last executing test programs:

3m33.653471963s ago: executing program 1 (id=397):
r0 = socket$alg(0x26, 0x5, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0)

3m32.53138695s ago: executing program 1 (id=405):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0))
creat(&(0x7f0000000140)='./bus/file0\x00', 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000080)='./bus/file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x2)

3m31.460403875s ago: executing program 1 (id=414):
r0 = gettid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
tkill(r0, 0x11)

3m28.82434722s ago: executing program 1 (id=429):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nouid32}, {@abort}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x589}}, {@norecovery}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
setreuid(0x0, 0xee01)
r0 = open(&(0x7f0000000380)='./file0/file0\x00', 0x100, 0x91)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)

3m28.340049638s ago: executing program 4 (id=431):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

3m28.297355137s ago: executing program 1 (id=432):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

3m27.408387286s ago: executing program 4 (id=452):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)

3m26.980302953s ago: executing program 1 (id=441):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r0 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x44b6b, 0x0, 0x6, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

3m26.979053891s ago: executing program 4 (id=442):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3)
shutdown(r0, 0x2)

3m26.141995048s ago: executing program 32 (id=441):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r0 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x44b6b, 0x0, 0x6, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

3m26.118472701s ago: executing program 4 (id=446):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nouid32}, {@abort}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x589}}, {@norecovery}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
setreuid(0x0, 0xee01)
r0 = open(&(0x7f0000000380)='./file0/file0\x00', 0x100, 0x91)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)

3m25.37799444s ago: executing program 4 (id=449):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

3m22.138469412s ago: executing program 4 (id=458):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x1fff, 0x444b, 0x13, "8bdffb70f0ffffff"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)

3m21.522429934s ago: executing program 33 (id=458):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x1fff, 0x444b, 0x13, "8bdffb70f0ffffff"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)

12.577832315s ago: executing program 2 (id=1528):
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x1200001c)
keyctl$describe(0x6, r0, 0x0, 0x0)

12.317552807s ago: executing program 2 (id=1531):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x9764, &(0x7f00000097c0)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQJGcc84555xzzjnn+D3L7iquB/S+331fvPec8zy7M11dVVP9/3VXzUz1dC85z2JzDgyMPjC0KQZG7JY751xo4x3nvGKfnfY8ZYoxx5982ORhC0w67OKkg4Z9HGlgYGCkYesZNm2sR088aaSBUd6d/vfGGmPMQeMMDEw37OLswz7ONPTDRI8Nn++dERpxQwf97eKg7Yf+e7fxhnyJIZ8sffOF5wwMDIz/nuWHLDLNP91QaUvOMe88f7f6m9sQq8HDPn/vv1GH/pvogYGBie4d4PvHe+cd9CHcpCFfc/wdHxx93Q/ha/+Pa8k55p1vBP8hj8WRh02bachjfMTHoLER7+c3rzLr7sOG8N3728DAkF3cPzxW/ke05BzzLDDw/vv5gYfHHPeMd97db4717MDAWM8NDIz1/MDAWC8MDIz14sDAWC992C71/6855px+ziGP9+GXh7EPvy+PT/eLfVZ/ce+BgYHRhs4z1ttDjxdjTzH8mFBVVVX/2c0x5/RzwfF/9A86/m+19Ry3dvyvqqr6n9t8c8w5/ZDj+AjH/7E/6Pj/vRtvXGPo7/5nn2noUm9/uDeiqqqq/kvNMx8e/8f/oOP/eDtcv3/H/6qqqv+5Lbrgu8f/sUc4/k/8Qcf/Nea/87Jh8w3/vuGt96zy3eePDZv+xnumj/ye6a+/Z/rg96znvfOP+p7pr75n+ugDA2M9Omz6m3+fPNazQ5b55/WM9fLfn48z6Sjvmf7Ke6aP+p7prw7bpiHTR3vP9LfeM//of58+9pD/phj2dV/7gKGuqqr6j2nR6eeZa+A9z7MfNnn4E/vxeaHHHLP1XR/W9lZVVVVVVVXVf723nzr97L//zfcnB97zt6t/+xvWYb8XGHTsudde+6Ft6H9Gg/759yFbfNjb9P+3Ic6jHz7FwMBaS3zYm1IfQv9j/la9/q+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5/z/3/7+/+Be7+0w7BZZ5nszvsW+/uSkw6sNuyzW+6cc6HVPoRt/xD633r+f2C1QQMDw3zHH2K50ByLLj7VwMDAYvfdOdmMA3+7buYh18064cjv/jHnwMBU7/4/eNL3WfOwd1l4980dJv7bOo59d/3zvbPfyING2Ij3NNs59x+06pKvzDDixy+8/+342/tLLPXyflMO/1uWkUaYafT3WXj4+offlhGdh237VEO2feoN1lxn6vU33uSrq625/CorrbLSWtNNN+0M0884w3Rfn2XqlVdbY6Vphv7/PmM29K0rRv53xmzsEcfsqTneO2Yj3rYJTj4Ix+yf39XjH1bx7hrPm+3hy4eP2Sj/5pgN/3ojf/CYTbHasC806cDggeXeHZpBAwOTjjJ4YKMhF6YdbWBg0sHD5p10yLzfnHCkgYEd/35DBw17sdGh8wzaYsg8/2HvWzLLsBHZdPh8I77O+ogb+q/et+SEsXe5c4T3Lfm/1f/R8f+fvGYe9LeBGv4GCMPmGer1Ib/PxD9t7xSjvHuQe7/t/YDXxXk3un+tuepjS/x3vS4Obe/YH7C9H/A6fu+7vVNN+8weQ1f137a9I+zrFhh65b+zrxv44H3dyLT8SldNPuK+bv7338R/eBwPH6PRRpjp/fZ1O85/3uZD1j/wwfu6BVYb9uIBf9/XjTQwMOnIw/d1Q3Z8ow4e2HHIhemGXBht8MChQy5M/+6FMQbOHXLhayusvcaKg959mYFh651myHpnn3DQ0AfQTQetOtou77wzyrBteXmsf9zWYfePKd57PJ9jwmGDOWzZ4esdMuvw9b66zdDrRh223lf+C+sdvixt76RnDb1utGHrfXWE9Q7+gPUOX/afHg9TDfqHJ6rC/uZDfV8jevyO/gHb+wGvw433t3fdp1z24f+G1+Ee9H7bO8oHb+/7vW/I+27v45c/se9/1+uG0/3s3n2G3ldGH3Y/e+u/cP8dvuyI+7GhLwQydLc/+r+zH5vin/ZjW4480giD/Z7e7/vcFWH+YY+Iv61txQNfWW342A8eYb3/6vvc99yWQbAfG3+En+cGbb7vwCAa80fXeGHDt3f+4DEfPPCPP1sMH/Phy37QmI/274z5Jz54zEf8Pvn9xnyqzw69fvAI2//eMV9kt9lvGj7mo46w3n815qN98LHjn8d8YGAwjfmOkw0dtw/an77fmA9fdviYD/k6s044ysDcAwMDUw4b81H/nTGf9L/nfj4mzD/085X+NunZGRf+yvAxH3GM/9WYj/pfHPPN7v3b/XzKd6/7zEgDo446sNHyG2yw3rRD/x9+cbqh//O+6NkVh47zBx1L389o+LIf9LgY5d8xGv/fMhr0r4wmG+X9jP7+0Br5oEWf+z/dF43yXzU6l/dFp847dNw+6Pui9xvz4cvScXDi9yw/4s+hH/D6WXib3h2f+bcd/vPef8LrZw3/efd/5OtnDf+d5Goj7uTr363f/7vL313+7vJ3l7+49zn/P8Xw8//vjH3AJMN+6Bx81cy3zv5hb++H3P/q8//DfP/h/P/st8581ZAfrYZd94HnZ4fO8x95fnamoR8memz4fCOeHxxxQ//V+dl9dt3gqv9H52f/jxr+WP03fi5u/+8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9z7n/6cZ/jyAhxZf6PvDToQO3nTaozb9sLf3Q+5/9fn/Yb7/cP5/06Om3XSkgb9d94Hn/4fO4zj/f/+Cmy/zn3z+f/hjtfP/9S/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc/5/9mHPw/giNnm/tzw5wPcsN1+e3zY2/sh97/1/H/v/++t/b+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3LDz/wMjvE3iwt0vMDj//z+79/FfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/X+ePWfy3yh+z+P8mf8ziv3X+mMX/t/ljFv9t8scs/tvmj1n8t8sfs/hvnz9m8f9d/pjF//f5Yxb/HfLHLP5/yB+z+P8xf8ziv2P+mMV/p/wxi/+f8scs/jvnj1n8d8kfs/jvmj9m8f9z/pjF/y/5Yxb/3fLHLP5/zR+z+O+eP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DBvLHLP6D8scs/iPlj1n8R84fs/iPkj9m8R+cP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/h/JH/M4j9J/pjF/6P5Yxb/SfPHLP4fyx+z+E+WP2bx/3j+mMX/E/ljFv/J88cs/p/MH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8P5s/ZvGfMn/M4v+5/DGL/+fzxyz+X8gfs/hPlT9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/+v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Rv6YxX/W/DGL/zfzxyz+s+WPWfy/lT9m8f92/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v5M/ZvGfO3/M4j9P/pjFf978MYv/d/PHLP7z5Y9Z/L+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+ePWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/H+SPWfx/mD9m8V8yf8ziv1T+mMX/R/ljFv8f549Z/JfOH7P4L5M/ZvFfNn/M4v+T/DGL/3L5Yxb/5fPHLP4/zR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/X+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/+v88cs/lvlj1n8f5M/ZvHfOn/M4v/b/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4/y5/zOL/+/wxi/8O+WMW/z/kj1n8/5g/ZvHfMX/M4r9T/pjF/0/5Yxb/nfPHLP675I9Z/HfNH7P4/zl/zOL/l/wxi/9u+WMW/7/mj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vzf25bDP7H4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvF/99P8/zmL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx/2X+mMX/V/ljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/+v8MYv/VvljFv/f5I9Z/LfOH7P4/zZ/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP6/yx+z+P8+f8ziv0P+mMX/D/ljFv8/5o9Z/HfMH7P475Q/ZvH/U/6YxX/n/DGL/y75Yxb/XfPHLP5/zh+z+P8lf8ziv1v+mMX/r/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/5IH8MYv/oPwxi/9I+WMW/5Hzxyz+o+SPWfwH549Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+H8kfs/hPkj9m8f9o/pjFf9L8MYv/x/LHLP6T5Y9Z/D+eP2bx/0T+mMV/8vwxi/8n88cs/p/KH7P4T5E/ZvH/dP6Yxf8z+WMW/8/mj1n8p8wfs/h/Ln/M4v/5/DGL/xfyxyz+U+WPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f96/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5E/ZvGfNX/M4v/N/DGL/2z5Yxb/b+WPWfy/nT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/+/kj1n8584fs/jPkz9m8Z83f8zi/938MYv/fPljFv/v5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjF//v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/wf5Yxb/H+aPWfyXzB+z+C+VP2bx/1H+mMX/x/ljFv+l88cs/svkj1n8l80fs/j/JH/M4r9c/pjFf/n8MYv/T/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv+f5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8f95/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvH/Zf6Yxf9X+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/6/wxi/9W+WMW/9/kj1n8t84fs/j/Nn/M4r9N/pjFf9v8MYv/dvljFv/t88cs/r/LH7P4/z5/zOK/Q/6Yxf8P+WMW/z/mj1n8d8wfs/jvlD9m8f9T/pjFf+f8MYv/LvljFv9d88cs/n/OH7P4/yV/zOK/W/6Yxf+v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/DVf7vjPfvzmnxP0Ll/+9n8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5YxL/UQbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/r/PHLP5b5Y9Z/H+TP2bx3zp/zOL/2/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8uf8zi//v8MYv/DvljFv8/5I9Z/P+YP2bx3zF/zOK/U/6Yxf9P+WMW/53zxyz+u+SPWfx3zR+z+P85f8zi/5f8MYv/bvljFv+/5o9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vtJ/Uf7F9db/PeX+v+rLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/wQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP+pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/3X+mMV/q/wxi/9v8scs/lvnj1n8f5s/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv/f5Y9Z/H+fP2bx3yF/zOL/h/wxi/8f88cs/jvmj1n8d8ofs/j/KX/M4r9z/pjFf5f8MYv/rvljFv8/549Z/P+SP2bx3y1/zOL/1/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/2kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/j/Mn/M4v+r/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvH/df6YxX+r/DGL/2/yxyz+W+ePWfx/mz9m8d8mf8ziv23+mMV/u/wxi//2+WMW/9/lj1n8f58/ZvHfIX/M4v+H/DGL/x/zxyz+O+aPWfx3yh+z+P8pf8ziv3P+mMV/l/wxi/+u+WMW/z/nj1n8/5I/ZvHfLX/M4v/X/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/6QP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j+h2P+dzd//Oov/RGL/D8riP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8xkD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/MH7P4/yp/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+dP2bx3yp/zOL/m/wxi//W+WMW/9/mj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/d/ljFv/f549Z/HfIH7P4/yF/zOL/x/wxi/+O+WMW/53yxyz+f8ofs/jvnD9m8d8lf8ziv2v+mMX/z/ljFv+/5I9Z/HfLH7P4/zV/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzmQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/I5n/aP/mfBb/jWX+/24W/03yxyz+v8wfs/j/Kn/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8f50/ZvHfKn/M4v+b/DGL/9b5Yxb/3+aPWfy3yR+z+G+bP2bx3y5/zOK/ff6Yxf93+WMW/9/nj1n8d8gfs/j/IX/M4v/H/DGL/475Yxb/nfLHLP5/yh+z+O+cP2bx3yV/zOK/a/6Yxf/P+WMW/7/kj1n8d8sfs/j/NX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPNZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfx/nT9m8d8qf8zi/5v8MYv/1vljFv/f5o9Z/LfJH7P4b5s/ZvHfLn/M4r99/pjF/3f5Yxb/3+ePWfx3yB+z+P8hf8zi/8f8MYv/jvljFv+d8scs/n/KH7P475w/ZvHfJX/M4r9r/pjF/8/5Yxb/v+SPWfx3yx+z+P81f8ziv3v+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I89kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0ne1//td9555//Npv0nZvH/aI9/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+P8yf8zi/6v8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/H+bP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/3+WPWfx/nz9m8d8hf8zi/4f8MYv/H/PHLP475o9Z/HfKH7P4/yl/zOK/c/6YxX+X/DGL/675Yxb/P+ePWfz/kj9m8d8tf8zi/9f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8p/SINGHAOL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/8v88cs/r/KH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv9f549Z/LfKH7P4/yZ/zOK/df6Yxf+3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/13+mMX/9/ljFv8d8scs/n/IH7P4/zF/zOK/Y/6YxX+n/DGL/5/yxyz+O+ePWfx3yR+z+O+aP2bx/3P+mMX/L/ljFv/d8scs/n/NH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMO5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PHLP6T5o9Z/D+WP2bxnyx/zOL/8fwxi/8n8scs/pPnj1n8P5k/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/h/Nn/M4j9l/pjF/3P5Yxb/z+ePWfy/kD9m8Z8qf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+N/DGL/6z5Yxb/b+aPWfxnyx+z+H8rf8zi/+38MYv/7PljFv858scs/nPmj1n858ofs/h/J3/M4j93/pjFf578MYv/vPljFv/v5o9Z/OfLH7P4fy9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/1/nj1n8t8ofs/j/Jn/M4r91/pjF/7f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Xf6Yxf/3+WMW/x3yxyz+f8gfs/j/MX/M4r9j/pjFf6f8MYv/n/LHLP47549Z/HfJH7P475o/ZvH/c/6Yxf8v+WMW/93yxyz+f80fs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4w3kj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/v8fe/SUNgoBQAHwVn/mY7Zt27Zt27Zt27Zt27Zt673vrKAzs4UZ1X/U8j+a/6jlf3T/Ucv/GP6jlv8x/Uct/2P5j1r+x/YftfyP4z9q+R/Xf9TyP57/qOV/fP9Ry/8E/qOW/wn9Ry3/E/mPWv4n9h+1/E/iP2r5n9R/1PI/mf+o5X9y/1HL/xT+o5b/Kf1HLf9T+Y9a/qf2H7X8T+M/avmf1n/U8j+d/6jlf3r/Ucv/DP6jlv8Z/Uct/zP5j1r+Z/YftfzP4j9q+Z/Vf9TyP5v/qOV/dv9Ry/8c/qOW/zn9Ry3/c/mPWv7n9h+1/M/jP2r5n9d/1PI/n/+o5X9+/1HL/wL+o5b/Bf1HLf8L+Y9a/hf2H7X8L+I/avlf1H/U8r+Y/6jlf3H/Ucv/Ev6jlv8l/Uct/0v5j1r+l/Yftfwv4z9q+V/Wf9Tyv5z/qOV/ef9Ry/8K/qOW/xX9Ry3/K/mPWv5X9h+1/K/iP2r5X9V/1PK/mv+o5X91/1HL/xr+o5b/Nf1HLf9r+Y9a/tf2H7X8r+M/avlf13/U8r+e/6jlf33/Ucv/Bv6jlv8N/Uct/xv5j1r+N/Yftfxv4j9q+d/Uf9Tyv5n/qOV/c/9Ry/8W/qOW/y39Ry3/W/mPWv639h+1/G/jP2r539Z/1PK/nf+o5X97/1HL/w7+o5b/Hf1HLf87+Y9a/nf2H7X87+I/avnf1X/U8r+b/6jlf3f/Ucv/Hv6jlv89/Uct/3v5j1r+9/Yftfzv4z9q+d/Xf9Tyv5//qOV/f/9Ry/8B/qOW/wP9Ry3/B/mPWv4P9h+1/B/iP2r5P9R/1PJ/mP+o5f9w/1HL/xH+o5b/I/1HLf9H+Y9a/o/2H7X8H+M/avk/1n/U8n+c/6jl/3j/Ucv/Cf6jlv8T/Uct/yf5j1r+T/Yftfyf4j9q+T/Vf9Tyf5r/qOX/dP9Ry/8Z/qOW/zP9Ry3/Z/mPWv7P9h+1/J/jP2r5P9d/1PJ/nv+o5f98/1HL/wX+o5b/C/1HLf8X+Y9a/i/2H7X8X+I/avm/1H/U8n+Z/6jl/3L/Ucv/Ff6jlv8r/Uct/1f5j1r+r/Yftfxf4z9q+b/Wf9Tyf53/qOX/ev9Ry/8N/qOW/xv9Ry3/N/mPWv5v9h+1/N/iP2r5v9V/1PJ/m/+o5f92/1HL/x3+o5b/O/1HLf93+Y9a/u/2H7X83+M/avm/13/U8n+f/6jl/37/Ucv/A/6jlv8H/Uct/w/5j1r+H/Yftfw/4j9q+X/Uf9Ty/5j/qOX/cf9Ry/8T/qOW/yf9Ry3/T/mPWv6f9h+1/D/jP2r5f9Z/1PL/nP+o5f95/1HL/wv+o5b/F/1HLf8v+Y9a/l/2H7X8v+I/avl/1X/U8v+a/6jl/3X/Ucv/G/6jlv83/Uct/2/5j1r+3/Yftfy/4z9q+X/Xf9Ty/57/qOX/ff9Ry/8H/qOW/w/9Ry3/H/mPWv4/9h+1/H/iP2r5/9R/1PL/mf+o5f9z/1HL/xf+/2tgUNH/l/6jlv+v/Ect/1/7j1r+v/Eftfx/6z9q+f/Of9Ty/73/qOX/B/9Ry/+P/qOW/5/8Ry3/P/uPWv5/8R+1/P/qP2r5/81/1PL/u/+o5f8P/1HL/5/+o5b/v/xHLf9/+49a/v/xH5X8jzLIf9TyP5j/qOV/cP9Ry/8Q/qOW/wH/Ucv/kP6jlv+h/Ect/0P7j1r+h/EftfwP6z9q+R/Of9TyP7z/qOV/BP9Ry/+I/qOW/5H8Ry3/I/uP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzL3t3G5lUWfhw/Xds9/dm/m3N4DRkMNt3Ela1dmQw2H+pjwVQdiwETyBZWRqUw9xDcQK0GJQZjmIwEEXWbugkkxowXwwSElUQlTkXjRDTEIaiLmBomMqJxqbnb3qW91zbrVa9rL/b5vGjvc8rvdFvy3TllawYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEqbt91yw9qOjrZNXnjhhRcDL07170xAaq9Ff6p/JAAAAAAAAAAAAAAAwEhyfDvRqf45AgAAAADA6aal9V3d1VVDTlUPPpjz87be902vXnn9nucfX1l+3//hy4e55ITBBz09PT0vNXfN7D+cVBRF6bNN7z+eXDkuXb+z6/LtfUeh+O2zza3btjcf3PmVrz88d+r0ObW9Z2uLNde1d7QtmVAUobq22Fo6aKgqijCxttheOmgsHUyqLe4vHSztPZhSHCgdXHjtho51pRMnfGo47bS0fraoHlJsMeR3g8H9d3Zt2lV+P8oly1erKfr7r2v+4d6Kj5WN0H/5+qGqsv8x/wSBEY2t/9sXlt+PcskT7v+PttetGu5jI/dfvn6YoH9IZ5jn/yGN9j7v79k/Y4Tn/7nDXHJg/9O/rOwq9X/TL1+o7z9VczLP/6XP13cUqiv7nzDk+b/0HF9Tfv6fVBShdpy/HHBaaWn9XPdo9//K7of2X3NWxaZqcP9HV+2pLvV/+K4H3t9/qvak+h+4fqgZ5f5f9ZkDQ3+swNi0tO7uqbj/j6H/YsEwlxzof/7uY1eV+j9j55F9gz42lv5rK/tfvOXGTyzevO2W+vYb165vW992U2NjQ9PSZU2NFy1f3PtI0Pd2nL8qcHoY3/2/mFqxqSqKtoH9og8ve6nU/8Fz//G3/lOTx9j/xFHv/8+5/8Owzp9QTJxYbF27Zcumhr635cPGvrd9/9kw/Z/49f+I/c8r/3/A8tfdpS/IB/a/eedXP1Lq/95Jqx7oPzVxjP1PGq3/ztc+LxBhnPf/dRWbIf23v/qddaX+//TK8UP9p8b69f/kUfvf5f4P49HSWvEXfv7HSv2v/tfh4f6c4CSEKf78D9LJ0f/Wab/4Ztw6TNU/pJOj/6Wb2yL/sm34P/1DOjn6/9WOqiNx63CG/iGdHP1/rfvBjXHrME3/kE6O/vfPfuSpuHX4f/1DOjn6P75++lVx61Cnf0gnR/+XfWnv6rh1mK5/SCdH/1WvTHsibh1m6B/SydF/fdXZn4pbh9fpH9LJ0f91nQ+/GLcOM/UP6eTo//M7fx35fTrh9fqHdHL0/9Qft+6IW4dZ+od0cvT/wqz2+rh1OFP/kE6O/u+/4YlH4tbhDfqHdHL0//S3Pngsbh2C/iGdHP1/49kja+LWYbb+IZ0c/e9beOwPcetwlv4hnRz9//ujV38gbh3eqH9IJ0f/Yf/y78atw9n6h3Ry9H/Fk3c1xK3DHP1DOjn671xx251x63CO/iGdHP03NS+cHbcO5+of0snR/4w///3uuHWYq39IJ0f/H7vvvZX/7vdJCufpH9LJ0f/NG1Y/GrcO5+sf0snR/8oZPRfErcM8/UM6Ofo/fPS+H8Wtw3z9Qzo5+r/7ziVXxK3Dm/QP6eTo/we3ntcdtw5v1j+kk6P/l2vvuDVuHRboH9LJ0f+Xf1azLG4dFuof0snR/48f+v6uuHV4i/4hnRz9v/i+x86JW4cL9A/p5Oh/98Wzvhi3Dm/VP6STo/93P7Nxfdw6LNI/pJOj/8l7f380bh3q9Q/p5Oh//qqDH4pbhwv1D+nk6H/DojW/i1uHxfqHdHL0/8yBpw/FrcMS/UM6Ofrf8dinm+PWoUH/kE6O/h+/rOM/cevQqH9IJ0f//2z6ycfj1mGp/iGdHP2feejbX4hbhyb9Qzo5+r/6wckz49bhIv1DOjn633jN7O/FrcMy/UM6Ofq/ZO5Dl8atw9v0D+nk6P89f11xc9w6XKx/SCdH/3X33PNc3Dos1z+kk6P/edfefk3cOlyif0gnR//Xz6l/Mm4dLtU/pJOj/zuOtyyIW4cV+od0cvTfddvz++LWYaX+IZ0c/Xd/8uW6uHV4u/4hnRz9751y5b1x6/AO/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD//xDC0no=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
fallocate(r0, 0x20, 0x0, 0x8000)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105042, 0x1f9)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

