last executing test programs:

24.638944644s ago: executing program 2 (id=709):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021"], 0x1c}}, 0x0)
unshare(0x400)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x40001cf, 0x34000, 0x0)

24.560340321s ago: executing program 2 (id=710):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}}, 0x884)

24.459317159s ago: executing program 2 (id=713):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000008411215500000000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0}, 0x0)

22.594982919s ago: executing program 2 (id=734):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

22.45743476s ago: executing program 2 (id=743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xff, 0x3}, {0xb, 0x3}, {0x3, 0x7}, {0x5, 0x5}], "2d0b6e232b6dc3d1"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc0)

22.035155484s ago: executing program 2 (id=737):
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f00000002c0), 0x82, 0x100, 0x0)

21.896430885s ago: executing program 32 (id=737):
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r0, &(0x7f00000002c0), 0x82, 0x100, 0x0)

2.572520523s ago: executing program 4 (id=911):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x7d, 0x7, 0xf6, 0x0, 0xfffffffe, 0x3, 0xd, 0x9, 0x4, 0xc3, 0x0, 0x0, 0x0, 0x2, 0x6, 0x7, 0x3, 0x2, 0xc, '\x00', 0x1, 0xffffffff})

2.515082017s ago: executing program 1 (id=912):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r1=>0x0)
write$UHID_INPUT(r0, &(0x7f0000000bc0)={0x8, {"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", 0x1000}}, 0x1006)
io_submit(r1, 0x1, &(0x7f0000000740)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])

2.339076572s ago: executing program 1 (id=914):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x442c, &(0x7f00000088c0)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

2.119005729s ago: executing program 0 (id=915):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x238, 0x0, 0xfeffffff, 0x0, 0x110, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x400, {0xaa5}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'macvlan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0xe14d}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)

1.952068203s ago: executing program 0 (id=917):
r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb143, 0x1000, 0x2, 0x196})
close_range(r0, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
io_getevents(r1, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0)

1.700641433s ago: executing program 0 (id=918):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0x8}, 0x8)

1.583308733s ago: executing program 4 (id=920):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)

1.531366537s ago: executing program 0 (id=921):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0011022, 0x0, 0x800000000038f}]})

1.445930564s ago: executing program 4 (id=922):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008000280f10f0500080000003e120000080006"], 0x44}}, 0x0)

1.268855828s ago: executing program 3 (id=924):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2c, 0xa5dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240008c0}, 0x404c8d4)

1.2455392s ago: executing program 4 (id=925):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3)

