last executing test programs:

2m48.888007231s ago: executing program 2 (id=529):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file2\x00')

2m48.28612258s ago: executing program 2 (id=531):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), r0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x8000)

2m48.042093844s ago: executing program 2 (id=534):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]})
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000440)={[{@noswap}, {@grpquota}]})

2m47.950735843s ago: executing program 2 (id=535):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f0000001280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae840099cb4d037cc46b3980928a506f800befa5037ecc4c128dc83d62f8d7ede6c05d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c5", @ANYRESOCT, @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$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")
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0/file0\x00', 0x19a)

2m47.581562389s ago: executing program 2 (id=538):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x3, 0xffe7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, 'YH'}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2m46.925845943s ago: executing program 2 (id=544):
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0x3, 0xbec, 0x7, 0x11}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

2m46.34787039s ago: executing program 32 (id=544):
unshare(0x22020600)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1, 0x3, 0xbec, 0x7, 0x11}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

2m33.585047873s ago: executing program 1 (id=635):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)

2m33.286122783s ago: executing program 1 (id=637):
r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x100000000000000)

2m33.10906406s ago: executing program 1 (id=639):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeec4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@nouid32}, {@bsdgroups}]}, 0x1, 0x457, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)

2m32.337637656s ago: executing program 1 (id=644):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')

2m31.641724774s ago: executing program 1 (id=651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048845}, 0x0)

2m30.77415725s ago: executing program 1 (id=660):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m30.253192621s ago: executing program 33 (id=660):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16.974102385s ago: executing program 5 (id=1754):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4)

16.738354289s ago: executing program 5 (id=1757):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)

16.034968707s ago: executing program 5 (id=1759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff1, 0xffe0}, {0xffff, 0xd}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

15.762191094s ago: executing program 5 (id=1760):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

15.259313504s ago: executing program 5 (id=1762):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x7ff, 0x7c5, 0x0, 0x3, 0xd59f81, 0x8, 0x5, 0xb, 0xc, 0x9, 0x1, 0x2, 0xb0c, 0x8000, 0x3d, 0x45, {0x84, 0x9}, 0x6, 0x3}})

14.594379569s ago: executing program 5 (id=1764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503feffeeff0000000016000000140001800d0001007564703a73797a3205"], 0x28}}, 0x0)

13.854666321s ago: executing program 34 (id=1764):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503feffeeff0000000016000000140001800d0001007564703a73797a3205"], 0x28}}, 0x0)

4.292421889s ago: executing program 0 (id=1802):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4c}, 0x18)

4.166996271s ago: executing program 3 (id=1803):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
exit(0x1ff)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

4.135801515s ago: executing program 4 (id=1804):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)

3.970275111s ago: executing program 0 (id=1805):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
poll(&(0x7f00000000c0)=[{r0, 0x408}], 0x1, 0x1ff)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

3.816163366s ago: executing program 4 (id=1806):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0)

3.159283121s ago: executing program 3 (id=1809):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550909000000000095000000000000001801000020646c2500000000002020287b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000045"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x410fe}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94)

2.953035101s ago: executing program 3 (id=1810):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usb_ep_write(r0, 0x8d, 0x2, &(0x7f0000000340)="cba8")

2.877159468s ago: executing program 6 (id=1811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000060c0)={0x0, 0x0, &(0x7f0000006080)={&(0x7f0000005cc0)={0x14, r1, 0x647270ab066efff7, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

2.739051582s ago: executing program 6 (id=1812):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x14e4, &(0x7f0000001540)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
chmod(&(0x7f0000000880)='./file0/file0\x00', 0x1c1)

2.561373199s ago: executing program 6 (id=1813):
mknod$loop(0x0, 0x6000, 0x1)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1})

2.370344998s ago: executing program 6 (id=1814):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