9.274591427s ago: executing program 2 (id=1547):
mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
msync(&(0x7f0000074000/0x3000)=nil, 0x3000, 0x4)
shmat(0xffffffffffffffff, &(0x7f0000f30000/0x1000)=nil, 0x7000)

6.454610596s ago: executing program 2 (id=1566):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000011600)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='f2fs_write_begin\x00', r0}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

5.876275488s ago: executing program 0 (id=1571):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c1", 0x1, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc11, &(0x7f0000000d00)="$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")
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00')

5.208384459s ago: executing program 0 (id=1575):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d00"/20, @ANYRES32=r1, @ANYBLOB="00300000c048000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4.817846488s ago: executing program 5 (id=1578):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x40}, 0x20)

4.595009265s ago: executing program 3 (id=1579):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00008e90e68100"/20, @ANYRES32=0x1], 0xffffffffffffffc3)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})

4.575289283s ago: executing program 6 (id=1580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x820f}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

4.448043791s ago: executing program 0 (id=1581):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

4.372660685s ago: executing program 5 (id=1582):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x96, 0x2a9, &(0x7f0000000500)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4.342812568s ago: executing program 7 (id=1583):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x2)
write$dsp(r0, &(0x7f00000002c0)="5afcb90a35d112ad269e6d19deef98fb1975c09f857ed132c190fc24fbbc20fa8c4c1a91f78e0179b13e62bb86f371888d674eb475d2df53b55b75a9b261753e1c163b2208b6a403e393b57580a3", 0x4e)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)
close(r0)

4.220400983s ago: executing program 3 (id=1584):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000004})
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

3.930954807s ago: executing program 5 (id=1585):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})

3.892192471s ago: executing program 6 (id=1586):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c)
shutdown(r0, 0x1)

3.80440135s ago: executing program 7 (id=1587):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
read$usbfs(r1, &(0x7f0000000000)=""/161, 0xa1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000010400)={0x2, 0x614, 0x7, 0xffffffff, 0x12, "972c700500141000000000002000052c707400"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))

3.562006074s ago: executing program 5 (id=1588):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000007980)=[{{&(0x7f0000001500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4008000}}, {{&(0x7f00000019c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x888d0}}], 0x2, 0x22008010)

3.445292913s ago: executing program 6 (id=1589):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x0)

3.379731358s ago: executing program 7 (id=1590):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20)

3.164745183s ago: executing program 5 (id=1591):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = getpid()
r2 = epoll_create1(0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x4})

3.155527586s ago: executing program 2 (id=1592):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)

3.045703383s ago: executing program 6 (id=1593):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0xfff1, 0x5}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000)
write$UHID_INPUT(r0, &(0x7f00000030c0)={0xc, {"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", 0x1000}}, 0x1006)

2.780406577s ago: executing program 0 (id=1594):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpid()
sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40002060)

2.779755168s ago: executing program 3 (id=1595):
r0 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
close(0x3)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

2.431674924s ago: executing program 7 (id=1596):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c004}, 0x8040)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0)

2.367527699s ago: executing program 0 (id=1597):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x83, 0x2, r1})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000000c0)={0x18})

2.064334223s ago: executing program 3 (id=1598):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x210012, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1bb, &(0x7f0000000340)="$eJzs20tu2kAcx/GfMQZK369NV5W6aDeFlnbTXTlAL9AdAhehmrYq3YAqVT1Kb8JNegGQkl1WcWRjIkMMDCbBPL4fKclfGf9mxhETzywsAEfrQfjdkiUnrHzf//Nc0udPkvIZTw7AjfJ17gM4VvZJ1jMAkI1x3Q73AUNL+n/6uzmKvhzD/cO4npsUJUmxfME0/9cKfz7LS6NYvhh1uXL/8m+Sf6nZ/K01xy/P5csrctZlfnL/r17M5m9LuiPprqR7ku5HZ62Hkh4ljN+aG/+p4fyBTQSfvsqm+Q06CFbPl47nvklqtFfnnSj/Nrk59i9kmHhBIcrXDOe7KP8uZb4Y5SvN714roT2Xsl/ARC7j9W9LZ/78+v9ons8vX/8Aluj1B18bnuf+XKNwwqIY9bDs4uDpGPtNcPmaY1FkUZQSmpyUn5Z0RWE7dxo8vnbhD25YTFftNscCcKiqv7o/qr3+4HWn22i7bfdb7f2H6bE7PJdXF57OAey52c05AAAAAAAAAAAAAADYR48lPUkTNH3BDwAAAMDOuN53hhxJV5uyvkcAAAAAAAAAAAAAAAAAAADgUFwEAAD//312QIE=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0)

1.963245533s ago: executing program 7 (id=1599):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

1.949889659s ago: executing program 5 (id=1600):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
io_setup(0x23, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

1.803313708s ago: executing program 0 (id=1601):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
landlock_restrict_self(0xffffffffffffffff, 0xe)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.236315952s ago: executing program 3 (id=1602):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd0)
close(r0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
listen(r1, 0x7)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

540.125392ms ago: executing program 6 (id=1603):
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = fsmount(r0, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)

401.325475ms ago: executing program 2 (id=1604):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

199.584773ms ago: executing program 7 (id=1605):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

184.529275ms ago: executing program 6 (id=1606):
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

0s ago: executing program 3 (id=1607):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0)

kernel console output (not intermixed with test programs):