1.24459418s ago: executing program 0 (id=926):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nodiscard}]}, 0x1, 0x97b4, &(0x7f000001c6c0)="$eJzs3QWYZnXhsP9ZdpcuARXBQEBBVFrSoASRUFJQkC6lBFRAUlAEFFAMxABEuru7u7u7u/t/LburuN4gvv/f++LP+76va3fmOXOeM+f5fk7MzJl5nuUWXGq+gYExB4Y3xcCoPTb7Getv8vDig444eaXHp1lkgrlGTB5xh0lH3Jx00Ii3ow0MDIw2Yjkjpo3z4LHHjTYw5M3pf2+cscYeNN7AwMwjbs4z4u3sw99M/NDI+d4YpVFXdNDfbg7aafi/N5tg2KcY9s6se7w478DAwIRvuf+wu8z4Tw9U2nLzLrTg363+5jbMauiI99/6b/Th/ya+Z2Bg4jsHePt467yD3oOHNOxzTnjTdZtP/x587v91LTfvQguP4j9sXxw8Ytrsw/bxUfdBY6Nu5yccdPiTI4bwze1tYGDYIe4f9pX/FS0374KLDrz9cX7g4jlefuKNN4+b4zw5MDDOUwMD4zw9MDDOMwMD4zw7MDDOc++1S/3/a975Zplv2P4+8vYI9pHb8oQjt4sX37JdPD/3J44bGBgYY/g847w+/Hwx7hQjzwlVVVX1n928880yP5z/xxz1/P/Wrwsfvm63Zzr/V1VV/e9t4Xnnm2XYeXyU8/+473T+n2r7oQsN/9n/PLMPv9fr7+2DqKqqqn+rBRfG8/+E73T+X/O2wTt2/q+qqvrf25KLvXn+H3eU8/8k73T+Hzr5eHePmG/k1w2vvWWRb/7+2Ijpr7xl+uC3TH/5LdOHvmU5b51/9LdMf/Et08ccGBjnwRHTX/375HGeHHaff17OOM///fdxJh3ylukvvGX66G+Z/uKIdRo2fYy3TH/tLfOP+ffp4w77b4oRn/eldxjqqqqq/5iWnGXB+Qfe8nv2IyaP/MV+/L3Q899Y+vn3an2rqqqqqqqq6t/v9cdOPv3vf/P90YG3/O3q3/6GdcTPBQYdeeaVV75nK/qf0aB//nnINu/1Ov3/bZjzmAdPMTCw/jLv9arUe9D/mr9Vr/8r5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4t7m+v/f/v5/h4uW+/KIWec8+7DRFvn7PScdWGfEe4/Nfsb667wH6/4e9N96/X9gnUEDAyN8Jxxmufi8Sy497cDAwCKjHXb2bAN/+9gcwz4290SD3/xjzoGBad/8f+ikb7PkEa+y8OaLO0zyt2Uc+ebyF35jn8GDRlmJt/S+4/fbb+3lXph11LfTvP3j+NvrS7ww8X5TjPxbltFGmWnMt7nzyOWPfCyjOo9Y92mHrfsMm6y34Qwbb7b5Z9dZb5W11lhrjfVnmXn2meeYfcY555xlhjXXWXeNGYf//zZjNvylKwa/mzEbd9Qxe2zet47ZqI/t7cbsn1/V4x8W8eYSD5h9ygtHjtmQf3PMBr/zmE2xzohPNOnA0IGV3xyaQQMDkw4ZOrDpsBszjTEwMOnQEfNOOmzez0802sDAbn9/oINGPNno8HkGbTNsnv+w1y2Zc8SIbDlyvlGfZ33UFf1Xr1tyy3wHTjnK65b83+r/6Pz/T15zDPrbQI18AYQR8wz3eo9fZ+Kf1neKIW+e5N5ufd/heXHejLavIXPMsdX/1PPi0PqO+w7r+w7P4/e26zvvKl88cvii/sfWd5Rj3aLDP/hujnUD73ysG0z3X+Oyj4x6rFvk7VfxH/bjkWM0xigzvd2x7sYlTtxm2PIH3vlYt+g6I5484O/HutEGBiYdPPJYN+zAN/rQgd2G3Zh52I0xhg4cOOzGLG/eGGvgzGE3pl9tg3VXH/Tm0wyMWO6Mw5Y7z0SD3nTfZrrpdn9j9zfeGDJiXZ4f5x/XdcT2McVbz+fzTjR8MEfed+Ryh806crkzbj78Y6OPWO4L/8ZyR96X1vfFFYZ/bIwRy31xlOUOfYfljrzvP+0P0w76h19UhePNe/q6RrT/jvkO6/sOz8ON29uwaXttsutl/wPPwz3o7dZ3yDuv79u9bsjbru92e8618//U84bTdnbjNMO3lTFHbGev/Rvb78j7jnocG/5EIMMP+2O+m+PYFP90HNt28GijDPZberuv2VaH+Ye/P+nflnbb9ld+auTYDx1luf/qa7a3PJZBcBybcJTv5wZtvffAIBrz3fYctOrr/2LMhw784/cWI8d85H3faczHeDdj/uF3HvN3+3XytFMN//jQUdb/rWO+38Bsp4wc89FHWe6/GvMx3vnc8c9jPjAwlMb8yXuHj9s7HU/fbsxH3nfkmA/7PHNPNGRg2Df5U48Y89HfzZhP+j+znY8N8w9/f42/TZr7wbtOHznmo47xvxrz0f/NMd/qzr9t51O/+bEpRxsYffSBTVfZZJONZhr+/8ibMw//n49FJ14wfJzf6Vz6dkYj7/tO+8WQd2M04bsyGvSvjCYb8nZGf9+1zttzkdP+T49FQ/5dozP5WLTp0cPH7Z2+Lnq7MR95XzoPTvKW+4/6feg7PH8WPqZh09adfPl9Ri5yxN3ey+fPGvn97v/K588a+TPJdUY9yNe7rZ//u8vfXf7u8neXv7i3uf4/xcjr//fustSKI77pHPrgshPc9V6v73vcf/X1/xG+/3D9/64Jln1w2LdWIz72jtdnh8/zH3l9dvbhbyZ+aOR8o14fHHVF/9X12Rdu+cos/4+uz/4fNXJffRffF3f8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7m+v/M478PYCpFjt9kREXQocusMUyu7/X6/se9199/X+E7z9c/999mS0WGG3gbx97x+v/w+dxXP/fafD8+/4nX/8fua92/b/+Rfm7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7i3uf4/z8jfA7hmhn32H/n7APs/OP3S7/X6vsf9t17/7/X/vXX8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbcf1/YJSXSfx62wUG1///d/c2/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/838scs/svlj1n8l88fs/h/M3/M4v+t/DGL/wr5Yxb/FfPHLP7fzh+z+K+UP2bxX/nd+l/6r59f/L8pi/8q7f+YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/zv5Yxb/7+aPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL//fyxyz+G+WPWfw3zh+z+G+SP2bx/37+mMX/B/ljFv8f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/j/DGL/3b5Yxb/7fPHLP4/yR+z+P80f8ziv0P+mMX/Z/ljFv8d88cs/jvlj1n8d84fs/j/PH/M4v+L/DGL/y75Yxb/XfPHLP675Y9Z/H+ZP2bx/1X+mMV/9/wxi/+v88cs/r/JH7P4/zZ/zOL/u/wxi/8e+WMW/9/nj1n898wfs/j/IX/M4v/H/DGL/5/yxyz+f84fs/jvlT9m8d87f8ziv0/+mMX/L/ljFv9988cs/n/NH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMG/zEHBgYuzh8z+A/rkvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/qM2cngU/s/kj1n2/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfNJA/ZvEflD9m8R8tf8ziPzh/zOI/JH/M4j80f8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/9+WPWfwnyh+z+E+cP2bxnyR/zOL//vwxi/8H8scs/h/MH7P4T5o/ZvH/UP6YxX+y/DGL/+T5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/KfLHLP4fzx+z+E+ZP2bxnyp/zOI/df6Yxf8T+WMW/0/mj1n8p8kfs/hPmz9m8f9U/pjFf7r8MYv/p/PHLP6fyR+z+H82f8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/1z+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP5fzh+z+C+YP2bxXyh/zOL/lfwxi//C+WMW/6/mj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMX/a/ljFv+v549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv9v5I9Z/JfLH7P4L58/ZvH/Zv6Yxf9b+WMW/xXyxyz+K+aPWfy/nT9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/3fyxyz+380fs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/+/lj1n8N8ofs/hvnD9m8d8kf8zi//38MYv/D/LHLP4/zB+z+G+aP2bx3yx/zOK/ef6Yxf9H+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf/H+WMW/+3yxyz+2+ePWfx/kj9m8f9p/pjFf4f8MYv/z/LHLP475o9Z/HfKH7P475w/ZvH/ef6Yxf8X+WMW/13yxyz+u+aPWfx3yx+z+P8yf8zi/6v8MYv/7vljFv9f549Z/H+TP2bx/23+mMX/d/ljFv898scs/r/PH7P475k/ZvH/Q/6Yxf+P+WMW/z/lj1n8/5w/ZvHfK3/M4r93/pjFf5/8MYv/X/LHLP775o9Z/P+aP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxif+b79r833gX81j8Bwn9300W/9Hyxyz+g/PHLP5D8scs/kPzxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvF/X/6YxX+i/DGL/8T5Yxb/SfLHLP7vzx+z+H8gf8zi/8H8MYv/pPljFv8P5Y9Z/CfLH7P4T54/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvGfIn/M4v/x/DGL/5T5Yxb/qfLHLP5T549Z/D+RP2bx/2T+mMV/mvwxi/+07+A/2f+L9foPzeL/qfZ/zOI/Xf6Yxf/T+WMW/8/kj1n8P5s/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/Ln/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/y/nj1n8F8wfs/gvlD9m8f9K/pjFf+H8MYv/V/PHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v+1/DGL/9fzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfyxyz+y+WPWfyXzx+z+H8zf8zi/638MYv/CvljFv8V88cs/t/OH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/O/ljFv/v5o9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/9/LHLP4b5Y9Z/DfOH7P4b5I/ZvH/fv6Yxf8H+WMW/x/mj1n8N80fs/hvlj9m8d88f8zi/6P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+P8MYv/dvljFv/t88cs/j/JH7P4/zR/zOK/Q/6Yxf9n+WMW/x3zxyz+O+WPWfx3zh+z+P88f8zi/4v8MYv/LvljFv9d88cs/rvlj1n8f5k/ZvH/Vf6YxX/3/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/x75Yxb/3+ePWfz3zB+z+P8hf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOK/T/6Yxf8v+WMW/33zxyz+f80fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf/BA/pjFf1D+mMV/tPwxi//g/DGL/5D8MYv/0Pwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/N+XP2bxnyh/zOI/cf6YxX+S/DGL//vzxyz+H8gfs/h/MH/M4j9p/pjF/0P5Yxb/yfLHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX+q/DGL/9T5Yxb/T+SPWfw/mT9m8Z8mf8ziP23+mMX/U/ljFv/p8scs/p/OH7P4fyZ/zOL/2fwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf9z+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzl/zOK/YP6YxX+h/DGL/1fyxyz+C+ePWfy/mj9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/6/lj1n8v54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8v5E/ZvFfLn/M4r98/pjF/5v5Yxb/b+WPWfxXyB+z+K+YP2bx/3b+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7fyR+z+H83f8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfy/lz9m8d8of8ziv3H+mMV/k/wxi//388cs/j/IH7P4/zB/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/H+ePWfy3yx+z+G+fP2bx/0n+mMX/p/ljFv8d8scs/j/LH7P475g/ZvHfKX/M4r9z/pjF/+f5Yxb/X+SPWfx3yR+z+O+aP2bx3y1/zOL/y/wxi/+v8scs/rvnj1n8f50/ZvH/Tf6Yxf+3+WMW/9/lj1n898gfs/j/Pn/M4r9n/pjF/w/5Yxb/P+aPWfz/lD9m8f9z/pjFf6/8MYv/3vljFv998scs/n/JH7P475s/ZvH/a/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf7Yf63/kH+YOvi6/LH/Wv9R9v/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9v/tb9y87D432EF/hdZ/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP6bw3/a9W53/9BT+AwODn2n/xyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4v/ms8Hm/89Z/Aflj1n8R8sfs/gPzh+z+A/JH7P4D80fs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6Yxf99/8pfunFY/CfyEr9jFv+J88cs/pPkj1n8358/ZvH/QP6Yxf+D+WMW/0nzxyz+H8ofs/hPJvMf8i7ns/hPLvN/t1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8p8gfs/h/PH/M4j9l/pjFf6r8MYv/1PljFv9P5I9Z/D+ZP2bxnyZ/zOI/bf6Yxf9T+WMW/+nyxyz+n84fs/h/Jn/M4v/Z/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjF/3P5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/OX/M4r9g/pjFf6H8MYv/V/LHLP4L549Z/L+aP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/r+WPWfy/nj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfy/kT9m8V8uf8ziv3z+mMX/m/ljFv9v5Y9Z/FfIH7P4r5g/ZvH/dv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/t/JH7P4fzd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/L+XP2bx3yh/zOK/cf6YxX+T/DGL//fzxyz+P8gfs/j/MH/M4r9p/pjFf7P8MYv/5vljFv8f5Y9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv8f549Z/LfLH7P4b58/ZvH/Sf6Yxf+n+WMW/x3yxyz+P8sfs/jvmD9m8d8pf8ziv3P+mMX/5/ljFv9f5I9Z/HfJH7P475o/ZvHfLX/M4v/L/DGL/6/yxyz+u+ePWfx/nT9m8f9N/pjF/7f5Yxb/3+WPWfz3yB+z+P8+f8ziv2f+mMX/D/ljFv8/5o9Z/P+UP2bx/3P+mMV/r/wxi//e+WMW/33yxyz+f8kfs/jvmz9m8f9r/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHJP5DB/LHLP6D8scs/qPlj1n8B+ePWfyH5I9Z/Ifmj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Lf1f/mNN974f7Nq/4lZ/Mdp/8cs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMX/ffljFv+J8scs/hPnj1n8J8kfs/i/P3/M4v+B/DGL/wfzxyz+k+aPWfw/lD9m8Z8sf8ziP3n+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/ivwxi//H88cs/lPmj1n8p8ofs/hPnT9m8f9E/pjF/5P5Yxb/afLHLP7T5o9Z/D+VP2bxny5/zOL/6fwxi/9n8scs/p/NH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8P5c/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+X88cs/gvmj1n8F8ofs/h/JX/M4r9w/pjF/6v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/Wv6Yxf/r+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf8b+WMW/+Xyxyz+y+ePWfy/mT9m8f9W/pjFf4X8MYv/ivljFv9v549Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/538MYv/d/PHLP7r5o9Z/NfLH/vv9h995NSh6+eP/Xf7/62hG+SPWfw3zB+z+H8vf8ziv1H+mMV/4/wxi/8m+WMW/+/nj1n8f5A/ZvH/Yf6YxX/T/DGL/2b5Yxb/zfPHLP4/yh+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP4/zh+z+G+XP2bx3z5/zOL/k/wxi/9P88cs/jvkj1n8f5Y/ZvHfMX/M4r9T/pjFf+f8MYv/z/PHLP6/yB+z+O+SP2bx3zV/zOK/W/6Yxf+X+WMW/1/lj1n8d88fs/j/On/M4v+b/DGL/2/zxyz+v8sfs/jvkT9m8f99/pjFf8/8MYv/H/LHLP5/zB+z+P8pf8zi/+f8MYv/XvljFv+988cs/vvkj1n8/5I/ZvHfN3/M4v/X/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP43iPxH+zfmtfjfKPL/d7L435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfxHH8gfs/gPyh+z+I+WP2bxH5w/ZvEfkj9m8R+aP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/+/LHLP4T5Y9Z/CfOH7P4T5I/ZvF/f/6Yxf8D+WMW/w/mj1n8J80fs/h/KH/M4j9Z/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4T5U/ZvGfOn/M4v+J/DGL/yfzxyz+0+SPWfynzR+z+H8qf8ziP13+mMX/0/ljFv/P5I9Z/D+bP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fy5/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8v549Z/BfMH7P4L5Q/ZvH/Sv6YxX/h/DGL/1fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/tfwxi//X88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/838scs/svlj1n8l88fs/h/M3/M4v+t/DGL/wr5Yxb/FfPHLP7fzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/zv5Yxb/7+aPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL//fyxyz+G+WPWfw3zh+z+G+SP2bx/37+mMX/B/ljFv8f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/j/DGL/3b5Yxb/7fPHLP4/yR+z+P80f+y/0n/QkDfffav/Dvlj/5X+I959q//P8scs/jvmj1n8d8ofs/jvnD9m8f95/pjF/xf5Yxb/XfLHLP675o9Z/HfLH7P4/zJ/zOL/q/wxi//u+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/z3yxyz+v88fs/jvmT9m8f9D/pjF/4/5Yxb/P+WPWfz/nD9m8d8rf8ziv3f+mMV/n/wxi/9f8scs/vvmj1n8/5o/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGJ/xgD+WMW/0H5Yxb/0fLHLP6D88cs/kPyxyz+Q/PHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8X9f/pjFf6L8MYv/xPljFv9J8scs/u/PH7P4fyB/zOL/wfwxi/+k+WMW/w/lj1n8J8sfs/hPnj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8if8zi//H8MYv/lPljFv+p8scs/lPnj1n8P5E/ZvH/ZP6YxX+a/DGL/7T5Yxb/T+WPWfynyx+z+H86f8zi/5n8MYv/Z/PHLP7T549Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/P5Y9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/+X8MYv/gvljFv+F8scs/l/JH7P4L5w/ZvH/av6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/L+WP2bx/3r+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/0b+mMV/ufwxi//y+WMW/2/mj1n8v5U/ZvFfIX/M4r9i/pjF/9v5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/h/J3/M4v/d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/Xv6YxX+j/DGL/8b5Yxb/TfLHLP7fzx+z+P8gf8zi/8P8MYv/pvljFv/N8scs/pvnj1n8f5Q/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5w/ZvHfLn/M4r99/pjF/yf5Yxb/n+aPWfx3yB+z+P8sf8ziv2P+mMV/p/wxi//O+WMW/5/nj1n8f5E/ZvHfJX/M4r9r/pjFf7f8MYv/L/PHLP6/yh+z+O+eP2bx/3X+mMX/N/ljFv/f5o9Z/H+XP2bx3yN/zOL/+/wxi/+e+WMW/z/kj1n8/5g/ZvH/U/6Yxf/P+WMW/73yxyz+e+ePWfz3yR+z+P8lf8ziv2/+mMX/r/ljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4jzmQP2bxH5Q/ZvEfLX/M4j84f8ziPyR/zOI/NH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW//flj1n8J8ofs/hPnD9m8Z8kf+y/0H908n9//th/oT/u/x/IH7P4fzB/zOI/6Tv6vzH4//6K/Wdm8f9Q+z9m8Z8sf8ziP3n+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/ivwxi//H88cs/lPmj1n8p8ofs/hPnT9m8f9E/pjF/5P5Yxb/afLHLP7T5o9Z/D+VP2bxny5/zOL/6fwxi/9n8scs/p/NH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8P5c/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+X88cs/gvmj1n8F8ofs/h/JX/M4r9w/pjF/6v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/Wv6Yxf/r+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf8b+WMW/+Xyxyz+y+ePWfy/mT9m8f9W/pjFf4X8MYv/ivljFv9v549Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6ib/f+OBWvzXMPn/G1n818wfs/ivlT9m8V87f8ziv07+mMX/O/ljFv/v5o9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/9/LHLP4b5Y9Z/DfOH7P4b5I/ZvH/fv6Yxf8H+WMW/x/mj1n8N80fs/hvlj9m8d88f8zi/6P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+P8MYv/dvljFv/t88cs/j/JH7P4/zR/zOK/Q/6Yxf9n+WMW/x3zxyz+O+WPWfx3zh+z+P88f8zi/4v8MYv/LvljFv9d88cs/rvlj1n8f5k/ZvH/Vf6YxX/3/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/x75Yxb/3+ePWfz3zB+z+P8hf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOK/T/6Yxf8v+WMW/33zxyz+f80fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf6yB/DGL/6D8MYv/aPljFv/B+WMW/yH5Yxb/ofljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+L8vf8ziP1H+mMV/4vwxi/8k+WMW//fnj1n8P5A/ZvH/YP6YxX/S/DGL/4fyxyz+k+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi/9U+WMW/6nzxyz+n8gfs/h/Mn/M4j9N/pjFf9r8MYv/p/LHLP7T5Y9Z/D+dP2bx/0z+mMX/s/ljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi//n8scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/3L+mMV/wfwxi/9C+WMW/6/kj1n8F84fs/h/NX/M4r9I/pjFf9H8MYv/YvljFv/F88cs/l/LH7P4fz1/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fyN/zOK/XP6YxX/5/DGL/zfzxyz+38ofs/ivkD9m8V8xf8zi/+38MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfy/kz9m8f9u/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/h/L3/M4r9R/pjFf+P8MYv/JvljFv/v549Z/H+QP2bx/2H+mMV/0/wxi/9m+WMW/83zxyz+P8ofs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P84fs/hvlz9m8d8+f8zi/5P8MYv/T/PHLP475I9Z/H+WP2bx3zF/zOK/U/6YxX/n/DGL/8/zxyz+v8gfs/jvkj9m8d81f8ziv1v+mMX/l/ljFv9f5Y9Z/HfPH7P4/zp/zOL/m/wxi/9v88cs/r/LH7P475E/ZvH/ff6YxX/P/DGL/x/yxyz+f8wfs/j/KX/M4v/n/DGL/175Yxb/vfPHLP775I9Z/P+SP2bx3zd/zOL/1/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj0n8xx7IH7P4D8ofs/iPlj9m8R+cP2bxH5I/ZvEfmj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL//vyxyz+E+WPWfwnzh+z+E+SP2bxf3/+mMX/A/ljFv8P5o9Z/CfNH7P4fyh/zOI/Wf6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+E+VP2bxnzp/zOL/ifwxi/8n88cs/tPkj1n8p80fs/h/Kn/M4j9d/pjF/9P5Yxb/z+SPWfw/mz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H8uf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/L+ePWfwXzB+z+C+UP2bx/0r+mMV/4fwxi/9X88cs/ovkj1n8F80fs/gvlj9m8V88f8zi/7X8MYv/1/PHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/N/LHLP7L5Y9Z/JfPH7P4fzN/zOL/rfwxi/8K+WMW/xXzxyz+384fs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf87+WMW/+/mj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi//38scs/hvlj1n8N84fs/hvkj9m8f9+/pjF/wf5Yxb/H+aPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/4/wxi/92+WMW/+3zxyz+P8kfs/j/NH/M4r9D/pjF/2f5Yxb/HfPHLP475Y9Z/HfOH7P4/zx/zOL/i/wxi/8u+WMW/13zxyz+u+WPWfx/mT9m8f9V/pjFf/f8MYv/r/PHLP6/yR+z+P82f8zi/7v8MYv/HvljFv/f549Z/PfMH7P4/yF/zOL/x/wxi/+f8scs/n/OH7P475U/ZvHfO3/M4r9P/pjF/y/5Yxb/ffPHLP5/zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/nIH8MYv/oPwxi/9o+WMW/8H5Yxb/IfljFv+h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4vy9/zOI/Uf6YxX/i/DGL/yT5Yxb/9+ePWfw/kD9m8f9g/pjFf9L8MYv/h/LHLP6T5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/1T5Yxb/qfPHLP6fyB+z+H8yf8ziP03+mMV/2vwxi/+n8scs/tPlj1n8P50/ZvH/TP6Yxf+z+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/+fyxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/cv6YxX/B/DGL/0L5Yxb/r+SPWfwXzh+z+H81f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+X8sfs/h/PX/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/h/I3/M4r9c/pjFf/n8MYv/N/PHLP7fyh+z+K+QP2bxXzF/zOL/7fwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/L+TP2bx/27+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+H8vf8ziv1H+mMV/4/wxi/8m+WMW/+/nj1n8f5A/ZvH/Yf6YxX/T/DGL/2b5Yxb/zfPHLP4/yh+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP4/zh+z+G+XP2bx3z5/zOL/k/wxi/9P88cs/jvkj1n8f5Y/ZvHfMX/M4r9T/pjFf+f8MYv/z/PHLP6/yB+z+O+SP2bx3zV/zOK/W/6Yxf+X+WMW/1/lj1n8d88fs/j/On/M4v+b/DGL/2/zxyz+v8sfs/jvkT9m8f99/pjFf8/8MYv/H/LHLP5/zB+z+P8pf8zi/+f8MYv/XvljFv+988cs/vvkj1n8/5I/ZvHfN3/M4v/X/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfzHHcgfs/gPyh+z+I+WP2bxH5w/ZvEfkj9m8R+aP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/+/LHLP4T5Y9Z/CfOH7P4T5I/ZvF/f/6Yxf8D+WMW/w/mj1n8J80fs/h/KH/M4j9Z/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4T5U/ZvGfOn/M4v+J/DGL/yfzxyz+0+SPWfynzR+z+H8qf8ziP13+mMX/0/ljFv/P5I9Z/D+bP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fy5/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8v549Z/BfMH7P4L5Q/ZvH/Sv6YxX/h/DGL/1fzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/tfwxi//X88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/838scs/svlj1n8l88fs/h/M3/M4v+t/DGL/wr5Yxb/FfPHLP7fzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/zv5Yxb/7+aPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL//fyxyz+G+WPWfw3zh+z+G+SP2bx/37+mMX/B/ljFv8f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/j/DGL/3b5Yxb/7fPHLP4/yR+z+P80f8ziv0P+mMX/Z/ljFv8d88cs/jvlj1n8d84fs/j/PH/M4v+L/DGL/y75Yxb/XfPHLP675Y9Z/H+ZP2bx/1X+mMV/9/wxi/+v88cs/r/JH7P4/zZ/zOL/u/wxi/8e+WMW/9/nj1n898wfs/j/IX/M4v/H/DGL/5/yxyz+f84fs/jvlT9m8d87f8ziv0/+mMX/L/ljFv9988cs/n/NH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+8gfwxi/+g/DGL/2j5Yxb/wfljFv8h+WMW/6H5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/i/L3/M4j9R/pjFf+L8MYv/JPljFv/3549Z/D+QP2bx/2D+mMV/0vwxi/+H8scs/pPlj1n8J88fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPkT9m8f94/pjFf8r8MYv/VPljFv+p88cs/p/IH7P4fzJ/zOI/Tf6YxX/a/DGL/6fyxyz+0+WPWfw/nT9m8f9M/pjF/7P5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/5/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9y/pjFf8H8MYv/QvljFv+v5I9Z/BfOH7P4fzV/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5fyx+z+H89f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+H8jf8ziv1z+mMV/+fwxi/8388cs/t/KH7P4r5A/ZvFfMX/M4v/t/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8v5M/ZvH/bv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4fy9/zOK/Uf6YxX/j/DGL/yb5Yxb/7+ePWfx/kD9m8f9h/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/j/OH7P4b5c/ZvHfPn/M4v+T/DGL/0/zxyz+O+SPWfx/lj9m8d8xf8ziv1P+mMV/5/wxi//P88cs/r/IH7P475I/ZvHfNX/M4r9b/pjF/5f5Yxb/X+WPWfx3zx+z+P86f8zi/5v8MYv/b/PHLP6/yx+z+O+RP2bx/33+mMV/z/wxi/8f8scs/n/MH7P4/yl/zOL/5/wxi/9e+WMW/73zxyz+++SPWfz/kj9m8d83f8zi/9f8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9J/McfyB+z+A/KH7P4j5Y/ZvEfnD9m8R+SP2bxH5o/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi//78scs/hPlj1n8J84fs/hPkj9m8X9//pjF/wP5Yxb/D+aPWfwnzR+z+H8of8ziP1n+mMV/8vwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/8U+WMW/4/nj1n8p8wfs/hPlT9m8Z86f8zi/4n8MYv/J/PHLP7T5I9Z/KfNH7P4fyp/zOI/Xf6Yxf/T+WMW/8/kj1n8P5s/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/Ln/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/y/nj1n8F8wfs/gvlD9m8f9K/pjFf+H8MYv/V/PHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v+1/DGL/9fzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfyxyz+y+WPWfyXzx+z+H8zf8zi/638MYv/CvljFv8V88cs/t/OH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/O/ljFv/v5o9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/9/LHLP4b5Y9Z/DfOH7P4b5I/ZvH/fv6Yxf8H+WMW/x/mj1n8N80fs/hvlj9m8d88f8zi/6P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+P8MYv/dvljFv/t88cs/j/JH7P4/zR/zOK/Q/6Yxf9n+WMW/x3zxyz+O+WPWfx3zh+z+P88f8zi/4v8MYv/LvljFv9d88cs/rvlj1n8f5k/ZvH/Vf6YxX/3/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/x75Yxb/3+ePWfz3zB+z+P8hf8zi/8f8MYv/n/LHLP5/zh+z+O+VP2bx3zt/zOK/T/6Yxf8v+WMW/33zxyz+f80fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b/e5D9oYGCbdzurxP8Gk/+/kcX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf4KB/DGL/6D8MYv/aPljFv/B+WMW/yH5Yxb/ofljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzP//Y48eDAAwECCAPWrbtm3btm3btm3btm3btm0vcBP0khUStfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uPWv5H8R+1/I/qP2r5H81/1PI/uv+o5X8M/1HL/5j+o5b/sfxHLf9j+49a/sfxH7X8j+s/avkfz3/U8j++/6jlfwL/Ucv/hP6jlv+J/Ect/xP7j1r+J/EftfxP6j9q+Z/Mf9TyP7n/qOV/Cv9Ry/+U/qOW/6n8Ry3/U/uPWv6n8R+1/E/rP2r5n85/1PI/vf+o5X8G/1HL/4z+o5b/mfxHLf8z+49a/mfxH7X8z+o/avmfzX/U8j+7/6jlfw7/Ucv/nP6jlv+5/Ect/3P7j1r+5/EftfzP6z9q+Z/Pf9TyP7//qOV/Af9Ry/+C/qOW/4X8Ry3/C/uPWv4X8R+1/C/qP2r5X8x/1PK/uP+o5X8J/1HL/5L+o5b/pfxHLf9L+49a/pfxH7X8L+s/avlfzn/U8r+8/6jlfwX/Ucv/iv6jlv+V/Ect/yv7j1r+V/Eftfyv6j9q+V/Nf9Tyv7r/qOV/Df9Ry/+a/qOW/7X8Ry3/a/uPWv7X8R+1/K/rP2r5X89/1PK/vv+o5X8D/1HL/4b+o5b/jfxHLf8b+49a/jfxH7X8b+o/avnfzH/U8r+5/6jlfwv/Ucv/lv6jlv+t/Ect/1v7j1r+t/Eftfxv6z9q+d/Of9Tyv73/qOV/B/9Ry/+O/qOW/538Ry3/O/uPWv538R+1/O/qP2r5381/1PK/u/+o5X8P/1HL/57+o5b/vfxHLf97+49a/vfxH7X87+s/avnfz3/U8r+//6jl/wD/Ucv/gf6jlv+D/Ect/wf7j1r+D/Eftfwf6j9q+T/Mf9Tyf7j/qOX/CP9Ry/+R/qOW/6P8Ry3/R/uPWv6P8R+1/B/rP2r5P85/1PJ/vP+o5f8E/1HL/4n+o5b/k/xHLf8n+49a/k/xH7X8n+o/avk/zX/U8n+6/6jl/wz/Ucv/mf6jlv+z/Ect/2f7j1r+z/Eftfyf6z9q+T/Pf9Tyf77/qOX/Av9Ry/+F/qOW/4v8Ry3/F/uPWv4v8R+1/F/qP2r5v8x/1PJ/uf+o5f8K/1HL/5X+o5b/q/xHLf9X+49a/q/xH7X8X+s/avm/zn/U8n+9/6jl/wb/Ucv/jf6jlv+b/Ect/zf7j1r+b/Eftfzf6j9q+b/Nf9Tyf7v/qOX/Dv9Ry/+d/qOW/7v8Ry3/d/uPWv7v8R+1/N/rP2r5v89/1PJ/v/+o5f8B/1HL/4P+o5b/h/xHLf8P+49a/h/xH7X8P+o/avl/zH/U8v+4/6jl/wn/Ucv/k/6jlv+n/Ect/0/7j1r+n/Eftfw/6z9q+X/Of9Ty/7z/qOX/Bf9Ry/+L/qOW/5f8Ry3/L/uPWv5f8R+1/L/qP2r5f81/1PL/uv+o5f8N/1HL/5v+o5b/t/xHLf9v+49a/t/xH7X8v+s/avl/z3/U8v++/6jl/wP/Ucv/h/6jlv+P/Ect/x/7j1r+P/Eftfx/6j9q+f/Mf9Ty/7n/qOX/C/9Ry/+X/qOW/6/8Ry3/X/uPWv6/8R+1/H/rP2r5/85/1PL/vf+o5f8H/1HL/4/+o5b/n/xHLf8/+49a/n/xH7X8/+o/avn/zX/U8v+7/6jl/w//Ucv/n/6jlv+//Ect/3/7j0r+h/mP/6jl/7/+o5b///mPWv7/7z9q+R/Af9TyP6D/qOV/IP9Ry//A/qOW/0H8Ry3/g/qPWv4H8x+1/A/uP2r5H8J/1PI/pP+o5X8o/1HL/9D+o3/dPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+wb/8xXtcFHMc/9xPBAhTStxQ/gvJQg+OHcfwombUaJ+sY6ZqupTA4UQM1uBU/jI5NW3+wiYs1azpp7Wa2WGM6RxKlpYu5Md2klZZNyhnD4bQttB/r2pf7fo+7r8eN7/t6v/mDx+OPu+/nc7w+B2xPPp8bdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKS0acvWr65ev75zoxdeeOFF/4tz/S8TkNrp6M/17wQAAAAAAAAAAAAAADiTHD9OdK7/jAAAAAAAcL5p77j2REPdoFMNAw8mH+489f7qd2+8rafnyYsq78sfXj7EJesHHvT29vbuOPDmsvLhqKIoSp9tfPn4gupx6frd+1f+oe8oFCfafnVn1/GOup89dctbLcvHLW46dbapWHXr7es759QXRWhoKjaXDubWFUVobip2lQ7mlQ5GNRU/Lh3MP3Uwuni6dDB7zV3r15ZOvO9Tw3mnvaO7aBhUbDHoX4OB/Xfvf+S9yvthLlm5WmNR7v/Szz+zq+pjFWfov3L9UFfdf81/QOCMauv/8e7K+2Eu+b77/8S/br9uqI+duf/K9UO9/iGdIZ7/BzVa/dxf9fw/bYhL9u8PTW97tNT/toeff6h8qvFsnv9PXz80VPdfP+j5v/Qc31h5/h9VFKFphH8dcF5p79hxYrj7//D9N06q2tQN7P/g8h88V+p/asfExvKpphr7bxzm/l+3/enBv1egNu0dP+ytuv/X0H/RMsQl+/uf1jPh3VL/14z/9+sDPlZL/03V/bd2bbi7ddOWrbNu37B6Xee6zjvnz2ubt7BtzqJF81tPPRL0vR3h3wqcH0Z2/y/GVG3qiqKzf//Lo8eWlPrfdOTY5vKpC2rsv3nY+/9r7v8wpOn1RXNzsXl1V9fGuX1vK4fz+t72/bIh+q/h6/8ZM8u/rPJ1d+kL8v79gQVFT6n/na/csKV8qrnG/kcN1/+3Tn9eIMII7/9rqzaD+r/ixXtfLfW/7+03ry+fqvXr/wuG7X+P+z+MRHtH1Tf8/J+V+j958mDkN9uE0f7/D9LJ0f8r9T99Mm4dxugf0snR/wP3jBrq+wTOQrhQ/5BOjv43PbTmhbh1+ID+IZ0c/S/8y6Gb4tbhg/qHdHL0P/GSl/8Wtw5j9Q/p5Oj/lts2fi1uHcbpH9LJ0f+xe5+9J24dxusf0snR/4/+ddfxuHW4SP+QTo7+7x+7/Ya4dbhY/5BOjv6fvft3v45bhwn6h3Ry9H/5rn2z4tZhov4hnRz9b3hr0oG4dfiQ/iGdHP1fO+nCyJ/TDZfoH9LJ0f+YtXu+G7cOl+of0snRf9fe2X+OW4egf0jnbPsfHXn9Uv9LX7pvWdw6XKZ/SCfH/X9Cy+6TceswSf+QTo7+b7xp6aq4dfiw/iGdHP0/9fMv3x+3Dh/RP6STo/93fvv2ZXHrMFn/kE6O/l+df/TRuHWYon9IJ0f/3/vCdXPj1mGq/iGdHP0/fnznL+LWYZr+IZ0c/b+3u+XKuHX4qP4hnRz9H1m1YHfcOkzXP6STo/9HpjxcH7cOM/QP6eTo/5v//eeJuHX4mP4hnRz9L+j+4ra4dfi4/iGdHP1P6vrsc3HrcLn+IZ0c/a8cc+z6uHVo0T+kk6P/1t/cOiVuHWbqH9LJ0f/ag4e/E7cOV+gf0snR/7L2Py2IW4cr9Q/p5Oi/oe0be+LW4Sr9Qzo5+j/6+wkr4tbhE/qHdHL0/5PH9r8ctw6z9A/p5Oj/2195bF3cOszWP6STo//DM+rfiVuHVv1DOjn63/rCE/+JW4c5+od0cvQ/d9/UO+LWYa7+IZ0c/U/+3NgjceswT/+QTo7+v7Sk5zNx6zBf/5BOjv6f+OMze+PW4Wr9Qzo5+u/tuWNJ3Dp8Uv+QTo7+X1q57b64dVigf0gnR/8Ptr44IW4d2vQP6eTo/403br45bh0W6h/SydH/3gf/cShuHRbpH9LJ0f+O9a9/PW4dFusf0snR//MXr3gtbh2W6B/SydH/zL9fNS5uHT6lf0gnR/9rdnZ/P24dPq1/SCdH/ys2P9AStw7X6B/SydF/Y/PifXHrsFT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/I8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBDAAAAIAwf+s82g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATwEAAP//I99lvw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