2.369988838s ago: executing program 0 (id=1815):
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0)
syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f00000095c0)='./file0\x00', 0x0, &(0x7f0000000280)={[{@rtdev={'rtdev', 0x3d, './bus'}}, {@nolargeio}, {@dax_always}, {@quota}]}, 0x1, 0x95b1, &(0x7f0000009600)="$eJzs3QXYZWWhsP93gKFbRERABJRQGgkJ6e7u7u7uBmlEQiQElAYpASUtFEEEQcTAorsb/tcwA+pww+c5//N9nHPu+76cd+1Ye7/Pfn57rdnby/FZfdGVFhwYGHdgaO9t/9GZk1yy4Hg3LDv+sWM8u/uu1046aNjNow7dTLj/sO0Bw7YHDgwMDBr2PMP2HXz4VVePMDDSwJD//KMxRxt9hDEHBkYfdnX+Yds5hm5GX/u9/d4ZLh7okGEMOnLon3cba2BgYIwhF7Ze8sZzh4z3nx4/ZFw3f+CFSlt9gcUW/YfV+24jDLt70D/ue3c70tA/o68+MDD68gMffH+c9k/7Dv6nx/6/bMjvnP+hSxY+8mP43f/jWn2BxZYYzn/IsTjisNvmGHKMD38MGhv+ff7MrZPfPmwKBw2bs5H+6Xj5ON73/6lWX2DRpQc+/DgeWOuwxZd8593z5uDjBgYGHz8wMPiEgYHBJ37cHvVf08f65quqqqqPpQUWnHXBIZ/3h/s8MOp7n2vpc+GOR2y358DAwMhDvycOPm3o5cGXv/edsKqqqqqqqqr+e7XAgrMuBN//x/2o7/+n3fnAsX3/r6qqqqqqqvqf0xILLDjrkO/6w33/n+ijvv9fftRJ0w/93/7PP8fQR7398b6IqqqqqqqqqvrIFl0Cv/9P/lHf/4+8e6JF+/5fVVVVVVVV9T+nFWdddKGBf/r/2Rt28zTv3U/f/2cbbZ8VP67xVlVVVVVVVVVVVVVVVVVVVVVVVVVVVVUZe/up62/8x5rv+w4Mt977uw37dwGDLr/5rrs+toH+92jQB/89xP4f95j+/zbEedQLJx8Y2HaVj3so9TH0P2at+vq/Uv7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5D1v+f/73tLvuuuvGwXae+7Z5TzvjHIyfcf8gOu2+w884f09A/jv63rv8/sMWggYFhvuNuMTAwsOwCK648zcDAwBmn3HPbVAPv3zfnkPvmHn/EgRHffeg07/48ZMIPeebph26GvJkGJnj/OS5/9/mXeOfsEQcNN4h/aqLx1jp789VfmW347dQf/jpGeO/CwovO8co777zzzr/cOKxRP+TB7z3/e69leOdhY59myNhn3Hmb7WfcaY89p99imw0222SzTbadeeY555hl9jlmn3m2GTfdYutNZhr680PmbPJ3fx7078zZmMPP2VML/POcDf/anh5lMpyzyT96zt59xksnveay9+ZspH9zzt77fQd99JxNvsWwXzTh/oMH1n93agYNDEx48OCB3YdcmXmUgYEJDxm270RD9p1n/BEGBo77xwsdcmmU99+Dg/Yfss/qi6604MDAuMP2GPcDY/vgcfrPL2XCYQfthAcM2x449NeMO/CPt+Lgw6+6eoQhc/Ev0zHmaKOPMObAwOjDrs4/bDvX0M1oO7233zvDxQMdMoxBRw79825jDQwMjDHkwlvTLnXykPEO9/j/G/2n/v7/gNecg95/Pw4a9mfYPkO9FlhsiX/8rnenYcjcjTjstjmGmAw/Z/+VfWC8k486MPlHjHfRJRacdcjNw83/+4cSvb+mOOe+kYa+t+afY+ij3v5Po9B4J/qI8S6xAI53oo8a70RvrbXd0Kf6LxvvcOe6pd/9uf+/c64b+Ohz3Yj0+E3umHT4c91SHz7EfzldvjdHowy304ed6+6/6uH9hzz//h99rlt6yNgH/8u5boSBgQkPeu9cN+TEd+jggeOGXJllyJXDBg+cP+TKrO9eGW3g5iFXZthou603HnLD4R+Y18Hv/vahp5GD/515HfcD83rAiP/6F8e/HP/vndOH30480gd3HjTcvG4x7463vjevg//NeX3v+Q/+6Hl99zPJP3fF/gOD/nVuRhpYZGBgYKphc3PovzM3E3303Py7n0lGh/2HXt7k/Zsem3X9Md6bm+Hn4v/0meTQ/+jcnPX+3Ez17n1TjDAw8sjvflTfceahP9+7OsuQoQ75+YHzzTSD3n89H3I+X3S48/mgf3ovDPqn6Rg07CPFSAMDo68+MDD68vRa/mnfwf/O30l0fhz3I8a7wIKzLjTkNPJhfx/TeC6+bufpBgYGRh76ugafNvTy4Mvfew3/kWi8o370eBeE8Y76UeNd+O1bHvxPjBfn+qPOO4f9O8fWJB99bA3/2fXDjq1pphx6/4gfGPBE7z/F27PduO57czTycM/7fzq2DvuPHls3D4z4UXNz+L8zN5P/15x3Nob9h5+b8y5e4aT/wzn5A/7vPf/h/8G5uXLy9887A1sMD1z/Xeu//3OXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yHrP+//3vr/1+w9kWnDlu2cPAUx46x2cc93o+5/9Xr/w/z/Zf1/zcb49gpRhh4/76PXJ996D7/Lddnn2PoZvS139tv+PXBeaAfvj771Wuedcz/o/XZ/1O9d6z+G+twdv53l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i/uQ9f9vHrbdf5O1Xz992ELogw9dde/5Pu7xfsz9r17/f5jvv6z/P9/eqx46wsD7933k+v9D93Gs/3/YTRtP/t95/f/3jtXW/6//Q/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXvzhe/3/QsO3AzevNNvHRQ7ZDrt97xK6zf9zj/Zj737r+/6gXTj4wsO0qH/dQ6mOo87+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3LD1/weGrv//XoPm732Bwfr//7P7EP8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8v5Y/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8f96/pjF/6T8MYv/N/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4v/N/DGL/+n5Yxb/b+WPWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf/b+WMW/3Pyxyz+5+aPWfzPyx+z+H8nf8zi/938MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/+/lj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi//388cs/tfmj1n8r8sfs/hfnz9m8f9B/pjF/4f5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/2f5Yxb/2/LHLP4/zx+z+P8if8zif3v+mMX/l/ljFv878scs/nfmj1n8f5U/ZvG/K3/M4v/r/DGL/935Yxb/e/LHLP6/yR+z+N+bP2bxvy9/zOL/2/wxi//9+WMW/9/lj1n8H8gfs/j/Pn/M4v+H/DGL/x/zxyz+f8ofs/g/mD9m8f9z/pjF/y/5Yxb/v+aPWfz/lj9m8f97/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/u9ezP+DWfwH5Y9Z/EfIH7P4j5g/ZvEfKX/M4j84f8ziP3L+mMV/lPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+RP2bxnyB/zOL/yfwxi/+E+WMW/0/lj1n8J8ofs/h/On/M4j9x/pjF/zP5Yxb/SfLHLP6T5o9Z/CfLH7P4fzZ/zOI/ef6Yxf9z+WMW/ynyxyz+U+aPWfynyh+z+H8+f8zi/4X8MYv/1PljFv9p8scs/tPmj1n8p8sfs/h/MX/M4v+l/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/l/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+V/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4fzV/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/r+WPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/L+eP2bxPyl/zOL/jfwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+H8zf8zif3r+mMX/W/ljFv8z8scs/mfmj1n8z8ofs/ifnT9m8f92/pjF/5z8MYv/ufljFv/z8scs/t/JH7P4fzd/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/3v5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4v/9/DGL/7X5Yxb/6/LHLP7X549Z/H+QP2bx/2H+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bx/1H+mMX/x/ljFv+f5I9Z/H+aP2bx/1n+mMX/tvwxi//P88cs/r/IH7P4354/ZvH/Zf6Yxf+O/DGL/535Yxb/X+WPWfzvyh+z+P86f8zif3f+mMX/nvwxi/9v8scs/vfmj1n878sfs/j/Nn/M4n9//pjF/3f5Yxb/B/LHLP6/zx+z+P8hf8zi/8f8MYv/n/LHLP4P5o9Z/P+cP2bx/0v+mMX/r/ljFv+/5Y9Z/P+eP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/EfLHLP4j5o9Z/EfKH7P4D84fs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/T+SPWfwnyB+z+H8yf8ziP2H+mMX/U/ljFv+J8scs/p/OH7P4T5w/ZvH/TP6YxX+S/DGL/6T5Yxb/yfLHLP6fzR+z+E+eP2bx/1z+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/h/IX/M4j91/pjFf5r8MYv/tPljFv/p8scs/l/MH7P4fyl/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/l/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyV/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP5fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf9r+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4ky/1H+zf0s/l+X+f+7WfxPyh+z+H8jf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+38wfs/ifnj9m8f9W/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8v50/ZvE/J//3G+mfLlv8z80fs/iflz9m8f9O/pjF/7v5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/t/LH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv/v549Z/K/NH7P4X5c/ZvG/Pn/M4v+D/DGL/w/zxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/4/yxyz+P84fs/j/JH/M4v/T/DGL/8/yxyz+t+WPWfx/nj9m8f9F/pjF//b8MYv/L/PHLP535I9Z/O/MH7P4/yp/zOJ/V/6Yxf/X+WMW/7vzxyz+9+SPWfx/kz9m8b83f8zif1/+mMX/t/ljFv/788cs/r/LH7P4P5A/ZvH/ff6Yxf8P+WMW/z/mj1n8/5Q/ZvF/MH/M4v/n/DGL/1/yxyz+f80fs/j/LX/M4v/3/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+2PD+Y33cA/r/24f4v5g/Zjn+X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/0kD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+XgYGBt975uAb13zeL/64d/5jFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/L+WP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvH/ev6Yxf+k/DGL/zfyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOL/zfwxi//p+WMW/2/lj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/2/ljFv9z8scs/ufmj1n8z8sfs/h/J3/M4v/d/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv/v5Y9Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/9/PHLP7X5o9Z/K/LH7P4X58/ZvH/Qf6Yxf+H+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf9H+WMW/x/nj1n8f5I/ZvH/af6Yxf9n+WMW/9vyxyz+P88fs/j/In/M4n97/pjF/5f5Yxb/O/LHLP535o9Z/H+VP2bxvyt/zOL/6/wxi//d+WMW/3vyxyz+v8kfs/jfmz9m8b8vf8zi/9v8MYv//fljFv/f5Y9Z/B/IH7P4/z5/zOL/h/wxi/8f88cs/n/KH7P4P5g/ZvH/c/6Yxf8v+WMW/7/mj1n8/5Y/ZvH/e/6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6DB/LHLP6D8scs/iPkj1n8R8wfs/iPlD9m8R+cP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/p/IH7P4T5A/ZvH/ZP6YxX/C/DGL/6fyxyz+E+WPWfw/nT9m8Z84f8zi/5n8MYv/JPljFv9J88cs/pPlj1n8P5s/ZvGfPH/M4v+5/DGL/xT5Yxb/KfPHLP5T5Y9Z/D+fP2bx/0L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfy/mD9m8f9S/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/y/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9K/pjFf+78MYv/PPljFv9588cs/vPlj1n8v5o/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/1/LHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/l/PH7P4n5Q/ZvH/Rv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/L+ZP2bxPz1/zOL/rfwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+H87f8zif07+mMX/3Pwxi/95+WMW/+/kj1n8v5s/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi/738MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8f9+/pjF/9r8MYv/dfljFv/r88cs/j/IH7P4/zB/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P4/yh/zOL/4/wxi/9P8scs/j/NH7P4/yx/zOJ/W/6Yxf/n+WMW/1/kj1n8b88fs/j/Mn/M4D/E/Y78MYP/kOP/zvwxi/+v8scs/nflj1n8f50/ZvG/O3/M4n9P/pjF/zf5Yxb/e/PHLP735Y9Z/H+bP2bxvz9/zOL/u/wxi/8D+WMW/9/nj1n8/5A/ZvH/Y/6Yxf9P+WMW/wfzxyz+f84fs/j/JX/M4v/X/DGL/9/yxyz+f88fs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/5IH8MYv/oPwxi/8I+WMW/xHzxyz+I+WPWfwH549Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8n8scs/hPkj1n8P5k/ZvGfMH/M4v+p/DGL/0T5Yxb/T+ePWfwnzh+z+H8mf8ziP0n+mMV/0vwxi/9k+WMW/8/mj1n8J88fs/h/Ln/M4j9F/pjFf8r8MYv/VPljFv/P549Z/L+QP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/L+aPWfy/lD9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3L+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/kj9m8Z87f8ziP0/+mMV/3vwxi/98+WMW/6/mj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zi/7X8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi//X88cs/iflj1n8v5E/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv9v5o9Z/E/PH7P4fyt/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7fzh+z+J+TP2bxPzd/zOJ/Xv6Yxf87+WMW/+/mj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+H8vf8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfy/nz9m8b82f8zif13+mMX/+vwxi/8P8scs/j/MH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/j/LH7P435Y/ZvH/ef6Yxf8X+WMW/9vzxyz+v8wfs/jfkT9m8b8zf8zi/6v8MYv/XfljFv9f549Z/O/OH7P435M/ZvH/Tf6Yxf/e/DGL/335Yxb/3+aPWfzvzx+z+P8uf8zi/0D+mMX/9/ljFv8/5I9Z/P+YP2bx/1P+mMX/wfwxi/+f88cs/n/JH7P4/zV/zOL/t/wxi//f88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz8m8R9lIH/M4j8of8ziP0L+mMV/xPwxi/9I+WMW/8H5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8zi/4n8MYv/BPljFv9P5o9Z/CfMH7P4fyp/zOI/Uf6Yxf/T+WMW/4nzxyz+n8kfs/hPkj9m8Z80f8ziP1n+mMX/s/ljFv/J88cs/p/LH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/L+SPWfynzh+z+E+TP2bxnzZ/zOI/Xf6Yxf+L+WMW/y/lj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfy/nD9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/6/kj1n8584fs/jPkz9m8Z83f8ziP1/+mMX/q/ljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r/NR/nv9/9gXP9Ns/hv2/GPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf9r+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/r+ePWfxPyh+z+H8jf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+38wfs/ifnj9m8f9W/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8v50/ZvE/J3/M4n9u/pjF/7z8MYv/d/LHLP7fzR+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvH/Xv6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4fz9/zOJ/bf6Yxf+6/DGL//X5Yxb/H+SPWfx/mD9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfx/lD9m8f9x/pjF/yf5Yxb/n+aPWfx/lj9m8b8tf8zi//P8MYv/L/LHLP63549Z/H+ZP2bxvyN/zOJ/Z/6Yxf9X+WMW/7vyxyz+v84fs/jfnT9m8b8nf8zi/5v8MYv/vfljFv/78scs/r/NH7P4358/ZvH/Xf6Yxf+B/DGL/+/zxyz+f8gfs/j/MX/M4v+n/DGL/4P5Yxb/P+ePWfz/kj9m8f9r/pjF/2/5Yxb/v+ePWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/6kD+mMV/UP6YxX+E/DGL/4j5Yxb/kfLHLP6D88cs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6Yxf8T+WMW/wnyxyz+n8wfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP4T549Z/D+TP2bxnyR/zOI/af6YxX+y/DGL/2fzxyz+k+ePWfw/lz9m8Z8if8ziP2X+mMV/qvwxi//n88cs/l/IH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/F/PHLP5fyh+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/GfLH7P4fzl/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5fyR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/1fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bx/1r+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf/r+WMW/5Pyxyz+38gfs/ifnD9m8T8lf8zif2r+mMX/tPwxi/8388cs/qfnj1n8v5U/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9v549Z/M/JH7P4n5s/ZvE/L3/M4v+d/DGL/3fzxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/L+XP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7fzx+z+F+bP2bxvy5/zOJ/ff6Yxf8H+WMW/x/mj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/x/lj1n8f5w/ZvH/Sf6Yxf+n+WMW/5/lj1n8b8sfs/j/PH/M4v+L/DGL/+35Yxb/X+