_data cause=failed(directio) comm="syz.6.803" name="file1" dev="loop6" ino=4 res=0 errno=0
[  271.203140][   T30] audit: type=1326 audit(1747923008.117:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5e8d2ab39 code=0x7ffc0000
[  271.363866][   T30] audit: type=1326 audit(1747923008.117:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5e8d2ab39 code=0x7ffc0000
[  271.476910][   T30] audit: type=1326 audit(1747923008.117:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e8d8e969 code=0x7ffc0000
[  271.608308][   T30] audit: type=1326 audit(1747923008.117:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5e8d2ab39 code=0x7ffc0000
[  271.698418][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  271.736825][ T8624] loop5: detected capacity change from 0 to 512
[  271.806114][ T8624] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  271.847065][   T30] audit: type=1326 audit(1747923008.117:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e8d8e969 code=0x7ffc0000
[  271.988434][   T30] audit: type=1326 audit(1747923008.117:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5e8d2ab39 code=0x7ffc0000
[  272.035138][ T8624] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  272.102125][   T30] audit: type=1326 audit(1747923008.117:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e8d8e969 code=0x7ffc0000
[  272.166007][ T8624] EXT4-fs (loop5): 1 truncate cleaned up
[  272.193676][ T8624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.206364][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  272.227242][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  272.274110][   T30] audit: type=1326 audit(1747923008.157:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5e8d2ab39 code=0x7ffc0000
[  272.428828][   T30] audit: type=1326 audit(1747923008.157:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5e8d8e969 code=0x7ffc0000
[  272.754484][ T8640] loop6: detected capacity change from 0 to 512
[  272.897350][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.126270][ T8647] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  273.228321][ T8615] loop7: detected capacity change from 0 to 32768
[  273.239915][ T8650] loop5: detected capacity change from 0 to 8
[  273.396955][ T8615] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  273.574169][ T8650] SQUASHFS error: xz decompression failed, data probably corrupt
[  273.620676][ T8650] SQUASHFS error: Failed to read block 0xa8: -5
[  273.774614][ T8650] SQUASHFS error: xz decompression failed, data probably corrupt
[  273.788121][ T8650] SQUASHFS error: Failed to read block 0xa8: -5
[  273.912001][ T7264] ocfs2: Unmounting device (7,7) on (node local)
[  274.365942][ T8675] loop2: detected capacity change from 0 to 256
[  274.421180][ T8675] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  274.501754][ T8675] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  274.587342][ T8675] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  274.668115][ T8675] UDF-fs: Scanning with blocksize 512 failed
[  274.730343][ T8675] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  274.839423][ T8675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.475200][ T8699] loop7: detected capacity change from 0 to 16
[  275.541911][ T8699] erofs (device loop7): mounted with root inode @ nid 36.
[  275.628558][   T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  275.718167][ T5896] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  275.735249][ T8702] loop2: detected capacity change from 0 to 4096
[  275.766136][ T8702] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  275.819793][   T48] usb 1-1: Using ep0 maxpacket: 8
[  275.833918][   T48] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  275.873275][   T48] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  275.910243][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  275.927954][   T48] usb 1-1: config 0 has no interface number 0
[  275.934118][   T48] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  275.987348][ T5896] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  275.996770][   T48] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  275.996825][   T48] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  276.012554][   T48] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  276.092166][   T48] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  276.132631][   T30] kauditd_printk_skb: 124 callbacks suppressed
[  276.132659][   T30] audit: type=1800 audit(1747923013.047:368): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.842" name="file1" dev="loop2" ino=30 res=0 errno=0
[  276.136829][   T48] usb 1-1: Product: syz
[  276.184051][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.269409][ T5896] usb 4-1: config 0 descriptor??
[  276.279401][ T8700] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  276.298326][   T48] usb 1-1: config 0 descriptor??
[  276.304629][ T8696] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  276.878209][ T5896] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  276.995115][   T48] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input22
[  277.130045][ T5896] usb 4-1: USB disconnect, device number 5
[  277.252017][ T8726] loop7: detected capacity change from 0 to 512
[  277.324993][ T8726] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  277.374341][ T1201] usb 1-1: USB disconnect, device number 11
[  277.374353][    C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  277.403214][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.851'.
[  277.436100][ T8719] fido_id[8719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  277.547575][ T8726] EXT4-fs (loop7): 1 truncate cleaned up
[  277.607460][ T8726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.750991][   T30] audit: type=1800 audit(1747923014.667:369): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.850" name="file1" dev="loop7" ino=15 res=0 errno=0
[  277.846004][   T30] audit: type=1800 audit(1747923014.677:370): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.850" name="file1" dev="loop7" ino=15 res=0 errno=0
[  278.272812][ T7264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.590017][ T8748] loop7: detected capacity change from 0 to 256
[  278.630331][ T8748] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  278.710672][ T8718] loop2: detected capacity change from 0 to 32768
[  278.736923][ T8748] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  278.772712][ T8748] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  278.806408][ T8748] UDF-fs: Scanning with blocksize 512 failed
[  278.824756][ T8718] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.921610][ T8748] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  278.962219][ T8718] XFS (loop2): Ending clean mount
[  279.009316][ T8748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.088058][   T30] audit: type=1800 audit(1747923015.997:371): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.848" name="bus" dev="loop2" ino=6153 res=0 errno=0
[  279.322067][ T5832] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.952935][ T8743] loop6: detected capacity change from 0 to 32768
[  280.152125][ T8743] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.207906][ T5892] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  280.318018][ T8794] loop2: detected capacity change from 0 to 8
[  280.371148][ T5892] usb 6-1: Using ep0 maxpacket: 16
[  280.418680][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.475392][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.536339][ T8794] SQUASHFS error: xz decompression failed, data probably corrupt
[  280.547297][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  280.585558][ T8794] SQUASHFS error: Failed to read block 0xa8: -5
[  280.599164][ T8743] XFS (loop6): Ending clean mount
[  280.618193][ T5892] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  280.627304][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.702033][ T5892] usb 6-1: config 0 descriptor??
[  280.723657][ T8794] SQUASHFS error: xz decompression failed, data probably corrupt
[  280.758297][ T1201] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  280.801246][ T8794] SQUASHFS error: Failed to read block 0xa8: -5
[  280.836819][   T30] audit: type=1800 audit(1747923017.747:372): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.865" name="file0" dev="loop2" ino=3 res=0 errno=0
[  280.877955][   T48] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  280.938456][ T1201] usb 4-1: Using ep0 maxpacket: 16
[  280.947957][ T1201] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  280.956088][ T1201] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  280.978008][ T1201] usb 4-1: config 0 has no interface number 0
[  280.984166][ T1201] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  281.001495][ T7213] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.016404][ T1201] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  281.055964][ T1201] usb 4-1: config 0 interface 41 has no altsetting 0
[  281.072460][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  281.081022][ T1201] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  281.092929][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  281.105916][   T48] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  281.139511][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.152952][   T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.162652][ T1201] usb 4-1: Product: syz
[  281.206448][ T5892] input: HID 0955:7214 Haptics as /devices/virtual/input/input23
[  281.207979][ T1201] usb 4-1: Manufacturer: syz
[  281.230642][   T48] usb 1-1: config 0 descriptor??
[  281.258199][ T1201] usb 4-1: SerialNumber: syz
[  281.268518][ T8799] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  281.297948][    T9] usb 8-1: Using ep0 maxpacket: 8
[  281.328963][    T9] usb 8-1: config index 0 descriptor too short (expected 6427, got 27)
[  281.352192][ T1201] usb 4-1: config 0 descriptor??
[  281.361759][ T8797] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  281.387191][    T9] usb 8-1: config 0 has an invalid interface number: 21 but max is 0
[  281.408180][ T8797] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  281.428626][    T9] usb 8-1: config 0 has no interface number 0
[  281.434803][    T9] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  281.527414][    T9] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  281.555056][ T5892] shield 0003:0955:7214.0011: Registered Thunderstrike controller
[  281.607375][    T9] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  281.618676][ T5892] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[  281.695113][ T3398] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  281.704525][ T8797] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  281.746872][ T5892] usb 6-1: USB disconnect, device number 7
[  281.764405][ T3398] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  281.767497][    T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  281.786889][ T8797] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  281.840210][ T3398] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  281.857747][    T9] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  281.858897][   T48] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  281.921604][ T3398] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  281.925157][    T9] usb 8-1: Product: syz
[  282.085620][    T9] usb 8-1: config 0 descriptor??
[  282.098941][ T8802] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  282.129815][   T48] usb 1-1: USB disconnect, device number 12
[  282.390115][ T8811] fido_id[8811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  282.632568][ T1201] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  282.701563][ T1201] usb 4-1: USB disconnect, device number 6
[  282.836715][    T9] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.21/input/input24
[  283.049396][ T5896] usb 8-1: USB disconnect, device number 7
[  283.049483][    C0] keyspan_remote 8-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  284.207285][ T8849] tipc: Started in network mode
[  284.213113][ T8849] tipc: Node identity 6, cluster identity 4711
[  284.240353][ T8848] loop3: detected capacity change from 0 to 2048
[  284.244290][ T8849] tipc: Node number set to 6
[  284.266564][ T8816] loop5: detected capacity change from 0 to 32768
[  284.353953][ T8848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.357992][ T8816] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.872 (8816)
[  284.511773][ T8816] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.619073][ T8816] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  284.700573][ T8816] BTRFS info (device loop5): using free-space-tree
[  285.385726][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.442049][ T8892] input: syz0 as /devices/virtual/input/input25
[  285.716974][ T5841] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  286.122063][ T8903] loop3: detected capacity change from 0 to 512
[  286.157303][ T8903] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.224747][ T8903] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.277324][ T8903] EXT4-fs (loop3): Test dummy encryption mode enabled
[  286.343916][ T8903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  286.437018][ T8903] EXT4-fs (loop3): 1 truncate cleaned up
[  286.510017][ T8903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.743604][ T8913] loop2: detected capacity change from 0 to 1024
[  286.764706][ T8913] EXT4-fs: Ignoring removed orlov option
[  286.818221][ T8913] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  286.844862][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.934002][ T8913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.988188][ T5895] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  287.178031][ T5895] usb 8-1: Using ep0 maxpacket: 16
[  287.232117][ T5895] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  287.261733][ T8924] loop6: detected capacity change from 0 to 2048
[  287.271553][ T5895] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.347701][ T5895] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  287.397415][ T5895] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  287.456567][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.476093][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.495062][ T8924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.537952][ T5895] usb 8-1: Product: syz
[  287.566874][ T5895] usb 8-1: Manufacturer: syz
[  287.597920][ T5895] usb 8-1: SerialNumber: syz
[  287.751089][ T8924] EXT4-fs (loop6): shut down requested (1)
[  287.796197][ T8935] loop2: detected capacity change from 0 to 128
[  287.861184][ T8935] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  287.931066][ T8935] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  288.119241][ T5895] usb 8-1: 0:2 : does not exist
[  288.139867][ T7213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.681310][ T8950] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  288.878022][ T5895] usb 8-1: USB disconnect, device number 8
[  289.203225][ T8953] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  289.231230][ T8955] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  289.258212][ T8955] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  289.276627][ T8955] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  289.302463][ T8955] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  289.334209][ T8955] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  289.381852][   T30] audit: type=1326 audit(1747923026.297:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  289.490539][   T30] audit: type=1326 audit(1747923026.327:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  289.516585][ T8955] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  289.571376][   T30] audit: type=1326 audit(1747923026.327:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  289.685081][   T30] audit: type=1326 audit(1747923026.327:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  289.779300][   T30] audit: type=1326 audit(1747923026.327:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  289.874384][   T30] audit: type=1326 audit(1747923026.327:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  289.878286][ T5892] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  289.980943][   T30] audit: type=1326 audit(1747923026.327:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  290.066156][   T30] audit: type=1326 audit(1747923026.327:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  290.089954][   T30] audit: type=1326 audit(1747923026.327:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  290.148312][ T5892] usb 8-1: Using ep0 maxpacket: 8
[  290.165232][ T5892] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  290.167899][   T30] audit: type=1326 audit(1747923026.327:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8973 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7fc00000
[  290.192239][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.256394][ T5892] usb 8-1: Product: syz
[  290.271608][ T5892] usb 8-1: Manufacturer: syz
[  290.280487][ T5892] usb 8-1: SerialNumber: syz
[  290.410249][ T5892] usb 8-1: config 0 descriptor??
[  290.431443][ T5892] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  291.041860][ T9008] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  291.278269][ T5136] Bluetooth: hci4: command 0x0c1a tx timeout
[  291.285117][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout
[  291.366479][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout
[  291.462045][ T5892] gspca_sonixj: reg_w1 err -71
[  291.558119][ T5892] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  291.609856][ T5892] usb 8-1: USB disconnect, device number 9
[  291.668026][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  291.830260][ T9027] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  291.868477][ T5896] usb 4-1: Using ep0 maxpacket: 8
[  291.877145][ T5896] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  291.918159][ T5896] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  291.962848][ T5896] usb 4-1: config 0 has no interface number 0
[  291.978848][ T5896] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  292.023256][ T5896] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  292.046120][ T5896] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  292.067027][ T5896] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  292.090192][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  292.098504][ T5896] usb 4-1: Product: syz
[  292.124526][ T9040] loop2: detected capacity change from 0 to 512
[  292.152025][ T5896] usb 4-1: config 0 descriptor??
[  292.161862][ T9022] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  292.165040][ T9040] EXT4-fs: Ignoring removed mblk_io_submit option
[  292.246539][ T9040] EXT4-fs: Ignoring removed mblk_io_submit option
[  292.294047][ T9040] EXT4-fs (loop2): Test dummy encryption mode enabled
[  292.339143][ T9040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  292.419917][ T9028] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  292.426415][ T9031] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  292.443548][ T9040] EXT4-fs (loop2): 1 truncate cleaned up
[  292.461909][ T9031] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  292.472493][ T9040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.505334][ T9031] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  292.520012][ T9031] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  292.738998][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.788037][ T5895] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  292.838415][ T5896] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input26
[  292.987937][ T5895] usb 7-1: Using ep0 maxpacket: 16
[  293.037419][ T5895] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  293.098002][ T5895] usb 7-1: config 0 descriptor has 1 excess byte, ignoring
[  293.105308][ T5895] usb 7-1: config 0 has no interface number 0
[  293.178079][ T5895] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  293.211679][    T9] usb 4-1: USB disconnect, device number 7
[  293.217803][    C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  293.241356][ T5895] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  293.296618][ T5895] usb 7-1: config 0 interface 41 has no altsetting 0
[  293.346146][ T5895] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  293.379992][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.418445][ T5896] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  293.421433][ T5895] usb 7-1: Product: syz
[  293.487905][ T5895] usb 7-1: Manufacturer: syz
[  293.506756][ T5895] usb 7-1: SerialNumber: syz
[  293.534881][ T5895] usb 7-1: config 0 descriptor??
[  293.543972][ T9034] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  293.558348][ T9034] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  293.588885][ T5896] usb 3-1: Using ep0 maxpacket: 16
