ T5797] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  262.385886][ T5797] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  262.411922][ T5797] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  262.419492][ T5797] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  262.448756][ T5797] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  262.473014][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.493083][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.507044][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.518475][ T5797] NILFS (loop2): discard dirty page: offset=0, ino=5
[  262.536620][ T5797] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  262.536748][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'.
[  262.553350][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.558032][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.574473][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.586872][ T5797] NILFS (loop2): discard dirty page: offset=0, ino=4
[  262.597967][ T5797] NILFS (loop2): discard dirty block: blocknr=40, size=1024
[  262.607994][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.629502][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.639764][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.682128][ T5797] NILFS (loop2): discard dirty page: offset=0, ino=3
[  262.712232][ T5797] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  262.719616][ T5797] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  262.752671][ T5797] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  262.760163][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.789598][ T5797] NILFS (loop2): discard dirty page: offset=65536, ino=3
[  262.822842][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.871795][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.880733][ T5797] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  262.942763][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  262.982765][ T5797] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  262.990182][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  263.091186][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  263.110705][ T5797] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  263.128987][ T5797] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  263.145483][ T9267] netlink: 'syz.0.955': attribute type 12 has an invalid length.
[  263.183230][ T9267] netlink: 'syz.0.955': attribute type 29 has an invalid length.
[  263.191054][ T9267] netlink: 148 bytes leftover after parsing attributes in process `syz.0.955'.
[  263.232321][ T9267] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  263.419505][ T9272] input: syz1 as /devices/virtual/input/input9
[  263.736499][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.960'.
[  264.004181][ T9285] loop2: detected capacity change from 0 to 8192
[  264.035797][ T9285] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  264.061731][ T9285] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  264.080765][ T9285] REISERFS (device loop2): using ordered data mode
[  264.087867][ T9285] reiserfs: using flush barriers
[  264.097795][ T9285] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  264.118665][ T9285] REISERFS (device loop2): checking transaction log (loop2)
[  264.141524][ T9285] REISERFS (device loop2): Using rupasov hash to sort names
[  264.186875][ T9285] REISERFS (device loop2): using 3.5.x disk format
[  264.222147][ T9285] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  264.272115][ T9285] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  264.333604][ T9285] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  264.401792][ T9285] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  264.442141][ T9285] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  264.565697][ T9285] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  264.618217][ T9285] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  264.662365][ T9285] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  264.735261][ T9305] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  265.307945][ T9295] loop6: detected capacity change from 0 to 32768
[  265.349578][ T9295] 
[  265.349578][ T9295]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.349578][ T9295] 
[  265.504596][ T1092] 
[  265.504596][ T1092]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.504596][ T1092] 
[  265.517200][ T1092] 
[  265.517200][ T1092]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.517200][ T1092] 
[  265.528719][ T1092] 
[  265.528719][ T1092]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.528719][ T1092] 
[  265.541049][ T9295] 
[  265.541049][ T9295]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.541049][ T9295] 
[  265.565648][  T111] 
[  265.565648][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.565648][  T111] 
[  265.586158][ T9295] 
[  265.586158][ T9295]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.586158][ T9295] 
[  265.602946][ T9316] ERROR: (device loop6): diWrite: ixpxd invalid
[  265.602946][ T9316] 
[  265.634588][ T9316] ERROR: (device loop6): txCommit: 
[  265.634588][ T9316] 
[  265.661621][ T9316] 
[  265.661621][ T9316]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.661621][ T9316] 
[  265.757747][ T8353] 
[  265.757747][ T8353]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.757747][ T8353] 
[  265.779863][ T8353] 
[  265.779863][ T8353]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.779863][ T8353] 
[  266.363461][ T9328] loop8: detected capacity change from 0 to 8
[  266.407563][ T9328] Dev loop8: unable to read RDB block 8
[  266.431828][ T9328]  loop8: unable to read partition table
[  266.457201][ T9328] loop8: partition table beyond EOD, truncated
[  266.474408][ T9328] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  266.498881][ T9330] syzkaller1: entered promiscuous mode
[  266.523467][ T9330] syzkaller1: entered allmulticast mode
[  266.834395][ T9332] loop7: detected capacity change from 0 to 7
[  266.875471][ T9332] Dev loop7: unable to read RDB block 7
[  266.901867][ T9332]  loop7: unable to read partition table
[  266.922111][ T9332] loop7: partition table beyond EOD, truncated
[  266.963238][ T9332] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[  267.691953][  T965] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  267.711807][ T5833] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  267.893213][  T965] usb 1-1: Using ep0 maxpacket: 16
[  267.907518][  T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.920597][  T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.935587][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.950254][  T965] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  267.963519][ T5833] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  267.983082][ T5833] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  267.992881][  T965] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  268.016416][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.024956][  T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.040460][ T5833] usb 4-1: config 0 descriptor??
[  268.049275][  T965] usb 1-1: config 0 descriptor??
[  268.066953][ T5833] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  268.089624][ T5833] dvb-usb: bulk message failed: -22 (3/0)
[  268.114498][ T5833] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  268.142163][ T5833] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  268.149544][ T5833] usb 4-1: media controller created
[  268.186042][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  268.247277][ T5833] dvb-usb: bulk message failed: -22 (6/0)
[  268.314078][ T5833] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  268.336547][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10
[  268.398851][ T5833] dvb-usb: schedule remote query interval to 150 msecs.
[  268.412816][ T5833] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  268.435051][ T9326] syz.6.969 (9326): drop_caches: 2
[  268.449342][ T5833] usb 4-1: USB disconnect, device number 11
[  268.509448][  T965] HID 045e:07da: Invalid code 65791 type 1
[  268.532254][ T5833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  268.559265][ T9325] syz.6.969 (9325): drop_caches: 2
[  268.570543][  T965] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000D/input/input11
[  268.644740][  T965] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  268.824879][ T5833] usb 1-1: USB disconnect, device number 19
[  268.878483][ T9353] fido_id[9353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  269.330114][ T9355] loop6: detected capacity change from 0 to 32768
[  269.368814][ T9355] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  269.408735][ T9355] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  269.422663][   T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  269.517896][ T9355] syz.6.984 (9355) used greatest stack depth: 18224 bytes left
[  269.574670][ T8353] ocfs2: Unmounting device (7,6) on (node local)
[  269.637396][   T27] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  269.671791][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.690249][   T27] usb 3-1: Product: syz
[  269.700512][   T27] usb 3-1: Manufacturer: syz
[  269.725072][   T27] usb 3-1: SerialNumber: syz
[  269.748371][   T27] usb 3-1: config 0 descriptor??
[  270.104177][   T27] usb 3-1: USB disconnect, device number 13
[  270.732082][   T27] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  270.935059][   T27] usb 7-1: Using ep0 maxpacket: 16
[  270.945082][   T27] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  270.960891][   T27] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.972607][   T27] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  270.986376][   T27] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  271.005006][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.020199][   T27] usb 7-1: Product: syz
[  271.028224][   T27] usb 7-1: Manufacturer: syz
[  271.037979][   T27] usb 7-1: SerialNumber: syz
[  271.234932][ T9398] kvm: kvm [9397]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xa39fc7
[  271.473715][   T27] usb 7-1: 0:2 : does not exist
[  271.661022][ T9405] batadv_slave_1: entered promiscuous mode
[  271.693926][ T9404] batadv_slave_1: left promiscuous mode
[  272.112836][ T9413] ALSA: mixer_oss: invalid OSS volume ' 1000000) max_states_per_insn 0'
[  272.157366][   T27] usb 7-1: USB disconnect, device number 3
[  272.967637][ T9435] loop2: detected capacity change from 0 to 128
[  273.365125][ T9427] use of bytesused == 0 is deprecated and will be removed in the future,
[  273.374914][ T9427] use the actual size instead.