1.146994888s ago: executing program 3 (id=927):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x4, @empty}}}, 0x90)

1.111352491s ago: executing program 4 (id=928):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x550c, &(0x7f00000079c0)="$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")
mkdir(&(0x7f0000000140)='./bus\x00', 0x8b)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)

1.055146605s ago: executing program 1 (id=929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0)

999.03218ms ago: executing program 3 (id=930):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x120)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x8, @auto="b8f181cdd0a829ce"})

874.26162ms ago: executing program 1 (id=931):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)

568.594755ms ago: executing program 3 (id=932):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r0, 0x0)
listen(r0, 0x0)

499.089ms ago: executing program 1 (id=933):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000013000500080000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0)

335.080143ms ago: executing program 3 (id=934):
mkdir(&(0x7f0000000100)='./file0\x00', 0x48)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000004"], 0x2a)

274.600678ms ago: executing program 1 (id=935):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x4)

127.17042ms ago: executing program 3 (id=936):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

49.387026ms ago: executing program 4 (id=937):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c001780040001"], 0x138}}, 0x0)

0s ago: executing program 0 (id=938):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r0, 0x0, r1)
write$binfmt_aout(r2, 0x0, 0xff2e)

kernel console output (not intermixed with test programs):

 from 0 to 2048
[  100.155814][ T6309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.278540][ T6309] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.392777][ T6290] loop2: detected capacity change from 0 to 32768
[  100.459549][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.492492][ T6290] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  100.553735][ T2957] (kworker/u4:8,2957,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=648518346341351496, rec_len=0, name_len=0
[  100.677058][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  100.736130][ T6290] (syz.2.145,6290,0):ocfs2_remove_inode_range:1793 ERROR: status = -22
[  100.783778][ T6290] (syz.2.145,6290,1):__ocfs2_change_file_space:2044 ERROR: status = -22
[  100.906249][   T23] usb 2-1: Using ep0 maxpacket: 8
[  100.925806][   T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  100.962229][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.993801][   T23] pvrusb2: Hardware description: Terratec Grabster AV400
[  101.025739][ T5784] ocfs2: Unmounting device (7,2) on (node local)
[  101.032178][   T23] pvrusb2: **********
[  101.036204][   T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  101.110086][   T23] pvrusb2: Important functionality might not be entirely working.
[  101.147002][   T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  101.189610][   T23] pvrusb2: **********
[  101.230181][ T2315] pvrusb2: Invalid write control endpoint
[  101.503533][ T6319] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61)
[  101.554168][ T2315] pvrusb2: Invalid write control endpoint
[  101.566760][ T5872] usb 2-1: USB disconnect, device number 3
[  101.588966][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  101.622789][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  101.644708][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  101.684968][ T2315] pvrusb2: Device being rendered inoperable
[  101.705811][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  101.727382][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  101.767699][ T2315] pvrusb2: Attached sub-driver cx25840
[  101.788049][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  101.795794][ T6351] devpts: called with bogus options
[  101.805686][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  102.047159][ T6358] program syz.3.164 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  102.155055][ T6360] loop0: detected capacity change from 0 to 8
[  102.200154][ T6360] SQUASHFS error: lzo decompression failed, data probably corrupt
[  102.231247][ T6360] SQUASHFS error: Failed to read block 0x91: -5
[  102.243008][ T6360] SQUASHFS error: Unable to read metadata cache entry [8f]
[  102.267061][ T6360] SQUASHFS error: Unable to read inode 0x11f
[  102.331514][ T5776] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  102.626942][ T5850] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  102.647787][ T6366] Bluetooth: MGMT ver 1.22
[  102.730307][ T6356] loop2: detected capacity change from 0 to 32768
[  102.777754][ T6356] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.165 (6356)
[  102.829955][ T6356] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  102.849609][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.857402][ T6356] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  102.867611][ T5850] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  102.882811][ T6356] BTRFS info (device loop2): enabling disk space caching
[  102.913750][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.917315][ T6356] BTRFS info (device loop2): force clearing of disk cache
[  102.950328][ T6356] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  102.963517][ T5850] usb 4-1: config 0 descriptor??
[  102.989256][ T6356] BTRFS info (device loop2): use zstd compression, level 3
[  102.999633][ T5850] cdc_mbim 4-1:0.0: MBIM functional descriptor missing
[  103.006580][ T5850] cdc_mbim 4-1:0.0: bind() failure
[  103.007690][ T6371] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.025505][ T6356] BTRFS info (device loop2): disk space caching is enabled
[  103.153786][ T6356] BTRFS info (device loop2): enabling ssd optimizations
[  103.169966][ T6356] BTRFS info (device loop2): auto enabling async discard
[  103.193472][ T6356] BTRFS info (device loop2): rebuilding free space tree
[  103.235296][ T6356] BTRFS info (device loop2): disabling free space tree
[  103.242352][ T6356] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  103.252125][ T6356] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  103.282787][   T23] usb 4-1: USB disconnect, device number 5
[  103.749846][   T28] audit: type=1326 audit(1756471333.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7e4185ba7 code=0x7ffc0000
[  103.809819][ T5784] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  103.846661][ T5158] udevd[5158]: worker [5774] terminated by signal 33 (Unknown signal 33)
[  103.854597][   T28] audit: type=1326 audit(1756471333.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e412ade9 code=0x7ffc0000
[  103.884624][   T28] audit: type=1326 audit(1756471333.610:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7e4185ba7 code=0x7ffc0000
[  103.932928][   T28] audit: type=1326 audit(1756471333.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e412ade9 code=0x7ffc0000
[  104.047345][   T28] audit: type=1326 audit(1756471333.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7e4185ba7 code=0x7ffc0000
[  104.106957][   T28] audit: type=1326 audit(1756471333.610:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e412ade9 code=0x7ffc0000
[  104.166927][   T28] audit: type=1326 audit(1756471333.610:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7e4185ba7 code=0x7ffc0000
[  104.208007][   T28] audit: type=1326 audit(1756471333.610:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e412ade9 code=0x7ffc0000
[  104.267002][   T28] audit: type=1326 audit(1756471333.610:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7e4185ba7 code=0x7ffc0000
[  104.342333][   T28] audit: type=1326 audit(1756471333.610:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6399 comm="syz.0.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e412ade9 code=0x7ffc0000
[  104.351148][ T5453] dhcpcd (5453) used greatest stack depth: 20784 bytes left
[  104.815484][ T6422] netlink: 1 bytes leftover after parsing attributes in process `syz.0.187'.
[  105.342487][ T6410] loop1: detected capacity change from 0 to 40427
[  105.368408][ T6410] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  105.375661][ T6410] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  105.397852][ T6410] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  105.406446][ T6410] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6
[  105.431149][ T6418] loop2: detected capacity change from 0 to 32768
[  105.442353][ T6410] F2FS-fs (loop1): invalid crc value
[  105.451531][ T6418] XFS: ikeep mount option is deprecated.
[  105.489426][ T6410] F2FS-fs (loop1): Found nat_bits in checkpoint
[  105.524499][ T6418] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.589943][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.192'.
[  105.630428][ T6410] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  105.663960][ T6410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  105.686192][ T6418] XFS (loop2): Ending clean mount
[  105.714984][ T6418] XFS (loop2): Quotacheck needed: Please wait.
[  105.794709][ T6418] XFS (loop2): Quotacheck: Done.
[  105.863007][ T5781] syz-executor: attempt to access beyond end of device
[  105.863007][ T5781] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  105.894798][ T5781] F2FS-fs (loop1): Remounting filesystem read-only
[  106.041989][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.996314][ T5872] hid-generic 0005:15C2:3010.0001: item fetching failed at offset 0/1
[  107.037817][ T5872] hid-generic: probe of 0005:15C2:3010.0001 failed with error -22
[  107.077177][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  107.277272][   T27] usb 4-1: Using ep0 maxpacket: 32
[  107.287721][   T27] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  107.314836][   T27] usb 4-1: config 0 has no interface number 0
[  107.347798][   T27] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  107.366839][    C0] sched: RT throttling activated
[  107.392097][   T27] usb 4-1: config 0 interface 85 has no altsetting 0
[  107.413601][   T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  107.440855][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.480674][   T27] usb 4-1: Product: syz
[  107.484908][   T27] usb 4-1: Manufacturer: syz
[  107.514530][   T27] usb 4-1: SerialNumber: syz
[  107.540985][   T27] usb 4-1: config 0 descriptor??
[  107.680976][ T6462] loop2: detected capacity change from 0 to 131072
[  107.692712][ T6462] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  107.700911][ T6462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  107.741197][ T6462] F2FS-fs (loop2): invalid crc value
[  107.782280][ T6462] F2FS-fs (loop2): Found nat_bits in checkpoint
[  107.866030][ T6462] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  107.873189][ T6462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  108.154520][ T6484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.198917][   T27] appletouch 4-1:0.85: Geyser mode initialized.
[  108.216264][   T27] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input6
[  108.242304][ T6486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.471682][   T27] usb 4-1: USB disconnect, device number 6
[  108.506357][   T27] appletouch 4-1:0.85: input: appletouch disconnected
[  108.701570][ T6499] loop0: detected capacity change from 0 to 512
[  108.728888][ T6499] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  108.770124][ T6499] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  108.821276][ T6499] EXT4-fs (loop0): 1 truncate cleaned up
[  108.832761][ T6499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.016332][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.023123][ T6495] loop1: detected capacity change from 0 to 32768
[  109.038156][ T6495] XFS: attr2 mount option is deprecated.
[  109.092295][ T6495] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  109.119530][ T6495] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.231109][ T6495] XFS (loop1): Ending clean mount
[  109.254880][ T6495] XFS (loop1): Quotacheck needed: Please wait.
[  109.308260][ T6519] loop3: detected capacity change from 0 to 128
[  109.314747][ T6495] XFS (loop1): Quotacheck: Done.
[  109.480752][ T6521] loop3: detected capacity change from 0 to 1024
[  109.498029][ T6521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.519209][ T5781] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.537302][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  109.563455][ T6521] [U] 00000
[  109.567110][ T6521] [U] 
[  109.569843][ T6521] [U] 
[  109.572565][ T6521] [U] 
[  109.575292][ T6521] [U] 
[  109.578018][ T6521] [U] 
[  109.580741][ T6521] [U] 
[  109.583466][ T6521] [U] 
[  109.587880][ T6521] [U] 
[  109.590622][ T6521] [U] äÿJ¼
ö¬
[  109.593963][ T6521] [U] mæ&Feeóe0eÉý«$N7´6 ЃQ`=lÀ�Ëvð»ìì06;ÅŠvZºfé�Áä´ix_>”(YŽÕ8¶dûó1ì/ùò÷’Ïš|ɇo
[  109.604408][ T6521] [U] þýá~Úá¯Mõ(b¢zÅo§°
[  109.615443][ T6520] [U] w¿ûoä½VVVVR'9‡ržÌy6ç…œó9¯å¼žóÍœ7r¾•ófÎåœíœQË�Ÿ³‘s(çÉœgs^È9ŸóZÎë9ßÌy#ç[9oæ\ÎÙÎÖ½
[  109.711468][ T6529] loop3: detected capacity change from 0 to 128
[  109.724738][ T6529] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.737539][    T9] usb 3-1: Using ep0 maxpacket: 32
[  109.748707][ T6529] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  109.749115][    T9] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  109.785917][    T9] usb 3-1: config 4 has no interface number 0
[  109.792947][    T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.806453][    T9] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.826858][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  109.836077][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.871301][    T9] hub 3-1:4.128: USB hub found
[  109.874546][ T6537] loop0: detected capacity change from 0 to 128
[  109.957659][ T5783] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.080865][    T9] hub 3-1:4.128: 2 ports detected
[  110.086000][    T9] hub 3-1:4.128: Using single TT (err -22)
[  110.162069][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.498752][    T9] usb 3-1: USB disconnect, device number 2
[  110.581363][ T6561] vxcan1: tx address claim with dlc 0
[  110.786723][ T6565] loop3: detected capacity change from 0 to 512
[  110.898460][ T6565] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.239: corrupted inode contents
[  110.935177][ T6565] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.239: mark_inode_dirty error
[  110.954108][ T6565] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.239: corrupted inode contents
[  110.974673][ T6565] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.239: mark_inode_dirty error
[  110.994736][ T6565] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.239: corrupted inode contents
[  111.019131][ T6565] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  111.033682][ T6565] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.239: corrupted inode contents
[  111.053287][ T6565] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.239: mark_inode_dirty error
[  111.065387][ T6565] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  111.080427][ T6565] EXT4-fs (loop3): 1 truncate cleaned up
[  111.089569][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.103035][   T48] __quota_error: 83 callbacks suppressed
[  111.103051][   T48] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  111.103629][ T6565] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.114856][   T48] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 1
[  111.200158][ T6565] netlink: 32 bytes leftover after parsing attributes in process `syz.3.239'.
[  111.272118][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.559642][    T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  111.752438][ T6595] loop2: detected capacity change from 0 to 64
[  111.760207][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  111.776890][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.788964][    T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  111.799048][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.819513][    T8] usb 2-1: config 0 descriptor??
[  112.254331][    T8] uclogic 0003:28BD:0075.0002: interface is invalid, ignoring
[  112.477170][    T9] usb 2-1: USB disconnect, device number 4
[  112.672216][ T6607] loop0: detected capacity change from 0 to 40427
[  112.681459][ T6607] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  112.693134][ T6607] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  112.711434][ T6607] F2FS-fs (loop0): Found nat_bits in checkpoint
[  112.774568][ T6607] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  112.787048][ T6607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  112.836958][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  112.856626][ T6607] syz.0.256: attempt to access beyond end of device
[  112.856626][ T6607] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.879025][ T6607] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  113.031625][ T5872] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  113.047093][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.065413][ T5872] usb 3-1: Product: syz
[  113.076975][ T5872] usb 3-1: Manufacturer: syz
[  113.081764][ T5872] usb 3-1: SerialNumber: syz
[  113.099598][ T5872] usb 3-1: config 0 descriptor??
[  113.118468][ T5872] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 003
[  113.351636][ T6639] loop1: detected capacity change from 0 to 1024
[  113.406611][ T6639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.437061][ T6639] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.561372][ T5872]  (null): failure reading functionality
[  113.611297][ T5872] i2c i2c-1: connected i2c-tiny-usb device
[  113.654539][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.754487][ T6635] loop3: detected capacity change from 0 to 65536
[  113.761323][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'.
[  113.788988][ T6635] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  113.844282][ T5872] usb 3-1: USB disconnect, device number 3
[  113.882117][ T6635] XFS (loop3): Ending clean mount
[  113.971077][  T787] XFS (loop3): Corruption warning: Metadata has LSN (1:1792) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  114.005175][  T787] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 
[  114.024396][  T787] XFS (loop3): Unmount and run xfs_repair
[  114.031444][  T787] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  114.045394][  T787] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  114.054449][  T787] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 07 00  ................
[  114.071916][  T787] 00000020: 00 00 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  ..H./.A..&.:g...
[  114.083210][  T787] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  114.098147][  T787] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  114.107191][  T787] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  114.116076][  T787] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  114.125067][  T787] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  114.134498][ T6635] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x6 len 2 error 74
[  114.148836][ T6635] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  114.168943][ T6635] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  114.429876][ T6670] netlink: 7 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.441053][ T6670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.497484][ T6670] netlink: 7 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.506647][ T6670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.617285][ T5872] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  114.638870][ T6670] netlink: 7 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.651469][ T6670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.736299][ T6635] syz.3.266 (6635) used greatest stack depth: 20680 bytes left
[  114.744362][ T5783] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  114.800062][ T6675] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  114.830502][ T5872] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  114.848138][ T5872] usb 1-1: config 0 has no interface number 0
[  114.879476][ T5872] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  114.897779][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.905831][ T5872] usb 1-1: Product: syz
[  114.936996][ T5872] usb 1-1: Manufacturer: syz
[  114.941675][ T5872] usb 1-1: SerialNumber: syz
[  114.968604][ T5872] usb 1-1: config 0 descriptor??
[  115.397437][ T5872] usb 1-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68)
[  115.584821][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'.
[  115.608824][ T5872] usb 1-1: failed to fetch extended address, random address set
[  115.616599][ T5872] usb 1-1: atusb_probe: initialization failed, error = -524
[  115.637651][ T5872] atusb: probe of 1-1:0.128 failed with error -524
[  115.658624][ T5872] usb 1-1: USB disconnect, device number 2
[  116.001191][ T6698] warning: `syz.3.288' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.286382][ T6709] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  116.286382][ T6709] The task syz.2.293 (6709) triggered the difference, watch for misbehavior.
[  117.221030][ T6725] loop2: detected capacity change from 0 to 1024
[  117.259142][ T6725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.420477][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.480619][ T6735] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  117.521015][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.578087][ T6741] capability: warning: `syz.1.307' uses deprecated v2 capabilities in a way that may be insecure
[  117.736297][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.309'.
[  117.934313][ T6753] loop1: detected capacity change from 0 to 2048
[  117.968306][ T6754] loop2: detected capacity change from 0 to 4096
[  117.996074][ T6753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.022164][ T6754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.045329][ T6753] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.313: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  118.073704][ T6753] EXT4-fs (loop1): Remounting filesystem read-only
[  118.120829][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.164574][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.297580][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  118.310821][ T5872] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  118.502397][ T5872] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  118.517256][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.536253][ T5872] usb 4-1: Product: syz
[  118.545426][ T5872] usb 4-1: Manufacturer: syz
[  118.555059][ T5872] usb 4-1: SerialNumber: syz
[  118.568155][ T5872] usb 4-1: config 0 descriptor??
[  118.814031][ T6788] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.328'.
[  118.835222][ T5872] usb 4-1: can't set config #0, error -71
[  118.841341][ T6788] openvswitch: netlink: Flow key attribute not present in set flow.
[  118.843691][ T5872] usb 4-1: USB disconnect, device number 7
[  119.733676][ T6817] binder: 6815:6817 ioctl 400c620e 2000000001c0 returned -22
[  120.354218][ T6812] loop3: detected capacity change from 0 to 32768
[  120.429807][ T6812] 
[  120.429807][ T6812]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.429807][ T6812] 
[  120.529648][ T6812] 
[  120.529648][ T6812]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.529648][ T6812] 
[  120.556016][ T6812] 
[  120.556016][ T6812]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.556016][ T6812] 
[  120.576789][ T6812] 
[  120.576789][ T6812]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.576789][ T6812] 
[  120.611609][  T112] 
[  120.611609][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.611609][  T112] 
[  120.655903][ T6848] read_mapping_page failed!
[  120.662080][ T6848] ERROR: (device loop3): txCommit: 
[  120.662080][ T6848] 
[  120.687100][ T5795] Bluetooth: hci2: command tx timeout
[  120.732035][ T5783] 
[  120.732035][ T5783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.732035][ T5783] 
[  120.733341][ T5783] 
[  120.733341][ T5783]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.733341][ T5783] 
[  120.828090][ T6857] netlink: 'syz.0.361': attribute type 29 has an invalid length.
[  120.836366][ T6857] netlink: 'syz.0.361': attribute type 29 has an invalid length.
[  120.850788][ T6857] netlink: 'syz.0.361': attribute type 29 has an invalid length.