[  293.611371][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.653715][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.684342][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  293.718310][ T5896] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  293.745885][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.786634][ T5896] usb 3-1: config 0 descriptor??
[  293.850723][    T9] IPVS: starting estimator thread 0...
[  293.853225][ T9072] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  293.873986][ T9034] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  293.915670][ T9066] loop5: detected capacity change from 0 to 8192
[  293.939849][ T9034] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  293.958307][ T9077] IPVS: using max 21 ests per chain, 50400 per kthread
[  294.029691][ T6052] Dev loop5: RDB in block 1 has bad checksum
[  294.086900][ T9066] Dev loop5: RDB in block 1 has bad checksum
[  294.210185][ T5892] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  294.258526][ T5892] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  294.337038][ T5896] input: HID 0955:7214 Haptics as /devices/virtual/input/input28
[  294.485824][ T5136] Bluetooth: hci5: command 0x0c1a tx timeout
[  294.512429][ T5896] shield 0003:0955:7214.0014: Registered Thunderstrike controller
[  294.548405][ T5896] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  294.559383][ T5136] Bluetooth: hci2: command 0x0c1a tx timeout
[  294.560622][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  294.718853][    T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  294.738703][ T5896] usb 3-1: USB disconnect, device number 12
[  294.787962][ T5893] thermal thermal_zone0: Temperature check failed (-19)
[  294.807951][    T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  294.830331][ T5895] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[  294.901129][    T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  294.968627][    T9] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  294.978351][ T5895] usb 7-1: USB disconnect, device number 3
[  295.718453][ T9101] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  295.760134][ T9105] loop7: detected capacity change from 0 to 512
[  295.802849][ T9105] EXT4-fs: Ignoring removed mblk_io_submit option
[  295.852026][ T9105] EXT4-fs: Ignoring removed mblk_io_submit option
[  295.923137][ T9105] EXT4-fs (loop7): Test dummy encryption mode enabled
[  295.962130][ T9105] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  296.067424][ T9105] EXT4-fs (loop7): 1 truncate cleaned up
[  296.154039][ T9105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.335334][ T9102] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  296.371496][ T9104] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  296.416639][ T7264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.426666][ T9104] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  296.456075][ T9104] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  296.500958][ T9104] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  296.948888][ T9135] netlink: 'syz.0.961': attribute type 29 has an invalid length.
[  296.986776][ T9138] netlink: 'syz.0.961': attribute type 29 has an invalid length.
[  297.072315][ T9135] netlink: 500 bytes leftover after parsing attributes in process `syz.0.961'.
[  297.131067][ T9135] unsupported nla_type 58
[  297.618090][   T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  297.793962][   T48] usb 4-1: Using ep0 maxpacket: 16
[  297.803903][ T9157] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  297.814645][ T5892] IPVS: starting estimator thread 0...
[  297.828511][   T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.876704][   T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.923023][   T48] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  297.936495][ T9159] IPVS: using max 21 ests per chain, 50400 per kthread
[  297.978224][   T48] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  298.023631][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.099287][   T48] usb 4-1: config 0 descriptor??
[  298.268967][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  298.321622][ T9166] loop5: detected capacity change from 0 to 2048
[  298.383422][ T9166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.481913][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.493516][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  298.500594][ T5136] Bluetooth: hci5: command 0x0c1a tx timeout
[  298.566041][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.568634][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout
[  298.618603][   T48] input: HID 0955:7214 Haptics as /devices/virtual/input/input29
[  298.665313][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  298.755087][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  298.804878][   T48] shield 0003:0955:7214.0015: Registered Thunderstrike controller
[  298.847050][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.919813][   T48] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  298.932475][ T5892] usb 3-1: config 0 descriptor??
[  299.024863][ T3398] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  299.082155][   T48] usb 4-1: USB disconnect, device number 8
[  299.106310][ T3398] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  299.228278][ T3398] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  299.328127][ T3398] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  299.396501][ T5892] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  299.440001][ T5892] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  299.638764][ T5892] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  299.754427][ T5892] usb 3-1: USB disconnect, device number 13
[  300.292343][ T9178] loop5: detected capacity change from 0 to 131072
[  300.613749][ T9178] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  300.671199][ T9189] fido_id[9189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  300.955473][ T9188] netlink: 96 bytes leftover after parsing attributes in process `syz.3.980'.
[  301.657709][ T9222] loop6: detected capacity change from 0 to 512
[  301.785569][ T9222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.888156][ T9222] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.938792][ T9230] xt_hashlimit: size too large, truncated to 1048576
[  302.001697][ T9229] vivid-004: disconnect
[  302.085573][ T9229] vivid-004: reconnect
[  302.360079][ T7213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.905034][ T9267] loop7: detected capacity change from 0 to 32768
[  304.037507][ T9267] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  304.076964][ T9267] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  304.076964][ T9267]   allowing incompatible features above 0.0: (unknown version)
[  304.106669][ T9267] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  304.116143][ T9267] bcachefs (loop7): Version upgrade required:
[  304.116143][ T9267] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  304.116143][ T9267] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  304.116143][ T9267]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  304.199212][ T9267] bcachefs (loop7): dropping and reconstructing all alloc info
[  304.256010][ T9267] bcachefs (loop7): accounting_read... done
[  304.281887][ T9267] bcachefs (loop7): alloc_read... done
[  304.287504][ T9267] bcachefs (loop7): snapshots_read... done
[  304.294788][ T9267] bcachefs (loop7): check_allocations... done
[  304.409335][ T9267] bcachefs (loop7): going read-write
[  304.452774][ T9267] bcachefs (loop7): done starting filesystem
[  304.490134][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  304.547414][ T9283] macvlan0: entered promiscuous mode
[  304.593447][ T9267] bcachefs (loop7): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX
[  304.593483][ T9267]   while marking u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0  compress incompressible ptr: 0:34:0 gen 0
[  304.593521][ T9267]   
[  304.699009][ T9283] batadv_slave_1: entered promiscuous mode
[  304.746366][ T9283] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  304.778005][ T9283] Cannot create hsr debugfs directory
[  304.791360][   T13] bcachefs (loop7): bucket incorrectly unset in freespace btree
[  304.791414][   T13]   u64s 5 type deleted 0:1:0 len 0 ver 0, , continuing
[  304.999402][   T13] bcachefs (loop7): bucket incorrectly unset in freespace btree
[  304.999456][   T13]   u64s 5 type deleted 0:4:0 len 0 ver 0, , continuing
[  305.076316][ T7264] bcachefs (loop7): shutting down
[  305.106423][ T7264] bcachefs (loop7): going read-only
[  305.123068][ T7264] bcachefs (loop7): finished waiting for writes to stop
[  305.190302][ T7264] bcachefs (loop7): flushing journal and stopping allocators, journal seq 11
[  305.247729][ T9291] loop5: detected capacity change from 0 to 1024
[  305.271878][ T9292] vivid-000: disconnect
[  305.292267][ T9292] vivid-000: reconnect
[  305.296640][ T2968] bcachefs (loop7): bucket incorrectly unset in freespace btree
[  305.296668][ T2968]   u64s 5 type deleted 0:6:0 len 0 ver 0, , continuing
[  305.497081][ T9259] loop3: detected capacity change from 0 to 32768
[  305.508076][   T30] kauditd_printk_skb: 244 callbacks suppressed
[  305.508107][   T30] audit: type=1800 audit(1747923042.407:627): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.986" name="file1" dev="loop5" ino=20 res=0 errno=0
[  305.577382][ T2968] bcachefs (loop7): bucket incorrectly unset in freespace btree
[  305.577423][ T2968]   u64s 5 type deleted 0:9:0 len 0 ver 0, , continuing
[  305.596614][ T9259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1001 (9259)
[  305.629989][ T9259] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  305.630109][ T9259] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm
[  305.630159][ T9259] BTRFS info (device loop3): using free-space-tree
[  305.918302][ T7264] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 12
[  305.995806][ T7264] bcachefs (loop7): unclean shutdown complete, journal seq 13
[  306.065116][   T13] hfsplus: b-tree write err: -5, ino 4
[  306.137576][ T7264] bcachefs (loop7): done going read-only, filesystem not clean
[  306.394645][ T7264] bcachefs (loop7): shutdown complete
[  306.559748][ T5843] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  307.231015][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  307.602187][ T9295] loop2: detected capacity change from 0 to 32768
[  307.694881][ T9344] loop3: detected capacity change from 0 to 32768
[  307.717935][ T5893] usb 7-1: Using ep0 maxpacket: 16
[  307.727537][ T5893] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.743354][ T5893] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.754460][ T5893] usb 7-1: config 0 interface 0 has no altsetting 0
[  307.762309][ T5893] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  307.793597][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.829300][ T5893] usb 7-1: config 0 descriptor??
[  308.275641][ T5893] hid (null): report_id 11059 is invalid
[  308.281586][ T5893] hid (null): unknown global tag 0xfa
[  308.325260][ T5893] cougar 0003:060B:500A.0017: usage count exceeds max: fixing up report descriptor
[  308.369680][ T5893] cougar 0003:060B:500A.0017: unexpected long global item
[  308.395616][ T5893] cougar 0003:060B:500A.0017: parse failed
[  308.421343][ T5893] cougar 0003:060B:500A.0017: probe with driver cougar failed with error -22
[  308.561435][ T5892] usb 7-1: USB disconnect, device number 4
[  308.597961][   T48] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  308.768109][   T48] usb 3-1: Using ep0 maxpacket: 32
[  308.783441][   T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.795819][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1026'.
[  308.820857][   T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.844882][   T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  308.868935][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.913023][   T48] usb 3-1: config 0 descriptor??
[  308.915169][ T9344] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  308.925050][   T48] hub 3-1:0.0: USB hub found
[  308.956974][ T9344] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  308.956974][ T9344]   allowing incompatible features above 0.0: (unknown version)
[  308.988216][ T9344] bcachefs (loop3): initializing new filesystem
[  308.999738][ T9344] bcachefs (loop3): going read-write
[  309.075082][ T9344] bcachefs (loop3): marking superblocks
[  309.094983][ T9344] bcachefs (loop3): initializing freespace
[  309.105932][ T9344] bcachefs (loop3): done initializing freespace
[  309.118115][ T9344] bcachefs (loop3): reading snapshots table
[  309.124158][ T9344] bcachefs (loop3): reading snapshots done
[  309.169252][   T48] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  309.248836][ T9344] bcachefs (loop3): done starting filesystem
[  309.305461][ T9370] bridge0: port 3(gretap0) entered blocking state
[  309.369054][ T9370] bridge0: port 3(gretap0) entered disabled state
[  309.398731][ T9370] gretap0: entered allmulticast mode
[  309.464829][ T9370] gretap0: entered promiscuous mode
[  309.524475][ T9370] bridge0: port 3(gretap0) entered blocking state
[  309.531183][ T9370] bridge0: port 3(gretap0) entered forwarding state
[  309.584763][ T9374] gretap0: left allmulticast mode
[  309.592676][ T9359] loop2: detected capacity change from 0 to 256
[  309.667908][ T9374] gretap0: left promiscuous mode
[  309.675583][ T9374] bridge0: port 3(gretap0) entered disabled state
[  309.769577][   T48] hid-generic 0003:046D:C31C.0018: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[  309.860902][ T5843] bcachefs (loop3): shutting down
[  309.866041][ T5843] bcachefs (loop3): going read-only
[  309.917086][ T5843] bcachefs (loop3): finished waiting for writes to stop
[  309.926988][   T48] usb 3-1: USB disconnect, device number 14
[  309.990283][ T9379] xt_hashlimit: size too large, truncated to 1048576
[  310.060328][ T5843] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  310.163838][ T9376] fido_id[9376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  310.392770][ T5843] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  310.417983][ T5843] bcachefs (loop3): clean shutdown complete, journal seq 4
[  310.519935][ T5843] bcachefs (loop3): marking filesystem clean
[  310.730988][ T5843] bcachefs (loop3): shutdown complete
[  311.099745][ T9393] loop7: detected capacity change from 0 to 1024
[  311.170307][ T9375] loop6: detected capacity change from 0 to 32768
[  311.185780][ T9393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.206533][ T9398] loop5: detected capacity change from 0 to 512
[  311.232553][ T9375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1029 (9375)
[  311.343934][ T9398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.373528][ T9398] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  311.386432][ T9375] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.466697][ T7264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.485597][ T9375] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm
[  311.561709][ T9375] BTRFS info (device loop6): using free-space-tree
[  311.653327][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.048410][ T5892] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  312.082742][ T5893] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  312.248276][ T5892] usb 8-1: Using ep0 maxpacket: 16
[  312.256160][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  312.263837][ T5892] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  312.294335][ T5893] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  312.318913][ T7213] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  312.337591][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.356016][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.374595][ T5892] usb 8-1: Product: syz
[  312.400242][ T5892] usb 8-1: Manufacturer: syz
[  312.406601][ T5893] usb 1-1: config 0 descriptor??
[  312.415896][ T9429] loop2: detected capacity change from 0 to 256
[  312.432798][ T5892] usb 8-1: SerialNumber: syz
[  312.440260][ T9421] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  312.462550][ T5892] usb 8-1: config 0 descriptor??
[  312.484748][ T5892] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  312.551592][ T5892] usb 8-1: Detected FT232H
[  312.754409][ T5892] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  312.960418][ T5893] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  312.976994][ T9435] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  313.224875][ T9439] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1049'.
[  313.228471][    T9] usb 1-1: USB disconnect, device number 13
[  313.256939][ T5892] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  313.463598][ T9436] fido_id[9436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  313.558299][ T5892] usb 8-1: USB disconnect, device number 10
[  313.596553][ T9441] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  313.720315][ T5892] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  313.758842][ T5892] ftdi_sio 8-1:0.0: device disconnected
[  313.900550][ T9443] loop6: detected capacity change from 0 to 4096
[  313.928075][ T9443] EXT4-fs (loop6): filesystem too large to mount safely on this system
[  314.465894][ T9457] loop2: detected capacity change from 0 to 1024
[  314.475040][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'.
[  314.509659][ T9457] EXT4-fs: Ignoring removed bh option
[  314.548586][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'.
[  314.735034][ T9457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.917906][   T30] audit: type=1800 audit(1747923051.827:628): pid=9457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1055" name="file1" dev="loop2" ino=15 res=0 errno=0
[  315.079968][ T9470] loop5: detected capacity change from 0 to 256
[  315.126539][ T9457] EXT4-fs error (device loop2): mb_free_blocks:1945: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  315.164222][ T9457] EXT4-fs (loop2): Remounting filesystem read-only
[  315.188037][   T30] audit: type=1800 audit(1747923052.097:629): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1060" name="file1" dev="loop5" ino=1048667 res=0 errno=0
[  315.493791][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.796068][ T9481] loop2: detected capacity change from 0 to 512
[  316.040798][ T9481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.059495][ T9481] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.636768][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.430514][ T9507] loop2: detected capacity change from 0 to 4096
[  317.461657][ T9507] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  317.628308][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  317.819864][ T9500] loop6: detected capacity change from 0 to 32768
[  317.866533][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  317.897034][ T9516] loop3: detected capacity change from 0 to 512
[  317.925064][ T5893] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  317.936301][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.954451][ T5893] usb 6-1: Product: syz
[  317.956540][ T9516] ext4: Bad value for 'debug_want_extra_isize'
[  317.960603][ T5893] usb 6-1: Manufacturer: syz
[  317.975048][ T5893] usb 6-1: SerialNumber: syz
[  317.997014][ T9500] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  318.019400][ T5893] usb 6-1: config 0 descriptor??
[  318.368605][ T5893] usb 6-1: USB disconnect, device number 8
[  318.581427][ T7213] ocfs2: Unmounting device (7,6) on (node local)
[  319.088230][ T9511] loop7: detected capacity change from 0 to 32768
[  319.106843][ T9529] loop2: detected capacity change from 0 to 4096
[  319.185080][ T9511] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  319.439903][ T9511] XFS (loop7): Ending clean mount
[  319.778267][   T30] audit: type=1800 audit(1747923056.687:630): pid=9545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1077" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  320.108248][ T7264] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  320.169725][ T9523] loop3: detected capacity change from 0 to 32768
[  320.270976][ T9523] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  320.354407][ T9554] loop6: detected capacity change from 0 to 512
[  320.409311][ T9523] (syz.3.1081,9523,0):ocfs2_clear_journal_error:1146 ERROR: File system error -318767104 recorded in journal 0.
[  320.504747][ T9523] (syz.3.1081,9523,1):ocfs2_clear_journal_error:1148 ERROR: File system on device loop3 needs checking.
[  320.524953][ T9554] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  320.589741][ T9523] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  320.627363][ T9554] EXT4-fs (loop6): invalid journal inode
[  320.694110][ T9554] EXT4-fs (loop6): can't get journal size
[  320.867228][ T9554] EXT4-fs (loop6): 1 truncate cleaned up
[  320.954055][ T9554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.343137][ T9568] block nbd0: shutting down sockets