[  273.466001][   T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  273.651824][   T27] usb 3-1: Using ep0 maxpacket: 8
[  273.661777][ T5833] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  273.679279][   T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  273.709924][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.733592][   T27] usb 3-1: Product: syz
[  273.748159][   T27] usb 3-1: Manufacturer: syz
[  273.762924][   T27] usb 3-1: SerialNumber: syz
[  273.777572][   T27] usb 3-1: config 0 descriptor??
[  273.861738][ T5833] usb 7-1: Using ep0 maxpacket: 32
[  273.878009][ T5833] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  273.886576][ T5833] usb 7-1: config 0 has no interface number 0
[  273.909369][ T5833] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  273.921124][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.949397][ T5833] usb 7-1: Product: syz
[  273.962251][ T5833] usb 7-1: Manufacturer: syz
[  273.966950][ T5833] usb 7-1: SerialNumber: syz
[  273.992954][ T5833] usb 7-1: config 0 descriptor??
[  274.006954][ T5833] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  274.028902][   T27] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  274.218076][ T5833] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  274.234888][ T5833] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  274.641322][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  274.650875][ T5836] usb 7-1: USB disconnect, device number 4
[  274.660959][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  274.681608][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  274.698012][ T5836] quatech2 7-1:0.51: device disconnected
[  274.840247][   T27] usb write operation failed. (-71)
[  274.857705][   T27] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  274.868556][   T27] dvbdev: DVB: registering new adapter (Terratec H7)
[  274.875841][   T27] usb 3-1: media controller created
[  274.882440][   T27] usb read operation failed. (-71)
[  274.888168][   T27] usb write operation failed. (-71)
[  274.898340][   T27] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5
[  274.907791][   T27] usb 3-1: USB disconnect, device number 14
[  275.329156][ T9461] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1025'.
[  275.650025][   T28] audit: type=1326 audit(1752526120.900:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.2.1028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f464c38e929 code=0x0
[  276.615939][ T9481] loop6: detected capacity change from 0 to 4096
[  276.651891][ T9481] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  277.032886][ T9486] syzkaller1: entered promiscuous mode
[  277.038446][ T9486] syzkaller1: entered allmulticast mode
[  277.673395][ T5833] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  277.885922][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.928107][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.961562][ T5833] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  277.976658][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.994312][ T5833] usb 7-1: config 0 descriptor??
[  278.496827][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.519099][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.543162][ T5833] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  278.550038][ T5833] sony 0003:054C:024B.000E: unexpected long global item
[  278.592561][ T5833] sony 0003:054C:024B.000E: parse failed
[  278.598399][ T5833] sony: probe of 0003:054C:024B.000E failed with error -22
[  278.651226][ T9516] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  278.660151][ T9516] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  278.718974][ T9516] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  278.751280][ T9516] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  278.768841][ T9516] netlink: 'syz.2.1052': attribute type 29 has an invalid length.
[  278.827186][ T5857] usb 7-1: USB disconnect, device number 5
[  279.240834][ T9534] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1059'.
[  279.264697][ T9534] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1059'.
[  279.480174][ T9543] o2cb: This node has not been configured.
[  279.521977][ T9543] o2cb: Cluster check failed. Fix errors before retrying.
[  279.529262][ T9543] (syz.3.1061,9543,1):user_dlm_register:674 ERROR: status = -22
[  279.571835][ T9543] (syz.3.1061,9543,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  280.027915][ T9555] loop6: detected capacity change from 0 to 2048
[  280.079066][ T9555] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000; already mounted read-only
[  280.191786][ T5857] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  280.413844][ T5857] usb 4-1: Using ep0 maxpacket: 8
[  280.436451][ T5857] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  280.451838][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.467027][ T5857] usb 4-1: Product: syz
[  280.476074][ T5857] usb 4-1: Manufacturer: syz
[  280.480838][ T5857] usb 4-1: SerialNumber: syz
[  280.507514][ T5857] usb 4-1: config 0 descriptor??
[  280.530364][ T5857] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  280.941264][ T9555] loop6: detected capacity change from 0 to 40427
[  280.994526][ T9555] F2FS-fs (loop6): invalid crc value
[  281.007614][ T9555] F2FS-fs (loop6): Found nat_bits in checkpoint
[  281.089457][ T9555] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  281.591622][ T5843] usb 4-1: USB disconnect, device number 12
[  281.681879][ T5833] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  281.871954][ T5833] usb 3-1: Using ep0 maxpacket: 16
[  281.888577][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.912313][ T5833] usb 3-1: config 0 has no interfaces?
[  281.917911][ T5833] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  281.927962][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.953162][ T5833] usb 3-1: config 0 descriptor??
[  282.001534][ T9581] loop6: detected capacity change from 0 to 512
[  282.016658][ T9581] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  282.039206][ T9581] EXT4-fs (loop6): 1 truncate cleaned up
[  282.046627][ T9581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.097440][ T8353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.238525][ T9573] loop2: detected capacity change from 0 to 512
[  282.372046][ T5836] usb 3-1: USB disconnect, device number 15
[  282.430904][ T9589] loop6: detected capacity change from 0 to 4096
[  283.722076][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout
[  283.737244][ T9576] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  284.564790][ T9576] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  284.574176][ T9576] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  284.580503][ T9576] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  284.589600][ T9576] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  284.597507][ T9576] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  284.802959][ T9620] loop2: detected capacity change from 0 to 512
[  284.889308][ T9620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  284.902355][ T9620] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.022221][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  285.667627][ T9643] loop6: detected capacity change from 0 to 256
[  285.750319][ T9643] FAT-fs (loop6): Directory bread(block 64) failed
[  285.786682][ T9643] FAT-fs (loop6): Directory bread(block 65) failed
[  285.809567][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout
[  285.817449][ T9643] FAT-fs (loop6): Directory bread(block 66) failed
[  285.881995][ T9643] FAT-fs (loop6): Directory bread(block 67) failed
[  285.888723][ T9643] FAT-fs (loop6): Directory bread(block 68) failed
[  285.936488][ T9643] FAT-fs (loop6): Directory bread(block 69) failed
[  285.970025][ T9643] FAT-fs (loop6): Directory bread(block 70) failed
[  285.990640][ T9643] FAT-fs (loop6): Directory bread(block 71) failed
[  286.010504][ T9643] FAT-fs (loop6): Directory bread(block 72) failed
[  286.018078][ T9643] FAT-fs (loop6): Directory bread(block 73) failed
[  286.602745][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout
[  286.602755][ T5801] Bluetooth: hci2: command 0x0c1a tx timeout
[  286.837792][ T9656] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  288.072776][ T9669] loop2: detected capacity change from 0 to 32768
[  288.134476][ T9669] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  288.639869][ T5797] (syz-executor,5797,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76
[  288.684149][ T5797] ocfs2: Unmounting device (7,2) on (node local)
[  288.697980][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout
[  289.089957][ T9699] loop6: detected capacity change from 0 to 1024
[  289.123450][ T9699] EXT4-fs: Ignoring removed nomblk_io_submit option
[  289.233963][ T9699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.370064][ T8353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.592391][ T5843] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  289.621805][  T965] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  289.742038][ T5857] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  289.796294][ T5843] usb 3-1: Using ep0 maxpacket: 32
[  289.804566][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.820741][ T5843] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  289.821786][  T965] usb 4-1: Using ep0 maxpacket: 16
[  289.833138][ T5843] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  289.846765][ T5843] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  289.857337][ T5843] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26
[  289.873371][  T965] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  289.873506][ T5843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  289.881490][  T965] usb 4-1: config 0 has no interface number 0
[  289.881539][  T965] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  289.881566][  T965] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  289.881592][  T965] usb 4-1: config 0 interface 41 has no altsetting 0
[  289.920921][  T965] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  289.929309][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  289.947694][ T5843] usb 3-1: SerialNumber: syz
[  289.951755][  T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.954669][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.978068][  T965] usb 4-1: Product: syz
[  289.983366][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.993836][  T965] usb 4-1: Manufacturer: syz
[  289.998954][ T9707] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  290.001906][ T5857] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  290.014219][  T965] usb 4-1: SerialNumber: syz
[  290.021955][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.036189][  T965] usb 4-1: config 0 descriptor??