[  120.865520][ T6857] netlink: 'syz.0.361': attribute type 29 has an invalid length.
[  121.245594][ T6870] loop0: detected capacity change from 0 to 4096
[  121.259152][ T6870] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  121.292659][ T6870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.436953][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  121.512167][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.617200][ T5872] usb 3-1: Using ep0 maxpacket: 16
[  121.638206][ T5872] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  121.647784][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.655909][ T5872] usb 3-1: Product: syz
[  121.670085][ T5872] usb 3-1: Manufacturer: syz
[  121.677881][ T5872] usb 3-1: SerialNumber: syz
[  121.696288][ T5872] usb 3-1: config 0 descriptor??
[  121.707909][ T5872] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[  121.782110][ T6892] netlink: 36 bytes leftover after parsing attributes in process `syz.0.373'.
[  121.969649][ T5872] usb 3-1: USB disconnect, device number 4
[  121.990575][ T6900] veth0_vlan: entered allmulticast mode
[  122.259852][ T6907] loop3: detected capacity change from 0 to 4096
[  122.271951][ T6907] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  122.287856][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.378571][   T28] audit: type=1326 audit(2000000012.310:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.1.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806a78ebe9 code=0x0
[  122.405358][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.153166][ T6930] loop2: detected capacity change from 0 to 32768
[  123.162870][ T6930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.386 (6930)
[  123.181788][ T6930] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.192066][ T6930] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  123.200793][ T6930] BTRFS info (device loop2): enabling disk space caching
[  123.207863][ T6930] BTRFS info (device loop2): enabling auto defrag
[  123.214435][ T6930] BTRFS info (device loop2): turning on sync discard
[  123.221182][ T6930] BTRFS info (device loop2): use no compression
[  123.227517][ T6930] BTRFS info (device loop2): force clearing of disk cache
[  123.235183][ T6930] BTRFS info (device loop2): turning on async discard
[  123.242120][ T6930] BTRFS info (device loop2): disabling disk space caching
[  123.273319][ T6930] BTRFS info (device loop2): enabling ssd optimizations
[  123.281591][ T6930] BTRFS info (device loop2): rebuilding free space tree
[  123.293072][ T6930] BTRFS info (device loop2): disabling free space tree
[  123.300214][ T6930] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.310081][ T6930] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.346642][ T5784] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.383137][ T6949] loop3: detected capacity change from 0 to 256
[  123.411172][ T6949] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  123.826087][ T6964] loop2: detected capacity change from 0 to 4096
[  123.833984][ T6964] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  123.849242][ T6964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.937149][   T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  124.044382][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.137266][   T27] usb 1-1: Using ep0 maxpacket: 16
[  124.160099][   T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.179090][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  124.199695][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  124.233592][   T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  124.257522][   T27] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.293269][   T27] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  124.307093][   T27] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  124.315174][   T27] usb 1-1: Manufacturer: syz
[  124.330249][   T27] usb 1-1: config 0 descriptor??
[  124.457106][    T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  124.639007][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  124.660304][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  124.685857][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  124.727028][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  124.736635][   T27] rc_core: IR keymap rc-hauppauge not found
[  124.743495][   T27] Registered IR keymap rc-empty
[  124.748578][    T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  124.748607][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.781130][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  124.781151][    T9] usb 3-1: config 0 descriptor??
[  124.811067][ T6977] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  124.817086][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  124.882510][   T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  124.903911][   T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  124.935681][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  124.992342][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.012840][ T6997] loop1: detected capacity change from 0 to 16
[  125.037380][ T6997] erofs: (device loop1): mounted with root inode @ nid 36.
[  125.051459][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.097348][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.147151][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.203721][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.247184][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.267779][    T9] nzxt-smart2 0003:1E71:2019.0003: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0
[  125.281750][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.337298][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.367194][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  125.399101][   T27] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  125.408407][   T27] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  125.427349][   T27] usb 1-1: USB disconnect, device number 3
[  125.474343][    T9] usb 3-1: USB disconnect, device number 5
[  125.852664][ T7014] capability: warning: `syz.3.415' uses 32-bit capabilities (legacy support in use)
[  125.901997][ T7014] loop3: detected capacity change from 0 to 512
[  125.947514][ T7014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.960336][ T7014] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.066524][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.151127][ T7021] loop0: detected capacity change from 0 to 256
[  126.561546][ T7015] loop1: detected capacity change from 0 to 32768
[  126.592829][ T7015] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  126.616733][ T7015] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  126.693264][ T7015] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  126.709051][   T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  126.721365][   T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  126.760544][ T7027] loop3: detected capacity change from 0 to 32768
[  126.772586][   T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 51ms
[  126.777360][ T7027] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.784918][   T23] gfs2: fsid=syz:syz.0: jid=0: Done
[  126.795922][ T7015] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  126.839514][ T7027] XFS (loop3): Ending clean mount
[  126.854634][ T7027] XFS (loop3): Quotacheck needed: Please wait.
[  126.906026][ T7027] XFS (loop3): Quotacheck: Done.
[  126.997462][ T7027] XFS (loop3): User initiated shutdown received.
[  127.004022][ T7027] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  127.022060][ T7027] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  127.093926][ T7042] loop0: detected capacity change from 0 to 2048
[  127.100965][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.127298][ T7042] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  127.210541][ T7042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.548203][ T7054] loop2: detected capacity change from 0 to 256
[  128.446260][ T7085] Driver unsupported XDP return value 0 on prog  (id 54) dev N/A, expect packet loss!
[  128.551457][ T7090] loop2: detected capacity change from 0 to 128
[  128.571893][ T7092] loop1: detected capacity change from 0 to 16
[  128.589750][ T7092] erofs: (device loop1): mounted with root inode @ nid 36.
[  128.609850][ T7090] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.642010][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  128.651351][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  128.657317][ T7090] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.666719][ T7097] bridge0: port 3(vlan2) entered blocking state
[  128.677838][ T7097] bridge0: port 3(vlan2) entered disabled state
[  128.684302][ T7097] vlan2: entered allmulticast mode
[  128.689760][ T7097] bridge0: entered allmulticast mode
[  128.698146][ T7097] vlan2: left allmulticast mode
[  128.703867][ T7097] bridge0: left allmulticast mode
[  128.859678][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.376962][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  129.566942][    T8] usb 3-1: Using ep0 maxpacket: 8
[  129.575524][    T8] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  129.584646][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.592681][    T8] usb 3-1: Product: syz
[  129.599179][    T8] usb 3-1: Manufacturer: syz
[  129.603820][    T8] usb 3-1: SerialNumber: syz
[  129.612396][    T8] usb 3-1: config 0 descriptor??
[  129.619479][    T8] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  129.797261][ T5792] Bluetooth: hci2: command tx timeout
[  129.830805][    T8] gspca_sn9c2028: read1 error -32
[  129.836358][    T8] gspca_sn9c2028: read1 error -32
[  130.063697][  T787] usb 3-1: USB disconnect, device number 6
[  130.670893][ T7122] bond0: entered allmulticast mode
[  130.688572][ T7122] bond_slave_0: entered allmulticast mode
[  130.737454][ T7122] bond_slave_1: entered allmulticast mode
[  131.482894][ T7121] loop0: detected capacity change from 0 to 32768
[  131.527159][ T7121] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  131.677205][ T7121] XFS (loop0): Ending clean mount
[  131.863214][ T5782] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  132.142059][ T7151] loop1: detected capacity change from 0 to 2048
[  132.219310][ T7154] loop3: detected capacity change from 0 to 256
[  132.248269][ T7151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.261127][ T7160] loop0: detected capacity change from 0 to 256
[  132.282399][ T7151] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.470: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  132.301522][ T7151] EXT4-fs (loop1): Remounting filesystem read-only
[  132.305110][ T7160] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  132.375672][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.477230][  T787] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  132.494701][ T7164] program syz.1.474 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  132.667167][  T787] usb 3-1: Using ep0 maxpacket: 16
[  132.686525][  T787] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  132.712091][  T787] usb 3-1: config 1 has no interface number 0
[  132.723017][  T787] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  132.744239][  T787] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  132.773449][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  132.782853][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  132.799629][  T787] usb 3-1: config 1 interface 105 has no altsetting 0
[  132.819827][  T787] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  132.822500][ T7162] loop3: detected capacity change from 0 to 32768
[  132.829206][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.829231][  T787] usb 3-1: Product: syz
[  132.829245][  T787] usb 3-1: Manufacturer: syz
[  132.829260][  T787] usb 3-1: SerialNumber: syz
[  132.865987][ T7155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  132.873526][ T7155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  132.875876][ T7162] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.473 (7162)
[  132.914139][ T7162] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.932819][ T7162] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  132.942107][ T7162] BTRFS info (device loop3): using free space tree
[  132.983245][ T7162] BTRFS info (device loop3): enabling ssd optimizations
[  132.990525][ T7162] BTRFS info (device loop3): auto enabling async discard
[  133.142726][   T28] audit: type=1800 audit(2000000023.070:100): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.473" name="bus" dev="loop3" ino=263 res=0 errno=0
[  133.287359][ T5783] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.331810][ T7155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  133.341241][ T7155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  133.742565][ T7212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  133.767406][  T787] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  133.786677][  T787] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  133.837087][  T787] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  133.891318][  T787] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:d4:43:cc:5f:c7
[  133.925753][  T787] usb 3-1: USB disconnect, device number 7
[  133.937280][  T787] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  133.988259][ T7220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.492'.
[  134.008935][  T787] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  134.029147][  T787] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  134.070099][  T787] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  134.177003][ T5773] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  134.357004][ T5773] usb 1-1: Using ep0 maxpacket: 16
[  134.379137][ T5773] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.407051][ T5773] usb 1-1: config 0 interface 0 has no altsetting 0
[  134.422694][ T5773] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00
[  134.456289][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.489414][ T5773] usb 1-1: config 0 descriptor??
[  134.763987][ T7231] loop3: detected capacity change from 0 to 32768
[  134.771959][ T7231] XFS: ikeep mount option is deprecated.
[  134.788579][ T7231] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.860607][ T7231] XFS (loop3): Ending clean mount
[  134.871457][ T7231] XFS (loop3): Quotacheck needed: Please wait.
[  134.907150][ T7231] XFS (loop3): Quotacheck: Done.
[  134.911797][ T5773] wacom 0003:056A:00F0.0004: unknown main item tag 0x0
[  134.922995][ T7255] loop2: detected capacity change from 0 to 512
[  134.929692][  T787] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  134.937487][ T5773] wacom 0003:056A:00F0.0004: unknown main item tag 0x0
[  134.944407][ T5773] wacom 0003:056A:00F0.0004: unknown main item tag 0x0
[  134.953668][ T5773] wacom 0003:056A:00F0.0004: unknown main item tag 0x0
[  134.961325][ T5773] wacom 0003:056A:00F0.0004: unknown main item tag 0x0
[  134.976876][ T5773] wacom 0003:056A:00F0.0004: hidraw0: USB HID v0.05 Device [HID 056a:00f0] on usb-dummy_hcd.0-1/input0
[  134.988316][ T7255] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.505: corrupted inode contents
[  135.002039][ T7255] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.505: mark_inode_dirty error
[  135.014710][ T7255] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.505: corrupted inode contents
[  135.032274][ T7255] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.505: mark_inode_dirty error
[  135.050421][ T7255] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.505: corrupted inode contents
[  135.050687][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.069205][ T7255] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  135.080998][ T7255] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.505: corrupted inode contents
[  135.093507][ T7255] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.505: mark_inode_dirty error
[  135.105083][ T7255] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  135.115519][ T7255] EXT4-fs (loop2): 1 truncate cleaned up
[  135.116720][ T5773] usb 1-1: USB disconnect, device number 4
[  135.127522][ T7255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.140541][ T7255] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.157463][   T48] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  135.167741][  T787] usb 2-1: Using ep0 maxpacket: 16
[  135.178612][  T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.189902][   T48] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:3: Failed to release dquot type 1
[  135.204126][ T7255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.505'.
[  135.211249][  T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.225258][  T787] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.240714][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.260880][  T787] usb 2-1: Product: syz
[  135.265106][  T787] usb 2-1: Manufacturer: syz
[  135.279150][  T787] usb 2-1: SerialNumber: syz
[  135.291631][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.733514][  T787] usb 2-1: 0:2 : does not exist
[  136.150787][  T787] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  136.161795][ T7275] loop0: detected capacity change from 0 to 32768
[  136.197148][  T787] usb 2-1: USB disconnect, device number 5
[  136.448893][ T7280] loop3: detected capacity change from 0 to 4096
[  136.463665][ T7280] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  136.542266][ T7280] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  136.573598][ T7277] loop2: detected capacity change from 0 to 40427
[  136.594123][ T7277] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[  136.608410][ T7277] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.653716][ T7277] F2FS-fs (loop2): Found nat_bits in checkpoint
[  136.741328][ T7277] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.771423][ T7277] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.777357][ T7286] loop0: detected capacity change from 0 to 128
[  136.894024][ T5784] syz-executor: attempt to access beyond end of device
[  136.894024][ T5784] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  136.930166][ T5784] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  137.337352][  T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  137.432033][ T7290] loop1: detected capacity change from 0 to 32768
[  137.479703][ T7290] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  137.526951][  T787] usb 1-1: Using ep0 maxpacket: 8
[  137.543487][  T787] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  137.562981][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.580389][  T787] usb 1-1: Product: syz
[  137.584761][  T787] usb 1-1: Manufacturer: syz
[  137.589555][  T787] usb 1-1: SerialNumber: syz
[  137.597046][  T787] usb 1-1: config 0 descriptor??
[  137.610464][  T787] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  137.640674][ T5781] ocfs2: Unmounting device (7,1) on (node local)
[  137.717268][ T5795] Bluetooth: hci2: command tx timeout
[  137.832997][  T787] gspca_sn9c2028: read1 error -32
[  137.859466][  T787] gspca_sn9c2028: read1 error -32
[  138.169325][   T23] usb 1-1: USB disconnect, device number 5
[  138.224647][ T5795] Bluetooth: hci3: unexpected cc 0x0c5b length: 5 > 1
[  138.420762][ T7304] loop2: detected capacity change from 0 to 32768
[  138.500954][ T7304] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  138.693258][ T7311] loop3: detected capacity change from 0 to 32768
[  138.803318][ T7311] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt
[  138.803318][ T7311] 
[  138.828863][ T7311] ERROR: (device loop3): remounting filesystem as read-only
[  138.868576][ T7311] jfs_lookup: dtSearch returned -5
[  138.880657][ T5784] ocfs2: Unmounting device (7,2) on (node local)
[  138.927937][ T7326] Cannot find del_set index 1 as target
[  139.008663][  T111] blkno = 8ed2c, nblocks = 1
[  139.013409][  T111] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  139.013409][  T111] 
[  139.054518][  T111] JFS: metapage_get_blocks failed
[  139.076972][  T111] ERROR: (device loop3): release_metapage: metapage_write_one() failed
[  139.076972][  T111] 
[  139.102369][  T111] blkno = 8ed2c, nblocks = 1
[  139.107138][  T111] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  139.107138][  T111] 
[  139.528452][ T7336] loop0: detected capacity change from 0 to 2048
[  139.540577][ T7328] loop1: detected capacity change from 0 to 32768
[  139.585466][ T7336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.657036][ T5872] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  139.662155][ T7336] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.538: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  139.687583][ T7336] EXT4-fs (loop0): Remounting filesystem read-only
[  139.765932][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.866509][ T5872] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  139.874774][ T5872] usb 3-1: config 0 has no interface number 0
[  139.886978][ T5872] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  139.907157][ T5872] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  139.929275][ T5872] usb 3-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  139.956999][ T5872] usb 3-1: config 0 interface 2 has no altsetting 0
[  139.970058][ T5872] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  139.986884][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.005397][ T5872] usb 3-1: Product: syz
[  140.009896][ T5872] usb 3-1: Manufacturer: syz
[  140.014523][ T5872] usb 3-1: SerialNumber: syz
[  140.045953][ T5872] usb 3-1: config 0 descriptor??
[  140.058048][ T7334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  140.075744][ T7334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  140.259283][ T7341] loop3: detected capacity change from 0 to 32768
[  140.275817][ T7341] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.296591][ T5872] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  140.347052][ T7341] XFS (loop3): Ending clean mount
[  140.367193][ T5872] usb 3-1: USB disconnect, device number 8
[  140.431672][ T7341] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  140.504353][ T7341] syz.3.535 (7341) used greatest stack depth: 19728 bytes left
[  140.550370][ T5783] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.635340][ T7362] loop0: detected capacity change from 0 to 2048
[  140.684509][ T7362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.716999][ T5773] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  140.755225][ T7362] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  140.813759][ T7362] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[  140.897770][ T5773] usb 2-1: Using ep0 maxpacket: 8
[  140.908350][ T5773] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  140.929550][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.943116][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.948495][ T5773] usb 2-1: Product: syz
[  140.964418][ T5773] usb 2-1: Manufacturer: syz
[  140.983297][ T5773] usb 2-1: SerialNumber: syz
[  140.995566][ T5773] usb 2-1: config 0 descriptor??
[  141.010578][ T5773] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  141.212479][ T7380] loop0: detected capacity change from 0 to 1024
[  141.245833][ T5773] gspca_sn9c2028: read1 error -32
[  141.261226][ T5773] gspca_sn9c2028: read1 error -32
[  141.528791][ T5773] usb 2-1: USB disconnect, device number 6
[  141.651775][ T7394] loop0: detected capacity change from 0 to 1024
[  141.659461][ T7394] UDF-fs: bad mount option "y�•^7ÍÙY‘yÍöçŽ){Üm«_(�q¼ŒèS#X00000000000000000000ÿÿ" or missing value
[  141.922533][ T7390] loop2: detected capacity change from 0 to 32768
[  141.933345][ T7390] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.986401][ T7390] XFS (loop2): Ending clean mount
[  141.995361][ T7390] XFS (loop2): Quotacheck needed: Please wait.
[  142.026179][ T7390] XFS (loop2): Quotacheck: Done.
[  142.071249][   T28] audit: type=1800 audit(2000000032.000:101): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  142.108176][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.516356][ T7421] loop2: detected capacity change from 0 to 2048
[  142.554206][ T7421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.586063][ T7421] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.560: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  142.631437][ T7421] EXT4-fs (loop2): Remounting filesystem read-only
[  142.674166][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.911949][ T7417] loop1: detected capacity change from 0 to 32768
[  142.942709][ T7417] JBD2: Ignoring recovery information on journal