[  321.399618][ T7213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.547074][ T5843] ocfs2: Unmounting device (7,3) on (node local)
[  321.598508][ T9551] loop5: detected capacity change from 0 to 32768
[  321.644366][ T9570] loop7: detected capacity change from 0 to 1024
[  321.733136][ T9551] JBD2: Ignoring recovery information on journal
[  321.878175][   T30] audit: type=1800 audit(1747923058.787:631): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1095" name=8FC3A1 dev="loop7" ino=26 res=0 errno=0
[  322.040131][ T9577] loop2: detected capacity change from 0 to 512
[  322.051446][ T9551] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  322.113139][   T54] hfsplus: b-tree write err: -5, ino 4
[  322.222871][ T9577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.312679][ T9577] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  322.450629][ T9577] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.1098: corrupted inode contents
[  322.600070][ T9577] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.1098: mark_inode_dirty error
[  322.674323][ T9577] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.1098: corrupted inode contents
[  322.726085][ T9577] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1098: mark_inode_dirty error
[  322.763885][ T5841] ocfs2: Unmounting device (7,5) on (node local)
[  322.894031][ T9577] EXT4-fs error (device loop2): ext4_get_first_dir_block:3538: inode #18: comm syz.2.1098: directory missing '.'
[  323.233453][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.349074][ T9627] loop7: detected capacity change from 0 to 256
[  324.378131][ T9627] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  324.420585][ T9595] loop6: detected capacity change from 0 to 32768
[  324.434788][ T9627] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  324.533171][   T30] audit: type=1800 audit(1747923061.447:632): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1105" name="file1" dev="loop6" ino=7 res=0 errno=0
[  324.568469][ T9627] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  324.708231][ T9634] netlink: 'syz.0.1117': attribute type 4 has an invalid length.
[  324.979409][ T9639] pim6reg1: entered allmulticast mode
[  326.812485][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  326.822081][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  326.988031][ T9678] tun0: tun_chr_ioctl cmd 1074025675
[  327.018657][ T9675] loop6: detected capacity change from 0 to 32768
[  327.051439][ T9678] tun0: persist enabled
[  327.096701][ T9680] tun0: tun_chr_ioctl cmd 1074025675
[  327.108373][ T9680] tun0: persist enabled
[  327.270112][ T9675] bcachefs (da081363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  327.305181][ T9675] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names
[  327.305181][ T9675]   allowing incompatible features above 0.0: (unknown version)
[  327.335277][ T9675] bcachefs (loop6): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 0 crc: c_size 2 size 1 offset 0 nonce 0 csum none 0:0  compress none
[  327.335345][ T9675]   invalid key type for btree extents (btree_ptr_v2), deleting
[  327.370359][ T9675] bcachefs (loop6): invalid bkey in superblock btree=snapshots level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0
[  327.370408][ T9675]   invalid key type for btree snapshots (btree_ptr_v2), deleting
[  327.398170][ T9675] bcachefs (loop6): recovering from clean shutdown, journal seq 10
[  327.406783][ T9675] bcachefs (loop6): Version upgrade required:
[  327.406783][ T9675] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  327.406783][ T9675] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  327.406783][ T9675]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  327.531344][ T9675] bcachefs (loop6): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:0:3 len 0 ver 0: 
[  327.531399][ T9675]     gen 0 oldest_gen 0 data_type sb
[  327.531426][ T9675]     journal_seq_nonempty 1
[  327.531443][ T9675]     journal_seq_empty    0
[  327.531461][ T9675]     need_discard         1
[  327.531478][ T9675]     need_inc_gen         1
[  327.531496][ T9675]     dirty_sectors        256
[  327.531513][ T9675]     stripe_sectors       0
[  327.531530][ T9675]     cached_sectors       0
[  327.531547][ T9675]     stripe               0
[  327.531565][ T9675]     stripe_redundancy    0
[  327.531581][ T9675]     io_time[READ]        1
[  327.531598][ T9675]     io_time[WRITE]       1
[  327.531615][ T9675]     fragmentation     0
[  327.531632][ T9675]     bp_start          8
[  327.531649][ T9675]   
[  327.531663][ T9675]   nonzero snapshot, deleting
[  327.621275][ T9675] bcachefs (loop6): flagging btree alloc lost data
[  327.628686][ T9675] bcachefs (loop6): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  327.645349][ T9675] bcachefs (loop6): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  327.669357][ T9675] bcachefs (loop6): bcachefs (loop6): error validating btree node at btree backpointers level 0/0
[  327.669393][ T9675]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  327.669432][ T9675]   node offset 8/24 bset u64s 42 bset byte offset 208: keys out of order: u64s 9 type backpointer 0:8126464:0 len 0 ver 0 > u64s 9 type backpointer 0:589824:0 len 0 ver 0, fixing
[  327.713067][ T9675] bcachefs (loop6): btree_node_read_work: rewriting btree node at due to error
[  327.713067][ T9675]   btree=backpointers level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  327.741201][ T9675] bcachefs (loop6): check_topology... done
[  327.747998][ T9675] bcachefs (loop6): accounting_read... done
[  327.804295][ T9675] bcachefs (loop6): alloc_read... done
[  327.810213][ T9675] bcachefs (loop6): snapshots_read... done
[  327.816574][ T9675] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean
[  327.826576][ T9675] bcachefs (loop6): done starting filesystem
[  328.156283][ T7213] bcachefs (loop6): shutting down
[  328.355300][ T5892] kernel write not supported for file /snd/pcmC0D0p (pid: 5892 comm: kworker/1:3)
[  328.363613][ T7213] bcachefs (loop6): shutdown complete
[  328.422906][ T9650] loop2: detected capacity change from 0 to 32768
[  328.627066][ T9650] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  328.726675][ T9650] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR
[  328.742287][ T9650] XFS (loop2): log mount failed
[  329.470402][ T9714] block nbd5: shutting down sockets
[  331.018344][ T9735] loop3: detected capacity change from 0 to 32768
[  331.205911][ T9735] bcachefs (da081363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  331.241760][ T9735] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names
[  331.241760][ T9735]   allowing incompatible features above 0.0: (unknown version)
[  331.270446][ T9735] bcachefs (loop3): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 0 crc: c_size 2 size 1 offset 0 nonce 0 csum none 0:0  compress none
[  331.270498][ T9735]   invalid key type for btree extents (btree_ptr_v2), deleting
[  331.303352][ T9735] bcachefs (loop3): invalid bkey in superblock btree=snapshots level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0
[  331.303400][ T9735]   invalid key type for btree snapshots (btree_ptr_v2), deleting
[  331.331685][ T9735] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  331.340116][ T9735] bcachefs (loop3): Version upgrade required:
[  331.340116][ T9735] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  331.340116][ T9735] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  331.340116][ T9735]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  331.444921][ T9735] bcachefs (loop3): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:0:3 len 0 ver 0: 
[  331.444958][ T9735]     gen 0 oldest_gen 0 data_type sb
[  331.444976][ T9735]     journal_seq_nonempty 1
[  331.444992][ T9735]     journal_seq_empty    0
[  331.445008][ T9735]     need_discard         1
[  331.445026][ T9735]     need_inc_gen         1
[  331.445042][ T9735]     dirty_sectors        256
[  331.445060][ T9735]     stripe_sectors       0
[  331.445076][ T9735]     cached_sectors       0
[  331.445092][ T9735]     stripe               0
[  331.445109][ T9735]     stripe_redundancy    0
[  331.445126][ T9735]     io_time[READ]        1
[  331.445143][ T9735]     io_time[WRITE]       1
[  331.445159][ T9735]     fragmentation     0
[  331.445176][ T9735]     bp_start          8
[  331.445192][ T9735]   
[  331.445206][ T9735]   nonzero snapshot, deleting
[  331.533386][ T9735] bcachefs (loop3): flagging btree alloc lost data
[  331.536957][ T9744] loop7: detected capacity change from 0 to 2048
[  331.540053][ T9735] bcachefs (loop3): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  331.558685][ T9735] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  331.590189][ T9735] bcachefs (loop3): bcachefs (loop3): error validating btree node at btree backpointers level 0/0
[  331.590224][ T9735]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  331.590255][ T9735]   node offset 8/24 bset u64s 42 bset byte offset 208: keys out of order: u64s 9 type backpointer 0:8126464:0 len 0 ver 0 > u64s 9 type backpointer 0:589824:0 len 0 ver 0, fixing
[  331.634102][ T9735] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error
[  331.634102][ T9735]   btree=backpointers level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  331.662669][ T9735] bcachefs (loop3): check_topology... done
[  331.669327][ T9735] bcachefs (loop3): accounting_read...
[  331.704066][ T9744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.719100][ T9735]  done
[  331.721933][ T9735] bcachefs (loop3): alloc_read... done
[  331.727497][ T9735] bcachefs (loop3): snapshots_read... done
[  331.734730][ T9735] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  331.744729][ T9735] bcachefs (loop3): done starting filesystem
[  332.037691][ T9754] loop5: detected capacity change from 0 to 1024
[  332.048359][ T5843] bcachefs (loop3): shutting down
[  332.326796][   T30] audit: type=1800 audit(1747923069.237:633): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1158" name=8FC3A1 dev="loop5" ino=26 res=0 errno=0
[  332.631518][ T2960] hfsplus: b-tree write err: -5, ino 4
[  332.706388][ T5843] bcachefs (loop3): shutdown complete
[  333.039707][ T9771] pim6reg1: entered allmulticast mode
[  333.391709][ T9777] loop6: detected capacity change from 0 to 512
[  333.445754][ T9777] ext4: Bad value for 'debug_want_extra_isize'
[  333.504088][ T9773] loop7: detected capacity change from 0 to 4096
[  333.689345][ T9773] ntfs3(loop7): ino=1a, mi_enum_attr
[  333.698770][ T9773] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  334.066036][ T9784] loop6: detected capacity change from 0 to 512
[  334.130347][ T9784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  334.288236][ T9784] EXT4-fs (loop6): 1 truncate cleaned up
[  334.297031][ T9784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.663308][ T7213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.898795][ T9796] macsec0: entered promiscuous mode
[  334.924224][ T9798] loop7: detected capacity change from 0 to 2048
[  334.951830][ T9796] macsec1: entered promiscuous mode
[  334.966557][ T9802] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  334.972346][ T9796] macsec1: entered allmulticast mode
[  334.984505][ T9798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  335.017611][ T9796] macsec0: entered allmulticast mode
[  335.030308][ T9796] veth1_macvtap: entered allmulticast mode
[  335.080462][   T30] audit: type=1800 audit(1747923071.987:634): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1179" name="file1" dev="loop7" ino=1335 res=0 errno=0
[  335.148825][ T9796] macsec0: left allmulticast mode
[  335.153963][ T9796] veth1_macvtap: left allmulticast mode
[  336.978656][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  336.989118][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  337.403308][ T9842] netlink: 'syz.3.1159': attribute type 4 has an invalid length.
[  337.750942][ T9848] loop2: detected capacity change from 0 to 512
[  337.822999][ T9848] EXT4-fs (loop2): Test dummy encryption mode enabled
[  337.837845][ T9848] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  337.938606][ T9847] loop7: detected capacity change from 0 to 2048
[  337.964020][ T9848] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1195: bad orphan inode 131083
[  338.082524][ T9847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.096007][ T9848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.162276][ T9847] EXT4-fs (loop7): shut down requested (1)
[  338.268788][ T9858] loop3: detected capacity change from 0 to 256
[  338.389537][ T9858] exfat: Deprecated parameter 'utf8'
[  338.395006][ T9858] exfat: Deprecated parameter 'utf8'
[  338.458426][ T9858] exfat: Deprecated parameter 'namecase'
[  338.477085][ T7264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.575065][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.592458][ T9858] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  339.186699][ T5895] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  339.245889][ T5196] udevd[5196]: worker [6052] terminated by signal 33 (Unknown signal 33)
[  339.264297][ T5196] udevd[5196]: worker [6052] failed while handling '/devices/virtual/block/loop2'
[  339.274859][ T9869] mmap: syz.3.1202 (9869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  339.417938][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  339.438355][ T5895] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  339.468098][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.511279][ T5895] usb 8-1: config 0 descriptor??
[  339.533143][ T9865] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  340.036485][ T5895] elan 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0
[  340.103602][ T9880] loop3: detected capacity change from 0 to 512
[  340.138655][ T9880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  340.287294][ T9880] EXT4-fs (loop3): 1 truncate cleaned up
[  340.335760][ T9880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.407128][ T5895] usb 8-1: USB disconnect, device number 11
[  340.454466][   T30] audit: type=1800 audit(1747923077.347:635): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1207" name="file1" dev="loop3" ino=15 res=0 errno=0
[  340.673040][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.715913][ T9890] program syz.6.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  340.828840][ T5893] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  341.048655][ T5893] usb 6-1: Using ep0 maxpacket: 8
[  341.084572][ T5893] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54
[  341.127100][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.167930][ T5893] usb 6-1: Product: syz
[  341.172293][ T5893] usb 6-1: Manufacturer: syz
[  341.213666][ T5893] usb 6-1: SerialNumber: syz
[  341.235845][ T5893] usb 6-1: config 0 descriptor??
[  341.268436][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  341.302703][ T5893] usb 6-1: invalid MIDI EP
[  341.314792][ T5893] usb 6-1: snd-bcd2000: error during probing
[  341.329528][ T5893] snd-bcd2000 6-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  341.432340][ T5896] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  341.449140][ T5896] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  341.477872][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  341.508068][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.546142][ T5893] usb 6-1: USB disconnect, device number 9
[  341.555336][ T9897] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  341.612293][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  341.834273][ T5896] usb 4-1: USB disconnect, device number 9
[  341.977511][ T5893] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  342.033741][ T5893] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  342.177913][ T1201] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  342.368491][ T1201] usb 8-1: config 0 has no interfaces?
[  342.415057][ T1201] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0
[  342.449144][ T1201] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.502596][ T1201] usb 8-1: Product: syz
[  342.506901][ T1201] usb 8-1: Manufacturer: syz
[  342.532111][ T1201] usb 8-1: SerialNumber: syz
[  342.558757][ T1201] usb 8-1: config 0 descriptor??
[  342.697281][ T9923] loop6: detected capacity change from 0 to 2048
[  342.830147][ T9923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.843014][ T5896] usb 8-1: USB disconnect, device number 12
[  343.286051][ T7213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.441007][ T9930] loop5: detected capacity change from 0 to 4096
[  343.540540][ T9930] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  343.811115][ T9930] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  343.905019][ T9916] loop2: detected capacity change from 0 to 32768
[  344.264145][ T9916] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  344.492600][ T9953] loop3: detected capacity change from 0 to 4096
[  344.540088][ T9953] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  344.628173][ T9916] XFS (loop2): Ending clean mount
[  344.741208][ T9953] ntfs3(loop3): ino=0, attr_set_size
[  344.799336][ T9953] ntfs3(loop3): ino=0, attr_set_size
[  344.850732][ T9953] ntfs3(loop3): ino=0, attr_set_size
[  344.927753][ T9966] ntfs3(loop3): no free space to extend mft
[  345.165806][ T9969] input: syz1 as /devices/virtual/input/input30
[  345.309144][ T9973] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1238'.
[  345.476214][ T5832] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  346.240760][ T9991] smc: net device bond0 applied user defined pnetid SYZ2
[  346.659346][ T9999] netlink: 'syz.7.1246': attribute type 1 has an invalid length.
[  346.667171][ T9999] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.1246'.
[  347.078148][ T5895] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  347.268262][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  347.303403][ T5895] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  347.355023][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.400056][ T5895] usb 4-1: config 0 descriptor??
[  347.589447][T10025] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  347.615926][T10017] loop6: detected capacity change from 0 to 4096
[  347.673037][ T5895] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  347.715444][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  347.755614][ T1201] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  347.771450][ T5895] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  347.808661][ T5895] usb 4-1: media controller created
[  347.861039][T10017] ntfs3(loop6): ino=1a, mi_enum_attr
[  347.866447][T10017] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  347.968074][ T1201] usb 3-1: Using ep0 maxpacket: 16
[  347.971980][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  348.018386][ T1201] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  348.058653][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  348.116904][ T1201] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  348.150853][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.186771][ T1201] usb 3-1: Product: syz
[  348.201433][ T1201] usb 3-1: Manufacturer: syz
[  348.207092][ T1201] usb 3-1: SerialNumber: syz
[  348.245776][ T1201] usb 3-1: config 0 descriptor??
[  348.336262][ T1201] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  348.349171][ T5895] az6027: usb out operation failed. (-71)
[  348.355628][ T1201] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  348.375591][ T5895] stb0899_attach: Driver disabled by Kconfig
[  348.402225][ T5895] az6027: no front-end attached
[  348.402225][ T5895] 
[  348.438029][ T5895] az6027: usb out operation failed. (-71)
[  348.485008][ T5895] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  348.548269][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31
[  348.632593][ T5895] dvb-usb: schedule remote query interval to 400 msecs.
[  348.664636][ T5895] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  348.733717][ T5895] usb 4-1: USB disconnect, device number 10
[  348.906221][ T1201] em28xx 3-1:0.0: unknown em28xx chip ID (86)
[  349.066370][T10054] 9pnet_fd: Insufficient options for proto=fd
[  349.107316][ T1201] em28xx 3-1:0.0: Config register raw data: 0xbb
[  349.107357][ T1201] em28xx 3-1:0.0: I2S Audio (5 sample rate(s))
[  349.107386][ T1201] em28xx 3-1:0.0: No AC97 audio processor
[  349.131809][ T5895] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  349.322859][ T1201] usb 3-1: USB disconnect, device number 15
[  350.578613][ T1201] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  350.768095][ T1201] usb 7-1: Using ep0 maxpacket: 16
[  350.809826][ T1201] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  350.854376][ T1201] usb 7-1: config 0 has no interface number 0
[  350.871959][ T1201] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  350.913185][ T1201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.958224][ T1201] usb 7-1: Product: syz
[  350.972744][ T1201] usb 7-1: Manufacturer: syz