[  290.042693][ T5857] usb 7-1: config 0 descriptor??
[  290.054512][ T9710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  290.078558][ T9710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  290.298251][ T5857] usbhid 7-1:0.0: can't add hid device: -71
[  290.305084][ T5857] usbhid: probe of 7-1:0.0 failed with error -71
[  290.318674][ T5843] usb 3-1: USB disconnect, device number 16
[  290.341265][ T5857] usb 7-1: USB disconnect, device number 6
[  290.350502][ T9710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  290.383716][ T9710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  290.761813][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout
[  290.795659][  T965] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  290.939454][ T9717] loop2: detected capacity change from 0 to 256
[  290.951935][ T5857] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  290.957843][ T9717] exfat: Deprecated parameter 'namecase'
[  290.971956][ T9717] exfat: Deprecated parameter 'namecase'
[  290.977770][ T9717] exfat: Deprecated parameter 'utf8'
[  290.994352][ T9717] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d)
[  291.151820][ T5857] usb 7-1: Using ep0 maxpacket: 16
[  291.169744][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.191267][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.204036][ T9719] loop2: detected capacity change from 0 to 1024
[  291.225623][  T965] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID
[  291.235118][ T5857] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40
[  291.245866][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.265125][  T965] sr9700: probe of 4-1:0.41 failed with error -71
[  291.269772][ T5857] usb 7-1: config 0 descriptor??
[  291.287180][ T9719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.319820][  T965] usb 4-1: USB disconnect, device number 13
[  291.429246][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.560147][ T9723] loop2: detected capacity change from 0 to 256
[  291.714104][ T5857] kye 0003:0458:5016.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  291.732380][ T5857] kye 0003:0458:5016.000F: unknown main item tag 0x0
[  291.754472][ T5857] kye 0003:0458:5016.000F: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0
[  291.772997][ T9729] netlink: 'syz.2.1134': attribute type 3 has an invalid length.
[  291.782246][ T5857] kye 0003:0458:5016.000F: tablet-enabling feature report not found
[  291.803684][ T5857] kye 0003:0458:5016.000F: tablet enabling failed
[  292.024010][  T965] usb 7-1: USB disconnect, device number 7
[  292.716402][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1141'.
[  293.717313][ T9753] loop6: detected capacity change from 0 to 32768
[  293.765297][ T9753] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 scanned by syz.6.1145 (9753)
[  293.817574][ T9753] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  293.842068][ T9753] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  293.853865][ T9753] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  293.865127][ T9753] BTRFS info (device loop6): use lzo compression, level 0
[  293.882517][ T9753] BTRFS info (device loop6): using free space tree
[  293.975483][ T9753] BTRFS info (device loop6): enabling ssd optimizations
[  293.982719][ T9753] BTRFS info (device loop6): auto enabling async discard
[  294.182020][   T28] audit: type=1804 audit(1752526139.430:348): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1145" name="/newroot/90/file0/file1" dev="loop6" ino=260 res=1 errno=0
[  294.354371][ T9783] loop2: detected capacity change from 0 to 16
[  294.406401][ T8353] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  294.417633][ T9783] erofs: (device loop2): mounted with root inode @ nid 36.
[  294.757216][ T9792] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1155'.
[  294.797557][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'.
[  295.286999][ T9796] loop6: detected capacity change from 0 to 8192
[  295.317799][ T9796] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  295.331438][ T9796] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  295.340922][ T9796] REISERFS (device loop6): using ordered data mode
[  295.348376][ T9796] reiserfs: using flush barriers
[  295.358182][ T9796] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  295.382137][ T5833] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  295.396389][ T9796] REISERFS (device loop6): checking transaction log (loop6)
[  295.434735][ T9796] REISERFS (device loop6): Using r5 hash to sort names
[  295.463137][ T9796] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  295.533836][   T28] audit: type=1800 audit(1752526140.790:349): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1153" name="file1" dev="loop6" ino=2 res=0 errno=0
[  295.587946][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.599603][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.629979][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  295.661790][ T5833] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  295.681553][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.705094][ T5833] usb 4-1: config 0 descriptor??
[  296.029290][ T9794] loop2: detected capacity change from 0 to 40427
[  296.068300][ T9794] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  296.096363][ T9794] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  296.126010][ T9794] F2FS-fs (loop2): invalid crc value
[  296.156893][ T5833] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  296.177271][ T9794] F2FS-fs (loop2): Found nat_bits in checkpoint
[  296.189035][ T5833] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  296.246807][ T5833] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  296.356012][ T9794] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  296.375824][ T9794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  296.889118][ T3486] kworker/u4:10: attempt to access beyond end of device
[  296.889118][ T3486] loop2: rw=1, sector=45096, nr_sectors = 128 limit=40427
[  298.270529][ T9823] loop2: detected capacity change from 0 to 32768
[  298.286683][ T5843] usb 4-1: USB disconnect, device number 14
[  298.342864][ T9823] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  298.426371][ T9823] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  298.738331][ T5797] ocfs2: Unmounting device (7,2) on (node local)
[  298.851786][ T5843] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  299.068906][ T9845] syzkaller1: entered promiscuous mode
[  299.075081][ T9845] syzkaller1: entered allmulticast mode
[  299.084275][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.114923][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.147463][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  299.162032][ T5843] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  299.171173][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.195034][ T5843] usb 4-1: config 0 descriptor??
[  299.670289][ T5843] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  299.676504][ T5833] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  299.704525][ T5843] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  299.822126][ T9847] loop2: detected capacity change from 0 to 32768
[  299.832566][ T9847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1177 (9847)
[  299.851483][ T9847] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.867400][ T9847] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  299.877924][ T9847] BTRFS info (device loop2): setting nodatacow, compression disabled
[  299.887149][ T5833] usb 1-1: Using ep0 maxpacket: 32
[  299.896192][ T9847] BTRFS info (device loop2): max_inline at 0
[  299.902740][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.914481][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.924909][ T9847] BTRFS info (device loop2): turning off barriers
[  299.931411][ T9847] BTRFS info (device loop2): force zlib compression, level 3
[  299.939473][ T5833] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  299.949131][ T9847] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  299.959195][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.969076][ T9847] BTRFS info (device loop2): force zstd compression, level 3
[  299.980045][ T5833] usb 1-1: config 0 descriptor??