[  143.065537][ T7417] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  143.318680][ T5781] ocfs2: Unmounting device (7,1) on (node local)
[  143.414038][ T7437] loop0: detected capacity change from 0 to 32768
[  143.424267][ T7437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.571 (7437)
[  143.447314][ T7437] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.468127][ T7437] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  143.489505][ T7437] BTRFS info (device loop0): force clearing of disk cache
[  143.496690][ T7437] BTRFS info (device loop0): enabling auto defrag
[  143.517093][ T7437] BTRFS info (device loop0): max_inline at 0
[  143.523160][ T7437] BTRFS info (device loop0): enabling disk space caching
[  143.547152][ T7437] BTRFS info (device loop0): disk space caching is enabled
[  143.703344][ T7437] BTRFS info (device loop0): enabling ssd optimizations
[  143.726381][ T7437] BTRFS info (device loop0): rebuilding free space tree
[  143.763516][ T7437] BTRFS info (device loop0): disabling free space tree
[  143.783426][ T7437] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.799813][ T7437] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.963269][ T7466] loop3: detected capacity change from 0 to 2048
[  144.006471][   T60] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  144.036090][ T7466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.119403][ T7466] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.576: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  144.161867][ T7466] EXT4-fs (loop3): Remounting filesystem read-only
[  144.250121][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.400719][ T5782] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.657092][ T5872] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  144.818779][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.587'.
[  144.834387][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.587'.
[  144.846915][ T5872] usb 4-1: Using ep0 maxpacket: 8
[  144.859352][ T5872] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  144.865767][ T7496] gretap0: entered promiscuous mode
[  144.875282][ T7496] batadv_slave_1: entered promiscuous mode
[  144.876952][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.911601][ T5872] pvrusb2: Hardware description: Terratec Grabster AV400
[  144.927308][ T5872] pvrusb2: **********
[  144.936954][ T5872] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  144.947453][ T5872] pvrusb2: Important functionality might not be entirely working.
[  144.955289][ T5872] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  144.967194][ T5872] pvrusb2: **********
[  145.128992][ T2315] pvrusb2: Invalid write control endpoint
[  145.196682][ T2315] pvrusb2: Invalid write control endpoint
[  145.205053][ T7494] loop2: detected capacity change from 0 to 40427
[  145.205220][ T2315] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  145.213221][ T7494] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  145.229130][ T2315] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  145.233236][ T7494] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  145.236762][ T2315] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  145.248256][ T7494] F2FS-fs (loop2): invalid crc value
[  145.255653][ T2315] pvrusb2: Device being rendered inoperable
[  145.269367][ T7494] F2FS-fs (loop2): Found nat_bits in checkpoint
[  145.270069][ T2315] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  145.291717][ T2315] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  145.300428][ T2315] pvrusb2: Attached sub-driver cx25840
[  145.305933][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  145.316179][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  145.385944][ T7484] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61)
[  145.407362][ T5872] usb 4-1: USB disconnect, device number 8
[  145.497169][ T7507] Cannot find del_set index 1 as target
[  145.502883][ T7494] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  145.521402][ T7494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  145.764932][ T7512] loop1: detected capacity change from 0 to 64
[  145.984598][ T7518] loop2: detected capacity change from 0 to 512
[  146.000881][ T7518] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.589: corrupted in-inode xattr: invalid ea_ino
[  146.018798][ T7518] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.589: couldn't read orphan inode 15 (err -117)
[  146.036379][ T7518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.060360][ T7518] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 3: comm syz.2.589: lblock 0 mapped to illegal pblock 3 (length 1)
[  146.079804][ T7518] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.589: error -117 reading directory block
[  146.092434][  T787] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  146.094347][ T7518] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 3: comm syz.2.589: lblock 0 mapped to illegal pblock 3 (length 1)
[  146.116261][ T7518] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.589: error -117 reading directory block
[  146.147139][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.197773][ T7524] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  146.207631][   T23] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  146.217797][ T7524] macsec2: entered allmulticast mode
[  146.223265][ T7524] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  146.248157][ T7524] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  146.257508][ T7524] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  146.292299][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.303464][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.315150][  T787] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  146.329241][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.341040][  T787] usb 1-1: config 0 descriptor??
[  146.409960][   T23] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  146.427250][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.448214][   T23] usb 2-1: config 0 descriptor??
[  146.456589][   T23] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  146.662229][   T23] gp8psk: usb in 128 operation failed.
[  146.796381][  T787] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  146.878625][   T23] gp8psk: FW Version = 12.160.214 (0xca0d6)  Build 2146/135/53
[  146.881932][  T787] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected
[  146.949534][  T787] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  146.995201][ T7528] loop3: detected capacity change from 0 to 32768
[  147.023861][ T7528] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.079794][   T23] gp8psk: usb in 149 operation failed.
[  147.086252][   T23] gp8psk: failed to get FPGA version
[  147.106518][   T23] gp8psk: usb in 138 operation failed.
[  147.113994][ T5872] usb 1-1: USB disconnect, device number 6
[  147.122040][ T7528] XFS (loop3): Ending clean mount
[  147.128170][   T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  147.135435][ T7528] XFS (loop3): Quotacheck needed: Please wait.
[  147.155001][ T5872] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected
[  147.164654][   T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  147.192615][   T23] usb 2-1: USB disconnect, device number 7
[  147.239399][ T7528] XFS (loop3): Quotacheck: Done.
[  147.313481][   T28] audit: type=1800 audit(2000000037.240:102): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.599" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  147.372514][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  147.403904][ T7537] loop2: detected capacity change from 0 to 32768
[  148.185518][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.208783][ T7561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.322006][ T7566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.524657][ T7575] mmap: syz.0.616 (7575) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  148.971855][ T7597] netlink: 'syz.2.624': attribute type 1 has an invalid length.
[  148.987149][ T7597] netlink: 'syz.2.624': attribute type 2 has an invalid length.
[  149.019110][ T7597] netlink: 'syz.2.624': attribute type 1 has an invalid length.
[  149.036751][ T7597] netlink: 'syz.2.624': attribute type 2 has an invalid length.
[  149.511567][ T7614] loop2: detected capacity change from 0 to 128
[  149.520981][ T7614] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  149.535878][ T7614] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  149.630904][ T1066] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  150.088283][ T7595] loop1: detected capacity change from 0 to 65536
[  150.128716][ T7624] loop0: detected capacity change from 0 to 4096
[  150.149065][ T7595] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  150.260595][ T7635] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.311059][ T7595] XFS (loop1): Ending clean mount
[  150.398750][ T5781] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  150.486361][ T7616] loop3: detected capacity change from 0 to 32768
[  150.631910][ T7626] loop2: detected capacity change from 0 to 32768
[  150.659456][ T7616] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  150.725778][ T7645] loop0: detected capacity change from 0 to 512
[  150.733312][ T7645] EXT4-fs: Ignoring removed oldalloc option
[  150.783071][ T7645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.817352][ T7645] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.857078][ T7616] XFS (loop3): Ending clean mount
[  150.888689][ T7616] XFS (loop3): Quotacheck needed: Please wait.
[  150.973324][ T7645] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.638: bg 0: block 217: padding at end of block bitmap is not set
[  150.990833][ T7616] XFS (loop3): Quotacheck: Done.
[  151.101061][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.268249][ T5783] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.670697][ T7669] loop2: detected capacity change from 0 to 256
[  151.683034][ T7669] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.709740][ T7669] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  151.766875][ T7669] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  152.325956][ T7679] loop2: detected capacity change from 0 to 4096
[  152.333128][ T7670] loop3: detected capacity change from 0 to 32768
[  152.384421][ T7670] JBD2: Ignoring recovery information on journal
[  152.452678][ T7670] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  152.740688][ T5783] ocfs2: Unmounting device (7,3) on (node local)
[  152.785951][ T7691] loop1: detected capacity change from 0 to 8192
[  152.926135][ T7697] loop2: detected capacity change from 0 to 4096
[  152.939687][ T7699] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  152.976744][ T7697] NILFS (loop2): invalid segment: Checksum error in segment payload
[  152.993572][ T7697] NILFS (loop2): trying rollback from an earlier position
[  153.033403][ T7697] NILFS (loop2): recovery complete
[  153.049765][ T7702] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.098272][ T7706] loop0: detected capacity change from 0 to 256
[  153.160421][ T7706] FAT-fs (loop0): Directory bread(block 64) failed
[  153.170906][ T7706] FAT-fs (loop0): Directory bread(block 65) failed
[  153.179101][ T7706] FAT-fs (loop0): Directory bread(block 66) failed
[  153.199813][ T7706] FAT-fs (loop0): Directory bread(block 67) failed
[  153.209756][ T7706] FAT-fs (loop0): Directory bread(block 68) failed
[  153.216445][ T7706] FAT-fs (loop0): Directory bread(block 69) failed
[  153.223292][ T7706] FAT-fs (loop0): Directory bread(block 70) failed
[  153.229986][ T7706] FAT-fs (loop0): Directory bread(block 71) failed
[  153.236761][ T7706] FAT-fs (loop0): Directory bread(block 72) failed
[  153.243711][ T7706] FAT-fs (loop0): Directory bread(block 73) failed
[  153.511194][ T7714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.579394][ T7714] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.836388][ T7710] loop2: detected capacity change from 0 to 40427
[  153.850844][ T7710] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  153.870844][ T7710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  153.909379][ T7710] F2FS-fs (loop2): Found nat_bits in checkpoint
[  154.065926][ T7710] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  154.086890][ T7710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  154.343518][ T7730] loop1: detected capacity change from 0 to 4096
[  154.383928][ T7730] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[  154.391509][ T7730] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  154.400759][ T7720] loop0: detected capacity change from 0 to 32768
[  154.436510][ T7730] ntfs3: loop1: ino=1e, "file1" attr_set_size
[  154.459109][ T7729] ntfs3: loop1: ino=1e, "file1" attr_set_size
[  154.477135][ T7720] JBD2: Ignoring recovery information on journal
[  154.521579][   T12] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[  154.532436][ T5781] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[  154.539640][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  154.553574][ T5781] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  154.565427][ T5781] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[  154.575416][ T7720] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  154.590334][   T48] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[  154.716150][ T7737] loop2: detected capacity change from 0 to 512
[  154.723249][ T7737] EXT4-fs: Ignoring removed orlov option
[  154.730175][ T7737] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  154.745837][ T7737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  154.762922][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.775408][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.794650][ T7737] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.675: corrupted in-inode xattr: e_value size too large
[  154.795275][    T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  154.824490][ T7737] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.675: couldn't read orphan inode 15 (err -117)
[  154.827798][ T5782] ocfs2: Unmounting device (7,0) on (node local)
[  154.841102][ T7737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.855023][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.877086][    T8] usb 4-1: config 0 descriptor??
[  154.971505][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.980805][ T5773] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  155.167041][ T5773] usb 2-1: Using ep0 maxpacket: 8
[  155.174713][ T5773] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  155.196703][ T5773] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  155.215869][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.247034][ T5773] usb 2-1: Product: syz
[  155.249260][ T7748] loop2: detected capacity change from 0 to 4096
[  155.251276][ T5773] usb 2-1: Manufacturer: syz
[  155.265252][ T7748] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  155.275549][ T5773] usb 2-1: SerialNumber: syz
[  155.291185][ T5773] usb 2-1: config 0 descriptor??
[  155.300524][ T5773] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  155.310642][ T5773] usb 2-1: setting power ON
[  155.326555][    T8] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  155.338209][ T5773] dvb-usb: bulk message failed: -22 (2/0)
[  155.348452][ T5773] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  155.360465][ T5773] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  155.381075][ T5773] usb 2-1: media controller created
[  155.413628][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  155.438094][    T8] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected
[  155.454043][ T5773] usb 2-1: selecting invalid altsetting 6
[  155.501055][ T5773] usb 2-1: digital interface selection failed (-22)
[  155.511807][ T5773] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  155.526923][    T8] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  155.541218][ T7738] dvb-usb: bulk message failed: -22 (3/0)
[  155.557735][ T7738] dvb-usb: bulk message failed: -22 (37/0)
[  155.567988][ T5773] usb 2-1: setting power OFF
[  155.582370][ T7753] cxusb: i2c rd: len=80 is too big!
[  155.582370][ T7753] 
[  155.582644][    T8] usb 4-1: USB disconnect, device number 9
[  155.606268][ T5773] dvb-usb: bulk message failed: -22 (2/0)
[  155.613790][ T5773] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  155.625936][ T5773] (NULL device *): no alternate interface
[  155.656627][    T8] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected
[  155.741476][ T5773] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  155.765709][ T5773] usb 2-1: USB disconnect, device number 8
[  155.812056][   T28] audit: type=1326 audit(2000000045.740:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  155.859170][   T28] audit: type=1326 audit(2000000045.740:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  155.917045][   T28] audit: type=1326 audit(2000000045.740:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  155.933464][ T7763] loop0: detected capacity change from 0 to 512
[  155.959889][ T7763] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  155.967147][   T28] audit: type=1326 audit(2000000045.740:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  155.977778][ T7763] EXT4-fs (loop0): invalid journal inode
[  156.017098][ T7763] EXT4-fs (loop0): can't get journal size
[  156.024336][   T28] audit: type=1326 audit(2000000045.740:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  156.054564][ T7763] EXT4-fs (loop0): 1 truncate cleaned up
[  156.056339][   T28] audit: type=1326 audit(2000000045.740:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  156.062753][ T7763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.102571][   T28] audit: type=1326 audit(2000000045.740:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  156.139355][   T28] audit: type=1326 audit(2000000045.740:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  156.162832][   T28] audit: type=1326 audit(2000000045.740:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  156.185313][   T28] audit: type=1326 audit(2000000045.740:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e418ebe9 code=0x7ffc0000
[  156.228013][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.391876][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'.
[  156.429272][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.689'.
[  156.457036][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'.
[  156.474439][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.689'.
[  156.503814][ T7768] netlink: 'syz.0.689': attribute type 6 has an invalid length.
[  156.633458][ T7776] loop0: detected capacity change from 0 to 22
[  156.647876][ T7776] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  156.674988][ T7776] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  156.766942][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  156.958694][    T8] usb 2-1: Using ep0 maxpacket: 16
[  156.967420][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.986935][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.006217][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  157.036477][    T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  157.057470][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.080096][    T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  157.089390][    T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  157.106858][    T8] usb 2-1: Manufacturer: syz
[  157.115920][    T8] usb 2-1: config 0 descriptor??
[  157.119522][ T7783] loop0: detected capacity change from 0 to 256
[  157.148010][ T7783] exfat: Deprecated parameter 'utf8'
[  157.153392][ T7783] exfat: Deprecated parameter 'utf8'
[  157.165420][ T7783] exfat: Deprecated parameter 'namecase'
[  157.175682][ T7783] exfat: Deprecated parameter 'utf8'
[  157.186380][ T7783] exfat: Deprecated parameter 'utf8'
[  157.206643][ T7783] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  157.226398][ T7785] nbd0: detected capacity change from 0 to 127
[  157.244638][ T5795] block nbd0: Receive control failed (result -32)
[  157.424242][ T7788] loop0: detected capacity change from 0 to 4096
[  157.455683][ T7788] NILFS (loop0): invalid segment: Checksum error in segment payload
[  157.465501][ T7788] NILFS (loop0): trying rollback from an earlier position
[  157.489010][ T7788] NILFS (loop0): recovery complete
[  157.494984][ T7793] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.505806][    T8] rc_core: IR keymap rc-hauppauge not found
[  157.513481][    T8] Registered IR keymap rc-empty
[  157.518807][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.547064][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.585477][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  157.602886][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  157.609123][ T7796] loop3: detected capacity change from 0 to 256
[  157.629929][ T7796] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.641203][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.650299][ T7796] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  157.674337][ T7796] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  157.697151][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.727405][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.757123][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.787949][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.817232][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.857049][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.899616][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.947274][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  157.977086][    T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  158.018484][    T8] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  158.032970][    T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  158.048902][    T8] usb 2-1: USB disconnect, device number 9
[  158.074479][ T7809] loop3: detected capacity change from 0 to 1024
[  158.145178][ T7809] hfsplus: keylen 65060 too large
[  158.155678][ T7809] hfsplus: xattr search failed
[  158.341843][ T7812] loop3: detected capacity change from 0 to 256
[  158.562121][ T7818] loop1: detected capacity change from 0 to 256
[  158.595800][ T7818] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  158.660492][ T7822] loop3: detected capacity change from 0 to 4096
[  158.667298][ T7818] exFAT-fs (loop1): error, invalid size(size(1) > aligned(9223372036854777344)
[  158.667298][ T7818] 
[  158.683572][ T7822] NILFS (loop3): invalid segment: Checksum error in segment payload
[  158.683859][ T7818] exFAT-fs (loop1): Filesystem has been set read-only
[  158.700804][ T7822] NILFS (loop3): trying rollback from an earlier position
[  158.752990][ T7822] NILFS (loop3): recovery complete
[  158.762445][ T7825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.836454][ T7828] loop1: detected capacity change from 0 to 1024
[  158.847189][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  158.849691][ T7828] EXT4-fs: Ignoring removed orlov option
[  158.864092][ T7828] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  158.893437][ T7828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.036969][ T5872] usb 3-1: Using ep0 maxpacket: 8
[  159.049165][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.056481][ T7838] loop3: detected capacity change from 0 to 64
[  159.066945][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.083490][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.087192][ T5872] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  159.116554][ T7836] loop0: detected capacity change from 0 to 8192
[  159.123693][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.138646][ T5872] usb 3-1: config 0 descriptor??
[  159.480465][ T7852] 8021q: adding VLAN 0 to HW filter on device batadv1
[  159.491469][ T7852] team0: Port device batadv1 added
[  159.563942][ T5872] holtek 0003:1241:5015.0009: unknown main item tag 0x0
[  159.578906][ T7854] loop6: detected capacity change from 0 to 524287999
[  159.584243][ T5872] holtek 0003:1241:5015.0009: unknown main item tag 0x0
[  159.603596][ T5872] holtek 0003:1241:5015.0009: unknown main item tag 0x0
[  159.611070][ T5872] holtek 0003:1241:5015.0009: unknown main item tag 0x0
[  159.618332][ T5872] holtek 0003:1241:5015.0009: unknown main item tag 0x0
[  159.627017][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  159.628405][ T5872] holtek 0003:1241:5015.0009: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0
[  159.646016][ T5872] holtek 0003:1241:5015.0009: no inputs found