[  350.997960][ T1201] usb 7-1: SerialNumber: syz
[  351.042102][ T1201] usb 7-1: config 0 descriptor??
[  351.074712][T10096] loop7: detected capacity change from 0 to 4096
[  351.094797][ T1201] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  351.112015][T10104] loop5: detected capacity change from 0 to 256
[  351.168549][ T5895] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  351.367062][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  351.402924][ T5895] usb 4-1: config 1 has no interface number 0
[  351.447325][ T5895] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.498157][ T5895] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  351.538027][ T5895] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 21905, setting to 64
[  351.598357][ T5895] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  351.639887][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.687477][ T5895] usb 4-1: Product: syz
[  351.702937][ T5895] usb 4-1: Manufacturer: syz
[  351.724994][ T5895] usb 4-1: SerialNumber: syz
[  351.864629][ T1201] gspca_spca1528: reg_w err -71
[  351.915128][ T1201] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  351.959597][ T1201] usb 7-1: USB disconnect, device number 5
[  352.614040][ T5895] cdc_ncm 4-1:1.1: bind() failure
[  352.931473][ T5896] usb 4-1: USB disconnect, device number 11
[  353.125029][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1297'.
[  353.269008][T10136] loop5: detected capacity change from 0 to 1775
[  353.298339][T10140] loop5: detected capacity change from 1775 to 1911
[  353.300002][T10138] /dev/nullb0: Can't open blockdev
[  353.419506][T10143] block nbd5: NBD_DISCONNECT
[  353.438994][T10143] block nbd5: Send disconnect failed -22
[  353.500404][T10139] block nbd5: Disconnected due to user request.
[  353.587972][T10139] block nbd5: shutting down sockets
[  354.865152][T10168] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1314'.
[  355.956996][T10193] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  355.983689][T10156] loop3: detected capacity change from 0 to 32768
[  356.030903][T10156] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  356.107655][T10156] (syz.3.1307,10156,1):ocfs2_clear_journal_error:1146 ERROR: File system error -318767104 recorded in journal 0.
[  356.151409][T10156] (syz.3.1307,10156,1):ocfs2_clear_journal_error:1148 ERROR: File system on device loop3 needs checking.
[  356.219586][T10156] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  356.590408][ T5843] ocfs2: Unmounting device (7,3) on (node local)
[  357.018006][ T1201] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  357.158248][   T48] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  357.202366][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.234960][T10223] loop2: detected capacity change from 0 to 512
[  357.244179][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.259743][T10223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  357.278050][ T1201] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  357.318700][ T1201] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  357.326386][   T48] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  357.337861][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.349719][ T1201] usb 4-1: config 0 descriptor??
[  357.429732][T10223] EXT4-fs (loop2): 1 truncate cleaned up
[  357.455576][   T48] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  357.482263][T10223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.515802][   T48] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  357.553639][   T30] audit: type=1800 audit(1747923094.467:636): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1333" name="file1" dev="loop2" ino=15 res=0 errno=0
[  357.571887][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.823703][ T1201] plantronics 0003:047F:FFFF.001C: item 0 4 0 11 parsing failed
[  357.882015][ T1201] plantronics 0003:047F:FFFF.001C: parse failed
[  357.896474][   T48] usb 7-1: usb_control_msg returned -32
[  357.907056][ T1201] plantronics 0003:047F:FFFF.001C: probe with driver plantronics failed with error -22
[  357.927058][   T48] usbtmc 7-1:16.0: can't read capabilities
[  358.013761][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.087540][ T1201] usb 4-1: USB disconnect, device number 12
[  358.089159][ T5895] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  358.137991][ T5896] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  358.308478][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  358.315000][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.323102][ T5895] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  358.346864][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.365354][ T5895] usb 1-1: Product: syz
[  358.370157][ T5895] usb 1-1: Manufacturer: syz
[  358.371736][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.375016][ T5895] usb 1-1: SerialNumber: syz
[  358.406837][ T5896] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  358.428337][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.434005][ T5895] usb 1-1: config 0 descriptor??
[  358.451277][ T5896] usb 6-1: config 0 descriptor??
[  358.621448][   T48] usb 7-1: USB disconnect, device number 6
[  358.921443][ T5895] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  358.947552][ T5896] hid-led 0003:0FC5:B080.001D: unknown main item tag 0x0
[  358.988424][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  359.011104][ T5895] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  359.024377][ T5895] usb 1-1: media controller created
[  359.077391][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  359.131735][T10231] dtv5100: wlen = 0, aborting.
[  359.223181][ T5895] zl10353_read_register: readreg error (reg=127, ret==0)
[  359.245636][ T5895] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  359.277474][ T5895] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  359.342368][ T5895] usb 1-1: USB disconnect, device number 14
[  359.350302][ T5896] hid-led 0003:0FC5:B080.001D: hidraw0: USB HID v0.00 Device [HID 0fc5:b080] on usb-dummy_hcd.5-1/input0
[  359.513334][ T5896] hid-led 0003:0FC5:B080.001D: Delcom Visual Signal Indicator G2 initialized
[  359.595658][ T5896] usb 6-1: USB disconnect, device number 10
[  359.645520][ T5895] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  359.828351][T10257] fido_id[10257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  359.942324][T10259] loop6: detected capacity change from 0 to 4096
[  359.982642][T10259] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  360.261405][T10259] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  360.476109][T10275] loop3: detected capacity change from 0 to 256
[  360.668133][ T5895] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  360.695262][T10279] loop2: detected capacity change from 0 to 512
[  360.858249][ T5895] usb 8-1: Using ep0 maxpacket: 16
[  360.914169][T10279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.939167][ T5895] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.988024][T10284] xt_hashlimit: size too large, truncated to 1048576
[  361.028944][ T5895] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.029208][T10279] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  361.080058][ T5895] usb 8-1: config 0 interface 0 has no altsetting 0
[  361.086789][ T5895] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  361.176903][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.223804][ T5895] usb 8-1: config 0 descriptor??
[  361.583592][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.696948][ T5895] hid (null): report_id 11059 is invalid
[  361.710817][ T5895] hid (null): unknown global tag 0xfa
[  361.741649][ T5895] cougar 0003:060B:500A.001E: usage count exceeds max: fixing up report descriptor
[  361.780529][ T5895] cougar 0003:060B:500A.001E: unexpected long global item
[  361.817503][ T5895] cougar 0003:060B:500A.001E: parse failed
[  361.856847][ T5895] cougar 0003:060B:500A.001E: probe with driver cougar failed with error -22
[  361.935969][ T5895] usb 8-1: USB disconnect, device number 13
[  362.946232][T10322] netlink: 54 bytes leftover after parsing attributes in process `syz.5.1374'.
[  363.135628][T10324] loop2: detected capacity change from 0 to 1024
[  363.184856][T10324] EXT4-fs: Ignoring removed orlov option
[  363.235685][T10324] EXT4-fs: Ignoring removed nomblk_io_submit option
[  363.339977][T10324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.833024][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.341990][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1387'.
[  365.375262][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1395'.
[  365.418339][T10377] netlink: 'syz.2.1395': attribute type 7 has an invalid length.
[  365.444326][T10377] netlink: 'syz.2.1395': attribute type 8 has an invalid length.
[  365.468741][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'.
[  365.641815][T10382] vlan2: entered allmulticast mode
[  365.647658][T10382] gretap0: entered allmulticast mode
[  365.682220][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1399'.
[  366.174449][T10399] loop3: detected capacity change from 0 to 2048
[  366.287656][T10399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  366.318658][ T5892] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  366.390562][   T30] audit: type=1800 audit(1747923103.307:637): pid=10399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1404" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  366.447608][   T30] audit: type=1326 audit(1747923103.317:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.0.1407" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc41a98e969 code=0x0
[  366.516193][ T5892] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  366.548971][ T5892] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  366.698144][ T5892] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  366.707872][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.742744][T10398] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  366.767304][ T5892] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  367.119406][ T5892] usb 7-1: USB disconnect, device number 7
[  367.715002][T10431] loop7: detected capacity change from 0 to 256
[  367.777030][T10431] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  367.818042][T10431] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  367.898007][ T1201] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  367.906022][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  367.940548][T10431] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  368.112764][ T5893] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  368.137899][ T1201] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.158057][ T5893] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  368.177358][ T1201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  368.199640][ T5893] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  368.213004][ T1201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  368.230320][ T5893] usb 3-1: config 220 has no interface number 2
[  368.257117][ T1201] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  368.271225][ T5893] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0xD has invalid maxpacket 16
[  368.297878][ T5893] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  368.318358][ T1201] usb 1-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00
[  368.348128][ T1201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.357846][ T5893] usb 3-1: config 220 interface 0 has no altsetting 0
[  368.376049][ T5893] usb 3-1: config 220 interface 76 has no altsetting 0
[  368.391824][ T1201] usb 1-1: config 0 descriptor??
[  368.398452][ T5893] usb 3-1: config 220 interface 1 has no altsetting 0
[  368.437589][ T1201] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  368.457955][ T5893] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  368.469477][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.477572][ T5893] usb 3-1: Product: syz
[  368.492468][ T1201] usb 1-1: MIDIStreaming interface descriptor not found
[  368.523379][ T5893] usb 3-1: Manufacturer: syz
[  368.547837][ T5893] usb 3-1: SerialNumber: syz
[  368.765673][ T1201] usb 1-1: USB disconnect, device number 15
[  368.946530][ T5893] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  368.987445][ T5893] usb 3-1: No valid video chain found.
[  369.006680][ T5893] usb 3-1: selecting invalid altsetting 0
[  369.099611][ T5893] usb 3-1: selecting invalid altsetting 0
[  369.139233][ T5893] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  369.222630][T10444] macsec0: entered promiscuous mode
[  369.228418][ T5893] usb 3-1: USB disconnect, device number 16
[  369.254664][T10444] macsec1: entered promiscuous mode
[  369.291814][T10444] macsec1: entered allmulticast mode
[  369.305765][T10444] macsec0: entered allmulticast mode
[  369.327065][T10444] veth1_macvtap: entered allmulticast mode
[  369.388644][T10444] macsec0: left allmulticast mode
[  369.393797][T10444] veth1_macvtap: left allmulticast mode
[  369.583618][ T5893] kernel write not supported for file /snd/pcmC0D0p (pid: 5893 comm: kworker/0:3)
[  369.702591][T10433] loop5: detected capacity change from 0 to 32768
[  369.740352][T10433] XFS: ikeep mount option is deprecated.
[  369.778153][T10433] XFS: noikeep mount option is deprecated.
[  369.823415][ T5893] IPVS: starting estimator thread 0...
[  369.838463][T10453] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  369.890865][T10433] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  370.000273][T10456] IPVS: using max 27 ests per chain, 64800 per kthread
[  370.107739][T10433] XFS (loop5): Ending clean mount
[  370.166197][T10433] XFS (loop5): Quotacheck needed: Please wait.
[  370.321027][T10473] smc: net device bond0 erased user defined pnetid SYZ2
[  370.420560][T10433] XFS (loop5): Quotacheck: Done.
[  370.690503][ T5841] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  370.725379][T10483] program syz.0.1439 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  370.861052][T10486] loop7: detected capacity change from 0 to 256
[  371.867252][T10503] macsec0: entered promiscuous mode
[  371.882789][T10476] loop2: detected capacity change from 0 to 32768
[  371.894608][T10503] macsec1: entered promiscuous mode
[  371.928194][T10503] macsec1: entered allmulticast mode
[  371.933587][T10503] macsec0: entered allmulticast mode
[  371.945254][T10476] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  371.983271][T10503] veth1_macvtap: entered allmulticast mode
[  372.029741][T10476] (syz.2.1435,10476,0):ocfs2_clear_journal_error:1146 ERROR: File system error -318767104 recorded in journal 0.
[  372.042951][T10503] macsec0: left allmulticast mode
[  372.049062][T10503] veth1_macvtap: left allmulticast mode
[  372.109464][T10476] (syz.2.1435,10476,1):ocfs2_clear_journal_error:1148 ERROR: File system on device loop2 needs checking.
[  372.164505][T10476] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  372.478766][ T5895] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  372.493446][T10515] vivid-000: disconnect
[  372.523600][T10514] vivid-000: reconnect
[  372.707944][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  372.727862][ T5895] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  372.771831][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.784894][T10519] loop7: detected capacity change from 0 to 1024
[  372.811569][ T5895] usb 6-1: config 0 descriptor??
[  372.839216][T10513] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  372.881458][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  372.883572][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  372.925285][T10519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.969147][ T5832] ocfs2: Unmounting device (7,2) on (node local)
[  372.978043][ T1201] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  373.238598][ T1201] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  373.318177][ T1201] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  373.349964][ T5895] elan 0003:04F3:0755.001F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  373.366268][ T1201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.435666][ T1201] usb 7-1: config 0 descriptor??
[  373.445993][ T7264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.488286][T10521] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  373.604074][ T5895] usb 6-1: USB disconnect, device number 11
[  373.771065][T10530] fido_id[10530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  374.063890][ T1201] elan 0003:04F3:0755.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0
[  374.158421][T10539] netlink: 'syz.2.1454': attribute type 4 has an invalid length.
[  374.381800][   T30] audit: type=1326 audit(1747923111.267:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd27d2ab39 code=0x7ffc0000
[  374.417391][T10545] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  374.551786][ T5895] usb 7-1: USB disconnect, device number 8
[  374.609693][T10542] fido_id[10542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  374.623160][   T30] audit: type=1326 audit(1747923111.267:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8e969 code=0x7ffc0000
[  374.769377][   T30] audit: type=1326 audit(1747923111.267:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd27d2ab39 code=0x7ffc0000
[  374.937892][   T30] audit: type=1326 audit(1747923111.267:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd27d2ab39 code=0x7ffc0000
[  375.118178][   T30] audit: type=1326 audit(1747923111.267:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8e969 code=0x7ffc0000
[  375.321601][T10559] macsec0: entered promiscuous mode
[  375.357027][   T30] audit: type=1326 audit(1747923111.317:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd27d2ab39 code=0x7ffc0000
[  375.398107][T10559] macsec1: entered promiscuous mode
[  375.454733][T10559] macsec1: entered allmulticast mode
[  375.495816][   T30] audit: type=1326 audit(1747923111.317:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8e969 code=0x7ffc0000
[  375.515530][T10559] macsec0: entered allmulticast mode
[  375.546050][T10559] veth1_macvtap: entered allmulticast mode
[  375.649990][T10559] macsec0: left allmulticast mode
[  375.664148][T10559] veth1_macvtap: left allmulticast mode
[  375.707971][   T30] audit: type=1326 audit(1747923111.317:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8e969 code=0x7ffc0000
[  375.755260][   T30] audit: type=1326 audit(1747923111.317:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd27d2ab39 code=0x7ffc0000
[  375.798344][   T30] audit: type=1326 audit(1747923111.317:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.7.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd27d8e969 code=0x7ffc0000
[  375.907946][ T1201] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  376.068199][ T1201] usb 4-1: Using ep0 maxpacket: 16
[  376.084805][ T1201] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  376.139278][ T1201] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  376.169877][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.223782][ T1201] usb 4-1: config 0 descriptor??
[  376.284907][ T1201] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32
[  376.538401][ T5181] bcm5974 4-1:0.0: could not read from device
[  376.618541][T10575] loop5: detected capacity change from 0 to 512
[  376.661413][ T1201] bcm5974 4-1:0.0: could not read from device
[  376.708924][T10575] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  376.778261][ T1201] input: failed to attach handler mousedev to device input32, error: -5
[  376.802612][ T5181] bcm5974 4-1:0.0: could not read from device
[  376.810678][ T1201] usb 4-1: USB disconnect, device number 13
[  376.840306][T10575] EXT4-fs (loop5): 1 truncate cleaned up
[  376.940516][T10575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.255299][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.718812][T10592] loop2: detected capacity change from 0 to 1
[  377.758677][T10592] Dev loop2: unable to read RDB block 1
[  377.782075][T10592]  loop2: unable to read partition table
[  377.808313][T10592] loop2: partition table beyond EOD, truncated
[  377.831131][T10594] loop7: detected capacity change from 0 to 256
[  377.864070][T10592] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  378.473646][T10603] loop5: detected capacity change from 0 to 575
[  378.544177][T10605] loop5: detected capacity change from 575 to 1207
[  378.898513][ T1201] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  379.179930][ T1201] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.207914][ T1201] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.245930][ T1201] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  379.323313][ T1201] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  379.363064][ T1201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.409252][ T1201] usb 8-1: config 0 descriptor??