[  299.986361][ T9847] BTRFS info (device loop2): force clearing of disk cache
[  300.006359][ T9847] BTRFS info (device loop2): enabling ssd optimizations
[  300.014124][ T9847] BTRFS info (device loop2): max_inline at 4096
[  300.020565][ T9847] BTRFS info (device loop2): using free space tree
[  300.057157][ T5843] usb 4-1: USB disconnect, device number 15
[  300.100017][ T9847] BTRFS info (device loop2): auto enabling async discard
[  300.130311][ T9847] BTRFS info (device loop2): rebuilding free space tree
[  300.467733][ T5833] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  300.661069][ T5797] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  300.777980][   T23] usb 1-1: USB disconnect, device number 20
[  301.515123][   T28] audit: type=1326 audit(1752526146.760:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9885 comm="syz.0.1184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d7fd8e929 code=0x0
[  301.897851][ T9878] loop6: detected capacity change from 0 to 32768
[  301.959836][ T9878] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.140375][ T9883] loop2: detected capacity change from 0 to 32768
[  302.174811][ T9883] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.1179 (9883)
[  302.256200][ T9883] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  302.291874][ T9883] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  302.301575][ T9883] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  302.319055][ T9878] XFS (loop6): Ending clean mount
[  302.337759][ T9878] XFS (loop6): Quotacheck needed: Please wait.
[  302.351790][ T9883] BTRFS info (device loop2): use lzo compression, level 0
[  302.359003][ T9883] BTRFS info (device loop2): using free space tree
[  302.472339][ T9878] XFS (loop6): Quotacheck: Done.
[  302.629260][ T9883] BTRFS info (device loop2): enabling ssd optimizations
[  302.682800][ T9883] BTRFS info (device loop2): auto enabling async discard
[  302.781845][   T27] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  302.899711][   T28] audit: type=1804 audit(1752526148.150:351): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1179" name="/newroot/287/file0/file1" dev="loop2" ino=260 res=1 errno=0
[  302.981920][   T27] usb 1-1: Using ep0 maxpacket: 32
[  302.998871][   T27] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  303.029081][   T27] usb 1-1: config 0 has no interface number 0
[  303.046016][   T27] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  303.061994][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.075354][ T8353] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  303.092127][   T27] usb 1-1: Product: syz
[  303.096373][   T27] usb 1-1: Manufacturer: syz
[  303.101010][   T27] usb 1-1: SerialNumber: syz
[  303.150964][ T5797] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  303.164043][   T27] usb 1-1: config 0 descriptor??
[  303.184641][   T27] smsc95xx v2.0.0
[  303.652814][   T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  303.691741][   T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  304.141044][   T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  304.166504][   T27] smsc95xx: probe of 1-1:0.67 failed with error -71
[  304.212089][   T27] usb 1-1: USB disconnect, device number 21
[  304.255303][ T5789] udevd[5789]: setting owner of /dev/bus/usb/001/021 to uid=0, gid=0 failed: No such file or directory
[  304.331773][ T9942] misc userio: Can't change port type on an already running userio instance
[  304.953993][ T9941] loop6: detected capacity change from 0 to 32768
[  304.978904][ T9941] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop6 scanned by syz.6.1195 (9941)
[  305.079633][ T9941] BTRFS info (device loop6): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  305.107042][ T9941] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  305.134049][ T9941] BTRFS info (device loop6): using free space tree
[  305.190585][ T9946] loop2: detected capacity change from 0 to 32768
[  305.222702][ T9946] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1198 (9946)
[  305.319780][ T9946] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  305.341146][ T9946] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  305.397759][ T9941] BTRFS info (device loop6): enabling ssd optimizations
[  305.422565][ T9946] BTRFS info (device loop2): using free space tree
[  305.423885][ T9941] BTRFS info (device loop6): auto enabling async discard
[  305.607161][   T27] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  305.796391][ T9946] BTRFS info (device loop2): enabling ssd optimizations
[  305.842600][   T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  305.856694][ T9946] BTRFS info (device loop2): auto enabling async discard
[  305.876215][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.921868][   T27] usb 1-1: config 0 descriptor??
[  305.934908][   T27] cp210x 1-1:0.0: cp210x converter detected
[  306.129219][   T28] audit: type=1800 audit(1752526151.380:352): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1198" name="file1" dev="loop2" ino=263 res=0 errno=0
[  306.318900][ T8353] BTRFS info (device loop6): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  306.354234][   T27] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  306.544630][ T5797] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  306.632402][   T27] usb 1-1: cp210x converter now attached to ttyUSB0
[  306.859107][ T5836] usb 1-1: USB disconnect, device number 22
[  306.889693][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  306.933870][ T5836] cp210x 1-1:0.0: device disconnected
[  307.539874][T10006] loop2: detected capacity change from 0 to 128
[  307.582727][T10006] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  307.592819][T10004] loop6: detected capacity change from 0 to 512
[  307.707019][T10004] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2867: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  307.767464][   T28] audit: type=1800 audit(1752526153.020:353): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1208" name="file1" dev="loop2" ino=94 res=0 errno=0
[  307.820836][T10004] EXT4-fs (loop6): 1 truncate cleaned up
[  307.843549][T10004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.013424][T10012] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  308.172595][ T8353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.380941][T10018] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1212'.
[  308.414895][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1212'.
[  308.819995][T10024] loop6: detected capacity change from 0 to 8192
[  308.951896][   T28] audit: type=1800 audit(1752526154.200:354): pid=10025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1214" name="file1" dev="loop6" ino=1048641 res=0 errno=0
[  310.469907][T10053] bridge0: port 4(gretap0) entered blocking state
[  310.514146][   T28] audit: type=1800 audit(1752526155.770:355): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1208" name="file1" dev="loop2" ino=94 res=0 errno=0
[  310.515113][T10053] bridge0: port 4(gretap0) entered disabled state
[  310.553490][T10053] gretap0: entered allmulticast mode
[  310.561293][T10053] gretap0: entered promiscuous mode
[  310.571462][T10053] bridge0: port 4(gretap0) entered blocking state
[  310.578909][T10053] bridge0: port 4(gretap0) entered forwarding state
[  310.648018][T10055] gretap0: left allmulticast mode
[  310.661842][T10055] gretap0: left promiscuous mode
[  310.670463][T10055] bridge0: port 4(gretap0) entered disabled state
[  310.993833][   T28] audit: type=1326 audit(1752526156.240:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd54c58e929 code=0x0
[  312.147797][T10071] loop2: detected capacity change from 0 to 40427
[  312.172209][T10071] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  312.172231][   T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  312.180648][T10071] F2FS-fs (loop2): Image doesn't support compression
[  312.195588][T10071] F2FS-fs (loop2): Image doesn't support compression
[  312.252510][T10071] F2FS-fs (loop2): invalid crc value
[  312.269613][T10071] F2FS-fs (loop2): Found nat_bits in checkpoint
[  312.402127][T10071] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  312.438899][   T23] usb 4-1: Using ep0 maxpacket: 16
[  312.473042][   T23] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  312.492149][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.512738][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.527918][   T28] audit: type=1800 audit(1752526157.780:357): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1229" name="file1" dev="loop2" ino=10 res=0 errno=0
[  312.538923][T10071] syz.2.1229: attempt to access beyond end of device
[  312.538923][T10071] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  312.571588][   T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  312.582518][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.590577][   T23] usb 4-1: Product: syz
[  312.598316][   T23] usb 4-1: Manufacturer: syz
[  312.604558][   T23] usb 4-1: SerialNumber: syz
[  312.636078][T10071] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  312.892844][   T28] audit: type=1326 audit(1752526158.150:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  312.962396][   T28] audit: type=1326 audit(1752526158.150:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.054983][   T28] audit: type=1326 audit(1752526158.150:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.090516][   T23] usb 4-1: 0:2 : does not exist
[  313.136883][   T28] audit: type=1326 audit(1752526158.150:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.228650][   T28] audit: type=1326 audit(1752526158.150:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.281785][   T28] audit: type=1326 audit(1752526158.150:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.390639][   T28] audit: type=1326 audit(1752526158.170:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.450171][   T28] audit: type=1326 audit(1752526158.170:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.488689][   T28] audit: type=1326 audit(1752526158.170:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe295b8e929 code=0x7ffc0000
[  313.608363][   T28] audit: type=1326 audit(1752526158.170:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10092 comm="syz.6.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe295b2ab19 code=0x7ffc0000
[  313.853548][   T23] usb 4-1: USB disconnect, device number 16
[  313.942581][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  314.300245][T10096] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1248'.