[  159.749028][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  159.775655][ T7860] loop3: detected capacity change from 0 to 2048
[  159.787354][ T7860] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  159.787967][ T5872] usb 3-1: USB disconnect, device number 9
[  159.804960][ T7860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.821974][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.835976][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  159.845034][    T8] usb 2-1: config 1 has no interface number 0
[  159.851226][    T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.862377][    T8] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  159.876271][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.895609][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.915287][    T8] usb 2-1: Product: syz
[  159.919783][    T8] usb 2-1: Manufacturer: syz
[  159.924403][    T8] usb 2-1: SerialNumber: syz
[  159.962870][   T23] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  159.972673][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.988893][   T23] usb 1-1: config 0 descriptor??
[  160.183320][ T7864] loop3: detected capacity change from 0 to 4096
[  160.191311][ T7864] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  160.456527][   T23] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  160.465767][   T23] [drm] Initialized udl on minor 2
[  160.694919][ T7870] loop3: detected capacity change from 0 to 4096
[  160.703708][ T7870] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  160.762616][    T8] cdc_ncm 2-1:1.1: bind() failure
[  160.773946][    T8] usb 2-1: USB disconnect, device number 10
[  160.829357][   T23] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  160.844714][   T23] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  160.859064][ T5872] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  160.869765][   T23] usb 1-1: USB disconnect, device number 7
[  160.888987][ T5872] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  161.549198][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.564971][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.574300][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.617042][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.637557][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  161.645055][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  161.777960][ T7875] loop3: detected capacity change from 0 to 40427
[  161.786039][ T7875] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  161.793869][ T7875] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  161.828999][ T7875] F2FS-fs (loop3): Found nat_bits in checkpoint
[  161.887800][ T7887] nbd1: detected capacity change from 0 to 127
[  161.898445][ T5795] block nbd1: Receive control failed (result -32)
[  161.904400][ T7875] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  161.936588][ T7875] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  162.175864][ T7878] chnl_net:caif_netlink_parms(): no params data found
[  162.374038][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.381447][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.389062][ T7878] bridge_slave_0: entered allmulticast mode
[  162.398022][ T7878] bridge_slave_0: entered promiscuous mode
[  162.407088][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.414320][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.422891][ T7878] bridge_slave_1: entered allmulticast mode
[  162.430521][ T7878] bridge_slave_1: entered promiscuous mode
[  162.507188][ T5872] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  162.508166][ T7878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.549831][ T7878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.616094][ T7878] team0: Port device team_slave_0 added
[  162.634612][ T7878] team0: Port device team_slave_1 added
[  162.678089][ T7878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.685100][ T7878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.713244][ T7878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.727341][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.741855][ T7878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.749027][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.759174][ T7878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.785731][ T5872] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  162.795019][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.803779][ T7878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.817264][ T5872] usb 2-1: config 0 descriptor??
[  162.902787][ T7878] hsr_slave_0: entered promiscuous mode
[  162.910810][ T7878] hsr_slave_1: entered promiscuous mode
[  162.921102][ T7878] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.929508][ T7878] Cannot create hsr debugfs directory
[  163.210678][ T7912] loop3: detected capacity change from 0 to 32768
[  163.244938][ T5872] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  163.271026][ T7878] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  163.295650][ T7878] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  163.295897][ T7912] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  163.318540][ T7878] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  163.338343][ T5872] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected
[  163.349176][ T7878] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  163.388135][ T7912] XFS (loop3): Ending clean mount
[  163.398831][ T5872] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  163.547194][ T5783] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  163.569489][ T5872] usb 2-1: USB disconnect, device number 11
[  163.579499][ T7932] nbd2: detected capacity change from 0 to 127
[  163.594606][ T5872] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected
[  163.598811][ T5795] block nbd2: Receive control failed (result -32)
[  163.625981][ T7878] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.681752][ T7878] 8021q: adding VLAN 0 to HW filter on device team0
[  163.705007][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.712285][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.727276][ T5795] Bluetooth: hci0: command tx timeout
[  163.753108][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.760394][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.229152][ T7946] loop0: detected capacity change from 0 to 512
[  164.251430][ T7946] ext4: Unknown parameter 'obj_role'
[  164.301097][ T7878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.568742][ T7960] loop1: detected capacity change from 0 to 2048
[  164.586505][ T7960] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  164.602048][ T7960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.973284][ T7878] veth0_vlan: entered promiscuous mode
[  164.992599][ T7974] loop0: detected capacity change from 0 to 1024
[  165.015212][ T7878] veth1_vlan: entered promiscuous mode
[  165.089258][ T7974] hfsplus: bad catalog entry type
[  165.124125][ T7878] veth0_macvtap: entered promiscuous mode
[  165.158938][   T60] hfsplus: b-tree write err: -5, ino 4
[  165.244210][ T7878] veth1_macvtap: entered promiscuous mode
[  165.294929][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.321269][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.333371][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.339312][ T7983] loop0: detected capacity change from 0 to 64
[  165.344198][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.382704][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.408079][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.428508][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.442435][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.464770][ T7878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.496100][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.509658][ T7983] syz.0.770: attempt to access beyond end of device
[  165.509658][ T7983] loop0: rw=2049, sector=65, nr_sectors = 1 limit=64
[  165.529314][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.539247][ T7983] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  165.573380][ T7983] syz.0.770: attempt to access beyond end of device
[  165.573380][ T7983] loop0: rw=2049, sector=66, nr_sectors = 1 limit=64
[  165.585372][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.604980][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.624106][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.645327][ T7983] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  165.654667][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.675796][ T7878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.687269][ T7983] syz.0.770: attempt to access beyond end of device
[  165.687269][ T7983] loop0: rw=2049, sector=67, nr_sectors = 1 limit=64
[  165.699459][ T7878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.718742][ T7983] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  165.725285][ T7878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.746096][ T7983] syz.0.770: attempt to access beyond end of device
[  165.746096][ T7983] loop0: rw=2049, sector=68, nr_sectors = 1 limit=64
[  165.766008][ T7983] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  165.777546][ T7878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.789968][ T7983] syz.0.770: attempt to access beyond end of device
[  165.789968][ T7983] loop0: rw=2049, sector=72, nr_sectors = 1 limit=64
[  165.807806][ T5795] Bluetooth: hci0: command tx timeout
[  165.810530][ T7990] loop1: detected capacity change from 0 to 128
[  165.818819][ T7878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.820444][ T7983] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  165.854273][ T7983] syz.0.770: attempt to access beyond end of device
[  165.854273][ T7983] loop0: rw=2049, sector=73, nr_sectors = 1 limit=64
[  165.856068][ T7990] VFS: Found a Xenix FS (block size = 512) on device loop1
[  165.867706][ T7983] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  165.867778][ T7983] syz.0.770: attempt to access beyond end of device
[  165.867778][ T7983] loop0: rw=2049, sector=76, nr_sectors = 1 limit=64
[  165.867803][ T7983] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  165.867845][ T7983] syz.0.770: attempt to access beyond end of device
[  165.867845][ T7983] loop0: rw=2049, sector=77, nr_sectors = 1 limit=64
[  165.867870][ T7983] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  165.870281][ T7878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.899323][ T7878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.942556][ T7990] syz.1.775: attempt to access beyond end of device
[  165.942556][ T7990] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128
[  165.978645][ T7990] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write
[  166.008213][ T7990] syz.1.775: attempt to access beyond end of device
[  166.008213][ T7990] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128
[  166.026402][ T7990] Buffer I/O error on dev loop1, logical block 8767744, lost async page write
[  166.100470][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.125585][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.137359][ T5850] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  166.148841][ T5781] sysv_free_block: trying to free block not in datazone
[  166.166063][ T5781] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  166.195775][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.205159][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.322280][ T5850] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  166.343517][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.374113][ T5850] usb 4-1: config 0 descriptor??
[  166.421696][ T8003] loop4: detected capacity change from 0 to 128
[  166.668090][ T8011] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  166.678634][ T8011] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  166.685194][ T8011] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  166.703374][ T8011] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  166.714144][ T8011] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  166.722442][ T8011] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  166.751386][ T8011] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  166.774778][ T8011] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  166.788695][ T8011] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  166.804455][ T8011] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  166.811327][ T8011] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  166.819296][ T8011] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  166.839192][ T8011] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  166.850224][ T5850] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  166.859485][ T8011] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  166.867423][ T5850] [drm] Initialized udl on minor 2
[  166.940588][ T8018] loop0: detected capacity change from 0 to 2048
[  166.956458][ T8018] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  166.968848][ T8020] program syz.1.787 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  166.984195][ T8018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.232251][ T5850] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  167.241942][ T5850] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  167.260337][  T787] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  167.287673][ T5850] usb 4-1: USB disconnect, device number 10
[  167.293999][  T787] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  167.877441][ T5795] Bluetooth: hci0: command tx timeout
[  167.917908][ T8038] loop1: detected capacity change from 0 to 4096
[  167.951230][ T8038] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  168.027738][ T8038] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  168.066108][ T8040] loop3: detected capacity change from 0 to 4096
[  168.113104][ T8038] ntfs3: loop1: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  168.172013][ T8040] ntfs: volume version 3.1.
[  168.293449][ T1066] ntfs3: loop1: ino=1e, failed to parse mft record
[  168.880964][ T8056] loop4: detected capacity change from 0 to 2048
[  168.927001][ T8056] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  169.011331][ T8056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.057240][ T8052] loop1: detected capacity change from 0 to 40427
[  169.080069][ T8052] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  169.089250][ T8060] loop3: detected capacity change from 0 to 2048
[  169.096069][ T8052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  169.112666][ T8060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.123399][ T8052] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  169.147029][ T8052] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8
[  169.189642][ T8052] F2FS-fs (loop1): invalid crc value
[  169.226086][ T8052] F2FS-fs (loop1): Found nat_bits in checkpoint
[  169.462915][ T8052] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  169.485069][ T8052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  169.535072][ T8052] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  169.799790][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  169.957094][ T5795] Bluetooth: hci0: command tx timeout
[  169.977849][ T8082] loop4: detected capacity change from 0 to 512
[  169.988019][ T8082] ext4: Unknown parameter 'obj_role'
[  170.029955][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.059030][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  170.086946][    T9] usb 4-1: config 1 has no interface number 0
[  170.093126][    T9] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.136912][    T9] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  170.151399][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.170018][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.189092][    T9] usb 4-1: Product: syz
[  170.193315][    T9] usb 4-1: Manufacturer: syz
[  170.216930][    T9] usb 4-1: SerialNumber: syz
[  170.237947][ T8084] loop0: detected capacity change from 0 to 4096
[  170.870273][ T8086] loop1: detected capacity change from 0 to 32768
[  170.883514][ T8086] XFS: noikeep mount option is deprecated.
[  170.939366][ T8086] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.007807][ T8090] loop4: detected capacity change from 0 to 32768
[  171.017223][ T8090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.816 (8090)
[  171.036982][ T8090] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.052635][ T8090] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  171.063501][ T8086] XFS (loop1): Ending clean mount
[  171.064499][ T8090] BTRFS info (device loop4): setting nodatacow, compression disabled
[  171.075194][ T8086] XFS (loop1): Quotacheck needed: Please wait.
[  171.076905][ T8090] BTRFS info (device loop4): max_inline at 0
[  171.089864][    T9] cdc_ncm 4-1:1.1: bind() failure
[  171.097989][ T8090] BTRFS info (device loop4): enabling disk space caching
[  171.105096][ T8090] BTRFS info (device loop4): turning off barriers
[  171.116736][    T9] usb 4-1: USB disconnect, device number 11
[  171.134704][ T8090] BTRFS info (device loop4): turning on flush-on-commit
[  171.143577][ T8086] XFS (loop1): Quotacheck: Done.
[  171.154740][ T8090] BTRFS info (device loop4): doing ref verification
[  171.187291][ T8090] BTRFS info (device loop4): force clearing of disk cache
[  171.195105][ T8090] BTRFS info (device loop4): enabling ssd optimizations
[  171.224550][ T8090] BTRFS info (device loop4): max_inline at 4096
[  171.231709][ T8090] BTRFS info (device loop4): disk space caching is enabled
[  171.240062][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.431619][ T8090] BTRFS info (device loop4): auto enabling async discard
[  171.446325][ T8090] BTRFS info (device loop4): rebuilding free space tree
[  171.507592][ T8090] BTRFS info (device loop4): disabling free space tree
[  171.525502][ T8090] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  171.561593][ T8090] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  171.647636][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  171.647654][   T28] audit: type=1800 audit(2000000061.570:116): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.816" name="file1" dev="loop4" ino=260 res=0 errno=0
[  171.952592][ T8136] loop1: detected capacity change from 0 to 2048
[  171.962497][ T7878] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.967197][ T8136] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  171.990139][ T8140] loop3: detected capacity change from 0 to 64
[  171.996261][ T8136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.111529][ T8140] Trying to free block not in datazone
[  172.473787][ T8146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  172.480907][ T8146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  172.556218][ T8146] vhci_hcd vhci_hcd.0: Device attached
[  172.807015][   T23] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  172.817203][ T5786] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  172.853326][ T8167] loop0: detected capacity change from 0 to 64
[  172.873388][ T8167] ieee802154 phy0 wpan0: encryption failed: -90
[  173.017199][ T5786] usb 4-1: Using ep0 maxpacket: 16
[  173.029343][ T5786] usb 4-1: config 0 has no interfaces?
[  173.037315][ T5786] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  173.058641][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.075566][ T5786] usb 4-1: config 0 descriptor??
[  173.295392][    T8] usb 4-1: USB disconnect, device number 12
[  173.298200][ T8147] vhci_hcd: connection closed
[  173.306422][   T60] vhci_hcd: stop threads
[  173.325933][   T60] vhci_hcd: release socket
[  173.333290][   T60] vhci_hcd: disconnect device
[  173.367158][   T23] vhci_hcd: vhci_device speed not set
[  173.575710][ T8183] loop1: detected capacity change from 0 to 4096
[  173.592759][ T8183] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  173.625926][ T8183] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  173.646550][ T8183] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  173.673478][ T8183] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  173.694658][ T8183] ntfs: volume version 3.1.
[  173.856186][ T2957] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  173.883950][ T5781] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  174.041633][ T8194] pimreg: entered allmulticast mode
[  174.101156][ T8194] pimreg: left allmulticast mode
[  174.285821][ T8186] loop0: detected capacity change from 0 to 32768
[  174.358189][ T8186] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.848 (8186)
[  174.379114][ T8186] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.399759][ T8186] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  174.410418][ T8206] loop4: detected capacity change from 0 to 1024
[  174.417152][ T8186] BTRFS info (device loop0): turning on sync discard
[  174.425428][ T8186] BTRFS info (device loop0): enabling auto defrag
[  174.432182][ T8186] BTRFS info (device loop0): doing ref verification
[  174.439752][ T8186] BTRFS info (device loop0): use no compression
[  174.446178][ T8186] BTRFS info (device loop0): force clearing of disk cache
[  174.454009][ T8186] BTRFS info (device loop0): disabling free space tree
[  174.542949][   T60] hfsplus: b-tree write err: -5, ino 4
[  174.654773][ T8186] BTRFS info (device loop0): enabling ssd optimizations
[  174.707862][ T8186] BTRFS info (device loop0): rebuilding free space tree
[  174.744969][ T8186] BTRFS info (device loop0): disabling free space tree
[  174.753453][ T8186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  174.777350][ T8186] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  174.915183][   T28] audit: type=1800 audit(2000000064.840:117): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.848" name="file1" dev="loop0" ino=260 res=0 errno=0
[  174.970211][   T28] audit: type=1804 audit(2000000064.870:118): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.848" name="/newroot/265/file1/file1" dev="loop0" ino=260 res=1 errno=0
[  175.074533][ T5782] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  175.387574][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'.
[  175.477808][ T8229] loop4: detected capacity change from 0 to 32768
[  175.485165][ T8229] XFS: ikeep mount option is deprecated.
[  175.593114][ T8229] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.777978][ T8229] XFS (loop4): Ending clean mount
[  175.788550][ T8229] XFS (loop4): Quotacheck needed: Please wait.
[  175.896644][ T8229] XFS (loop4): Quotacheck: Done.
[  176.130846][ T8229] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x244b dinode
[  176.174524][ T8229] XFS (loop4): Unmount and run xfs_repair
[  176.199510][ T8229] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  176.200296][ T8241] loop3: detected capacity change from 0 to 32768
[  176.214661][ T8229] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00  IN..............
[  176.234075][ T8229] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.251995][ T8229] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.281176][ T8229] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.308625][ T8229] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.346564][ T8229] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.375892][ T8229] 00000060: ff ff ff ff e6 8a f7 29 00 00 00 00 00 00 00 00  .......)........
[  176.389978][ T8229] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.424320][ T8229] XFS (loop4): Internal error xfs_trans_cancel at line 1096 of file fs/xfs/xfs_trans.c.  Caller xfs_create+0x774/0xe60
[  176.463887][ T8229] CPU: 0 PID: 8229 Comm: syz.4.860 Not tainted syzkaller #0
[  176.471260][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  176.481357][ T8229] Call Trace:
[  176.484648][ T8229]  <TASK>
[  176.487588][ T8229]  dump_stack_lvl+0x16c/0x230
[  176.492284][ T8229]  ? show_regs_print_info+0x20/0x20
[  176.497497][ T8229]  ? xfs_ialloc_inode_init+0xb30/0xb30
[  176.503141][ T8229]  ? xfs_trans_reserve_quota_icreate+0xa0/0xe0
[  176.509321][ T8229]  ? xfs_error_report+0x92/0xd0
[  176.514207][ T8229]  ? xfs_create+0x774/0xe60
[  176.518745][ T8229]  ? xfs_create+0x774/0xe60
[  176.523275][ T8229]  xfs_trans_cancel+0x1b8/0x3c0
[  176.528148][ T8229]  ? xfs_create+0x774/0xe60
[  176.532686][ T8229]  xfs_create+0x774/0xe60
[  176.537047][ T8229]  ? mb_cache_destroy+0x2c0/0x2c0
[  176.542120][ T8229]  ? xfs_inode_inherit_flags2+0x320/0x320
[  176.547873][ T8229]  ? get_inode_acl+0x30/0x30
[  176.552496][ T8229]  ? xfs_ip2xflags+0x1c0/0x1c0
[  176.557300][ T8229]  ? current_umask+0x16/0x70