[  379.558549][ T5895] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  379.742468][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  379.756686][ T5895] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  379.797119][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.868140][ T5895] usb 6-1: config 0 descriptor??
[  379.931482][ T5895] gspca_main: sonixj-2.14.0 probing 0471:0327
[  379.942018][ T1201] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  379.995767][ T1201] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving
[  380.063289][ T1201] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  380.193830][ T1201] usb 8-1: USB disconnect, device number 14
[  380.520012][T10626] fido_id[10626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  381.004503][ T5895] usb 6-1: USB disconnect, device number 12
[  381.338136][T10646] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  381.708896][T10649] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1504'.
[  382.026483][T10657] loop5: detected capacity change from 0 to 512
[  382.113985][T10657] /dev/loop5: Can't open blockdev
[  382.359130][T10664] loop2: detected capacity change from 0 to 2048
[  382.505335][T10664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.583067][   T30] kauditd_printk_skb: 97 callbacks suppressed
[  382.583092][   T30] audit: type=1326 audit(1747923119.497:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7ffc0000
[  382.607247][T10673] loop6: detected capacity change from 0 to 256
[  382.663832][T10664] EXT4-fs (loop2): shut down requested (0)
[  382.751731][   T30] audit: type=1326 audit(1747923119.537:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f016678e969 code=0x7ffc0000
[  382.893989][T10641] loop7: detected capacity change from 0 to 32768
[  382.901217][   T30] audit: type=1326 audit(1747923119.537:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.5.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016678e969 code=0x7ffc0000
[  383.048033][   T30] audit: type=1800 audit(1747923119.567:749): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1510" name="bus" dev="loop2" ino=18 res=0 errno=0
[  383.108180][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.154328][T10641] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  383.294863][T10641] (syz.7.1500,10641,0):ocfs2_clear_journal_error:1146 ERROR: File system error -318767104 recorded in journal 0.
[  383.358105][T10641] (syz.7.1500,10641,1):ocfs2_clear_journal_error:1148 ERROR: File system on device loop7 needs checking.
[  383.469278][T10641] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  383.582288][   T30] audit: type=1326 audit(1747923120.497:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41a98e969 code=0x7ffc0000
[  383.663860][   T30] audit: type=1326 audit(1747923120.507:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc41a98e969 code=0x7ffc0000
[  383.718013][   T30] audit: type=1326 audit(1747923120.507:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41a98e969 code=0x7ffc0000
[  383.776415][   T30] audit: type=1326 audit(1747923120.507:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41a98e969 code=0x7ffc0000
[  383.808843][ T5893] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  383.823546][   T30] audit: type=1326 audit(1747923120.507:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41a98e969 code=0x7ffc0000
[  383.849253][   T30] audit: type=1326 audit(1747923120.507:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc41a98e969 code=0x7ffc0000
[  383.858028][ T1201] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  383.926781][ T7264] ocfs2: Unmounting device (7,7) on (node local)
[  383.973630][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  384.013342][ T5893] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  384.031595][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.058992][ T1201] usb 7-1: Using ep0 maxpacket: 16
[  384.071070][ T1201] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  384.090641][ T5893] usb 3-1: Product: syz
[  384.129114][ T5893] usb 3-1: Manufacturer: syz
[  384.135723][ T5893] usb 3-1: SerialNumber: syz
[  384.141190][ T1201] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  384.170802][ T5893] usb 3-1: config 0 descriptor??
[  384.177252][ T1201] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.222966][ T1201] usb 7-1: config 0 descriptor??
[  384.269374][ T1201] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input33
[  384.521745][ T5181] bcm5974 7-1:0.0: could not read from device
[  384.597207][ T1201] bcm5974 7-1:0.0: could not read from device
[  384.622724][ T5893] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  384.649974][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  384.669337][ T5181] bcm5974 7-1:0.0: could not read from device
[  384.708545][ T5893] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  384.716593][ T5893] usb 3-1: media controller created
[  384.790616][ T1201] input: failed to attach handler mousedev to device input33, error: -5
[  384.842620][T10684] dtv5100: wlen = 0, aborting.
[  384.878304][ T5181] bcm5974 7-1:0.0: could not read from device
[  384.906517][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  384.978041][ T1201] usb 7-1: USB disconnect, device number 9
[  385.118085][ T5893] zl10353_read_register: readreg error (reg=127, ret==0)
[  385.125274][ T5893] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  385.187865][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  385.215757][T10706] loop5: detected capacity change from 0 to 512
[  385.239959][ T5893] usb 3-1: USB disconnect, device number 17
[  385.309454][T10708] loop3: detected capacity change from 0 to 512
[  385.373681][T10708] EXT4-fs (loop3): Test dummy encryption mode enabled
[  385.401276][T10708] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  385.445520][ T5893] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  385.472429][T10708] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1525: bad orphan inode 131083
[  385.528946][T10706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.609082][T10708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.650165][T10706] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  386.041979][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.155254][T10728] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  386.215596][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.470250][T10733] smc: net device bond0 applied user defined pnetid SYZ2
[  387.709440][T10727] loop2: detected capacity change from 0 to 32768
[  387.769446][T10754] loop3: detected capacity change from 0 to 256
[  387.781975][T10756] loop7: detected capacity change from 0 to 256
[  387.789807][T10756] exfat: Deprecated parameter 'utf8'
[  387.795259][T10756] exfat: Deprecated parameter 'utf8'
[  387.803258][T10756] exfat: Deprecated parameter 'namecase'
[  387.811225][T10727] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  387.820306][T10756] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  387.857913][   T48] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  387.860120][T10754] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  387.916490][T10754] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  388.026987][T10754] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  388.055090][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  388.108304][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.155073][T10727] XFS (loop2): Ending clean mount
[  388.183774][   T48] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  388.245903][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.252136][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  388.264781][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  388.287983][   T48] usb 7-1: config 0 descriptor??
[  388.428797][   T30] kauditd_printk_skb: 137 callbacks suppressed
[  388.428825][   T30] audit: type=1800 audit(1747923125.347:893): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1531" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  388.636933][T10738] loop5: detected capacity change from 0 to 32768
[  388.782409][   T48] elan 0003:04F3:0755.0022: failed to start in urb: -90
[  388.863854][   T48] elan 0003:04F3:0755.0022: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0
[  388.901060][ T5832] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  388.971856][T10738] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  389.076918][T10774] block nbd7: NBD_DISCONNECT
[  389.121383][ T5893] usb 7-1: USB disconnect, device number 10
[  389.136805][T10774] block nbd7: Send disconnect failed -22
[  389.172149][T10768] block nbd7: Disconnected due to user request.
[  389.235355][T10768] block nbd7: shutting down sockets
[  389.268235][T10738] (syz.5.1534,10738,0):ocfs2_clear_journal_error:1146 ERROR: File system error -318767104 recorded in journal 0.
[  389.417503][T10738] (syz.5.1534,10738,0):ocfs2_clear_journal_error:1148 ERROR: File system on device loop5 needs checking.
[  389.476049][T10775] fido_id[10775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  389.571352][T10738] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  390.037490][T10787] /dev/nullb0: Can't open blockdev
[  390.133337][ T5841] ocfs2: Unmounting device (7,5) on (node local)
[  390.839823][T10804] loop6: detected capacity change from 0 to 256
[  390.943947][T10804] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  391.009494][T10804] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  391.089128][T10804] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  391.421749][T10811] vlan2: entered allmulticast mode
[  391.427007][T10811] gretap0: entered allmulticast mode
[  392.348111][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'.
[  392.373104][T10827] loop7: detected capacity change from 0 to 1024
[  392.487859][T10827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  392.611938][   T30] audit: type=1800 audit(1747923129.517:894): pid=10827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1570" name="file1" dev="loop7" ino=839 res=0 errno=0
[  393.360436][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  393.930494][T10818] loop2: detected capacity change from 0 to 40427
[  393.943709][T10854] loop5: detected capacity change from 0 to 256
[  394.001825][T10818] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3fffff
[  394.087286][T10818] F2FS-fs (loop2): invalid crc value
[  394.628623][T10818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  394.816464][T10818] syz.2.1566: attempt to access beyond end of device
[  394.816464][T10818] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  395.058685][ T5832] syz-executor: attempt to access beyond end of device
[  395.058685][ T5832] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  395.113687][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) 
[  395.113749][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  395.113772][ T5832] Call Trace:
[  395.113785][ T5832]  <TASK>
[  395.113798][ T5832]  dump_stack_lvl+0x16c/0x1f0
[  395.113881][ T5832]  f2fs_handle_critical_error+0x621/0x9f0
[  395.113934][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.113987][ T5832]  ? __asan_memset+0x23/0x50
[  395.114035][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.114096][ T5832]  f2fs_write_end_io+0x73d/0xac0
[  395.114156][ T5832]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  395.114219][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.114276][ T5832]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  395.114331][ T5832]  bio_endio+0x6d2/0x810
[  395.114377][ T5832]  submit_bio_noacct+0x56d/0x1ec0
[  395.114442][ T5832]  __submit_merged_bio+0x33c/0x770
[  395.114504][ T5832]  __submit_merged_write_cond+0x319/0x3f0
[  395.114574][ T5832]  f2fs_write_cache_pages+0x2139/0x2680
[  395.114668][ T5832]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  395.114744][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.114790][ T5832]  ? __lock_acquire+0x5ca/0x1ba0
[  395.114857][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.114902][ T5832]  ? __lock_acquire+0x5ca/0x1ba0
[  395.115055][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115100][ T5832]  ? arch_stack_walk+0xa6/0x100
[  395.115158][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115212][ T5832]  f2fs_write_data_pages+0x4ad/0xd90
[  395.115287][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  395.115363][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115417][ T5832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  395.115484][ T5832]  do_writepages+0x1b5/0x820
[  395.115549][ T5832]  ? __pfx_do_writepages+0x10/0x10
[  395.115603][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115651][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115696][ T5832]  ? do_raw_spin_lock+0x12c/0x2b0
[  395.115746][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115791][ T5832]  ? find_held_lock+0x2b/0x80
[  395.115840][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115890][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.115935][ T5832]  ? do_raw_spin_unlock+0x172/0x230
[  395.115977][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.116035][ T5832]  filemap_fdatawrite_wbc+0x104/0x160
[  395.116094][ T5832]  __filemap_fdatawrite_range+0xb2/0xf0
[  395.116133][ T5832]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  395.116232][ T5832]  ? find_held_lock+0x2b/0x80
[  395.116281][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.116325][ T5832]  ? do_raw_spin_unlock+0x172/0x230
[  395.116366][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.116418][ T5832]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  395.116478][ T5832]  block_operations+0x2a3/0xfd0
[  395.116513][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.116557][ T5832]  ? stack_depot_save_flags+0x28/0xa50
[  395.116627][ T5832]  ? __pfx_block_operations+0x10/0x10
[  395.116661][ T5832]  ? kasan_save_stack+0x42/0x60
[  395.116779][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.116825][ T5832]  ? down_write+0x14d/0x200
[  395.116862][ T5832]  ? __pfx_down_write+0x10/0x10
[  395.116901][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.116946][ T5832]  ? rcu_is_watching+0x12/0xc0
[  395.116998][ T5832]  f2fs_write_checkpoint+0x2b8/0x45b0
[  395.117043][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.117087][ T5832]  ? kfree+0x2b6/0x4d0
[  395.117130][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.117175][ T5832]  ? lockdep_hardirqs_on+0x7c/0x110
[  395.117228][ T5832]  ? f2fs_stop_gc_thread+0x79/0xd0
[  395.117270][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.117324][ T5832]  kill_f2fs_super+0x3c2/0x470
[  395.117365][ T5832]  ? __pfx_kill_f2fs_super+0x10/0x10
[  395.117403][ T5832]  ? lockdep_hardirqs_on+0x7c/0x110
[  395.117479][ T5832]  deactivate_locked_super+0xc1/0x1a0
[  395.117531][ T5832]  deactivate_super+0xde/0x100
[  395.117578][ T5832]  cleanup_mnt+0x225/0x450
[  395.117630][ T5832]  task_work_run+0x150/0x240
[  395.117674][ T5832]  ? __pfx_task_work_run+0x10/0x10
[  395.117719][ T5832]  ? srso_alias_return_thunk+0x5/0xfbef5
[  395.117766][ T5832]  ? __pfx___x64_sys_umount+0x10/0x10
[  395.117832][ T5832]  syscall_exit_to_user_mode+0x27b/0x2a0
[  395.117894][ T5832]  do_syscall_64+0xda/0x260
[  395.117960][ T5832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.117997][ T5832] RIP: 0033:0x7fb5e8d8fc97
[  395.118027][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  395.118064][ T5832] RSP: 002b:00007fff7a23e5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  395.118100][ T5832] RAX: 0000000000000000 RBX: 00007fb5e8e1089d RCX: 00007fb5e8d8fc97
[  395.118123][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7a23e670
[  395.118147][ T5832] RBP: 00007fff7a23e670 R08: 0000000000000000 R09: 0000000000000000
[  395.118170][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7a23f700
[  395.118192][ T5832] R13: 00007fb5e8e1089d R14: 0000000000060686 R15: 00007fff7a23f740
[  395.118243][ T5832]  </TASK>
[  395.313797][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.318288][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.632627][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.638675][    C0] hrtimer: interrupt took 520403406 ns
[  395.656036][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.663632][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x2
[  395.671227][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.679202][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.686716][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.694230][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.701688][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.709348][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.716843][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.738705][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.739168][   T48] hid-generic 00A0:0008:0003.0023: unknown main item tag 0x0
[  395.773783][ T5832] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  395.852255][   T48] hid-generic 00A0:0008:0003.0023: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  395.981173][T10890] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  396.254131][T10893] loop3: detected capacity change from 0 to 64
[  396.563673][T10898] Trying to free block not in datazone
[  396.748230][   T48] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  396.828529][ T5893] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  396.933014][   T48] usb 6-1: Using ep0 maxpacket: 8
[  396.954182][   T48] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  396.990320][ T5893] usb 1-1: Using ep0 maxpacket: 32
[  396.998141][   T48] usb 6-1: config 0 has no interface number 0
[  397.022352][ T5893] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  397.024823][   T48] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  397.060915][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.108086][   T48] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  397.113173][ T5893] usb 1-1: config 0 descriptor??
[  397.148164][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.183075][   T48] usb 6-1: config 0 descriptor??
[  397.266020][   T48] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  397.304069][T10905] loop2: detected capacity change from 0 to 2048
[  397.392684][T10905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.452628][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  397.464954][T10903] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  397.498161][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  397.499005][T10903] EXT4-fs (loop2): Remounting filesystem read-only
[  397.509135][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  397.524065][ T5893] usb 1-1: media controller created
[  397.588097][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  397.711616][    T9] usb 6-1: USB disconnect, device number 13
[  397.786028][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.982886][ T5893] az6027: usb out operation failed. (-71)
[  397.991103][ T5893] stb0899_attach: Driver disabled by Kconfig
[  398.020773][ T5893] az6027: no front-end attached
[  398.020773][ T5893] 
[  398.067517][ T5893] az6027: usb out operation failed. (-71)
[  398.098177][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  398.122530][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34
[  398.175085][T10916] 
[  398.177488][T10916] =====================================================
[  398.184449][T10916] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  398.191956][T10916] 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 Not tainted
[  398.199109][T10916] -----------------------------------------------------
[  398.206073][T10916] syz.7.1605/10916 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  398.213929][T10916] ffff88802a853720 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0
[  398.222731][T10916] 
[  398.222731][T10916] and this task is already holding:
[  398.230130][T10916] ffff888032ab20c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510
[  398.238968][T10916] which would create a new lock dependency:
[  398.244891][T10916]  (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3}
[  398.252574][T10916] 
[  398.252574][T10916] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  398.262049][T10916]  (&dev->event_lock#2){..-.}-{3:3}
[  398.262116][T10916] 
[  398.262116][T10916] ... which became SOFTIRQ-irq-safe at:
[  398.275060][T10916]   lock_acquire+0x179/0x350
[  398.279798][T10916]   _raw_spin_lock_irqsave+0x3a/0x60
[  398.285133][T10916]   input_inject_event+0x9f/0x390
[  398.290205][T10916]   kd_sound_helper+0x17a/0x280
[  398.295098][T10916]   input_handler_for_each_handle+0xd7/0x250
[  398.301133][T10916]   call_timer_fn+0x19a/0x620
[  398.305851][T10916]   __run_timers+0x6ef/0x960
[  398.310483][T10916]   run_timer_base+0x114/0x190
[  398.315293][T10916]   run_timer_softirq+0x1a/0x40
[  398.320208][T10916]   handle_softirqs+0x219/0x8e0
[  398.325097][T10916]   __irq_exit_rcu+0x109/0x170
[  398.329903][T10916]   irq_exit_rcu+0x9/0x30
[  398.334273][T10916]   sysvec_apic_timer_interrupt+0xa4/0xc0