[  314.321126][T10096] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1248'.
[  314.361816][T10096] netlink: 'syz.2.1248': attribute type 6 has an invalid length.
[  314.394034][T10096] netlink: 'syz.2.1248': attribute type 5 has an invalid length.
[  314.428027][T10096] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1248'.
[  314.642278][T10103] kvm: kvm [10102]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xa39fc7
[  315.263269][T10098] loop6: detected capacity change from 0 to 32768
[  315.385355][T10098] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  315.498241][T10098] XFS (loop6): Ending clean mount
[  315.545545][T10098] XFS (loop6): Quotacheck needed: Please wait.
[  315.682063][T10098] XFS (loop6): Quotacheck: Done.
[  315.821800][ T5843] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  315.966165][ T8353] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  316.021881][ T5843] usb 1-1: Using ep0 maxpacket: 16
[  316.038713][ T5843] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  316.057005][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.068194][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  316.096633][ T5843] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  316.108482][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.120995][ T5843] usb 1-1: Product: syz
[  316.128267][ T5843] usb 1-1: Manufacturer: syz
[  316.138503][ T5843] usb 1-1: SerialNumber: syz
[  316.230881][T10150] loop2: detected capacity change from 0 to 1024
[  316.580153][ T5843] usb 1-1: 0:2 : does not exist
[  317.256377][ T5843] usb 1-1: USB disconnect, device number 23
[  317.319442][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  317.335739][ T5857] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  317.545804][ T5857] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  317.557842][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.578315][ T5857] usb 4-1: Product: syz
[  317.581171][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  317.590489][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  317.599005][ T5857] usb 4-1: Manufacturer: syz
[  317.606038][ T5857] usb 4-1: SerialNumber: syz
[  317.624644][ T5857] usb 4-1: config 0 descriptor??
[  317.650454][ T5857] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  317.954640][T10164] syz.2.1266 (10164): drop_caches: 2
[  318.101332][T10163] syz.2.1266 (10163): drop_caches: 2
[  318.129235][T10163] syz.2.1266 (10163): drop_caches: 2
[  318.623169][ T5836] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  318.670370][ T5857] gspca_sunplus: reg_w_riv err -71
[  318.680735][ T5857] sunplus: probe of 4-1:0.0 failed with error -71
[  318.703935][ T5857] usb 4-1: USB disconnect, device number 17
[  318.824261][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.842742][ T5836] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  318.862381][ T5836] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  318.871810][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.894758][ T5836] usb 3-1: config 0 descriptor??
[  318.918405][ T5836] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  318.928805][ T5836] dvb-usb: bulk message failed: -22 (3/0)
[  318.963798][ T5836] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  318.981259][ T5836] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  318.989984][ T5836] usb 3-1: media controller created
[  318.998952][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  319.036252][ T5836] dvb-usb: bulk message failed: -22 (6/0)
[  319.052696][ T5836] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  319.080899][ T5836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  319.104063][ T5836] dvb-usb: schedule remote query interval to 150 msecs.
[  319.120432][ T5836] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  319.215058][ T5857] usb 3-1: USB disconnect, device number 17
[  319.273024][ T5857] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  319.871903][T10207] input: syz0 as /devices/virtual/input/input14
[  319.978201][T10210] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1285'.
[  320.371367][T10215] loop6: detected capacity change from 0 to 4096
[  320.398358][T10218] loop2: detected capacity change from 0 to 47
[  320.702663][T10222] syz.2.1289: attempt to access beyond end of device
[  320.702663][T10222] loop2: rw=2049, sector=48, nr_sectors = 2 limit=47
[  320.718121][T10222] Buffer I/O error on dev loop2, logical block 24, lost async page write
[  320.728643][T10222] syz.2.1289: attempt to access beyond end of device
[  320.728643][T10222] loop2: rw=2049, sector=50, nr_sectors = 2 limit=47
[  320.743881][T10222] Buffer I/O error on dev loop2, logical block 25, lost async page write
[  320.772055][T10222] syz.2.1289: attempt to access beyond end of device
[  320.772055][T10222] loop2: rw=2049, sector=52, nr_sectors = 2 limit=47
[  320.787307][T10222] Buffer I/O error on dev loop2, logical block 26, lost async page write
[  320.991947][   T58] kworker/u4:4: attempt to access beyond end of device
[  320.991947][   T58] loop2: rw=1, sector=54, nr_sectors = 2 limit=47
[  321.056190][   T58] Buffer I/O error on dev loop2, logical block 27, lost async page write
[  321.224735][T10231] loop6: detected capacity change from 0 to 2048
[  321.294563][T10238] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  321.755328][ T5158] udevd[5158]: worker [5789] terminated by signal 33 (Unknown signal 33)
[  321.775247][ T5158] udevd[5158]: worker [5789] failed while handling '/devices/virtual/block/loop0'
[  321.808606][ T5158] udevd[5158]: worker [6070] terminated by signal 33 (Unknown signal 33)
[  321.821030][ T5158] udevd[5158]: worker [6070] failed while handling '/devices/virtual/block/loop3'
[  322.268247][T10244] loop2: detected capacity change from 0 to 32768
[  322.307078][T10244] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  322.334306][  T140] (kworker/u4:5,140,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  322.376263][ T5158] udevd[5158]: worker [5804] terminated by signal 33 (Unknown signal 33)
[  322.385572][ T5158] udevd[5158]: worker [5804] failed while handling '/devices/virtual/block/loop2'
[  322.411817][   T27] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  322.441591][ T5797] ocfs2: Unmounting device (7,2) on (node local)
[  322.522272][ T5857] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  322.611720][   T27] usb 7-1: Using ep0 maxpacket: 16
[  322.624035][   T27] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.652533][   T27] usb 7-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  322.671421][   T27] usb 7-1: config 0 interface 0 has no altsetting 0
[  322.697230][   T27] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  322.707298][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.718996][   T27] usb 7-1: config 0 descriptor??
[  322.726246][ T5857] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  322.750384][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.780272][ T5857] usb 4-1: config 0 descriptor??
[  322.807355][ T5857] cp210x 4-1:0.0: cp210x converter detected
[  322.980097][T10270] syzkaller1: entered promiscuous mode
[  322.985970][T10270] syzkaller1: entered allmulticast mode
[  323.195708][   T27] corsair 0003:1B1C:1B34.0013: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.6-1/input0
[  323.232101][ T5857] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  323.450596][ T5857] usb 4-1: cp210x converter now attached to ttyUSB0
[  323.584780][ T5857] usb 7-1: USB disconnect, device number 8
[  323.682688][   T27] usb 4-1: USB disconnect, device number 18
[  323.709346][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  323.764376][   T27] cp210x 4-1:0.0: device disconnected
[  324.349573][T10300] loop2: detected capacity change from 0 to 256
[  324.604833][T10306] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1324'.