aPWfzvyB+z+N+ZP2bx/1X+mMX/rvwxi/+v88cs/nfnj1n878kfs/j/Jn/M4n9v/pjF/778MYv/b/PHLP73549Z/H+XP2bxfyB/zOL/+/wxi/8f8scs/n/MH7P4/yl/zOL/YP6Yxf/P+WMW/7/kj1n8/5o/ZvH/W/6Yxf/v+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I82kD9m8R+UP2bxHyF/zOI/Yv6YxX+k/DGL/+D8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnv9gutHiP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/ifwxi/8E+WMW/0/mj1n8J8wfs/h/Kn/M4j9R/pjF/9P5Yxb/ifPHLP6fyR+z+E+SP2bxnzR/zOI/Wf6Yxf+z+WMW/8nzxyz+n8sfs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv8v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjF/4v5Yxb/L+WPWfynzx+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/L+cP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/r+SPWfznzh+z+M+TP2bxnzd/zOI/X/6Yxf+r+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+H8tf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOL/9fwxi/9J+WMW/2/kj1n8T84fs/ifkj9m8T81f8zif1r+mMX/m/ljFv/T88cs/t/KH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/t/PHLP7n5I9Z/M/NH7P4n5c/ZvH/Tv6Yxf+7+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP7fyx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/7+ePWfyvzR+z+F+XP2bxvz5/zOL/g/wxi/8P88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/+P8scs/j/OH7P4/yR/zOL/0/wxi//P8scs/rflj1n8f54/ZvH/Rf6Yxf/2/DGL/y/zxyz+d+SPWfzvzB+z+P8qf8zif1f+mMX/1/ljFv+788cs/vfkj1n8f5M/ZvG/N3/M4n9f/pjF/7f5Yxb/+/PHLP6/yx+z+D+QP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxfzB/zOL/5/wxi/9f8scs/n/NH7P4/y1/zOL/9/wxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPSfxHH8gfs/gPyh+z+I+QP2bxHzF/zOI/Uv6YxX9w/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8if8ziP0H+mMX/k/ljFv8J88cs/p/KH7P4T5Q/ZvH/dP6YxX/i/DGL/2fyxyz+k+SPWfwnzR+z+E+WP2bx/2z+mMV/8vwxi//n8scs/lPkj1n8p8wfs/hPlT9m8f98/pjF/wv5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvH/Yv6Yxf9L+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/L+ePWfxnzx+z+M+RP2bxnzN/zOI/V/6Yxf8r+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bx/2r+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+X8sfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+H89f8zif1L+mMX/G/ljFv+T88cs/qfkj1n8T80fs/iflj9m8f9m/pjF//T8MYv/t/LHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4v/t/DGL/zn5Yxb/c/PHLP7n5Y9Z/L+TP2bx/27+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL//fyxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/7+WMW/2vzxyz+1+WPWfyvzx+z+P8gf8zi/8P8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zi/6P8MYv/j/PHLP4/yR+z+P80f8zi/7P8MYv/bfljFv+f549Z/H+RP2bxvz1/zOL/y/wxi/8d+WMW/zvzxyz+v8ofs/jflT9m8f91/pjF/+78MYv/PfljFv/f5I9Z/O/NH7P435c/ZvH/bf6Yxf/+/DGL/+/yxyz+D+SPWfx/nz9m8f9D/pjF/4/5Yxb/P+WPWfwfzB+z+P85f8zi/5f8MYv/X/PHLP5/yx+z+P89f8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxi/87+WMS/zEG8scs/oPyxyz+I+SPWfxHzB+z+I+UP2bxH5w/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+n8gfs/hPkD9m8f9k/pjFf8L8MYv/p/LHLP4T5Y9Z/D+dP2bxnzh/zOL/mfwxi/8k+WMW/0nzxyz+k+WPWfw/mz9m8Z88f8zi/7n8MYv/FPljFv8p88cs/lPlj1n8P58/ZvH/Qv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/L+YP2bx/1L+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf/L+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bx/0r+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfy/mj9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi//X8scs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+X88fs/iflD9m8f9G/pjF/+T8MYv/KfljFv9T88cs/qflj1n8v5k/ZvE/PX/M4v+t/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4fzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/7+SPWfy/mz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/vfwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bx/37+mMX/2vwxi/91+WMW/+vzxyz+P8gfs/j/MH/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/KH/M4v/j/DGL/0/yxyz+P80fs/j/LH/M4n9b/pjF/+f5Yxb/X+SPWfxvzx+z+P8yf8zif0f+mMX/zvwxi/+v8scs/nflj1n8f50/ZvG/O3/M4n9P/pjF/zf5Yxb/e/PHLP735Y9Z/H+bP2bxvz9/zOL/u/wxi/8D+WMW/9/nj1n8/5A/ZvH/Y/6Yxf9P+WMW/wfzxyz+f84fs/j/JX/M4v/X/DGL/9/yxyz+f88fs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/zIH8MYv/oPwxi/8I+WMW/xHzxyz+I+WPWfwH549Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mN5/F//j+xs8R/b4/8fyuI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP6fyB+z+E+QP2bx/2T+mMV/wvwxi/+n8scs/hPlj1n8P50/ZvGfOH/M4v+Z/DGL/yT5Yxb/SfPHLP6T5Y9Z/D+bP2bxnzx/zOL/ufwxi/8U+WMW/ynzxyz+U+WPWfw/nz9m8f9C/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8v5g/ZvH/Uv6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/8v5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/Sv6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/L+aP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/9fyxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP5fzx+z+J+UP2bx/0b+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfy/mT9m8T89f8zi/638MYv/GfljFv8z88cs/mflj1n8z84fs/h/O3/M4n9O/pjF/9z8MYv/efljFv/v5I9Z/L+bP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+9/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvH/fv6Yxf/a/DGL/3X5Yxb/6/PHLP4/yB+z+P8wf8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+P8of8zi/+P8MYv/T/LHLP4/zR+z+P8sf8zif1v+mMX/5/ljFv9f5I9Z/G/PH7P4/zJ/zOJ/R/6Yxf/O/DGL/6/yxyz+d+WPWfx/nT9m8b87f8zif0/+mMX/N/ljFv9788cs/vflj1n8f5s/ZvG/P3/M4v+7/DGL/wP5Yxb/3+ePWfz/kD9m8f9j/pjF/0/5Yxb/B/PHLP5/zh+z+P8lf8zi/9f8MYv/3/LHLP5/zx+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH+sgfwxi/+g/DGL/wj5Yxb/EfPHLP4j5Y9Z/Afnj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/yfyxyz+E+SPWfw/mT9m8Z8wf8zi/6n8MYv/RPljFv9P549Z/CfOH7P4fyZ/zOI/Sf6YxX/S/DGL/2T5Yxb/z+aPWfwnzx+z+H8uf8ziP0X+mMV/yvwxi/9U+WMW/8/nj1n8v5A/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv8v5o9Z/L+UP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvH/cv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+SP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/r+aPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOL/tfwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/9fzxyz+J+WPWfy/kT9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/2/mj1n8T88fs/h/K3/M4n9G/pjF/8z8MYv/WfljFv+z88cs/t/OH7P4n5M/ZvE/N3/M4n9e/pjF/zv5Yxb/7+aPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4fy9/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/L+fP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w/yxyz+P8wfs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+P8sfs/jflj9m8f95/pjF/xf5Yxb/2/PHLP6/zB+z+N+RP2bxvzN/zOL/q/wxi/9d+WMW/1/nj1n8784fs/jfkz9m8f9N/pjF/978MYv/ffljFv/f5o9Z/O/PH7P4/y5/zOL/QP6Yxf/3+WMW/z/kj1n8/5g/ZvH/U/6Yxf/B/DGL/5/zxyz+f8kfs/j/NX/M4v+3/DGL/9/zxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH3sgf8ziPyh/zOI/Qv6YxX/E/DGL/0j5Yxb/wfljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/ifwxi/8E+WMW/0/mj1n8J8wfs/h/Kn/M4j9R/pjF/9P5Yxb/ifPHLP6fyR+z+E+SP2bxnzR/zOI/Wf6Yxf+z+WMW/8nzxyz+n8sfs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv8v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjF/4v5Yxb/L+WPWfynzx+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/L+cP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/r+SPWfznzh+z+M+TP2bxnzd/zOI/X/6Yxf+r+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+H8tf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOL/9fwxi/9J+WMW/2/kj1n8T84fs/ifkj9m8T81f8zif1r+mMX/m/ljFv/T88cs/t/KH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/t/PHLP7n5I9Z/M/NH7P4n5c/ZvH/Tv6Yxf+7+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP7fyx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/7+ePWfyvzR+z+F+XP2bxvz5/zOL/g/wxi/8P88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/+P8scs/j/OH7P4/yR/zOL/0/wxi//P8scs/rflj1n8f54/ZvH/Rf6Yxf/2/DGL/y/zxyz+d+SPWfzvzB+z+P8qf8zif1f+mMX/1/ljFv+788cs/vfkj1n8f5M/ZvG/N3/M4n9f/pjF/7f5Yxb/+/PHLP6/yx+z+D+QP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bxfzB/zOL/5/wxi/9f8scs/n/NH7P4/y1/zOL/9/wxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPSfzHGcgfs/gPyh+z+I+QP2bxHzF/zOI/Uv6YxX9w/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8if8ziP0H+mMX/k/ljFv8J88cs/p/KH7P4T5Q/ZvH/dP6YxX/i/DGL/2fyxyz+k+SPWfwnzR+z+E+WP2bx/2z+mMV/8vwxi//n8scs/lPkj1n8p8wfs/hPlT9m8f98/pjF/wv5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvH/Yv6Yxf9L+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/L+ePWfxnzx+z+M+RP2bxnzN/zOI/V/6Yxf8r+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bx/2r+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8P+PnfuP2rqu7zh+3cANmHNKzs+ghZG6NDfiZ9AMt+apnWgnNk9sp+POPHCKiIVzKceotiOFv0INC43EFNBEQn4EGJIoEMvJ1kqbzllzWVk2criclfMnOxfcN3LfvmHype/Xc3w/Hn9w39d9+74UnufFdXE4R/1DWfp/Sv9Qlv7z9A9l6X+p/qEs/S/TP5Sl/+X6h7L0/7T+oSz95+sfytL/Cv1DWfp/Rv9Qlv6f1T+Upf8C/UNZ+l+pfyhL/6v0D2Xp/zn9Q1n6L9Q/lKX/5/UPZel/tf6hLP0X6R/K0v8a/UNZ+n9B/1CW/tfqH8rS/zr9Q1n6L9Y/lKX/Ev1DWfov1T+Upf/1+oey9L9B/1CW/l/UP5Sl/436h7L0X6Z/KEv/m/QPZem/XP9Qlv5f0j+Upf8K/UNZ+t+sfyhL/5X6h7L0X6V/KEv/1fqHsvRfo38oS/8v6x/K0n+t/qEs/dfpH8rSf73+oSz9b9E/lKX/V/QPZem/Qf9Qlv636h/K0n+j/qEs/b+qfyhL/9v0D2Xpv0n/UJb+t+sfytL/Dv1DWfpv1j+Upf8W/UNZ+m/VP5Sl/9f0D2Xpv03/UJb+f69/KEv/r+sfytL/Tv1DWfr/g/6hLP3v0j+Upf92/UNZ+v+j/qEs/f9J/1CW/t/QP5Sl/z/rH8rS/5v6h7L0/5b+oSz979Y/lKX/PfqHsvT/tv6hLP3/Rf9Qlv736h/K0v8+/UNZ+v+r/qEs/e/XP5Sl/7/pH8rS/wH9Q1n6f0f/UJb+39U/lKX/v+sfytL/Qf1DWfr/h/6hLP2/p38oS/+H9A9l6f99/UNZ+v9A/1CW/j/UP5Sl/8P6h7L0/5H+oSz9f6x/KEv/R/QPZen/E/1DWfr/p/6hLP136B/K0v+n+oey9H9U/1CW/v+lfyhL/536h7L0f0z/UJb+/61/KEv/n+kfytL/cf1DWfr/j/6hLP2f0D+Upf/P9Q9l6f8L/UNZ+v9S/1CW/k/qH8rS/3/1D2Xp/5T+oSz9n9Y/lKX/M/qHsvR/Vv9Qlv7P6R/K0v95/UNZ+u/SP5Sk/1Et/UNZ+nfoH8rSv4/+oSz9++ofytK/n/6hLP079Q9l6d9f/1CW/gP0D2XpP1D/UJb+h+kfytL/VfqHsvQ/XP9Qlv6/pn8oS/8j9A9l6f/r+oey9D9S/1CW/kfpH8rSf5D+oSz9X61/KEv/o/UPZen/G/qHsvQ/Rv9Qlv5F/1CW/r+pfyhL/8H6h7L0H6J/KEv/1+gfytL/t/QPZen/Wv1DWfoP1T+Upf+x+oey9H+d/qEs/YfpH8rS//X6h7L0P07/UJb+x+sfytL/BP1DWfr/tv6hLP3foH8oS/8T9Q9l6X+S/qEs/d+ofyhL/5P1D2Xp/zv6h7L0/139Q1n6D9c/lKX/m/QPZek/Qv9Qlv4j9Q9l6T9K/1CW/qP1D2XpP0b/UJb+Y/UPZen/Zv1DWfqP0z+Upf94/UNZ+r9F/1CW/r+nfyhL/1P0D2Xp/1b9Q1n6T9A/lKX/qfqHsvT/ff1DWfr/gf6hV1x/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6nfvRj31o6syZ087xiU984pO9n7zcvzMBAAC/ai+86X+5/0sAAAAAAAAAAAAAAAAAAAAgryb+d2Iv988RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADtXESX+4s29Hjy/13ffB0G9O2/1x7JPv/eDSvxg0uPtj17f/OHjKPvs+2LVr167Lh/7p6V0PB7Rarfa/7W1djwf2Pm4//5xHbnlgz6MyZ/FrV5026I5Jr55/+M9mn7dx6KLO3V/tbE35wIyZ00b2abXK3M7W7PaDUR2tVrmos3VF+8Ho9oOLO1vL2w/G7H5wWGtr+8Gb3nf2zPe3v3BJ5V8zeKWYOGlOq2+PxbZ6/G6w7/7nPPLwxu6PB3jK7mfr1+ra/3Er33lGr+9128/+u5+/fKL3/g/6Jwjs10Ht/ydvGNb98QBP+aLX/8s2v/H86Hv73f/e5y+ftH+oT/D+v8dGd7/fP3bAY/t5/x/9PrD3fs2Goavb+z9l1qwdXV/q91Le/7f/fXselbm999+nx/v/9vv4C7rf/w9otcqFh/jLAalMnPSJnQd6/e+x/30+7vluv9f0uunYd//bzjl1Rnv/d89Zf3PXlzoPcv8XHOj1f92cnv+twMGZOGnprl6v/y/e/z6v+71e/08MnnLv/p8c/0dvb+//wbPvfPc+3/v/97/3+cuFvfc/YtZZfzPi3I9+bPiMs6ZOnzZ92l+PGvWW8aPHjR83auyI3W8J9vx4iL8qkMNLev3f//5f1eumo9Watvf+8CljdrT3P/nRFX/W9aWBB7n/iw74+r/E6z+EjuvT6t+/NXvqrFnnjNrzY/fD0Xt+3POPBft/8Z//97v/40/q+se6/86wo9UavPf+zM1jn2/vf8ZdHzm660v9D3L/Fx9w/1t7/l0lcHAO8fX//b1ueuz/qtNX3tje/8CFW+7p+tJL+/P/C/u/5ED7Xz/M6z8ciomTWrW+iLb3/9CPb/1ktevyKX//B/VpYv9PDFo2odp1mWf/UJ8m9r/x7CNWVLsul9o/1KeJ/Z8xf8Y7ql2Xy+wf6tPE/gc9vu3eatflcvuH+jSx/1M77z2r2nX5tP1DfZrY/3kfn/1Mtesy3/6hPk3s/2sLv/XLatflCvuH+jSx/3k7pk2pdl0+Y/9Qnyb2v2zorO9Vuy6ftX+oTxP73/m+h95Z7bossH+oTxP7P3LuppuqXZcr7R/q08T+3/7cUaOqXZer7B/q08T+P3hYx/xq1+Vz9g/1aWL/x39kxZBq12Wh/UN9mtj/X24+YXK16/J5+4f6NLH/snX+tmrX5Wr7h/o0sf9Txl73t9WuyyL7h/o0sf8Pv+vNP612Xa6xf6hPE/tfsOL0zmrX5Qv2D/VpYv8P3Pf0gmrX5Vr7h/o0sf+fD3t0eLXrcp39Q32a2P+WM9+2qdp1WWz/UJ8m9r/oqYvGVbsuS+wf6tPE/r998fAl1a7LUvuH+jSx/+fOnXBstetyvf1DfZrY/4YjFl5S7brcYP9Qnyb2P3nnE9OrXZcv2j/Up4n9v27Bex+vdl1utH+oTxP7HzN94p9Uuy7L7B/q08T+Zw/54XeqXZeb7B/q08T++98z88pq12W5/UN9mtj/u1ff1afadfmS/UN9mtj/1DPuv73adVlh/1CfJvZ/8gl/d3K163Kz/UN9mtj/9q8PubPadVlp/1CfJvY/97Z176l2XVbZP9Snif2vmXTDzmrXZbX9Q32a2P+PRg78eLXrssb+oT5N7P89D24+r9p1+bL9Q32a2P/g64/5frXrstb+oT5N7H/sn/c7s9p1WWf/UJ8m9n/+SWu2V7su6+0f6tPE/q/d/o0Tq12XW+wf6tPE/u/fMGVttevyFfuH+jSx/6dP+/CR1a7LBvuH+jSx/7UTvnt1tetyq/1DfZrY/92/mHxfteuy0f6hPk3s/4JLd51W7bp81f6hPk3sf/n5jz1b7brcZv9Qnyb2/3DHO/6q2nXZZP9Qnyb23/GD119Y7brcbv9Qnyb2/67F846udl3usH+oTxP7/8CHrllV7bpstn+oTxP7H37MyLdWuy5b7B8AAAAAAAAAAAAAAAAAAAAAAAAAgP9jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAAEH+1oNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wIaOGc=")