[  176.561908][ T8229]  ? posix_acl_create+0x169/0x440
[  176.566953][ T8229]  xfs_generic_create+0x32d/0xa00
[  176.572086][ T8229]  ? xfs_vn_tmpfile+0xd0/0xd0
[  176.576787][ T8229]  ? from_kgid+0x15d/0x680
[  176.581280][ T8229]  ? inode_permission+0xf3/0x480
[  176.586317][ T8229]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  176.591352][ T8229]  ? security_inode_mkdir+0xb7/0x100
[  176.596653][ T8229]  vfs_mkdir+0x296/0x440
[  176.600923][ T8229]  do_mkdirat+0x1d4/0x440
[  176.605275][ T8229]  ? vfs_mkdir+0x440/0x440
[  176.609729][ T8229]  __x64_sys_mkdirat+0x89/0xa0
[  176.614522][ T8229]  do_syscall_64+0x55/0xb0
[  176.618956][ T8229]  ? clear_bhb_loop+0x40/0x90
[  176.623644][ T8229]  ? clear_bhb_loop+0x40/0x90
[  176.628421][ T8229]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.634333][ T8229] RIP: 0033:0x7f8bbff8d457
[  176.638762][ T8229] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.658380][ T8229] RSP: 002b:00007f8bc0d4ae68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  176.666817][ T8229] RAX: ffffffffffffffda RBX: 00007f8bc0d4aef0 RCX: 00007f8bbff8d457
[  176.674905][ T8229] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 00000000ffffff9c
[  176.682969][ T8229] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000
[  176.690962][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140
[  176.699028][ T8229] R13: 00007f8bc0d4aeb0 R14: 0000000000000000 R15: 0000000000000000
[  176.707123][ T8229]  </TASK>
[  176.750466][ T8229] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1d1/0x3c0 (fs/xfs/xfs_trans.c:1097).  Shutting down filesystem.
[  176.774070][ T8229] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  176.879539][ T8260] loop0: detected capacity change from 0 to 40427
[  176.887640][ T7878] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.888126][ T8260] F2FS-fs (loop0): heap/no_heap options were deprecated
[  176.908258][ T8260] F2FS-fs (loop0): invalid crc value
[  176.934588][ T8260] F2FS-fs (loop0): Found nat_bits in checkpoint
[  177.076102][ T8260] F2FS-fs (loop0): Start checkpoint disabled!
[  177.107008][ T8260] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  177.116323][ T8272] loop1: detected capacity change from 0 to 512
[  177.446595][ T2957] bio_check_eod: 7 callbacks suppressed
[  177.446614][ T2957] kworker/u4:8: attempt to access beyond end of device
[  177.446614][ T2957] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  177.470141][ T2957] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  177.477867][ T2957] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  177.495189][ T2957] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  178.247009][ T5786] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  178.441036][ T5786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.462136][ T5786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.473579][ T5786] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  178.482943][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.495504][ T5786] usb 1-1: config 0 descriptor??
[  178.926308][ T5786] sony 0003:054C:024B.000C: unknown main item tag 0x0
[  178.933304][ T5786] sony 0003:054C:024B.000C: unknown main item tag 0x0
[  178.940195][ T5786] sony 0003:054C:024B.000C: unexpected long global item
[  178.948058][ T5786] sony 0003:054C:024B.000C: parse failed
[  178.953826][ T5786] sony: probe of 0003:054C:024B.000C failed with error -22
[  179.101988][ T8320] syzkaller0: tun_chr_ioctl cmd 1074025677
[  179.108277][ T8320] syzkaller0: linktype set to 270
[  179.176068][ T5872] usb 1-1: USB disconnect, device number 8
[  180.020388][ T8337] loop1: detected capacity change from 0 to 32768
[  180.055321][ T8333] loop4: detected capacity change from 0 to 40427
[  180.065465][ T8333] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  180.072955][ T8333] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  180.082518][ T8333] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x7ffff
[  180.091503][ T8333] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  180.129167][ T8333] F2FS-fs (loop4): invalid crc value
[  180.150354][ T8333] F2FS-fs (loop4): Found nat_bits in checkpoint
[  180.278860][ T8333] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  180.296185][ T8333] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  180.365818][ T8333] syz.4.904: attempt to access beyond end of device
[  180.365818][ T8333] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.380862][ T8333] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  181.371842][ T8370] sctp: [Deprecated]: syz.0.918 (pid 8370) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.371842][ T8370] Use struct sctp_sack_info instead
[  181.446171][ T8358] loop1: detected capacity change from 0 to 32768
[  182.080639][ T8393] loop3: detected capacity change from 0 to 128
[  182.174757][ T8393] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  182.219512][ T8393] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  182.309183][ T8393] fscrypt (loop3, inode 12): Unsupported encryption flags (0x08)
[  182.418683][ T5783] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.640776][ T8391] loop4: detected capacity change from 0 to 40427
[  182.682877][ T8391] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  182.722504][ T8391] F2FS-fs (loop4): invalid crc value
[  182.733729][ T8385] loop0: detected capacity change from 0 to 32768
[  182.753350][ T8391] F2FS-fs (loop4): Found nat_bits in checkpoint
[  182.764271][ T8408] loop1: detected capacity change from 0 to 1024
[  182.773167][ T8408] EXT4-fs: Ignoring removed orlov option
[  182.783300][ T8408] EXT4-fs: Ignoring removed nomblk_io_submit option
[  182.817089][ T8385] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  182.846276][ T8391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  182.900671][ T8385] XFS (loop0): Ending clean mount
[  182.949263][ T7878] syz-executor: attempt to access beyond end of device
[  182.949263][ T7878] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  182.972957][ T7878] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  183.010788][ T5786] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 
[  183.033802][ T5786] XFS (loop0): Unmount and run xfs_repair
[  183.040164][ T5786] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  183.048172][ T5786] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  183.070190][ T5786] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  183.084728][ T5786] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  183.100163][ T5786] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  183.113690][ T5786] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  183.125276][ T5786] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.134525][ T5786] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.149971][ T5786] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.159525][   T60] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x4 len 4 error 74
[  183.183991][   T60] XFS (loop0): page discard on page ffffea0001502a40, inode 0x1806, pos 2048.
[  183.209156][    T9] loop0: writeback error on inode 6150, offset 0, sector 12252
[  183.214871][    T9] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 
[  183.234931][    T9] XFS (loop0): Unmount and run xfs_repair
[  183.240936][    T9] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  183.248553][    T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  183.257506][    T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  183.266458][    T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  183.276094][    T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  183.286224][    T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  183.295231][    T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.304268][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.315637][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  183.350286][   T60] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x4 len 4 error 74
[  183.370280][   T60] XFS (loop0): page discard on page ffffea00016ad880, inode 0x1806, pos 4096.
[  183.383941][ T2957] ------------[ cut here ]------------
[  183.390241][ T2957] WARNING: CPU: 0 PID: 2957 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.394604][ T8422] netlink: 152 bytes leftover after parsing attributes in process `syz.4.937'.
[  183.401335][ T2957] Modules linked in:
[  183.401411][ T2957] CPU: 0 PID: 2957 Comm: kworker/u4:8 Not tainted syzkaller #0
[  183.401436][ T2957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  183.401450][ T2957] Workqueue: phy3 ieee80211_csa_finalize_work
[  183.401488][ T2957] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.401522][ T2957] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c
[  183.401541][ T2957] RSP: 0018:ffffc9000bf179c0 EFLAGS: 00010293
[  183.401562][ T2957] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88802bc29e00
[  183.401579][ T2957] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  183.401593][ T2957] RBP: dffffc0000000000 R08: ffff88805d3115af R09: 1ffff1100ba622b5
[  183.401609][ T2957] R10: dffffc0000000000 R11: ffffed100ba622b6 R12: 0000000000000001
[  183.401625][ T2957] R13: ffff88805d3125d9 R14: ffff88807ca72c70 R15: ffff88807ca72ce8
[  183.401642][ T2957] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  183.401659][ T2957] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.401675][ T2957] CR2: 00007ffed898dd58 CR3: 0000000061539000 CR4: 00000000003506f0
[  183.401696][ T2957] Call Trace:
[  183.401706][ T2957]  <TASK>
[  183.401734][ T2957]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  183.401770][ T2957]  ieee80211_csa_finalize+0x59a/0xf00
[  183.401800][ T2957]  ? mutex_lock_nested+0x20/0x20
[  183.401829][ T2957]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  183.401855][ T2957]  ? ieee80211_csa_finalize_work+0x140/0x140
[  183.401886][ T2957]  ? read_lock_is_recursive+0x20/0x20
[  183.401920][ T2957]  ieee80211_csa_finalize_work+0xf6/0x140
[  183.401953][ T2957]  ? process_scheduled_works+0x957/0x15b0
[  183.401980][ T2957]  process_scheduled_works+0xa45/0x15b0
[  183.402042][ T2957]  ? assign_work+0x400/0x400
[  183.402077][ T2957]  ? assign_work+0x39e/0x400
[  183.402109][ T2957]  worker_thread+0xa55/0xfc0
[  183.402172][ T2957]  kthread+0x2fa/0x390
[  183.418549][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.937'.
[  183.422738][ T2957]  ? pr_cont_work+0x560/0x560
[  183.473958][ T5786] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 
[  183.481301][ T2957]  ? kthread_blkcg+0xd0/0xd0
[  183.490297][    C0] ------------[ cut here ]------------
[  183.490339][    C0] WARNING: CPU: 0 PID: 2957 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[  183.490382][    C0] Modules linked in:
[  183.490399][    C0] CPU: 0 PID: 2957 Comm: kworker/u4:8 Not tainted syzkaller #0
[  183.490421][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  183.490435][    C0] Workqueue: phy3 ieee80211_csa_finalize_work
[  183.490467][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  183.490499][    C0] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6
[  183.490518][    C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246
[  183.490539][    C0] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88802bc29e00
[  183.490557][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  183.490572][    C0] RBP: 0000000000000000 R08: ffff88802bc29e00 R09: 0000000000000003
[  183.490587][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d3123c0
[  183.490603][    C0] R13: dffffc0000000000 R14: ffff88805d3128b0 R15: ffff88805d7c7824
[  183.490620][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  183.490639][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.490653][    C0] CR2: 00007ffed898dd58 CR3: 0000000061539000 CR4: 00000000003506f0
[  183.490672][    C0] Call Trace:
[  183.490681][    C0]  <IRQ>
[  183.490695][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  183.490737][    C0]  ieee80211_beacon_get_tim+0xb8/0x560
[  183.490772][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  183.490817][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  183.490853][    C0]  __iterate_interfaces+0x243/0x500
[  183.490877][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  183.490902][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  183.490927][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  183.490953][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  183.490983][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  183.491011][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  183.491043][    C0]  ? hw_scan_work+0xf40/0xf40
[  183.491077][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  183.491100][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  183.491144][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  183.491172][    C0]  handle_softirqs+0x280/0x820
[  183.491199][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  183.491227][    C0]  ? do_softirq+0x180/0x180
[  183.491254][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  183.491285][    C0]  __irq_exit_rcu+0xc7/0x190
[  183.491306][    C0]  ? irq_exit_rcu+0x20/0x20
[  183.491339][    C0]  irq_exit_rcu+0x9/0x20
[  183.491358][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  183.491387][    C0]  </IRQ>
[  183.491396][    C0]  <TASK>
[  183.491406][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  183.491427][    C0] RIP: 0010:vprintk_emit+0x44f/0x600
[  183.491452][    C0] Code: 51 01 00 00 e8 f2 4c 1b 00 45 89 f7 48 85 db 48 8b 5c 24 08 75 07 e8 e0 4c 1b 00 eb 06 e8 d9 4c 1b 00 fb 48 c7 c7 20 3f d2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 59 bd
[  183.491469][    C0] RSP: 0018:ffffc9000bf17540 EFLAGS: 00000293
[  183.491491][    C0] RAX: ffffffff816a42c7 RBX: ffffffff816a4181 RCX: ffff88802bc29e00
[  183.491508][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd23f20
[  183.491523][    C0] RBP: ffffc9000bf17630 R08: ffffffff90da55c7 R09: 1ffffffff21b4ab8
[  183.491540][    C0] R10: dffffc0000000000 R11: fffffbfff21b4ab9 R12: dffffc0000000000
[  183.491556][    C0] R13: ffffc9000bf176a0 R14: 000000000000001a R15: 000000000000001a
[  183.491577][    C0]  ? vprintk_emit+0x301/0x600
[  183.491602][    C0]  ? vprintk_emit+0x447/0x600
[  183.491634][    C0]  ? vprintk_emit+0x301/0x600
[  183.491659][    C0]  ? printk_sprint+0x460/0x460
[  183.491701][    C0]  _printk+0xd0/0x110
[  183.491726][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.491749][    C0]  ? load_image+0x3b0/0x3b0
[  183.491772][    C0]  ? is_bpf_text_address+0x28f/0x2a0
[  183.491797][    C0]  ? is_bpf_text_address+0x26/0x2a0
[  183.491823][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.491844][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.491865][    C0]  show_trace_log_lvl+0x587/0x6a0
[  183.491909][    C0]  ? ret_from_fork+0x48/0x80
[  183.491939][    C0]  __warn+0x160/0x470
[  183.491965][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.491998][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.492028][    C0]  report_bug+0x2be/0x4f0
[  183.492052][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.492083][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.492112][    C0]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[  183.492149][    C0]  handle_bug+0xcf/0x120
[  183.492175][    C0]  exc_invalid_op+0x1a/0x50
[  183.492199][    C0]  asm_exc_invalid_op+0x1a/0x20
[  183.492228][    C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.492256][    C0] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c
[  183.492275][    C0] RSP: 0018:ffffc9000bf179c0 EFLAGS: 00010293
[  183.492296][    C0] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88802bc29e00
[  183.492311][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  183.492325][    C0] RBP: dffffc0000000000 R08: ffff88805d3115af R09: 1ffff1100ba622b5
[  183.492343][    C0] R10: dffffc0000000000 R11: ffffed100ba622b6 R12: 0000000000000001
[  183.492358][    C0] R13: ffff88805d3125d9 R14: ffff88807ca72c70 R15: ffff88807ca72ce8
[  183.492384][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  183.492437][    C0]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  183.492472][    C0]  ieee80211_csa_finalize+0x59a/0xf00
[  183.492503][    C0]  ? mutex_lock_nested+0x20/0x20
[  183.492532][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  183.492557][    C0]  ? ieee80211_csa_finalize_work+0x140/0x140
[  183.492588][    C0]  ? read_lock_is_recursive+0x20/0x20
[  183.492622][    C0]  ieee80211_csa_finalize_work+0xf6/0x140
[  183.492654][    C0]  ? process_scheduled_works+0x957/0x15b0
[  183.492680][    C0]  process_scheduled_works+0xa45/0x15b0
[  183.492737][    C0]  ? assign_work+0x400/0x400
[  183.492771][    C0]  ? assign_work+0x39e/0x400
[  183.492802][    C0]  worker_thread+0xa55/0xfc0
[  183.492860][    C0]  kthread+0x2fa/0x390
[  183.492878][    C0]  ? pr_cont_work+0x560/0x560
[  183.492903][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.492924][    C0]  ret_from_fork+0x48/0x80
[  183.492947][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.492968][    C0]  ret_from_fork_asm+0x11/0x20
[  183.493013][    C0]  </TASK>
[  183.493024][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  183.493034][    C0] CPU: 0 PID: 2957 Comm: kworker/u4:8 Not tainted syzkaller #0
[  183.493053][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  183.493064][    C0] Workqueue: phy3 ieee80211_csa_finalize_work
[  183.493091][    C0] Call Trace:
[  183.493098][    C0]  <IRQ>
[  183.493105][    C0]  dump_stack_lvl+0x16c/0x230
[  183.493140][    C0]  ? show_regs_print_info+0x20/0x20
[  183.493162][    C0]  ? load_image+0x3b0/0x3b0
[  183.493197][    C0]  panic+0x2c0/0x710
[  183.493228][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  183.493265][    C0]  ? ret_from_fork_asm+0x11/0x20
[  183.493295][    C0]  __warn+0x2e0/0x470
[  183.493320][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  183.493351][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  183.493379][    C0]  report_bug+0x2be/0x4f0
[  183.493401][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  183.493430][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  183.493458][    C0]  ? __ieee80211_beacon_get+0x1235/0x1600
[  183.493483][    C0]  handle_bug+0xcf/0x120
[  183.493504][    C0]  exc_invalid_op+0x1a/0x50
[  183.493526][    C0]  asm_exc_invalid_op+0x1a/0x20
[  183.493549][    C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  183.493576][    C0] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6
[  183.493592][    C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246
[  183.493608][    C0] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88802bc29e00
[  183.493623][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  183.493635][    C0] RBP: 0000000000000000 R08: ffff88802bc29e00 R09: 0000000000000003
[  183.493647][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d3123c0
[  183.493659][    C0] R13: dffffc0000000000 R14: ffff88805d3128b0 R15: ffff88805d7c7824
[  183.493678][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  183.493707][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  183.493742][    C0]  ? __ieee80211_beacon_get+0x1233/0x1600
[  183.493771][    C0]  ? __ieee80211_beacon_get+0x36/0x1600
[  183.493808][    C0]  ieee80211_beacon_get_tim+0xb8/0x560
[  183.493840][    C0]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  183.493881][    C0]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  183.493912][    C0]  __iterate_interfaces+0x243/0x500
[  183.493933][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  183.493957][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  183.493979][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  183.494000][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  183.494026][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[  183.494047][    C0]  __hrtimer_run_queues+0x51e/0xc40
[  183.494073][    C0]  ? hw_scan_work+0xf40/0xf40
[  183.494102][    C0]  ? hrtimer_interrupt+0x9c0/0x9c0
[  183.494121][    C0]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  183.494161][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  183.494185][    C0]  handle_softirqs+0x280/0x820
[  183.494206][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  183.494230][    C0]  ? do_softirq+0x180/0x180
[  183.494252][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  183.494279][    C0]  __irq_exit_rcu+0xc7/0x190
[  183.494295][    C0]  ? irq_exit_rcu+0x20/0x20
[  183.494316][    C0]  irq_exit_rcu+0x9/0x20
[  183.494328][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  183.494348][    C0]  </IRQ>
[  183.494353][    C0]  <TASK>
[  183.494359][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  183.494373][    C0] RIP: 0010:vprintk_emit+0x44f/0x600
[  183.494389][    C0] Code: 51 01 00 00 e8 f2 4c 1b 00 45 89 f7 48 85 db 48 8b 5c 24 08 75 07 e8 e0 4c 1b 00 eb 06 e8 d9 4c 1b 00 fb 48 c7 c7 20 3f d2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 59 bd
[  183.494402][    C0] RSP: 0018:ffffc9000bf17540 EFLAGS: 00000293
[  183.494414][    C0] RAX: ffffffff816a42c7 RBX: ffffffff816a4181 RCX: ffff88802bc29e00
[  183.494425][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd23f20
[  183.494434][    C0] RBP: ffffc9000bf17630 R08: ffffffff90da55c7 R09: 1ffffffff21b4ab8
[  183.494445][    C0] R10: dffffc0000000000 R11: fffffbfff21b4ab9 R12: dffffc0000000000
[  183.494456][    C0] R13: ffffc9000bf176a0 R14: 000000000000001a R15: 000000000000001a
[  183.494469][    C0]  ? vprintk_emit+0x301/0x600
[  183.494486][    C0]  ? vprintk_emit+0x447/0x600
[  183.494507][    C0]  ? vprintk_emit+0x301/0x600
[  183.494524][    C0]  ? printk_sprint+0x460/0x460
[  183.494554][    C0]  _printk+0xd0/0x110
[  183.494569][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.494584][    C0]  ? load_image+0x3b0/0x3b0
[  183.494599][    C0]  ? is_bpf_text_address+0x28f/0x2a0
[  183.494615][    C0]  ? is_bpf_text_address+0x26/0x2a0
[  183.494632][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.494647][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.494660][    C0]  show_trace_log_lvl+0x587/0x6a0
[  183.494690][    C0]  ? ret_from_fork+0x48/0x80
[  183.494711][    C0]  __warn+0x160/0x470
[  183.494729][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.494751][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.494772][    C0]  report_bug+0x2be/0x4f0
[  183.494788][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.494809][    C0]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.494829][    C0]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[  183.494849][    C0]  handle_bug+0xcf/0x120
[  183.494866][    C0]  exc_invalid_op+0x1a/0x50
[  183.494884][    C0]  asm_exc_invalid_op+0x1a/0x20
[  183.494903][    C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  183.494923][    C0] Code: 48 89 df e8 1a 06 ea f7 e9 dc fc ff ff e8 f0 bf 92 f7 eb 24 e8 e9 bf 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 d8 bf 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ca bf 92 f7 48 8b 7c 24 08 4c 8b 7c
[  183.494934][    C0] RSP: 0018:ffffc9000bf179c0 EFLAGS: 00010293
[  183.494946][    C0] RAX: ffffffff89f2cbce RBX: 0000000000000001 RCX: ffff88802bc29e00
[  183.494957][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  183.494965][    C0] RBP: dffffc0000000000 R08: ffff88805d3115af R09: 1ffff1100ba622b5
[  183.494976][    C0] R10: dffffc0000000000 R11: ffffed100ba622b6 R12: 0000000000000001
[  183.494986][    C0] R13: ffff88805d3125d9 R14: ffff88807ca72c70 R15: ffff88807ca72ce8
[  183.495003][    C0]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  183.495039][    C0]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  183.495064][    C0]  ieee80211_csa_finalize+0x59a/0xf00
[  183.495086][    C0]  ? mutex_lock_nested+0x20/0x20
[  183.495105][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  183.495122][    C0]  ? ieee80211_csa_finalize_work+0x140/0x140
[  183.495152][    C0]  ? read_lock_is_recursive+0x20/0x20
[  183.495182][    C0]  ieee80211_csa_finalize_work+0xf6/0x140
[  183.495206][    C0]  ? process_scheduled_works+0x957/0x15b0
[  183.495223][    C0]  process_scheduled_works+0xa45/0x15b0
[  183.495264][    C0]  ? assign_work+0x400/0x400
[  183.495291][    C0]  ? assign_work+0x39e/0x400
[  183.495312][    C0]  worker_thread+0xa55/0xfc0
[  183.495351][    C0]  kthread+0x2fa/0x390
[  183.495363][    C0]  ? pr_cont_work+0x560/0x560
[  183.495380][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.495394][    C0]  ret_from_fork+0x48/0x80
[  183.495409][    C0]  ? kthread_blkcg+0xd0/0xd0
[  183.495423][    C0]  ret_from_fork_asm+0x11/0x20
[  183.495453][    C0]  </TASK>
[  183.495759][    C0] Kernel Offset: disabled