[  324.926206][T10312] loop2: detected capacity change from 0 to 2048
[  325.024317][T10312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.154938][T10312] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  325.196382][T10312] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  325.246448][T10312] EXT4-fs (loop2): This should not happen!! Data will be lost
[  325.246448][T10312] 
[  325.300738][T10312] EXT4-fs (loop2): Total free blocks count 0
[  325.342166][T10312] EXT4-fs (loop2): Free/Dirty block details
[  325.348176][T10312] EXT4-fs (loop2): free_blocks=66060288
[  325.374483][T10312] EXT4-fs (loop2): dirty_blocks=48
[  325.379816][T10312] EXT4-fs (loop2): Block reservation details
[  325.421165][T10312] EXT4-fs (loop2): i_reserved_data_blocks=3
[  325.434140][T10319] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[  325.530871][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'.
[  327.069099][T10324] loop6: detected capacity change from 0 to 131072
[  327.090811][T10324] F2FS-fs (loop6): Test dummy encryption mode enabled
[  327.111118][T10324] F2FS-fs (loop6): invalid crc value
[  327.152741][T10324] F2FS-fs (loop6): Found nat_bits in checkpoint
[  327.229894][T10324] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  327.743317][T10328] loop2: detected capacity change from 0 to 40427
[  327.777921][T10328] F2FS-fs (loop2): invalid crc value
[  327.815892][T10328] F2FS-fs (loop2): Found nat_bits in checkpoint
[  327.983719][T10328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  328.308479][ T5797] syz-executor: attempt to access beyond end of device
[  328.308479][ T5797] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  328.362700][ T5797] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  328.382466][T10363] syz.6.1340 (10363): /proc/10362/oom_adj is deprecated, please use /proc/10362/oom_score_adj instead.
[  329.027560][T10368] loop6: detected capacity change from 0 to 8192
[  329.081992][T10368] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  329.151983][T10368] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  329.161281][T10368] REISERFS (device loop6): using ordered data mode
[  329.241913][T10368] reiserfs: using flush barriers
[  329.261987][T10368] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  329.329919][T10368] REISERFS (device loop6): checking transaction log (loop6)
[  329.547072][T10368] REISERFS (device loop6): Using tea hash to sort names
[  329.578557][T10368] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  329.608149][T10368] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  329.896954][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'.
[  330.460385][T10395] loop6: detected capacity change from 0 to 1024
[  330.475423][T10395] EXT4-fs: Ignoring removed nobh option
[  330.508986][T10395] EXT4-fs: Ignoring removed bh option
[  330.536565][T10395] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  330.583212][T10395] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.718773][T10407] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  330.760956][T10395] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4036: comm syz.6.1353: Allocating blocks 385-513 which overlap fs metadata
[  330.792852][ T5801] Bluetooth: hci1: unexpected event for opcode 0x2060
[  330.873376][T10394] EXT4-fs (loop6): pa ffff888076c392b8: logic 16, phys. 129, len 24
[  330.882545][T10394] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8
[  330.990548][ T8353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.626063][T10431] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  331.626063][T10431] The task syz.6.1364 (10431) triggered the difference, watch for misbehavior.
[  332.081802][ T5857] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  332.281876][ T5857] usb 3-1: Using ep0 maxpacket: 8
[  332.317195][ T5857] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  332.342278][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.350376][ T5857] usb 3-1: Product: syz
[  332.361812][ T5857] usb 3-1: Manufacturer: syz
[  332.366592][ T5857] usb 3-1: SerialNumber: syz
[  332.378310][   T28] kauditd_printk_skb: 396 callbacks suppressed
[  332.378328][   T28] audit: type=1326 audit(1752526177.630:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54c58e929 code=0x7ffc0000
[  332.426875][ T5857] usb 3-1: config 0 descriptor??
[  332.461867][   T28] audit: type=1326 audit(1752526177.630:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54c58e929 code=0x7ffc0000
[  332.518891][   T28] audit: type=1326 audit(1752526177.680:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd54c58e929 code=0x7ffc0000
[  332.553002][   T28] audit: type=1326 audit(1752526177.720:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54c58e929 code=0x7ffc0000
[  332.577291][   T28] audit: type=1326 audit(1752526177.720:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54c58e929 code=0x7ffc0000
[  332.600154][   T28] audit: type=1326 audit(1752526177.720:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd54c5c11e5 code=0x7ffc0000
[  332.652128][   T28] audit: type=1326 audit(1752526177.760:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd54c58e929 code=0x7ffc0000
[  332.700647][ T5857] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  332.721742][   T28] audit: type=1326 audit(1752526177.760:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd54c58e929 code=0x0
[  332.777070][   T28] audit: type=1326 audit(1752526177.890:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10456 comm="syz.3.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd54c58e929 code=0x7ffc0000
[  332.858426][T10460] loop6: detected capacity change from 0 to 8192
[  332.880043][T10460] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  332.893623][T10460] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  332.904182][T10460] REISERFS (device loop6): using ordered data mode
[  332.910757][T10460] reiserfs: using flush barriers
[  332.939319][T10460] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  333.030502][T10460] REISERFS (device loop6): checking transaction log (loop6)
[  333.078768][T10460] REISERFS (device loop6): Using r5 hash to sort names
[  333.112039][T10460] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  333.126465][T10460] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  333.269002][T10460] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  333.322490][T10460] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  333.521350][ T5857] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  333.588114][ T5857] usb 3-1: USB disconnect, device number 18
[  334.669398][T10487] pim6reg1: entered promiscuous mode
[  334.683774][T10487] pim6reg1: entered allmulticast mode
[  334.869357][ T5158] udevd[5158]: worker [6875] terminated by signal 33 (Unknown signal 33)
[  334.891193][ T5158] udevd[5158]: worker [6875] failed while handling '/devices/virtual/block/loop0'
[  335.020587][T10495] syz_tun: entered promiscuous mode
[  335.073914][T10495] syz_tun: left promiscuous mode
[  335.692991][T10518] 9pnet: p9_errstr2errno: server reported unknown error �@0x0000000000000005