1.966158198s ago: executing program 6 (id=1816):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x800, 0x100000})

1.831205671s ago: executing program 4 (id=1817):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff004}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000040), 0x3b)

1.678751296s ago: executing program 4 (id=1818):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r0)

1.398228394s ago: executing program 4 (id=1819):
r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480))
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1aca438, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000))

1.238050139s ago: executing program 0 (id=1820):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.12684829s ago: executing program 0 (id=1821):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18)
pivot_root(0x0, 0x0)

1.0222279s ago: executing program 0 (id=1822):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2008410, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5549, &(0x7f0000003d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x7f)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}})

952.054887ms ago: executing program 3 (id=1823):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback={0xffffffffffff0000}}, {0xa, 0x4e22, 0xffffffde, @dev={0xfe, 0x80, '\x00', 0x20}, 0xe4b}, r1, 0xfffffffe}}, 0x48)

661.780206ms ago: executing program 3 (id=1824):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@keep_last_dots}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@uid={'uid', 0x3d, 0xee00}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x1}}, {@discard}, {@utf8}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

653.36µs ago: executing program 4 (id=1825):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)

457.261µs ago: executing program 3 (id=1826):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x300, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xa000001c})

0s ago: executing program 6 (id=1833):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000c00)=0x2, 0x4)

kernel console output (not intermixed with test programs):