[  398.340063][T10916]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.346166][T10916]   post_alloc_hook+0x101/0x1b0
[  398.351066][T10916]   get_page_from_freelist+0x135c/0x3920
[  398.356752][T10916]   __alloc_frozen_pages_noprof+0x263/0x23a0
[  398.362783][T10916]   alloc_pages_mpol+0x1fb/0x550
[  398.367781][T10916]   folio_alloc_mpol_noprof+0x36/0x2f0
[  398.373283][T10916]   vma_alloc_folio_noprof+0xed/0x1e0
[  398.378691][T10916]   do_wp_page+0x1282/0x5930
[  398.383366][T10916]   __handle_mm_fault+0x1ada/0x2a40
[  398.388613][T10916]   handle_mm_fault+0x3fe/0xad0
[  398.393522][T10916]   do_user_addr_fault+0x60c/0x1370
[  398.398814][T10916]   exc_page_fault+0x5c/0xc0
[  398.403461][T10916]   asm_exc_page_fault+0x26/0x30
[  398.408429][T10916] 
[  398.408429][T10916] to a SOFTIRQ-irq-unsafe lock:
[  398.415462][T10916]  (tasklist_lock){.+.+}-{3:3}
[  398.415514][T10916] 
[  398.415514][T10916] ... which became SOFTIRQ-irq-unsafe at:
[  398.428167][T10916] ...
[  398.428183][T10916]   lock_acquire+0x179/0x350
[  398.435396][T10916]   _raw_read_lock+0x5f/0x70
[  398.440033][T10916]   __do_wait+0x105/0x890
[  398.444518][T10916]   do_wait+0x21e/0x5a0
[  398.448728][T10916]   kernel_wait+0x9f/0x160
[  398.453170][T10916]   call_usermodehelper_exec_work+0xf1/0x170
[  398.459186][T10916]   process_one_work+0x9cf/0x1b70
[  398.464241][T10916]   worker_thread+0x6c8/0xf10
[  398.468947][T10916]   kthread+0x3c5/0x780
[  398.473126][T10916]   ret_from_fork+0x48/0x80
[  398.477653][T10916]   ret_from_fork_asm+0x1a/0x30
[  398.482581][T10916] 
[  398.482581][T10916] other info that might help us debug this:
[  398.482581][T10916] 
[  398.492834][T10916] Chain exists of:
[  398.492834][T10916]   &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock
[  398.492834][T10916] 
[  398.505882][T10916]  Possible interrupt unsafe locking scenario:
[  398.505882][T10916] 
[  398.514213][T10916]        CPU0                    CPU1
[  398.519589][T10916]        ----                    ----
[  398.524969][T10916]   lock(tasklist_lock);
[  398.529246][T10916]                                local_irq_disable();
[  398.536014][T10916]                                lock(&dev->event_lock#2);
[  398.543259][T10916]                                lock(&new->fa_lock);
[  398.550052][T10916]   <Interrupt>
[  398.553508][T10916]     lock(&dev->event_lock#2);
[  398.558398][T10916] 
[  398.558398][T10916]  *** DEADLOCK ***
[  398.558398][T10916] 
[  398.566814][T10916] 4 locks held by syz.7.1605/10916:
[  398.572033][T10916]  #0: ffffffff8e6020d0 (file_rwsem){.+.+}-{0:0}, at: do_dentry_open+0x6e1/0x1c10
[  398.581355][T10916]  #1: ffff888030a43a68 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x495/0x1810
[  398.590930][T10916]  #2: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510
[  398.600143][T10916]  #3: ffff888032ab20c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510
[  398.609360][T10916] 
[  398.609360][T10916] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  398.619791][T10916]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  398.625511][T10916]     IN-SOFTIRQ-W at:
[  398.629608][T10916]                       lock_acquire+0x179/0x350
[  398.635998][T10916]                       _raw_spin_lock_irqsave+0x3a/0x60
[  398.643073][T10916]                       input_inject_event+0x9f/0x390
[  398.649884][T10916]                       kd_sound_helper+0x17a/0x280
[  398.656505][T10916]                       input_handler_for_each_handle+0xd7/0x250
[  398.664311][T10916]                       call_timer_fn+0x19a/0x620
[  398.670783][T10916]                       __run_timers+0x6ef/0x960
[  398.677157][T10916]                       run_timer_base+0x114/0x190
[  398.683714][T10916]                       run_timer_softirq+0x1a/0x40
[  398.690355][T10916]                       handle_softirqs+0x219/0x8e0
[  398.696981][T10916]                       __irq_exit_rcu+0x109/0x170
[  398.703538][T10916]                       irq_exit_rcu+0x9/0x30
[  398.709656][T10916]                       sysvec_apic_timer_interrupt+0xa4/0xc0
[  398.717176][T10916]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  398.725028][T10916]                       post_alloc_hook+0x101/0x1b0
[  398.731680][T10916]                       get_page_from_freelist+0x135c/0x3920
[  398.739109][T10916]                       __alloc_frozen_pages_noprof+0x263/0x23a0
[  398.746878][T10916]                       alloc_pages_mpol+0x1fb/0x550
[  398.753606][T10916]                       folio_alloc_mpol_noprof+0x36/0x2f0
[  398.760844][T10916]                       vma_alloc_folio_noprof+0xed/0x1e0
[  398.768002][T10916]                       do_wp_page+0x1282/0x5930
[  398.774458][T10916]                       __handle_mm_fault+0x1ada/0x2a40
[  398.781443][T10916]                       handle_mm_fault+0x3fe/0xad0
[  398.788078][T10916]                       do_user_addr_fault+0x60c/0x1370
[  398.795053][T10916]                       exc_page_fault+0x5c/0xc0
[  398.801433][T10916]                       asm_exc_page_fault+0x26/0x30
[  398.808145][T10916]     INITIAL USE at:
[  398.812152][T10916]                      lock_acquire+0x179/0x350
[  398.818447][T10916]                      _raw_spin_lock_irqsave+0x3a/0x60
[  398.825452][T10916]                      input_inject_event+0x9f/0x390
[  398.832207][T10916]                      led_set_brightness+0x217/0x290
[  398.839043][T10916]                      kbd_led_trigger_activate+0xcb/0x110
[  398.846297][T10916]                      led_trigger_set+0x59a/0xc50
[  398.852853][T10916]                      led_trigger_set_default+0x1bd/0x2a0
[  398.860272][T10916]                      led_classdev_register_ext+0x7b8/0xa10
[  398.867705][T10916]                      input_leds_connect+0x552/0x8e0
[  398.874556][T10916]                      input_attach_handler.isra.0+0x184/0x260
[  398.882156][T10916]                      input_register_device+0xa84/0x1130
[  398.889312][T10916]                      atkbd_connect+0x5da/0xa20
[  398.895701][T10916]                      serio_driver_probe+0x77/0xb0
[  398.902344][T10916]                      really_probe+0x241/0xa90
[  398.908625][T10916]                      __driver_probe_device+0x1de/0x440
[  398.915681][T10916]                      driver_probe_device+0x4c/0x1b0
[  398.922482][T10916]                      __driver_attach+0x283/0x580
[  398.929022][T10916]                      bus_for_each_dev+0x13e/0x1d0
[  398.935666][T10916]                      serio_handle_event+0x247/0xa50
[  398.942511][T10916]                      process_one_work+0x9cf/0x1b70
[  398.949250][T10916]                      worker_thread+0x6c8/0xf10
[  398.955622][T10916]                      kthread+0x3c5/0x780
[  398.961464][T10916]                      ret_from_fork+0x48/0x80
[  398.967644][T10916]                      ret_from_fork_asm+0x1a/0x30
[  398.974197][T10916]   }
[  398.976790][T10916]   ... key      at: [<ffffffff9ae39820>] __key.7+0x0/0x40
[  398.984050][T10916] -> (&new->fa_lock){....}-{3:3} {
[  398.989236][T10916]    INITIAL USE at:
[  398.993147][T10916]                    lock_acquire+0x179/0x350
[  398.999357][T10916]                    _raw_write_lock_irq+0x36/0x50
[  399.005899][T10916]                    fasync_remove_entry+0xb2/0x1e0
[  399.012621][T10916]                    fasync_helper+0xaf/0xd0
[  399.018635][T10916]                    __fput+0x96b/0xb70
[  399.024293][T10916]                    task_work_run+0x150/0x240
[  399.030569][T10916]                    syscall_exit_to_user_mode+0x27b/0x2a0
[  399.037827][T10916]                    do_syscall_64+0xda/0x260
[  399.043965][T10916]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.051478][T10916]    INITIAL READ USE at:
[  399.055856][T10916]                         lock_acquire+0x179/0x350
[  399.062422][T10916]                         _raw_read_lock_irqsave+0x74/0x90
[  399.069681][T10916]                         kill_fasync+0x138/0x510
[  399.076124][T10916]                         mousedev_notify_readers+0x6d8/0xa30
[  399.083625][T10916]                         mousedev_event+0x84e/0x1490
[  399.090427][T10916]                         input_handle_events_default+0x119/0x1b0
[  399.098268][T10916]                         input_pass_values+0x6c7/0x890
[  399.105242][T10916]                         input_handle_event+0xf00/0x14d0
[  399.112411][T10916]                         input_inject_event+0x1cd/0x390
[  399.119490][T10916]                         evdev_write+0x457/0x750
[  399.125948][T10916]                         vfs_write+0x25f/0x1180
[  399.132324][T10916]                         ksys_write+0x205/0x240
[  399.138700][T10916]                         do_syscall_64+0xcd/0x260
[  399.145254][T10916]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.153183][T10916]  }
[  399.155691][T10916]  ... key      at: [<ffffffff9ab68000>] __key.0+0x0/0x40
[  399.162859][T10916]  ... acquired at:
[  399.166668][T10916]    _raw_read_lock_irqsave+0x74/0x90
[  399.172084][T10916]    kill_fasync+0x138/0x510
[  399.176697][T10916]    mousedev_notify_readers+0x6d8/0xa30
[  399.182378][T10916]    mousedev_event+0x84e/0x1490
[  399.187357][T10916]    input_handle_events_default+0x119/0x1b0
[  399.193378][T10916]    input_pass_values+0x6c7/0x890
[  399.198539][T10916]    input_handle_event+0xf00/0x14d0
[  399.203869][T10916]    input_inject_event+0x1cd/0x390
[  399.209109][T10916]    evdev_write+0x457/0x750
[  399.213740][T10916]    vfs_write+0x25f/0x1180
[  399.218279][T10916]    ksys_write+0x205/0x240
[  399.222820][T10916]    do_syscall_64+0xcd/0x260
[  399.227550][T10916]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.233649][T10916] 
[  399.235976][T10916] 
[  399.235976][T10916] the dependencies between the lock to be acquired
[  399.235992][T10916]  and SOFTIRQ-irq-unsafe lock:
[  399.249656][T10916]  -> (tasklist_lock){.+.+}-{3:3} {
[  399.254917][T10916]     HARDIRQ-ON-R at:
[  399.258996][T10916]                       lock_acquire+0x179/0x350
[  399.265381][T10916]                       _raw_read_lock+0x5f/0x70
[  399.271991][T10916]                       __do_wait+0x105/0x890
[  399.278121][T10916]                       do_wait+0x21e/0x5a0
[  399.284065][T10916]                       kernel_wait+0x9f/0x160
[  399.290251][T10916]                       call_usermodehelper_exec_work+0xf1/0x170
[  399.298096][T10916]                       process_one_work+0x9cf/0x1b70
[  399.304893][T10916]                       worker_thread+0x6c8/0xf10
[  399.311431][T10916]                       kthread+0x3c5/0x780
[  399.317359][T10916]                       ret_from_fork+0x48/0x80
[  399.323638][T10916]                       ret_from_fork_asm+0x1a/0x30
[  399.330282][T10916]     SOFTIRQ-ON-R at:
[  399.334371][T10916]                       lock_acquire+0x179/0x350
[  399.340755][T10916]                       _raw_read_lock+0x5f/0x70
[  399.347232][T10916]                       __do_wait+0x105/0x890
[  399.353355][T10916]                       do_wait+0x21e/0x5a0
[  399.359388][T10916]                       kernel_wait+0x9f/0x160
[  399.365574][T10916]                       call_usermodehelper_exec_work+0xf1/0x170
[  399.373336][T10916]                       process_one_work+0x9cf/0x1b70
[  399.380139][T10916]                       worker_thread+0x6c8/0xf10
[  399.386590][T10916]                       kthread+0x3c5/0x780
[  399.392509][T10916]                       ret_from_fork+0x48/0x80
[  399.398779][T10916]                       ret_from_fork_asm+0x1a/0x30
[  399.405850][T10916]     INITIAL USE at:
[  399.409849][T10916]                      lock_acquire+0x179/0x350
[  399.416138][T10916]                      _raw_write_lock_irq+0x36/0x50
[  399.422865][T10916]                      copy_process+0x3f09/0x91b0
[  399.429332][T10916]                      kernel_clone+0xfc/0x960
[  399.435532][T10916]                      user_mode_thread+0xc7/0x110
[  399.442086][T10916]                      rest_init+0x23/0x2b0
[  399.448100][T10916]                      start_kernel+0x3e9/0x4d0
[  399.454383][T10916]                      x86_64_start_reservations+0x18/0x30
[  399.461642][T10916]                      x86_64_start_kernel+0xb0/0xc0
[  399.468416][T10916]                      common_startup_64+0x13e/0x148
[  399.475132][T10916]     INITIAL READ USE at:
[  399.479660][T10916]                           lock_acquire+0x179/0x350
[  399.486388][T10916]                           _raw_read_lock+0x5f/0x70
[  399.493123][T10916]                           __do_wait+0x105/0x890
[  399.499591][T10916]                           do_wait+0x21e/0x5a0
[  399.505892][T10916]                           kernel_wait+0x9f/0x160
[  399.512419][T10916]                           call_usermodehelper_exec_work+0xf1/0x170
[  399.520524][T10916]                           process_one_work+0x9cf/0x1b70
[  399.527668][T10916]                           worker_thread+0x6c8/0xf10
[  399.534486][T10916]                           kthread+0x3c5/0x780
[  399.540920][T10916]                           ret_from_fork+0x48/0x80
[  399.547551][T10916]                           ret_from_fork_asm+0x1a/0x30
[  399.554547][T10916]   }
[  399.557145][T10916]   ... key      at: [<ffffffff8e00c098>] tasklist_lock+0x18/0x40
[  399.565049][T10916]   ... acquired at:
[  399.568954][T10916]    _raw_read_lock+0x5f/0x70
[  399.573678][T10916]    send_sigurg+0xed/0xc80
[  399.578212][T10916]    sk_send_sigurg+0x76/0x360
[  399.583092][T10916]    unix_stream_sendmsg+0xe77/0x1160
[  399.588610][T10916]    ____sys_sendmsg+0xa98/0xc70
[  399.593610][T10916]    ___sys_sendmsg+0x134/0x1d0
[  399.598504][T10916]    __sys_sendmmsg+0x200/0x420
[  399.603396][T10916]    __x64_sys_sendmmsg+0x9c/0x100
[  399.608550][T10916]    do_syscall_64+0xcd/0x260
[  399.613278][T10916]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.619377][T10916] 
[  399.621706][T10916] -> (&f_owner->lock){....}-{3:3} {
[  399.626976][T10916]    INITIAL USE at:
[  399.630900][T10916]                    lock_acquire+0x179/0x350
[  399.637018][T10916]                    _raw_write_lock_irq+0x36/0x50
[  399.643569][T10916]                    __f_setown+0x61/0x3c0
[  399.649410][T10916]                    do_fcntl+0x1096/0x1590
[  399.655334][T10916]                    __x64_sys_fcntl+0x170/0x200
[  399.661702][T10916]                    do_syscall_64+0xcd/0x260
[  399.667825][T10916]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.675345][T10916]    INITIAL READ USE at:
[  399.679698][T10916]                         lock_acquire+0x179/0x350
[  399.686263][T10916]                         _raw_read_lock_irqsave+0x74/0x90
[  399.693507][T10916]                         send_sigurg+0x5f/0xc80
[  399.699871][T10916]                         sk_send_sigurg+0x76/0x360
[  399.706491][T10916]                         unix_stream_sendmsg+0xe77/0x1160
[  399.713761][T10916]                         ____sys_sendmsg+0xa98/0xc70
[  399.720577][T10916]                         ___sys_sendmsg+0x134/0x1d0
[  399.727291][T10916]                         __sys_sendmmsg+0x200/0x420
[  399.734061][T10916]                         __x64_sys_sendmmsg+0x9c/0x100
[  399.741213][T10916]                         do_syscall_64+0xcd/0x260
[  399.747772][T10916]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.755704][T10916]  }
[  399.758221][T10916]  ... key      at: [<ffffffff9ab68040>] __key.1+0x0/0x40
[  399.765383][T10916]  ... acquired at:
[  399.769215][T10916]    lock_acquire+0x179/0x350
[  399.773935][T10916]    _raw_read_lock_irqsave+0x74/0x90
[  399.779342][T10916]    send_sigio+0x31/0x3e0
[  399.783778][T10916]    kill_fasync+0x214/0x510
[  399.788391][T10916]    lease_break_callback+0x23/0x30
[  399.793697][T10916]    __break_lease+0x674/0x1810
[  399.798575][T10916]    do_dentry_open+0x6e1/0x1c10
[  399.803547][T10916]    vfs_open+0x82/0x3f0
[  399.807814][T10916]    path_openat+0x1e5e/0x2d40
[  399.812615][T10916]    do_filp_open+0x20b/0x470
[  399.817320][T10916]    do_sys_openat2+0x11b/0x1d0
[  399.822195][T10916]    __x64_sys_open+0x153/0x1e0
[  399.827065][T10916]    do_syscall_64+0xcd/0x260
[  399.831896][T10916]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.837992][T10916] 
[  399.840322][T10916] 
[  399.840322][T10916] stack backtrace:
[  399.846223][T10916] CPU: 0 UID: 0 PID: 10916 Comm: syz.7.1605 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) 
[  399.846267][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  399.846287][T10916] Call Trace:
[  399.846300][T10916]  <TASK>
[  399.846313][T10916]  dump_stack_lvl+0x116/0x1f0
[  399.846371][T10916]  check_irq_usage+0x7dc/0x920
[  399.846434][T10916]  ? check_path.constprop.0+0x24/0x50
[  399.846490][T10916]  ? __lock_acquire+0x1189/0x1ba0
[  399.846542][T10916]  __lock_acquire+0x1189/0x1ba0
[  399.846606][T10916]  lock_acquire+0x179/0x350
[  399.846660][T10916]  ? send_sigio+0x31/0x3e0
[  399.846696][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.846743][T10916]  ? lock_acquire+0x179/0x350
[  399.846799][T10916]  _raw_read_lock_irqsave+0x74/0x90
[  399.846849][T10916]  ? send_sigio+0x31/0x3e0
[  399.846882][T10916]  send_sigio+0x31/0x3e0
[  399.846914][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.846959][T10916]  kill_fasync+0x214/0x510
[  399.846995][T10916]  lease_break_callback+0x23/0x30
[  399.847029][T10916]  __break_lease+0x674/0x1810
[  399.847077][T10916]  ? __pfx___break_lease+0x10/0x10
[  399.847118][T10916]  ? apparmor_file_open+0x1a1/0x9c0
[  399.847167][T10916]  ? __pfx_apparmor_file_open+0x10/0x10
[  399.847216][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.847257][T10916]  ? file_set_fsnotify_mode_from_watchers+0x163/0x640
[  399.847311][T10916]  do_dentry_open+0x6e1/0x1c10
[  399.847362][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.847407][T10916]  vfs_open+0x82/0x3f0
[  399.847437][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.847482][T10916]  path_openat+0x1e5e/0x2d40
[  399.847540][T10916]  ? __pfx_path_openat+0x10/0x10
[  399.847591][T10916]  ? __lock_acquire+0xaa4/0x1ba0
[  399.847647][T10916]  do_filp_open+0x20b/0x470
[  399.847697][T10916]  ? __pfx_do_filp_open+0x10/0x10
[  399.847767][T10916]  ? _raw_spin_unlock+0x28/0x50
[  399.847814][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.847856][T10916]  ? alloc_fd+0x471/0x7d0
[  399.847909][T10916]  do_sys_openat2+0x11b/0x1d0
[  399.847943][T10916]  ? __pfx_do_sys_openat2+0x10/0x10
[  399.847978][T10916]  ? do_fcntl+0x1eb/0x1590
[  399.848011][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.848056][T10916]  __x64_sys_open+0x153/0x1e0
[  399.848090][T10916]  ? __pfx___x64_sys_open+0x10/0x10
[  399.848127][T10916]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.848171][T10916]  ? rcu_is_watching+0x12/0xc0
[  399.848214][T10916]  do_syscall_64+0xcd/0x260
[  399.848272][T10916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.848306][T10916] RIP: 0033:0x7fbd27d8e969
[  399.848332][T10916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.848366][T10916] RSP: 002b:00007fbd28c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  399.848397][T10916] RAX: ffffffffffffffda RBX: 00007fbd27fb5fa0 RCX: 00007fbd27d8e969
[  399.848421][T10916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  399.848442][T10916] RBP: 00007fbd27e10ab1 R08: 0000000000000000 R09: 0000000000000000
[  399.848463][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.848484][T10916] R13: 0000000000000000 R14: 00007fbd27fb5fa0 R15: 00007ffe1314ac08
[  399.848517][T10916]  </TASK>
[  400.176271][T10917] loop6: detected capacity change from 0 to 512
[  400.207596][T10917] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  400.211234][ T5893] dvb-usb: schedule remote query interval to 400 msecs.
[  400.224588][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  400.234855][ T5893] usb 1-1: USB disconnect, device number 16
[  400.273715][T10917] EXT4-fs (loop6): 1 truncate cleaned up
[  400.288851][T10917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  400.308296][ T5895] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  400.371809][   T30] audit: type=1800 audit(1747923137.287:895): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1606" name="file1" dev="loop6" ino=15 res=0 errno=0
[  400.486617][ T5895] usb 4-1: Using ep0 maxpacket: 8
[  400.491424][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  400.503944][ T5895] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  400.521073][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  400.574536][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  400.591013][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  400.604496][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  400.619474][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  400.632675][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.680720][ T7213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.855562][ T5895] usb 4-1: usb_control_msg returned -32
[  400.864323][ T5895] usbtmc 4-1:16.0: can't read capabilities
[  401.224377][T10928] usbtmc 4-1:16.0: stb usb_control_msg returned -32
[  401.232385][   T48] usb 4-1: USB disconnect, device number 14