[  335.860477][T10500] sp0: Synchronizing with TNC
[  335.895619][T10499] [U] è
[  335.921033][T10525] syzkaller1: entered promiscuous mode
[  335.930007][T10525] syzkaller1: entered allmulticast mode
[  336.510726][T10537] loop2: detected capacity change from 0 to 256
[  336.542385][T10537] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x50a6a7f9, utbl_chksum : 0xe619d30d)
[  336.867245][T10544] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  337.122615][T10548] ==================================================================
[  337.130755][T10548] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80
[  337.138448][T10548] Read of size 8 at addr ffff8880229020e0 by task syz.0.1414/10548
[  337.146472][T10548] 
[  337.148847][T10548] CPU: 1 PID: 10548 Comm: syz.0.1414 Not tainted 6.6.98-syzkaller #0
[  337.156957][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  337.167075][T10548] Call Trace:
[  337.170403][T10548]  <TASK>
[  337.173424][T10548]  dump_stack_lvl+0x16c/0x230
[  337.178249][T10548]  ? __lock_acquire+0x7c80/0x7c80
[  337.183372][T10548]  ? show_regs_print_info+0x20/0x20
[  337.188619][T10548]  ? load_image+0x3b0/0x3b0
[  337.193181][T10548]  ? __virt_addr_valid+0x469/0x540
[  337.198355][T10548]  print_report+0xac/0x230
[  337.202911][T10548]  ? __lock_acquire+0xff/0x7c80
[  337.207829][T10548]  kasan_report+0x117/0x150
[  337.212387][T10548]  ? __lock_acquire+0xff/0x7c80
[  337.217289][T10548]  __lock_acquire+0xff/0x7c80
[  337.222018][T10548]  ? is_bpf_text_address+0x26/0x2a0
[  337.227268][T10548]  ? arch_stack_walk+0x160/0x190
[  337.232259][T10548]  ? verify_lock_unused+0x140/0x140
[  337.237508][T10548]  ? stack_trace_save+0x9c/0xe0
[  337.242575][T10548]  ? stack_trace_snprint+0xf0/0xf0
[  337.247737][T10548]  ? __stack_depot_save+0x1f/0x630
[  337.252903][T10548]  ? do_syscall_64+0x55/0xb0
[  337.257539][T10548]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.263770][T10548]  lock_acquire+0x197/0x410
[  337.268335][T10548]  ? super_lock+0x167/0x360
[  337.272896][T10548]  ? __might_sleep+0xe0/0xe0
[  337.277553][T10548]  ? __mutex_trylock_common+0x153/0x250
[  337.283158][T10548]  ? read_lock_is_recursive+0x20/0x20
[  337.288630][T10548]  ? trace_raw_output_contention_end+0xd0/0xd0
[  337.294938][T10548]  down_read+0x46/0x2e0
[  337.299300][T10548]  ? super_lock+0x167/0x360
[  337.303883][T10548]  super_lock+0x167/0x360
[  337.308276][T10548]  ? user_get_super+0x180/0x180
[  337.313189][T10548]  ? mutex_lock_nested+0x20/0x20
[  337.318180][T10548]  fs_bdev_sync+0xa4/0x170
[  337.322651][T10548]  ? fs_bdev_mark_dead+0x1f0/0x1f0
[  337.327800][T10548]  blkdev_common_ioctl+0x880/0x23d0
[  337.333048][T10548]  ? tomoyo_path_number_perm+0x4dc/0x590
[  337.338715][T10548]  ? blkdev_bszset+0x1f0/0x1f0
[  337.343521][T10548]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  337.349043][T10548]  blkdev_ioctl+0x4eb/0x6f0
[  337.353603][T10548]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  337.359122][T10548]  ? bpf_lsm_file_ioctl+0x9/0x10
[  337.364123][T10548]  ? security_file_ioctl+0x80/0xa0
[  337.369277][T10548]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  337.374789][T10548]  __se_sys_ioctl+0xfd/0x170
[  337.379436][T10548]  do_syscall_64+0x55/0xb0
[  337.383920][T10548]  ? clear_bhb_loop+0x40/0x90
[  337.388650][T10548]  ? clear_bhb_loop+0x40/0x90
[  337.393378][T10548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.399318][T10548] RIP: 0033:0x7f1d7fd8e929
[  337.403776][T10548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.423625][T10548] RSP: 002b:00007f1d80c40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  337.432090][T10548] RAX: ffffffffffffffda RBX: 00007f1d7ffb5fa0 RCX: 00007f1d7fd8e929
[  337.440111][T10548] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004
[  337.448132][T10548] RBP: 00007f1d7fe10b39 R08: 0000000000000000 R09: 0000000000000000
[  337.456145][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.464245][T10548] R13: 0000000000000000 R14: 00007f1d7ffb5fa0 R15: 00007ffe34ab4798
[  337.472280][T10548]  </TASK>
[  337.475422][T10548] 
[  337.477781][T10548] Allocated by task 10440:
[  337.482227][T10548]  kasan_set_track+0x4e/0x70
[  337.486869][T10548]  __kasan_kmalloc+0x8f/0xa0
[  337.491516][T10548]  __kmalloc+0xb4/0x240
[  337.495719][T10548]  tomoyo_realpath_from_path+0xe3/0x5d0
[  337.501503][T10548]  tomoyo_path_perm+0x20f/0x4b0
[  337.506494][T10548]  tomoyo_path_symlink+0xa4/0xe0
[  337.511571][T10548]  security_path_symlink+0xe0/0x130
[  337.516864][T10548]  do_symlinkat+0x108/0x3f0
[  337.521419][T10548]  __x64_sys_symlinkat+0x99/0xb0
[  337.526416][T10548]  do_syscall_64+0x55/0xb0
[  337.530880][T10548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.536819][T10548] 
[  337.539199][T10548] Freed by task 10440:
[  337.543317][T10548]  kasan_set_track+0x4e/0x70
[  337.547970][T10548]  kasan_save_free_info+0x2e/0x50
[  337.553071][T10548]  ____kasan_slab_free+0x126/0x1e0
[  337.558247][T10548]  slab_free_freelist_hook+0x130/0x1b0
[  337.563773][T10548]  __kmem_cache_free+0xba/0x1f0
[  337.568680][T10548]  tomoyo_realpath_from_path+0x59d/0x5d0
[  337.574421][T10548]  tomoyo_path_perm+0x20f/0x4b0
[  337.579345][T10548]  tomoyo_path_symlink+0xa4/0xe0
[  337.584343][T10548]  security_path_symlink+0xe0/0x130
[  337.589610][T10548]  do_symlinkat+0x108/0x3f0
[  337.594166][T10548]  __x64_sys_symlinkat+0x99/0xb0
[  337.599172][T10548]  do_syscall_64+0x55/0xb0
[  337.603651][T10548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.609690][T10548] 
[  337.612057][T10548] Last potentially related work creation:
[  337.617810][T10548]  kasan_save_stack+0x3e/0x60
[  337.622652][T10548]  __kasan_record_aux_stack+0xaf/0xc0
[  337.628084][T10548]  insert_work+0x3d/0x310
[  337.632487][T10548]  __queue_work+0xc39/0x1020
[  337.637132][T10548]  queue_work_on+0x121/0x1e0
[  337.641777][T10548]  rcu_core+0xcc4/0x1720
[  337.646160][T10548]  handle_softirqs+0x280/0x820
[  337.650974][T10548]  run_ksoftirqd+0x9c/0xf0
[  337.655447][T10548]  smpboot_thread_fn+0x635/0xa00
[  337.660451][T10548]  kthread+0x2fa/0x390
[  337.664686][T10548]  ret_from_fork+0x48/0x80
[  337.669166][T10548]  ret_from_fork_asm+0x11/0x20
[  337.673986][T10548] 
[  337.676353][T10548] Second to last potentially related work creation:
[  337.683135][T10548]  kasan_save_stack+0x3e/0x60
[  337.687880][T10548]  __kasan_record_aux_stack+0xaf/0xc0
[  337.693396][T10548]  call_rcu+0x158/0x930
[  337.697607][T10548]  deactivate_locked_super+0xd3/0x100
[  337.703024][T10548]  cleanup_mnt+0x429/0x4c0
[  337.707660][T10548]  task_work_run+0x1ce/0x250
[  337.712311][T10548]  exit_to_user_mode_loop+0xe6/0x110
[  337.717651][T10548]  exit_to_user_mode_prepare+0xb1/0x140
[  337.723248][T10548]  syscall_exit_to_user_mode+0x1a/0x50
[  337.728814][T10548]  do_syscall_64+0x61/0xb0
[  337.733297][T10548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.739345][T10548] 
[  337.741731][T10548] The buggy address belongs to the object at ffff888022902000
[  337.741731][T10548]  which belongs to the cache kmalloc-4k of size 4096
[  337.756180][T10548] The buggy address is located 224 bytes inside of