024
[  236.264887][ T8717] hfsplus: bad catalog entry type
[  236.423834][   T31] hfsplus: b-tree write err: -5, ino 4
[  236.632732][ T8730] loop5: detected capacity change from 0 to 256
[  236.645161][ T8730] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  236.663252][ T8730] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  236.861944][ T8736] pimreg3: entered allmulticast mode
[  237.279817][ T8744] loop4: detected capacity change from 0 to 8192
[  237.309367][ T8744] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  237.324505][ T8744] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  237.354831][ T8744] REISERFS (device loop4): using ordered data mode
[  237.361838][ T8744] reiserfs: using flush barriers
[  237.417446][ T8744] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  237.507179][ T8744] REISERFS (device loop4): checking transaction log (loop4)
[  237.615235][ T8754] loop0: detected capacity change from 0 to 2048
[  237.622824][ T8754] EXT4-fs: Ignoring removed mblk_io_submit option
[  237.725803][ T8754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.761061][ T8739] loop5: detected capacity change from 0 to 32768
[  237.787662][ T8739] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1052 (8739)
[  237.829141][ T8744] REISERFS (device loop4): Using tea hash to sort names
[  237.840781][ T8739] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  237.849291][ T8754] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1066: bg 0: block 234: padding at end of block bitmap is not set
[  237.863053][ T8739] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  237.874557][ T8744] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  237.932004][ T8739] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  237.944319][ T8754] EXT4-fs (loop0): Remounting filesystem read-only
[  237.957480][ T8754] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  237.971966][ T8739] BTRFS info (device loop5): use lzo compression, level 0
[  237.984738][ T8754] overlayfs: failed to verify upper root origin
[  237.990523][ T8739] BTRFS info (device loop5): max_inline at 0
[  238.015205][ T8739] BTRFS info (device loop5): using free space tree
[  238.188694][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.230776][ T8739] BTRFS info (device loop5): enabling ssd optimizations
[  238.267996][ T8739] BTRFS info (device loop5): auto enabling async discard
[  238.394470][ T5841] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  238.425065][ T7718] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  238.487535][ T8781] loop4: detected capacity change from 0 to 256
[  238.503873][ T8781] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  238.571017][ T8781] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  238.607912][ T5841] usb 4-1: Using ep0 maxpacket: 16
[  238.635802][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.663292][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.675106][ T5841] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  238.688347][ T5841] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  238.719441][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.752174][ T8784] loop0: detected capacity change from 0 to 64
[  238.761503][ T5841] usb 4-1: config 0 descriptor??
[  239.199061][ T8792] loop0: detected capacity change from 0 to 256
[  239.219443][ T5841] microsoft 0003:045E:07DA.001D: No inputs registered, leaving
[  239.225265][ T8792] exfat: Deprecated parameter 'utf8'
[  239.251807][ T8792] exfat: Deprecated parameter 'namecase'
[  239.278636][ T5841] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  239.322943][ T5841] microsoft 0003:045E:07DA.001D: no inputs found
[  239.344075][ T5841] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway
[  239.375272][ T8792] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d)
[  239.493282][ T2132] usb 4-1: USB disconnect, device number 13
[  239.535478][ T8795] fido_id[8795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  239.931387][ T8806] loop5: detected capacity change from 0 to 64
[  240.367128][ T8816] loop5: detected capacity change from 0 to 4096
[  240.385901][ T8816] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  240.568121][ T8823] loop4: detected capacity change from 0 to 1024
[  240.594314][ T8822] loop3: detected capacity change from 0 to 1024
[  240.654260][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  240.799855][   T28] audit: type=1800 audit(1761237138.764:54): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1083" name="bus" dev="loop3" ino=26 res=0 errno=0
[  240.889555][   T11] hfsplus: b-tree write err: -5, ino 4
[  241.092914][ T8811] loop0: detected capacity change from 0 to 32768
[  241.228439][ T8811] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.520667][ T8811] XFS (loop0): Ending clean mount
[  241.537913][ T8811] XFS (loop0): Quotacheck needed: Please wait.
[  241.584720][ T8811] XFS (loop0): Quotacheck: Done.
[  241.654434][ T2132] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  241.777976][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.891161][ T2132] usb 6-1: Using ep0 maxpacket: 16
[  241.917169][ T2132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.951001][ T2132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.984890][ T2132] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  242.025853][ T2132] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  242.047118][ T2132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.084830][ T2132] usb 6-1: config 0 descriptor??
[  242.118230][ T8849] loop4: detected capacity change from 0 to 32768
[  242.155853][   T28] audit: type=1800 audit(1761237140.144:55): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1091" name="file1" dev="loop4" ino=4 res=0 errno=0
[  242.291288][ T8855] loop0: detected capacity change from 0 to 1024
[  242.541466][ T2132] microsoft 0003:045E:07DA.001E: No inputs registered, leaving
[  242.552824][ T2132] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  242.578226][ T2132] microsoft 0003:045E:07DA.001E: no inputs found
[  242.592851][ T2132] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway
[  242.792057][ T8864] loop0: detected capacity change from 0 to 1024
[  242.800961][ T2132] usb 6-1: USB disconnect, device number 6
[  242.879180][   T28] audit: type=1800 audit(1761237140.854:56): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1095" name="bus" dev="loop0" ino=26 res=0 errno=0
[  242.927490][ T8860] loop3: detected capacity change from 0 to 8192
[  242.967938][ T8860] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  242.987857][   T49] hfsplus: b-tree write err: -5, ino 4
[  242.995948][ T8860] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  243.020879][ T8860] REISERFS (device loop3): using ordered data mode
[  243.056895][ T8860] reiserfs: using flush barriers
[  243.063716][ T8860] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  243.086721][ T8860] REISERFS (device loop3): checking transaction log (loop3)
[  243.269569][ T8860] REISERFS (device loop3): Using tea hash to sort names
[  243.281447][ T8860] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  244.200559][ T8887] loop4: detected capacity change from 0 to 1024
[  244.547499][ T8882] loop3: detected capacity change from 0 to 32768
[  244.582371][ T8882] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1103 (8882)
[  244.641515][ T8882] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  244.689526][ T8882] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  244.728275][ T8882] BTRFS info (device loop3): using free space tree
[  244.921420][ T8882] BTRFS info (device loop3): enabling ssd optimizations
[  244.952907][ T8882] BTRFS info (device loop3): auto enabling async discard
[  245.115048][ T2132] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  245.231401][ T5788] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  245.327446][ T2132] usb 6-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00
[  245.344135][ T2132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.367297][ T2132] usb 6-1: config 0 descriptor??
[  245.662814][ T8927] loop0: detected capacity change from 0 to 32768
[  245.703154][ T8927] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  245.821025][ T2132] wacom 0003:056A:0031.001F: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.5-1/input0
[  245.839260][ T8927] XFS (loop0): Ending clean mount
[  245.856774][ T8927] XFS (loop0): Quotacheck needed: Please wait.
[  245.919209][ T8927] XFS (loop0): Quotacheck: Done.
[  246.064494][ T2132] usb 6-1: USB disconnect, device number 7
[  246.074885][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  246.548258][ T8947] macsec2: entered promiscuous mode
[  246.553549][ T8947] macsec2: entered allmulticast mode
[  246.594223][ T5874] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  246.809781][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.836631][ T5874] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  246.854425][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.873932][ T5874] usb 5-1: config 0 descriptor??
[  247.001717][ T8957] loop3: detected capacity change from 0 to 8192
[  247.014072][ T5841] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  247.023655][ T8957] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  247.036896][ T8957] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  247.046988][ T8957] REISERFS (device loop3): using ordered data mode
[  247.053578][ T8957] reiserfs: using flush barriers
[  247.061358][ T8957] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  247.078579][ T8957] REISERFS (device loop3): checking transaction log (loop3)
[  247.092206][ T8957] REISERFS (device loop3): Using r5 hash to sort names
[  247.100003][ T8957] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  247.224033][ T5841] usb 6-1: Using ep0 maxpacket: 32
[  247.238810][ T5841] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.254444][ T5841] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 243, changing to 11
[  247.286270][ T5841] usb 6-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.314064][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0
[  247.329324][ T5841] usb 6-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  247.341589][ T5874] gembird 0003:11FF:3331.0020: unknown main item tag 0x0
[  247.351666][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.374264][ T5874] gembird 0003:11FF:3331.0020: unknown main item tag 0x0
[  247.381369][ T5874] gembird 0003:11FF:3331.0020: unknown main item tag 0x0
[  247.384908][ T5841] usb 6-1: config 0 descriptor??
[  247.433547][ T5874] gembird 0003:11FF:3331.0020: unknown main item tag 0x0
[  247.443604][ T5874] gembird 0003:11FF:3331.0020: unknown main item tag 0x0
[  247.494350][ T5874] gembird 0003:11FF:3331.0020: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.4-1/input0
[  247.545002][ T5874] usb 5-1: USB disconnect, device number 8
[  247.657013][ T8966] fido_id[8966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  247.854985][ T5841] a4tech 0003:09DA:0006.0021: hidraw0: USB HID v0.07 Device [HID 09da:0006] on usb-dummy_hcd.5-1/input0
[  248.069243][ T5841] usb 6-1: USB disconnect, device number 8
[  248.708363][ T8974] loop0: detected capacity change from 0 to 40427
[  248.751734][ T8974] F2FS-fs (loop0): invalid crc value
[  248.775955][ T8974] F2FS-fs (loop0): Found nat_bits in checkpoint
[  248.855471][ T8988] atomic_op ffff8880790e4998 conn xmit_atomic 0000000000000000
[  248.951128][ T8974] F2FS-fs (loop0): Start checkpoint disabled!
[  248.961086][ T8974] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  249.456035][ T8982] loop4: detected capacity change from 0 to 40427
[  249.508750][ T8982] F2FS-fs (loop4): invalid crc value
[  249.552676][ T8982] F2FS-fs (loop4): Found nat_bits in checkpoint
[  249.665185][ T8982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  249.764286][ T5841] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  249.775004][ T5798] Bluetooth: hci0: command tx timeout
[  249.865973][ T7336] syz-executor: attempt to access beyond end of device
[  249.865973][ T7336] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  249.873399][ T9008] loop5: detected capacity change from 0 to 2048
[  249.886386][ T7336] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  249.930124][ T9008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.008090][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.056073][ T5841] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  250.122823][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.146615][ T5841] usb 4-1: config 0 descriptor??
[  250.195625][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.443096][ T9024] loop5: detected capacity change from 0 to 512
[  250.481815][ T9024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.636611][ T5841] steelseries 0003:1038:12B6.0022: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0
[  250.714964][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.811659][ T5841] steelseries 0003:1038:12B6.0022: hid_hw_raw_request() failed with -71
[  250.841600][ T5841] usb 4-1: USB disconnect, device number 14
[  251.207922][ T9038] loop5: detected capacity change from 0 to 8192
[  251.233246][ T9038] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  251.246731][ T9038] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  251.257484][ T9038] REISERFS (device loop5): using ordered data mode
[  251.274513][ T9038] reiserfs: using flush barriers
[  251.284333][ T9038] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  251.306834][ T9038] REISERFS (device loop5): checking transaction log (loop5)
[  251.347795][ T9038] REISERFS (device loop5): Using r5 hash to sort names
[  251.395227][ T9038] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  251.510819][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'.
[  251.586362][ T9049] vlan2: entered allmulticast mode
[  251.593236][   T28] audit: type=1804 audit(1761237149.564:57): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1160" name="/newroot/97/file1/file0" dev="loop5" ino=2 res=1 errno=0
[  251.644349][ T9049] vlan1: entered allmulticast mode
[  251.649633][ T9049] veth0_vlan: entered allmulticast mode
[  251.679309][ T9054] loop3: detected capacity change from 0 to 1024
[  251.706874][ T9054] EXT4-fs: inline encryption not supported
[  251.712758][ T9054] EXT4-fs: Ignoring removed i_version option
[  251.740198][ T9054] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  251.828818][ T9054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.065006][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.224958][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'.
[  252.328234][ T9068] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[  252.328234][ T9068]    program syz.4.1171 not setting count and/or reply_len properly
[  252.625560][ T9078] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1176'.
[  252.636060][ T9077] loop0: detected capacity change from 0 to 512
[  252.665813][ T9078] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  252.710393][ T9077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.853476][ T9062] loop5: detected capacity change from 0 to 32768
[  252.973652][ T9062] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  253.062013][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.123037][ T9062] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  253.140740][ T9096] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1183'.
[  253.244235][ T9062] XFS (loop5): Starting recovery (logdev: internal)
[  253.323834][ T9062] XFS (loop5): Ending recovery (logdev: internal)
[  253.351714][ T9062] XFS (loop5): Quotacheck needed: Please wait.
[  253.434636][ T9062] XFS (loop5): Quotacheck: Done.
[  253.683597][ T7718] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  253.985887][ T9112] loop0: detected capacity change from 0 to 16
[  254.005272][ T9112] erofs: (device loop0): mounted with root inode @ nid 36.
[  254.051474][ T9105] loop3: detected capacity change from 0 to 32768
[  254.135562][ T9105] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  254.198837][ T9105] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  254.856233][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  255.044279][    T8] usb 5-1: Using ep0 maxpacket: 16
[  255.055613][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.077249][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.097656][    T8] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  255.110832][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.130995][    T8] usb 5-1: config 0 descriptor??
[  255.252132][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1197'.
[  255.357581][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1197'.
[  255.474893][ T5788] ocfs2: Unmounting device (7,3) on (node local)
[  255.601576][    T8] waltop 0003:172F:0032.0023: unknown main item tag 0x0
[  255.624636][    T8] waltop 0003:172F:0032.0023: unknown main item tag 0x0
[  255.642033][    T8] waltop 0003:172F:0032.0023: unknown main item tag 0x0
[  255.654668][    T8] waltop 0003:172F:0032.0023: unknown main item tag 0x0
[  255.671974][    T8] waltop 0003:172F:0032.0023: unknown main item tag 0x0
[  255.703423][    T8] waltop 0003:172F:0032.0023: hidraw0: USB HID v0.81 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0
[  255.791060][ T9138] loop3: detected capacity change from 0 to 512
[  255.814178][ T2132] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  255.859711][ T2199] usb 5-1: USB disconnect, device number 9
[  256.019652][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  256.026254][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  256.044415][ T2132] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.058731][ T2132] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  256.069045][ T2132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.079928][ T2132] usb 6-1: config 0 descriptor??
[  256.155965][ T9133] loop0: detected capacity change from 0 to 32768
[  256.518009][ T2132] logitech 0003:046D:CA03.0024: hidraw0: USB HID v0.04 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0
[  256.565225][ T2132] logitech 0003:046D:CA03.0024: no inputs found
[  256.812896][   T23] usb 6-1: USB disconnect, device number 9
[  256.852437][ T9155] loop3: detected capacity change from 0 to 2048
[  256.914283][ T9155] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  256.977046][ T9155] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 144 not allocated in directory (ino 1376)
[  257.355543][ T1309] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  257.363356][ T1309] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  257.371268][ T2199] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  257.405174][ T2199] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  257.482219][ T2199] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  257.807885][ T9159] loop0: detected capacity change from 0 to 32768
[  257.863940][ T9159] overlayfs: upper fs needs to support d_type.
[  257.872602][ T9159] overlayfs: upper fs does not support tmpfile.
[  257.890587][ T9159] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  257.903745][ T9159] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  257.903745][ T9159] 
[  257.919492][ T9159] ERROR: (device loop0): remounting filesystem as read-only
[  257.928059][ T9159] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  258.067634][ T9178] mkiss: ax0: crc mode is auto.
[  258.258837][ T9171] loop5: detected capacity change from 0 to 32768
[  258.912286][ T9194] loop4: detected capacity change from 0 to 1024
[  258.981063][ T9194] EXT4-fs: Ignoring removed nobh option
[  259.016774][ T9194] EXT4-fs: Ignoring removed bh option
[  259.063225][ T9194] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  259.164994][ T9194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.322379][ T9212] loop3: detected capacity change from 0 to 16
[  259.380091][ T9212] erofs: (device loop3): mounted with root inode @ nid 36.
[  259.451911][ T9212] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36
[  259.473102][ T7336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.660635][ T9218] netlink: 'syz.3.1240': attribute type 1 has an invalid length.
[  259.668710][ T9218] netlink: 'syz.3.1240': attribute type 2 has an invalid length.
[  259.785054][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  260.006612][    T8] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  260.027347][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.066792][    T8] usb 1-1: config 0 descriptor??
[  260.083803][    T8] gspca_main: sunplus-2.14.0 probing 055f:c420
[  260.181808][ T9234] netlink: 'syz.3.1246': attribute type 1 has an invalid length.
[  260.264064][   T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  260.412965][ T9228] loop4: detected capacity change from 0 to 32768
[  260.442753][ T9228] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  260.454321][   T23] usb 6-1: Using ep0 maxpacket: 32
[  260.463415][   T23] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.475482][   T23] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0
[  260.486767][   T23] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  260.530332][ T9228] XFS (loop4): Ending clean mount
[  260.535786][   T23] usb 6-1: config 0 interface 0 has no altsetting 0
[  260.542456][   T23] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  260.570425][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.619606][   T23] usb 6-1: config 0 descriptor??
[  260.708157][    T8] gspca_sunplus: reg_w_riv err -71
[  260.724690][    T8] sunplus: probe of 1-1:0.0 failed with error -71
[  260.743621][ T7336] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  260.755101][    T8] usb 1-1: USB disconnect, device number 7
[  261.098663][   T23] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0
[  261.115040][   T23] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0
[  261.133893][   T23] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0
[  261.154404][   T23] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0
[  261.162326][   T23] hid-thrustmaster 0003:044F:B65D.0025: unknown main item tag 0x0
[  261.173477][   T23] hid-thrustmaster 0003:044F:B65D.0025: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  261.186670][   T23] hid-thrustmaster 0003:044F:B65D.0025: Unexpected non-int endpoint
[  261.405489][    C1] hid-thrustmaster 0003:044F:B65D.0025: URB to get model id failed with error -71
[  261.405994][    T8] usb 6-1: USB disconnect, device number 10
[  261.442673][ T9252] 9p: Unknown access argument 18446744073709551615: -34
[  261.452076][ T9253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1250'.
[  261.474251][ T9253] nbd: couldn't find device at index 134217728
[  261.534225][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  261.598513][ T9257] netlink: 'syz.0.1260': attribute type 3 has an invalid length.
[  261.748756][    T8] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0
[  261.754554][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'.
[  261.784696][    T8] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0
[  261.792160][    T8] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0
[  261.858476][    T8] hid-generic 0000:0004:0000.0026: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  261.982142][ T9267] fido_id[9267]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  262.327407][ T9277] loop5: detected capacity change from 0 to 1024
[  262.416412][   T11] hfsplus: b-tree write err: -5, ino 4
[  262.512556][ T9268] loop4: detected capacity change from 0 to 32768
[  262.574834][ T5211] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  262.582259][ T9268] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  262.655401][ T9289] loop5: detected capacity change from 0 to 512
[  262.666675][ T9289] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  262.720685][ T9289] EXT4-fs (loop5): 1 truncate cleaned up
[  262.741420][ T9289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.765042][ T5211] usb 4-1: Using ep0 maxpacket: 16
[  262.769788][ T9268] XFS (loop4): Ending clean mount
[  262.794170][ T9289] EXT4-fs warning (device loop5): verify_group_input:169: Last group not full
[  262.803306][ T5211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.815087][ T5211] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  262.825195][ T5211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.841831][ T5211] usb 4-1: config 0 descriptor??
[  262.857043][ T9268] XFS (loop4): Quotacheck needed: Please wait.
[  263.020866][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.031766][ T9268] XFS (loop4): Quotacheck: Done.
[  263.149854][ T9268] XFS (loop4): User initiated shutdown received.
[  263.196094][ T9268] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  263.229889][ T9268] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  263.293271][ T7336] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  263.328770][ T5211] nti 0003:0757:0A00.0027: unknown main item tag 0x6
[  263.341513][ T5211] nti 0003:0757:0A00.0027: unknown main item tag 0x5
[  263.349756][ T5211] nti 0003:0757:0A00.0027: unknown main item tag 0x4
[  263.370755][ T5211] nti 0003:0757:0A00.0027: item fetching failed at offset 31/160
[  263.411238][ T5211] nti: probe of 0003:0757:0A00.0027 failed with error -22
[  263.604896][    T8] usb 4-1: USB disconnect, device number 15
[  263.765390][ T9306] [U] 
[  263.781334][ T9305] loop5: detected capacity change from 0 to 2048
[  263.839681][ T9309] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.938985][ T9312] loop0: detected capacity change from 0 to 128
[  263.996327][ T9312] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  264.037852][ T9312] hpfs: filesystem error: improperly stopped
[  264.043931][ T9312] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  264.082371][ T9312] hpfs: You really don't want any checks? You are crazy...
[  264.113169][ T9312] hpfs: hpfs_map_sector(): read error
[  264.133740][ T9312] hpfs: code page support is disabled
[  264.154658][ T9312] hpfs: hpfs_map_4sectors(): unaligned read
[  264.160883][ T9312] hpfs: hpfs_map_4sectors(): unaligned read
[  264.167421][ T9312] hpfs: filesystem error: unable to find root dir
[  264.404946][ T5874] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  264.614650][ T5874] usb 5-1: Using ep0 maxpacket: 32
[  264.623818][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  264.643561][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.675983][ T5874] usb 5-1: config 0 descriptor??
[  264.817405][ T9337] netlink: 'syz.0.1286': attribute type 21 has an invalid length.
[  264.886474][ T9339] loop5: detected capacity change from 0 to 1024
[  264.926800][ T9339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.964890][ T5211] IPVS: starting estimator thread 0...
[  265.064178][ T9345] IPVS: using max 17 ests per chain, 40800 per kthread
[  265.106317][ T5874] logitech 0003:046D:C29C.0028: unknown main item tag 0x0
[  265.140302][ T5874] logitech 0003:046D:C29C.0028: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[  265.181133][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.320926][ T5874] logitech 0003:046D:C29C.0028: no inputs found
[  265.359353][ T5874] usb 5-1: USB disconnect, device number 10
[  265.451947][ T9354] program syz.0.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.009485][ T9369] loop3: detected capacity change from 0 to 256
[  266.018176][ T5874] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  266.068961][ T9369] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.092629][ T9369] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  266.098687][   T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  266.125325][ T9369] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  266.137675][ T9372] loop4: detected capacity change from 0 to 64
[  266.216729][ T5874] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  266.231453][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  266.263330][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  266.288370][ T5874] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  266.293410][   T23] usb 6-1: config 0 has an invalid interface number: 23 but max is 0
[  266.298557][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.318269][ T5874] usb 1-1: config 0 descriptor??
[  266.324191][ T9363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  266.342178][   T23] usb 6-1: config 0 has no interface number 0
[  266.369413][   T23] usb 6-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  266.414236][   T23] usb 6-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[  266.461276][   T23] usb 6-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  266.472612][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.482137][   T23] usb 6-1: Product: syz
[  266.486603][   T23] usb 6-1: Manufacturer: syz
[  266.491239][   T23] usb 6-1: SerialNumber: syz
[  266.499599][   T23] usb 6-1: config 0 descriptor??
[  266.506094][ T9366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  266.521574][ T9366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  266.541325][   T23] ums-usbat 6-1:0.23: USB Mass Storage device detected
[  266.796181][ T5874] petalynx 0003:18B1:0037.0029: unknown main item tag 0x0
[  266.803479][ T5874] petalynx 0003:18B1:0037.0029: unknown main item tag 0x0
[  266.811395][   T23] ums-usbat: probe of 6-1:0.23 failed with error -5
[  266.832647][ T5874] petalynx 0003:18B1:0037.0029: unknown main item tag 0x0
[  266.840870][ T5874] petalynx 0003:18B1:0037.0029: unknown main item tag 0x0
[  266.841334][   T23] usb 6-1: USB disconnect, device number 11
[  266.868142][ T5874] petalynx 0003:18B1:0037.0029: unknown main item tag 0x0
[  266.899714][ T5874] petalynx 0003:18B1:0037.0029: hidraw0: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.0-1/input0
[  266.924613][ T1194] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  267.053855][ T2199] usb 1-1: USB disconnect, device number 8
[  267.114609][ T1194] usb 4-1: Using ep0 maxpacket: 8
[  267.125192][ T1194] usb 4-1: unable to get BOS descriptor or descriptor too short
[  267.140212][ T1194] usb 4-1: config 4 interface 0 has no altsetting 0
[  267.151517][ T1194] usb 4-1: string descriptor 0 read error: -22
[  267.159107][ T1194] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  267.176137][ T1194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.207558][ T1194] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  267.228215][ T1194] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  267.240850][ T1194] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  267.249014][ T1194] usb 4-1: media controller created
[  267.292371][ T1194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  267.427409][ T1194] zl10353_read_register: readreg error (reg=127, ret==0)
[  267.551193][ T1194] usb 4-1: USB disconnect, device number 16
[  267.615474][ T9385] loop4: detected capacity change from 0 to 32768
[  267.694359][ T9385] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  267.714377][ T9385] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  267.827213][ T9385] XFS (loop4): Ending clean mount
[  267.841134][ T9385] XFS (loop4): Quotacheck needed: Please wait.
[  267.939994][ T9385] XFS (loop4): Quotacheck: Done.
[  268.083706][   T28] audit: type=1800 audit(1761237166.061:58): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1304" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  268.243128][ T7336] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.290112][ T9411] loop5: detected capacity change from 0 to 1024
[  268.342811][ T9411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.538224][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.771929][ T9423] loop5: detected capacity change from 0 to 1024
[  269.074486][   T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  269.163389][ T9437] loop0: detected capacity change from 0 to 64
[  269.268894][   T23] usb 4-1: Using ep0 maxpacket: 16
[  269.279301][   T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  269.303279][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.318169][   T23] usb 4-1: Product: syz
[  269.322430][   T23] usb 4-1: Manufacturer: syz
[  269.327550][   T23] usb 4-1: SerialNumber: syz
[  269.334157][ T5841] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  269.352526][   T23] r8152-cfgselector 4-1: config 0 descriptor??
[  269.534209][ T5841] usb 6-1: Using ep0 maxpacket: 16
[  269.542167][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  269.582644][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  269.603835][   T23] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  269.613700][ T5841] usb 6-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00
[  269.631323][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.655224][ T5841] usb 6-1: config 0 descriptor??
[  269.726977][ T9435] loop4: detected capacity change from 0 to 40427
[  269.756318][ T9435] F2FS-fs (loop4): invalid crc value
[  269.770854][ T9435] F2FS-fs (loop4): Found nat_bits in checkpoint
[  269.820790][ T5874] usb 4-1: USB disconnect, device number 17
[  269.893202][ T9435] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  270.094255][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  270.123580][ T5841] wacom 0003:056A:0090.002A: hidraw0: USB HID v1f.ff Device [HID 056a:0090] on usb-dummy_hcd.5-1/input0
[  270.148198][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'.
[  270.341186][ T5841] usb 6-1: USB disconnect, device number 12
[  270.406562][ T9452] loop4: detected capacity change from 0 to 512
[  270.417358][ T9452] EXT4-fs: Ignoring removed oldalloc option
[  270.482280][ T9452] EXT4-fs (loop4): 1 truncate cleaned up
[  270.520458][ T9452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.610280][ T9458] loop0: detected capacity change from 0 to 2048
[  270.621557][ T9458] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  270.729955][ T7336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.776297][ T9458] UDF-fs: unknown compression code (0)
[  271.132127][ T9472] loop4: detected capacity change from 0 to 256
[  271.181071][ T9472] FAT-fs (loop4): Directory bread(block 64) failed
[  271.193512][ T9472] FAT-fs (loop4): Directory bread(block 65) failed
[  271.201698][ T9472] FAT-fs (loop4): Directory bread(block 66) failed
[  271.230729][ T9472] FAT-fs (loop4): Directory bread(block 67) failed
[  271.243656][ T9472] FAT-fs (loop4): Directory bread(block 68) failed
[  271.256328][ T9472] FAT-fs (loop4): Directory bread(block 69) failed
[  271.269831][ T9472] FAT-fs (loop4): Directory bread(block 70) failed
[  271.279685][ T9472] FAT-fs (loop4): Directory bread(block 71) failed
[  271.297766][ T9472] FAT-fs (loop4): Directory bread(block 72) failed
[  271.319764][ T9472] FAT-fs (loop4): Directory bread(block 73) failed
[  271.584864][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  271.794583][    T8] usb 1-1: Using ep0 maxpacket: 16
[  271.806529][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.857952][    T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  271.906079][    T8] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  271.931867][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.949537][    T8] usb 1-1: Product: syz
[  271.958234][    T8] usb 1-1: Manufacturer: syz
[  271.970771][    T8] usb 1-1: SerialNumber: syz
[  271.997530][    T8] usb 1-1: config 0 descriptor??
[  272.030127][ T9469] loop5: detected capacity change from 0 to 32768
[  272.140665][ T9469] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.241327][ T9498] loop3: detected capacity change from 0 to 128
[  272.408903][ T9469] XFS (loop5): Ending clean mount
[  272.509560][ T9469] XFS (loop5): Quotacheck needed: Please wait.
[  272.630893][ T9502] loop3: detected capacity change from 0 to 2048
[  272.631709][ T9469] XFS (loop5): Quotacheck: Done.
[  272.648170][    T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  272.684438][    T8] asix: probe of 1-1:0.0 failed with error -71
[  272.705686][    T8] usb 1-1: USB disconnect, device number 9
[  272.736041][ T9502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.842739][ T9502] overlayfs: upper fs needs to support d_type.
[  272.850684][ T9502] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  272.858290][ T9502] overlayfs: failed to set xattr on upper
[  272.864921][ T9502] overlayfs: ...falling back to redirect_dir=nofollow.
[  272.871971][ T9502] overlayfs: ...falling back to index=off.
[  272.878732][ T9502] overlayfs: ...falling back to uuid=null.
[  272.885269][ T9502] overlayfs: ...falling back to xino=off.
[  272.893701][ T9502] overlayfs: conflicting lowerdir path
[  272.926736][ T7718] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.340543][ T9507] loop3: detected capacity change from 0 to 24
[  273.395214][ T9507] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  273.484907][ T9507] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  274.386410][ T9532] loop5: detected capacity change from 0 to 256
[  274.450130][ T9519] loop0: detected capacity change from 0 to 32768
[  274.480536][ T9519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1356 (9519)
[  274.523484][ T9519] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.548076][ T9519] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  274.576156][ T9519] BTRFS info (device loop0): enabling auto defrag
[  274.593092][ T9519] BTRFS info (device loop0): using free space tree
[  274.622171][ T9532] FAT-fs (loop5): Directory bread(block 64) failed
[  274.629134][ T9532] FAT-fs (loop5): Directory bread(block 65) failed
[  274.636429][ T9532] FAT-fs (loop5): Directory bread(block 66) failed
[  274.658688][ T9532] FAT-fs (loop5): Directory bread(block 67) failed
[  274.671593][ T9532] FAT-fs (loop5): Directory bread(block 68) failed
[  274.679073][ T9532] FAT-fs (loop5): Directory bread(block 69) failed
[  274.688080][ T9532] FAT-fs (loop5): Directory bread(block 70) failed
[  274.696142][ T9532] FAT-fs (loop5): Directory bread(block 71) failed
[  274.703636][ T9532] FAT-fs (loop5): Directory bread(block 72) failed
[  274.728524][ T9532] FAT-fs (loop5): Directory bread(block 73) failed
[  274.738947][ T9522] loop3: detected capacity change from 0 to 32768
[  274.778973][ T9519] BTRFS info (device loop0): enabling ssd optimizations
[  274.810274][ T9522] JBD2: Ignoring recovery information on journal
[  274.818658][ T9519] BTRFS info (device loop0): auto enabling async discard
[  275.006432][ T9522] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  275.189986][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  275.255541][ T5788] ocfs2: Unmounting device (7,3) on (node local)
[  275.775596][ T9561] loop5: detected capacity change from 0 to 4096
[  275.875271][ T9561] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  275.926620][ T9561] ntfs3: loop5: Failed to load $Extend (-22).
[  275.932770][ T9561] ntfs3: loop5: Failed to initialize $Extend.
[  276.376897][ T9575] (null): rxe_set_mtu: Set mtu to 1024
[  276.871414][ T9567] loop3: detected capacity change from 0 to 32768
[  276.922807][ T9567] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  276.968086][ T9567] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  277.074190][   T23] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  277.204931][ T5788] ocfs2: Unmounting device (7,3) on (node local)
[  277.214408][ T9575] infiniband syz0: set active
[  277.219698][ T9575] infiniband syz0: added bond_slave_1
[  277.298209][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[  277.314205][   T23] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  277.319680][ T9575] syz0: rxe_create_cq: returned err = -12
[  277.336841][ T9575] infiniband syz0: Couldn't create ib_mad CQ
[  277.340730][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.343147][ T9575] infiniband syz0: Couldn't open port 1
[  277.379893][   T23] usb 1-1: config 0 descriptor??
[  277.509511][ T9575] RDS/IB: syz0: added
[  277.535469][ T9575] smc: adding ib device syz0 with port count 1
[  277.542005][ T9575] smc:    ib device syz0 port 1 has pnetid 
[  277.628001][ T9600] loop3: detected capacity change from 0 to 512
[  277.682186][ T9600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  277.715816][ T9600] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  277.733873][ T9602] loop5: detected capacity change from 0 to 1024
[  277.752513][ T9602] EXT4-fs: Ignoring removed bh option
[  277.792058][ T9600] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1388: invalid indirect mapped block 4294967295 (level 1)
[  277.811807][   T23] ortek 0003:1223:3F07.002B: unbalanced collection at end of report description
[  277.832696][   T23] ortek: probe of 0003:1223:3F07.002B failed with error -22
[  277.858486][ T9602] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  277.861479][ T9600] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1388: invalid indirect mapped block 4294967295 (level 1)
[  277.930962][ T9602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.953249][ T9600] EXT4-fs (loop3): 2 truncates cleaned up
[  277.964809][ T9600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.013809][   T23] usb 1-1: USB disconnect, device number 10
[  278.053434][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.060772][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.343877][ T9638] loop0: detected capacity change from 0 to 256
[  279.504854][ T9638] FAT-fs (loop0): Directory bread(block 64) failed
[  279.555808][ T9638] FAT-fs (loop0): Directory bread(block 65) failed
[  279.573822][ T9638] FAT-fs (loop0): Directory bread(block 66) failed
[  279.588045][ T9638] FAT-fs (loop0): Directory bread(block 67) failed
[  279.595525][ T9638] FAT-fs (loop0): Directory bread(block 68) failed
[  279.602113][ T9638] FAT-fs (loop0): Directory bread(block 69) failed
[  279.609898][ T9638] FAT-fs (loop0): Directory bread(block 70) failed
[  279.623841][ T9638] FAT-fs (loop0): Directory bread(block 71) failed
[  279.661140][ T9638] FAT-fs (loop0): Directory bread(block 72) failed
[  279.675596][ T9638] FAT-fs (loop0): Directory bread(block 73) failed
[  279.991928][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'.
[  280.203007][ T9664] loop5: detected capacity change from 0 to 512
[  280.257400][ T9664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.306732][ T9664] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.353286][ T9665] loop0: detected capacity change from 0 to 4096
[  280.384878][ T9665] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  280.402060][ T9669] loop4: detected capacity change from 0 to 512
[  280.433862][ T9669] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1419: inode has both inline data and extents flags
[  280.448473][ T9669] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1419: couldn't read orphan inode 15 (err -117)
[  280.495850][ T9669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.585850][ T9665] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  280.617213][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.689513][ T7336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.704429][   T31] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  280.714181][ T5787] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  280.720780][ T5787] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  280.810599][ T5787] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  280.822008][   T11] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  281.062270][ T9676] loop4: detected capacity change from 0 to 4096
[  281.081703][ T9676] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  281.953201][ T9680] loop3: detected capacity change from 0 to 32768
[  282.046337][ T9680] find_entry called with index >= next_index
[  282.232911][ T9682] loop0: detected capacity change from 0 to 32768
[  283.323019][ T9722] loop5: detected capacity change from 0 to 1024
[  283.326541][ T9722] EXT4-fs: Ignoring removed orlov option
[  283.363373][ T9722] EXT4-fs: Ignoring removed nomblk_io_submit option
[  283.396072][ T9722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.524217][   T23] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  283.637266][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.706367][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  283.706403][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  283.706431][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  283.706474][   T23] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  283.706498][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.709221][   T23] usb 4-1: config 0 descriptor??
[  283.844826][ T9720] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  284.098220][ T9739] netlink: 'syz.4.1449': attribute type 6 has an invalid length.
[  284.278784][   T23] uclogic 0003:5543:0004.002C: No inputs registered, leaving
[  284.312431][   T23] uclogic 0003:5543:0004.002C: hidraw0: USB HID v0.01 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0
[  284.507537][   T23] usb 4-1: USB disconnect, device number 18
[  284.592812][ T9752] netlink: 'syz.0.1454': attribute type 1 has an invalid length.
[  284.744614][ T1194] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  284.859327][ T9760] loop4: detected capacity change from 0 to 256
[  284.918926][ T9760] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  284.941978][ T9760] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  284.972416][ T1194] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  284.992005][ T1194] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  285.018710][ T1194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  285.037852][ T1194] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  285.050409][ T1194] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  285.066659][ T1194] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  285.086064][ T1194] usb 6-1: string descriptor 0 read error: -22
[  285.092862][ T1194] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  285.128137][ T1194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.191036][ T1194] usb 6-1: config 0 descriptor??
[  285.211455][ T9748] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  285.230126][ T1194] hub 6-1:0.0: bad descriptor, ignoring hub
[  285.242670][ T1194] hub: probe of 6-1:0.0 failed with error -5
[  285.296559][ T1194] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28
[  285.718294][ T1194] usb 6-1: USB disconnect, device number 13
[  285.874244][   T23] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  286.048270][ T9781] loop4: detected capacity change from 0 to 128
[  286.068315][   T23] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  286.082516][ T9781] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  286.095377][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  286.113510][   T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.148864][   T23] usb 4-1: config 0 has no interface number 0
[  286.155625][   T23] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 3942, setting to 64
[  286.174164][ T9781] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.195503][   T23] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  286.260123][   T23] usb 4-1: config 0 interface 52 has no altsetting 0
[  286.274738][ T5874] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  286.282896][   T23] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  286.314635][   T23] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  286.322969][   T23] usb 4-1: Product: syz
[  286.343035][   T23] usb 4-1: SerialNumber: syz
[  286.376883][   T23] usb 4-1: config 0 descriptor??
[  286.379403][ T7336] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.484292][ T5874] usb 1-1: Using ep0 maxpacket: 8
[  286.542166][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short
[  286.569768][ T5874] usb 1-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[  286.595000][ T5874] usb 1-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  286.641750][ T5874] usb 1-1: config 4 interface 0 has no altsetting 0
[  286.668541][ T5874] usb 1-1: string descriptor 0 read error: -22
[  286.673116][   T23] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input29
[  286.684121][ T5874] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  286.684151][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.790564][ T5874] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  286.875134][ T5874] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  286.890343][ T1194] usb 4-1: USB disconnect, device number 19
[  286.890535][    C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  286.933831][ T5874] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  286.962026][ T9791] loop5: detected capacity change from 0 to 512
[  287.005682][ T5874] usb 1-1: media controller created
[  287.022519][ T9791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  287.059237][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  287.074345][ T9791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  287.118263][ T9791] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1471: invalid indirect mapped block 4294967295 (level 1)