[  337.756180][T10548]  freed 4096-byte region [ffff888022902000, ffff888022903000)
[  337.770108][T10548] 
[  337.772470][T10548] The buggy address belongs to the physical page:
[  337.778924][T10548] page:ffffea00008a4000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22900
[  337.789388][T10548] head:ffffea00008a4000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  337.798387][T10548] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  337.806600][T10548] page_type: 0xffffffff()
[  337.810987][T10548] raw: 00fff00000000840 ffff888017842140 ffffea0001398c00 dead000000000002
[  337.819612][T10548] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  337.828230][T10548] page dumped because: kasan: bad access detected
[  337.834691][T10548] page_owner tracks the page as allocated
[  337.840435][T10548] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6672, tgid 6671 (syz.0.227), ts 132949690703, free_ts 132793039844
[  337.863140][T10548]  post_alloc_hook+0x1cd/0x210
[  337.867951][T10548]  get_page_from_freelist+0x195c/0x19f0
[  337.873547][T10548]  __alloc_pages+0x1e3/0x460
[  337.878178][T10548]  alloc_slab_page+0x5d/0x170
[  337.882900][T10548]  new_slab+0x87/0x2e0
[  337.887010][T10548]  ___slab_alloc+0xc6d/0x12f0
[  337.891810][T10548]  __kmem_cache_alloc_node+0x1a2/0x260
[  337.897315][T10548]  __kmalloc+0xa4/0x240
[  337.901504][T10548]  kmem_alloc+0x13a/0x400
[  337.905878][T10548]  xfs_init_fs_context+0x25/0x450
[  337.910947][T10548]  alloc_fs_context+0x64b/0x7c0
[  337.916020][T10548]  do_new_mount+0x10f/0xa40
[  337.920562][T10548]  __se_sys_mount+0x2da/0x3c0
[  337.925329][T10548]  do_syscall_64+0x55/0xb0
[  337.929791][T10548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.935730][T10548] page last free stack trace:
[  337.940431][T10548]  free_unref_page_prepare+0x7ce/0x8e0
[  337.945939][T10548]  free_unref_page+0x32/0x2e0
[  337.950645][T10548]  __unfreeze_partials+0x1cf/0x210
[  337.955791][T10548]  put_cpu_partial+0x17c/0x250
[  337.960592][T10548]  __slab_free+0x31d/0x410
[  337.965046][T10548]  qlist_free_all+0x75/0xe0
[  337.969582][T10548]  kasan_quarantine_reduce+0x143/0x160
[  337.975076][T10548]  __kasan_slab_alloc+0x22/0x80
[  337.980045][T10548]  slab_post_alloc_hook+0x6e/0x4d0
[  337.985359][T10548]  kmem_cache_alloc+0x11e/0x2e0
[  337.990243][T10548]  getname_flags+0xbb/0x500
[  337.994786][T10548]  do_sys_openat2+0xcb/0x1c0
[  337.999413][T10548]  __x64_sys_openat+0x139/0x160
[  338.004475][T10548]  do_syscall_64+0x55/0xb0
[  338.008934][T10548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.014870][T10548] 
[  338.017218][T10548] Memory state around the buggy address:
[  338.022875][T10548]  ffff888022901f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  338.031216][T10548]  ffff888022902000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  338.039403][T10548] >ffff888022902080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  338.047493][T10548]                                                        ^
[  338.054719][T10548]  ffff888022902100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  338.062819][T10548]  ffff888022902180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  338.070916][T10548] ==================================================================
[  338.079027][T10548] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  338.086255][T10548] CPU: 1 PID: 10548 Comm: syz.0.1414 Not tainted 6.6.98-syzkaller #0
[  338.094371][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  338.104470][T10548] Call Trace:
[  338.107781][T10548]  <TASK>
[  338.110747][T10548]  dump_stack_lvl+0x16c/0x230
[  338.115473][T10548]  ? show_regs_print_info+0x20/0x20
[  338.120808][T10548]  ? load_image+0x3b0/0x3b0
[  338.125356][T10548]  panic+0x2c0/0x710
[  338.129298][T10548]  ? bpf_jit_dump+0xd0/0xd0
[  338.133840][T10548]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  338.139784][T10548]  ? _raw_spin_unlock+0x40/0x40
[  338.144668][T10548]  ? print_memory_metadata+0x314/0x400
[  338.150172][T10548]  ? __lock_acquire+0xff/0x7c80
[  338.155067][T10548]  check_panic_on_warn+0x84/0xa0
[  338.160130][T10548]  ? __lock_acquire+0xff/0x7c80
[  338.165022][T10548]  end_report+0x6f/0x140
[  338.169304][T10548]  kasan_report+0x128/0x150
[  338.173850][T10548]  ? __lock_acquire+0xff/0x7c80
[  338.178738][T10548]  __lock_acquire+0xff/0x7c80
[  338.183457][T10548]  ? is_bpf_text_address+0x26/0x2a0
[  338.188697][T10548]  ? arch_stack_walk+0x160/0x190
[  338.193672][T10548]  ? verify_lock_unused+0x140/0x140
[  338.198919][T10548]  ? stack_trace_save+0x9c/0xe0
[  338.203822][T10548]  ? stack_trace_snprint+0xf0/0xf0
[  338.208975][T10548]  ? __stack_depot_save+0x1f/0x630
[  338.214124][T10548]  ? do_syscall_64+0x55/0xb0
[  338.218754][T10548]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.224870][T10548]  lock_acquire+0x197/0x410
[  338.229422][T10548]  ? super_lock+0x167/0x360
[  338.233972][T10548]  ? __might_sleep+0xe0/0xe0
[  338.238687][T10548]  ? __mutex_trylock_common+0x153/0x250
[  338.244276][T10548]  ? read_lock_is_recursive+0x20/0x20
[  338.249774][T10548]  ? trace_raw_output_contention_end+0xd0/0xd0
[  338.256053][T10548]  down_read+0x46/0x2e0
[  338.260352][T10548]  ? super_lock+0x167/0x360
[  338.264900][T10548]  super_lock+0x167/0x360
[  338.269441][T10548]  ? user_get_super+0x180/0x180
[  338.274335][T10548]  ? mutex_lock_nested+0x20/0x20
[  338.279348][T10548]  fs_bdev_sync+0xa4/0x170
[  338.283902][T10548]  ? fs_bdev_mark_dead+0x1f0/0x1f0
[  338.289059][T10548]  blkdev_common_ioctl+0x880/0x23d0
[  338.294308][T10548]  ? tomoyo_path_number_perm+0x4dc/0x590
[  338.299970][T10548]  ? blkdev_bszset+0x1f0/0x1f0
[  338.304775][T10548]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  338.310297][T10548]  blkdev_ioctl+0x4eb/0x6f0
[  338.314843][T10548]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  338.320352][T10548]  ? bpf_lsm_file_ioctl+0x9/0x10
[  338.325326][T10548]  ? security_file_ioctl+0x80/0xa0
[  338.330475][T10548]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  338.335974][T10548]  __se_sys_ioctl+0xfd/0x170
[  338.340606][T10548]  do_syscall_64+0x55/0xb0
[  338.345059][T10548]  ? clear_bhb_loop+0x40/0x90
[  338.349771][T10548]  ? clear_bhb_loop+0x40/0x90
[  338.354481][T10548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.356234][T10560] loop6: detected capacity change from 0 to 32768
[  338.366838][T10548] RIP: 0033:0x7f1d7fd8e929
[  338.371300][T10548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.390952][T10548] RSP: 002b:00007f1d80c40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.400485][T10548] RAX: ffffffffffffffda RBX: 00007f1d7ffb5fa0 RCX: 00007f1d7fd8e929
[  338.408597][T10548] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000004
[  338.416618][T10548] RBP: 00007f1d7fe10b39 R08: 0000000000000000 R09: 0000000000000000
[  338.424640][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.432665][T10548] R13: 0000000000000000 R14: 00007f1d7ffb5fa0 R15: 00007ffe34ab4798
[  338.440699][T10548]  </TASK>
[  338.444084][T10548] Kernel Offset: disabled
[  338.448432][T10548] Rebooting in 86400 seconds..