[  287.137573][ T5874] zl10353_read_register: readreg error (reg=127, ret==0)
[  287.195774][ T9791] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1471: invalid indirect mapped block 4294967295 (level 1)
[  287.247645][ T9791] EXT4-fs (loop5): 2 truncates cleaned up
[  287.264986][ T5874] usb 1-1: USB disconnect, device number 11
[  287.303441][ T9791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.528608][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.630356][ T9799] loop3: detected capacity change from 0 to 512
[  287.681873][ T9799] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1475: inode has both inline data and extents flags
[  287.738260][ T9799] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1475: couldn't read orphan inode 15 (err -117)
[  287.856481][ T9799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.039339][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.178365][ T9812] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  288.193594][ T9812] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  288.284132][ T2132] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  288.498787][ T2132] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  288.511918][ T2132] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  288.533247][ T2132] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  288.543651][ T2132] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  288.559665][ T2132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  288.582444][ T2132] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  288.619563][ T2132] usb 1-1: string descriptor 0 read error: -22
[  288.637446][ T2132] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  288.660816][ T2132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.685525][ T2132] usb 1-1: config 0 descriptor??
[  288.695634][ T9808] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  288.709359][ T2132] hub 1-1:0.0: bad descriptor, ignoring hub
[  288.720484][ T2132] hub: probe of 1-1:0.0 failed with error -5
[  288.755138][ T2132] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30
[  289.094889][ T2132] usb 1-1: USB disconnect, device number 12
[  289.283038][ T9836] loop3: detected capacity change from 0 to 2048
[  289.319676][ T9836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  289.441326][ T9825] loop4: detected capacity change from 0 to 32768
[  289.491136][ T9832] loop5: detected capacity change from 0 to 32768
[  289.596760][ T9832] read_mapping_page failed!
[  289.614750][ T9832] ERROR: (device loop5): txCommit: 
[  289.614750][ T9832] 
[  289.650300][ T9839] jfs_mkdir: dtSearch returned -17
[  290.497911][ T9855] loop0: detected capacity change from 0 to 4096
[  291.056622][ T9876] loop4: detected capacity change from 0 to 1024
[  291.092772][ T9876] hfsplus: bad catalog entry type
[  291.156853][ T3519] hfsplus: b-tree write err: -5, ino 4
[  291.314785][    T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  291.516814][    T8] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  291.564760][    T8] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  291.565049][ T2132] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  291.584896][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.593020][    T8] usb 1-1: Product: syz
[  291.604931][    T8] usb 1-1: Manufacturer: syz
[  291.614983][    T8] usb 1-1: SerialNumber: syz
[  291.631408][    T8] usb 1-1: config 0 descriptor??
[  291.643840][    T8] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  291.653604][ T9889] loop4: detected capacity change from 0 to 512
[  291.681969][ T9889] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  291.698117][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  291.717246][    T8] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  291.721104][ T9889] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  291.736731][    T8] usb 1-1: media controller created
[  291.760116][ T9879] loop5: detected capacity change from 0 to 32768
[  291.772848][ T9889] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  291.784036][ T2132] usb 4-1: Using ep0 maxpacket: 16
[  291.790351][ T9889] System zones: 0-2, 18-18, 34-35
[  291.798406][ T2132] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  291.807678][ T2132] usb 4-1: config 0 has no interface number 0
[  291.813889][ T2132] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  291.826071][ T9889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.838618][ T2132] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  291.859487][ T2132] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  291.860240][ T9877] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  291.868896][ T2132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.889750][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  291.904042][ T2132] usb 4-1: Product: syz
[  291.908404][ T2132] usb 4-1: Manufacturer: syz
[  291.913079][ T2132] usb 4-1: SerialNumber: syz
[  291.928164][ T9877] dvb-usb: bulk message failed: -22 (7/0)
[  291.948340][ T2132] usb 4-1: config 0 descriptor??
[  291.954745][ T9882] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  291.970545][ T7336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.975998][ T9882] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  292.195884][ T9894] loop4: detected capacity change from 0 to 1024
[  292.212172][    T8] DVB: Unable to find symbol mt352_attach()
[  292.212613][ T9882] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  292.227754][ T9894] EXT4-fs: Ignoring removed nobh option
[  292.233433][ T9894] EXT4-fs: Ignoring removed bh option
[  292.244663][ T9882] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  292.275614][ T9894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  292.363162][ T9894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.441592][    T8] DVB: Unable to find symbol nxt6000_attach()
[  292.453012][    T8] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  292.468553][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31
[  292.497155][    T8] dvb-usb: schedule remote query interval to 1000 msecs.
[  292.514724][    T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  292.532174][    T8] dvb-usb: bulk message failed: -22 (7/0)
[  292.541012][    T8] dvb-usb: bulk message failed: -22 (7/0)
[  292.556402][    T8] usb 1-1: USB disconnect, device number 13
[  292.563259][ T7336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.694836][ T2132] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  292.732465][ T2132] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  292.758144][    T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  292.774681][ T2132] asix: probe of 4-1:0.251 failed with error -71
[  292.823913][ T9905] netlink: 'syz.4.1523': attribute type 5 has an invalid length.
[  292.834779][ T2132] usb 4-1: USB disconnect, device number 20
[  292.859615][ T9908] loop5: detected capacity change from 0 to 512
[  292.905739][ T9908] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  292.977944][ T9908] EXT4-fs (loop5): 1 truncate cleaned up
[  292.995759][ T9911] loop4: detected capacity change from 0 to 256
[  293.015451][ T9911] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  293.016059][ T9908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.128801][ T9915] loop0: detected capacity change from 0 to 1024
[  293.138082][ T9915] EXT4-fs: Ignoring removed orlov option
[  293.143820][ T9915] EXT4-fs: Ignoring removed nomblk_io_submit option
[  293.194781][ T9915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.274417][ T9908] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.1525: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  293.444943][ T9908] EXT4-fs (loop5): Remounting filesystem read-only
[  293.451982][ T9908] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.1525: Deleting old file: nlink 5, error=-117
[  293.470242][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.572132][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.864856][ T2132] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  293.995237][ T9933] loop5: detected capacity change from 0 to 1024
[  294.002826][ T9933] EXT4-fs: Ignoring removed nobh option
[  294.034897][ T9933] EXT4-fs: Ignoring removed bh option
[  294.043851][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1538'.
[  294.055608][ T9933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  294.095396][ T2132] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.124021][ T2132] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.146898][ T2132] usb 1-1: config 0 interface 0 has no altsetting 0
[  294.153591][ T2132] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  294.165675][ T9933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.194322][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.215168][ T2132] usb 1-1: config 0 descriptor??
[  294.265277][ T9933] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 16: comm syz.5.1536: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=5, size=1024 fake=1
[  294.387442][ T9944] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4
[  294.417580][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.613725][ T9931] loop4: detected capacity change from 0 to 32768
[  294.656969][ T2132] hid-u2fzero 0003:20A0:4287.002D: item fetching failed at offset 4/5
[  294.677860][ T2132] hid-u2fzero: probe of 0003:20A0:4287.002D failed with error -22
[  294.707007][ T9931] JBD2: Ignoring recovery information on journal
[  294.758261][ T9931] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  294.867986][ T2132] usb 1-1: USB disconnect, device number 14
[  294.968668][ T9952] loop3: detected capacity change from 0 to 4096
[  295.008425][ T7336] ocfs2: Unmounting device (7,4) on (node local)
[  295.047587][ T9957] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.323865][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1546'.
[  295.847230][    T8] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  296.068224][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.083869][    T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  296.093874][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.125199][    T8] usb 4-1: config 0 descriptor??
[  296.208857][ T9980] netlink: 'syz.0.1555': attribute type 1 has an invalid length.
[  296.217855][ T9980] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1555'.
[  296.234976][ T9979] loop4: detected capacity change from 0 to 2048
[  296.284650][ T9979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.577920][    T8] wacom 0003:056A:0059.002E: hidraw0: USB HID v10.00 Device [HID 056a:0059] on usb-dummy_hcd.3-1/input0
[  296.797731][ T2132] usb 4-1: USB disconnect, device number 21
[  296.953301][ T9982] loop0: detected capacity change from 0 to 32768
[  296.988958][ T9982] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  297.044965][    T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  297.045336][ T9982] XFS (loop0): Ending clean mount
[  297.132917][ T5787] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  297.287653][    T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  297.300232][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.309326][    T8] usb 5-1: Product: syz
[  297.313555][    T8] usb 5-1: Manufacturer: syz
[  297.318776][    T8] usb 5-1: SerialNumber: syz
[  297.338906][    T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  297.375250][ T1194] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  297.974776][    T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  298.020030][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'.
[  298.030075][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1567'.
[  298.048442][T10013] nbd: socks must be embedded in a SOCK_ITEM attr
[  298.065966][ T5874] usb 5-1: USB disconnect, device number 11
[  298.196575][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.214069][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.223896][    T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  298.243846][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.279088][    T8] usb 1-1: config 0 descriptor??
[  298.320393][T10015] loop3: detected capacity change from 0 to 4096
[  298.344773][T10015] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  298.419466][T10015] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  298.526471][T10021] loop5: detected capacity change from 0 to 512
[  298.588690][T10021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.613658][T10021] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  298.670275][ T1194] usb 5-1: Service connection timeout for: 256
[  298.708055][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1573'.
[  298.709620][ T1194] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  298.757034][    T8] arvo 0003:1E7D:30D4.002F: unbalanced collection at end of report description
[  298.802105][ T1194] ath9k_htc: Failed to initialize the device
[  298.810773][    T8] arvo 0003:1E7D:30D4.002F: parse failed
[  298.831272][    T8] arvo: probe of 0003:1E7D:30D4.002F failed with error -22
[  298.840240][ T5874] usb 5-1: ath9k_htc: USB layer deinitialized
[  298.879762][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.018772][    T8] usb 1-1: USB disconnect, device number 15
[  299.054710][ T5789] Bluetooth: hci2: command 0x0406 tx timeout
[  299.810914][T10037] loop5: detected capacity change from 0 to 32768
[  299.871157][T10037] JBD2: Ignoring recovery information on journal
[  299.913915][T10037] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  300.041149][T10037] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  300.099984][T10037] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  300.160446][T10037] OCFS2: File system is now read-only.
[  300.194831][T10037] (syz.5.1575,10037,0):ocfs2_search_one_group:1684 ERROR: status = -30
[  300.222661][T10037] (syz.5.1575,10037,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30
[  300.264724][T10037] (syz.5.1575,10037,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  300.273334][T10037] (syz.5.1575,10037,0):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  300.314762][T10037] (syz.5.1575,10037,0):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  300.342980][T10037] (syz.5.1575,10037,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  300.362636][T10037] (syz.5.1575,10037,1):ocfs2_mknod:385 ERROR: status = -30
[  300.371034][T10037] (syz.5.1575,10037,1):ocfs2_mknod:502 ERROR: status = -30
[  300.384670][T10037] (syz.5.1575,10037,1):ocfs2_create:676 ERROR: status = -30
[  300.454557][ T7718] ocfs2: Unmounting device (7,5) on (node local)
[  300.584490][ T5841] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  300.776589][ T5841] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  300.806616][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.828473][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.848411][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1597'.
[  300.848971][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  300.881796][ T5841] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  300.906133][ T5841] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  300.934338][ T5841] usb 5-1: Manufacturer: syz
[  300.962154][ T5841] usb 5-1: config 0 descriptor??
[  301.420297][ T5841] appleir 0003:05AC:8243.0030: item fetching failed at offset 0/1
[  301.455087][ T5841] appleir 0003:05AC:8243.0030: parse failed
[  301.461217][ T5841] appleir: probe of 0003:05AC:8243.0030 failed with error -22
[  301.674492][ T5841] usb 5-1: USB disconnect, device number 12
[  301.766075][T10100] tmpfs: Cannot enable quota on remount
[  301.932750][T10090] loop0: detected capacity change from 0 to 40427
[  301.960071][T10090] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  301.974313][T10090] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  302.068190][T10090] F2FS-fs (loop0): Found nat_bits in checkpoint
[  302.248766][T10090] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  302.274364][T10090] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  302.315659][T10098] loop3: detected capacity change from 0 to 32768
[  302.341245][T10098] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1607 (10098)
[  302.403915][T10098] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  302.426738][T10098] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  302.438577][   T28] audit: type=1800 audit(1761237200.411:59): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1602" name="bus" dev="loop0" ino=10 res=0 errno=0
[  302.472899][T10098] BTRFS info (device loop3): force zlib compression, level 3
[  302.501270][T10098] BTRFS info (device loop3): force clearing of disk cache
[  302.511410][T10098] BTRFS info (device loop3): setting nodatasum
[  302.523648][T10098] BTRFS info (device loop3): disabling tree log
[  302.553665][T10098] BTRFS info (device loop3): enabling disk space caching
[  302.587482][T10098] BTRFS info (device loop3): disk space caching is enabled
[  302.606158][ T5787] syz-executor: attempt to access beyond end of device
[  302.606158][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  302.635777][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  302.695805][T10118] netlink: 'syz.4.1613': attribute type 3 has an invalid length.
[  302.866314][T10098] BTRFS info (device loop3): auto enabling async discard
[  302.918464][T10098] BTRFS info (device loop3): rebuilding free space tree
[  302.985368][T10098] BTRFS info (device loop3): disabling free space tree
[  302.992365][T10098] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  303.042022][T10098] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  303.319290][T10138] loop5: detected capacity change from 0 to 128
[  303.354714][T10098] BTRFS warning (device loop3): can't set the compress_lzo feature bit while mounted
[  303.396592][T10138] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  303.468747][T10138] hpfs: filesystem error: improperly stopped
[  303.510405][T10138] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  303.565429][T10138] hpfs: You really don't want any checks? You are crazy...
[  303.578387][ T5788] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  303.616793][T10138] hpfs: hpfs_map_sector(): read error
[  303.644238][T10138] hpfs: code page support is disabled
[  303.649891][T10138] hpfs: hpfs_map_4sectors(): unaligned read
[  303.688054][T10138] hpfs: hpfs_map_4sectors(): unaligned read
[  303.713189][T10138] hpfs: filesystem error: unable to find root dir
[  304.189387][T10142] loop5: detected capacity change from 0 to 8
[  304.322430][T10142] SQUASHFS error: Unable to read directory block [629:46]
[  304.436826][T10136] loop4: detected capacity change from 0 to 131072
[  304.451588][T10136] F2FS-fs (loop4): build fault injection attr: rate: 7, type: 0x7ffff
[  304.460437][T10136] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x40004
[  304.469288][T10136] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  304.511633][T10136] F2FS-fs (loop4): invalid crc value
[  304.557489][T10136] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580
[  304.575250][T10136] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[  304.589597][T10136] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[  304.601587][T10136] F2FS-fs (loop4): Found nat_bits in checkpoint
[  304.641421][T10136] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[  304.652918][T10136] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920
[  304.714353][T10136] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  304.733673][T10136] F2FS-fs (loop4): Failed to read root inode
[  305.313820][T10163] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  305.393486][T10169] loop4: detected capacity change from 0 to 128
[  305.467253][T10169] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.509560][T10169] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  305.614569][ T5841] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  305.706140][T10169] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.1630: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  305.773886][T10169] EXT4-fs (loop4): Remounting filesystem read-only
[  305.814234][ T5841] usb 4-1: Using ep0 maxpacket: 16
[  305.826419][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.861144][ T7336] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.873301][ T5841] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  305.909623][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.963205][ T5841] usb 4-1: config 0 descriptor??
[  306.455642][ T5841] creative-sb0540 0003:041E:3100.0031: item fetching failed at offset 1/5
[  306.476585][ T5841] creative-sb0540 0003:041E:3100.0031: parse failed
[  306.483708][ T5841] creative-sb0540: probe of 0003:041E:3100.0031 failed with error -22
[  306.631687][T10190] loop4: detected capacity change from 0 to 64
[  306.701265][ T5841] usb 4-1: USB disconnect, device number 22
[  306.861609][T10180] loop5: detected capacity change from 0 to 32768
[  306.907790][T10180] JFS: Invalid stbl[2] = -55 for inode 2, block = 0
[  307.522031][T10209] loop3: detected capacity change from 0 to 1024
[  307.834974][ T5874] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  307.928152][T10222] loop5: detected capacity change from 0 to 512
[  307.996613][T10222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  308.024711][ T5874] usb 1-1: Using ep0 maxpacket: 16
[  308.035289][ T5874] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  308.046489][T10222] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.054025][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.074558][ T5874] usb 1-1: Product: syz
[  308.084590][ T5874] usb 1-1: Manufacturer: syz
[  308.094534][ T5874] usb 1-1: SerialNumber: syz
[  308.106646][ T5874] r8152-cfgselector 1-1: config 0 descriptor??
[  308.148717][   T28] audit: type=1800 audit(1761237206.131:60): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1657" name="bus" dev="loop5" ino=18 res=0 errno=0
[  308.227569][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  308.353705][ T5874] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  308.443258][T10219] loop4: detected capacity change from 0 to 32768
[  308.443561][T10231] netlink: 'syz.5.1660': attribute type 1 has an invalid length.
[  308.492617][T10219] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  308.553860][T10219] (syz.4.1656,10219,1):ocfs2_read_blocks:239 ERROR: status = -12
[  308.567170][ T5874] usb 1-1: USB disconnect, device number 16
[  308.578007][T10219] (syz.4.1656,10219,0):ocfs2_trim_mainbm:7611 ERROR: status = -12
[  308.633341][ T7336] ocfs2: Unmounting device (7,4) on (node local)
[  308.722834][T10237] loop5: detected capacity change from 0 to 16
[  308.751976][T10237] erofs: (device loop5): mounted with root inode @ nid 36.
[  308.998124][ T5841] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  309.205436][ T5841] usb 5-1: Using ep0 maxpacket: 32
[  309.232121][ T5841] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.253480][ T5841] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0
[  309.284048][ T5841] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  309.314081][ T5841] usb 5-1: config 0 interface 0 has no altsetting 0
[  309.320959][ T5841] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  309.367404][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.398297][ T5841] usb 5-1: config 0 descriptor??
[  309.826433][ T5841] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  309.839738][T10245] loop0: detected capacity change from 0 to 32768
[  309.854051][ T5841] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  309.861954][ T5841] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  309.883143][ T5841] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  309.902735][ T5841] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  309.934627][ T5841] hid-thrustmaster 0003:044F:B65D.0032: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  309.975062][ T5841] hid-thrustmaster 0003:044F:B65D.0032: Unexpected non-int endpoint
[  310.127076][    C1] hid-thrustmaster 0003:044F:B65D.0032: URB to get model id failed with error -71
[  310.136630][ T5874] usb 5-1: USB disconnect, device number 13
[  310.216257][T10258] fido_id[10258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  310.358583][T10256] loop5: detected capacity change from 0 to 32768
[  311.137995][T10275] loop5: detected capacity change from 0 to 4096
[  311.262333][T10277] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.694798][ T1194] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  311.906346][ T1194] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  311.927606][ T1194] usb 4-1: config 0 has no interface number 0
[  311.952104][ T1194] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  311.975533][ T1194] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  311.999192][T10293] loop0: detected capacity change from 0 to 1024
[  312.014885][ T1194] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  312.040422][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.077267][ T1194] usb 4-1: config 0 descriptor??
[  312.097296][T10279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  312.148518][ T1194] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  312.213172][   T11] hfsplus: b-tree write err: -5, ino 4
[  312.396377][T10298] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  312.457178][T10298] macvtap1: entered allmulticast mode
[  312.488196][T10298] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  312.540502][ T5841] usb 4-1: USB disconnect, device number 23
[  312.550554][T10298] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  312.571596][T10298] mac80211_hwsim hwsim14 wlan1: left promiscuous mode
[  312.814905][ T2132] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  312.859578][T10307] loop0: detected capacity change from 0 to 256
[  312.941843][T10307] FAT-fs (loop0): Directory bread(block 64) failed
[  312.954090][T10307] FAT-fs (loop0): Directory bread(block 65) failed
[  312.974219][T10307] FAT-fs (loop0): Directory bread(block 66) failed
[  312.980833][T10307] FAT-fs (loop0): Directory bread(block 67) failed
[  312.988116][T10307] FAT-fs (loop0): Directory bread(block 68) failed
[  312.995683][T10307] FAT-fs (loop0): Directory bread(block 69) failed
[  313.002434][T10307] FAT-fs (loop0): Directory bread(block 70) failed
[  313.009589][T10307] FAT-fs (loop0): Directory bread(block 71) failed
[  313.019667][T10307] FAT-fs (loop0): Directory bread(block 72) failed
[  313.027872][ T2132] usb 5-1: Using ep0 maxpacket: 16
[  313.044529][T10307] FAT-fs (loop0): Directory bread(block 73) failed
[  313.054772][ T2132] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  313.062913][ T2132] usb 5-1: config 0 has no interface number 0
[  313.114492][ T2132] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2
[  313.123607][ T2132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.153993][ T2132] usb 5-1: Product: syz
[  313.158232][ T2132] usb 5-1: Manufacturer: syz
[  313.174660][ T2132] usb 5-1: SerialNumber: syz
[  313.186658][ T2132] usb 5-1: config 0 descriptor??
[  313.209996][ T2132] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.69/input/input35
[  313.407723][ T5142] bcm5974 5-1:0.69: could not read from device
[  313.445916][ T5142] bcm5974 5-1:0.69: could not read from device
[  313.464616][ T2132] usb 5-1: USB disconnect, device number 14
[  313.483464][ T5142] bcm5974 5-1:0.69: could not read from device
[  313.671535][T10320] netlink: 'syz.0.1700': attribute type 11 has an invalid length.
[  313.906809][T10328] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  313.932555][T10328] macvtap1: entered allmulticast mode
[  313.949066][T10328] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  313.989259][T10328] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  314.009345][T10328] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  314.025768][T10330] loop5: detected capacity change from 0 to 512
[  314.123865][T10330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.173557][T10330] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  314.377867][   T28] audit: type=1326 audit(1761237212.362:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  314.378744][ T7718] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.424899][   T28] audit: type=1326 audit(1761237212.392:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  314.452512][ T1194] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  314.482875][   T28] audit: type=1326 audit(1761237212.392:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  314.564958][   T28] audit: type=1326 audit(1761237212.392:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  314.670377][ T1194] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  314.680380][ T1194] usb 5-1: config 0 has no interface number 0
[  314.687592][   T28] audit: type=1326 audit(1761237212.392:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  314.729803][ T1194] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  314.750022][ T1194] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  314.764549][   T28] audit: type=1326 audit(1761237212.392:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  314.789171][ T1194] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  314.809412][ T1194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.828492][   T28] audit: type=1326 audit(1761237212.392:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.3.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  314.836440][T10345] loop3: detected capacity change from 0 to 256
[  314.865861][ T1194] usb 5-1: config 0 descriptor??
[  314.871925][T10337] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  314.908225][ T1194] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  314.966920][T10345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  315.020821][T10345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  315.070185][T10345] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  315.155471][T10345] UDF-fs: Scanning with blocksize 512 failed
[  315.175514][ T2132] usb 5-1: USB disconnect, device number 15
[  315.222317][T10345] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  315.252236][T10345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  315.545251][T10357] loop0: detected capacity change from 0 to 4096
[  315.643648][T10357] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  315.661136][T10357] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  315.669167][T10359] loop3: detected capacity change from 0 to 512
[  315.797471][T10359] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1717: bad orphan inode 11862016
[  315.894211][T10359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  315.926128][T10359] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.930525][T10357] ntfs3: Cannot use different iocharset when remounting!
[  316.039257][T10359] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 ro.
[  316.056312][   T11] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  316.063267][ T5787] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  316.092243][T10359] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000.
[  316.104821][ T5787] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  316.113178][ T5787] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  316.132075][   T31] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  316.187322][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  316.428488][T10369] loop0: detected capacity change from 0 to 4096
[  316.466082][T10374] (null): rxe_set_mtu: Set mtu to 1024
[  316.482297][T10375] tipc: Started in network mode
[  316.505050][T10375] tipc: Node identity 0000000000000000000000571e000001, cluster identity 4711
[  316.512162][T10374] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  316.538100][T10369] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  316.554079][T10375] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  316.576244][T10369] ntfs3: loop0: Failed to load $Extend (-22).
[  316.582402][T10369] ntfs3: loop0: Failed to initialize $Extend.
[  316.634425][T10369] ntfs3: loop0: ino=5, "/" directory corrupted
[  316.651492][T10369] ntfs3: loop0: ino=5, "/" directory corrupted
[  316.675019][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1726'.
[  316.958908][T10387] netlink: 'syz.3.1729': attribute type 32 has an invalid length.
[  316.993208][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'.
[  317.050701][T10387] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  317.420979][T10394] loop0: detected capacity change from 0 to 4096
[  317.462287][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.469116][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  317.566230][T10394] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  317.593225][T10394] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  317.705243][T10394] ntfs3: loop0: ino=21, "blkio.bfq.io_queued_recursive" fallocate(0x10) is not supported
[  317.875409][T10391] loop5: detected capacity change from 0 to 32768
[  317.939713][T10391] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  318.027837][T10391] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  318.121398][   T28] audit: type=1326 audit(1761237216.102:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  318.173407][   T28] audit: type=1326 audit(1761237216.102:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  318.285630][   T28] audit: type=1326 audit(1761237216.132:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.3.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  318.513436][T10414] loop4: detected capacity change from 0 to 4096
[  318.685968][T10407] loop0: detected capacity change from 0 to 32768
[  318.718130][T10407] (syz.0.1738,10407,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.719507][T10414] ntfs: volume version 3.1.
[  318.767592][T10407] (syz.0.1738,10407,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.869153][T10407] JBD2: Ignoring recovery information on journal
[  318.979292][T10407] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  319.304652][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  319.330315][T10412] loop3: detected capacity change from 0 to 32768
[  319.462680][T10412] read_mapping_page failed!
[  319.483345][T10412] ERROR: (device loop3): txCommit: 
[  319.483345][T10412] 
[  319.546458][T10420] jfs_mkdir: dtSearch returned -17
[  320.009903][ T7718] ocfs2: Unmounting device (7,5) on (node local)
[  320.016755][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  320.043171][T10424] loop0: detected capacity change from 0 to 4096
[  320.140317][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'.
[  320.158854][T10429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  321.300489][T10438] loop0: detected capacity change from 0 to 32768
[  321.339807][T10438] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  321.411666][T10438] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  321.575824][T10447] loop4: detected capacity change from 0 to 32768
[  321.689704][T10447] read_mapping_page failed!
[  321.720821][T10447] ERROR: (device loop4): txCommit: 
[  321.720821][T10447] 
[  321.751782][T10457] jfs_mkdir: dtSearch returned -17
[  322.017059][T10459] loop5: detected capacity change from 0 to 2048
[  322.056240][T10459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  322.115707][T10459] overlayfs: upper fs needs to support d_type.
[  322.136396][T10459] overlayfs: cleanup of 'work/#13' failed (-2)
[  322.167303][T10459] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  322.205807][T10459] overlayfs: failed to set xattr on upper
[  322.244661][T10459] overlayfs: ...falling back to redirect_dir=nofollow.
[  322.261929][T10459] overlayfs: ...falling back to index=off.
[  322.275370][T10459] overlayfs: ...falling back to uuid=null.
[  322.288917][T10452] loop3: detected capacity change from 0 to 32768
[  322.297794][T10452] XFS: ikeep mount option is deprecated.
[  322.303548][T10452] XFS: noikeep mount option is deprecated.
[  322.368450][ T7718] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  322.401584][T10452] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  322.411108][ T7718] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  322.761142][T10452] XFS (loop3): Ending clean mount
[  323.022930][ T5788] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  323.111269][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.137827][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  323.384382][ T2132] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  323.528945][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.584465][ T2132] usb 5-1: Using ep0 maxpacket: 16
[  323.642938][ T2132] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  323.664104][ T2132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.687270][ T2132] usb 5-1: config 0 descriptor??
[  323.701469][ T2132] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  323.745605][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.772421][T10476] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1763'.
[  323.880985][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.918378][ T2132] usb 5-1: Detected FT232B
[  324.274214][   T11] tipc: Left network mode
[  324.317013][ T2132] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  324.352366][ T2132] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  324.412786][ T2132] usb 5-1: USB disconnect, device number 16
[  324.429272][ T2132] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  324.466891][ T2132] ftdi_sio 5-1:0.0: device disconnected
[  324.533801][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.556694][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.565980][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.576360][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.587832][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  324.595941][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  325.012819][T10492] netlink: 'syz.0.1779': attribute type 10 has an invalid length.
[  325.085641][T10492] batman_adv: batadv0: Adding interface: team0
[  325.096614][T10492] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.128685][T10492] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  325.161572][T10494] netlink: 'syz.0.1779': attribute type 10 has an invalid length.
[  325.175292][T10494] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1779'.
[  325.188528][T10494] team0: entered promiscuous mode
[  325.193694][T10494] team_slave_0: entered promiscuous mode
[  325.201723][T10494] team_slave_1: entered promiscuous mode
[  325.221628][T10494] 8021q: adding VLAN 0 to HW filter on device team0
[  325.231557][T10494] batman_adv: batadv0: Interface activated: team0
[  325.239003][T10494] batman_adv: batadv0: Interface deactivated: team0
[  325.246565][T10494] batman_adv: batadv0: Removing interface: team0
[  325.258416][T10494] bridge0: port 3(team0) entered blocking state
[  325.266737][T10494] bridge0: port 3(team0) entered disabled state
[  325.273387][T10494] team0: entered allmulticast mode
[  325.282605][T10494] team_slave_0: entered allmulticast mode
[  325.290694][T10494] team_slave_1: entered allmulticast mode
[  325.306248][T10494] bridge0: port 3(team0) entered blocking state
[  325.313329][T10494] bridge0: port 3(team0) entered forwarding state
[  325.328071][T10490] loop4: detected capacity change from 0 to 32768
[  325.406888][T10490] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  325.468960][T10490] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  325.924915][T10485] chnl_net:caif_netlink_parms(): no params data found
[  326.296867][   T28] kauditd_printk_skb: 7 callbacks suppressed
[  326.296883][   T28] audit: type=1326 audit(1761237224.282:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  326.446503][   T28] audit: type=1326 audit(1761237224.322:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  326.562069][   T28] audit: type=1326 audit(1761237224.332:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  326.609876][   T11] hsr_slave_0: left promiscuous mode
[  326.614433][   T28] audit: type=1326 audit(1761237224.332:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  326.646004][   T11] hsr_slave_1: left promiscuous mode
[  326.674584][ T5798] Bluetooth: hci0: command tx timeout
[  326.682651][T10512] loop3: detected capacity change from 0 to 1024
[  326.691692][T10512] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  326.694931][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.720106][   T28] audit: type=1326 audit(1761237224.332:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  326.743423][   T28] audit: type=1326 audit(1761237224.332:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  326.767640][   T28] audit: type=1326 audit(1761237224.332:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3c98efc9 code=0x7ffc0000
[  326.784026][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.817743][T10512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.851664][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.874495][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.892790][T10512] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  326.929747][   T11] bridge_slave_1: left allmulticast mode
[  326.956085][   T11] bridge_slave_1: left promiscuous mode
[  326.962107][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.977264][   T11] bridge_slave_0: left allmulticast mode
[  326.982976][   T11] bridge_slave_0: left promiscuous mode
[  327.004748][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.010145][T10512] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 44 with error 28
[  327.055210][T10512] EXT4-fs (loop3): This should not happen!! Data will be lost
[  327.055210][T10512] 
[  327.074119][T10512] EXT4-fs (loop3): Total free blocks count 0
[  327.094536][T10512] EXT4-fs (loop3): Free/Dirty block details
[  327.124822][T10512] EXT4-fs (loop3): free_blocks=20480
[  327.131453][T10512] EXT4-fs (loop3): dirty_blocks=48
[  327.139663][   T11] veth1_macvtap: left promiscuous mode
[  327.144779][T10512] EXT4-fs (loop3): Block reservation details
[  327.164327][T10512] EXT4-fs (loop3): i_reserved_data_blocks=3
[  327.165063][   T11] veth0_macvtap: left promiscuous mode
[  327.189897][   T11] veth1_vlan: left promiscuous mode
[  327.210592][   T11] veth0_vlan: left promiscuous mode
[  327.256449][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.285290][ T7336] ocfs2: Unmounting device (7,4) on (node local)
[  328.263188][   T11] team0 (unregistering): Port device team_slave_1 removed
[  328.336165][   T11] team0 (unregistering): Port device team_slave_0 removed
[  328.389859][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.463909][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.740742][ T5798] Bluetooth: hci0: command tx timeout
[  329.300493][   T11] bond0 (unregistering): Released all slaves
[  329.393324][T10485] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.400709][T10485] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.408616][T10485] bridge_slave_0: entered allmulticast mode
[  329.416115][T10485] bridge_slave_0: entered promiscuous mode
[  329.439832][T10485] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.465482][T10485] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.472769][T10485] bridge_slave_1: entered allmulticast mode
[  329.493568][T10485] bridge_slave_1: entered promiscuous mode
[  329.652299][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.699863][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.792868][T10485] team0: Port device team_slave_0 added
[  329.815968][T10485] team0: Port device team_slave_1 added
[  329.869522][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.877223][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.905597][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.919045][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.926313][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.954222][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.009700][T10485] hsr_slave_0: entered promiscuous mode
[  330.016547][T10485] hsr_slave_1: entered promiscuous mode
[  330.023058][T10485] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.031712][T10485] Cannot create hsr debugfs directory
[  330.209417][T10485] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  330.223314][T10485] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  330.233807][T10485] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  330.246004][T10485] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  330.330314][T10485] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.365640][T10485] 8021q: adding VLAN 0 to HW filter on device team0
[  330.383759][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.390929][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.411992][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.419373][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.648801][T10485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.814632][ T5798] Bluetooth: hci0: command tx timeout
[  330.907885][T10485] veth0_vlan: entered promiscuous mode
[  330.926513][T10485] veth1_vlan: entered promiscuous mode
[  330.962603][T10485] veth0_macvtap: entered promiscuous mode
[  330.973380][T10485] veth1_macvtap: entered promiscuous mode
[  330.997901][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.008769][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.019127][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.029946][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.040325][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  331.051305][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.064823][T10485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.081710][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.093551][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.108103][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.119468][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.129966][T10485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  331.142185][T10485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  331.155403][T10485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.171996][T10485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.181253][T10485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.190545][T10485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.200029][T10485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.311786][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.322989][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.353359][  T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.362914][  T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.557459][T10555] loop0: detected capacity change from 0 to 1024
[  331.682733][   T31] hfsplus: b-tree write err: -5, ino 4
[  331.826350][T10563] loop0: detected capacity change from 0 to 1024
[  331.866734][T10565] loop3: detected capacity change from 0 to 128
[  332.181800][T10567] loop0: detected capacity change from 0 to 2048
[  332.201983][T10569] loop3: detected capacity change from 0 to 128
[  332.218609][T10567] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  332.242007][T10569] VFS: Found a Xenix FS (block size = 512) on device loop3
[  332.267322][T10570] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.330248][T10569] syz.3.1792: attempt to access beyond end of device
[  332.330248][T10569] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  332.384295][T10569] sysv_free_block: trying to free block not in datazone
[  332.498984][ T5788] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  332.568234][T10561] loop6: detected capacity change from 0 to 32768
[  332.633631][T10561] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  332.669971][T10561] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  332.904590][ T5798] Bluetooth: hci0: command tx timeout
[  333.125023][T10574] netlink: 'syz.3.1798': attribute type 4 has an invalid length.
[  333.608746][T10588] loop4: detected capacity change from 0 to 128
[  333.959323][T10485] ocfs2: Unmounting device (7,6) on (node local)
[  334.055358][   T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  334.204682][ T5874] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  334.246668][   T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  334.268880][   T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  334.298376][   T23] usb 1-1: config 220 has no interface number 2
[  334.310633][   T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  334.325222][   T23] usb 1-1: config 220 interface 0 has no altsetting 0
[  334.332145][   T23] usb 1-1: config 220 interface 76 has no altsetting 0
[  334.340785][   T23] usb 1-1: config 220 interface 1 has no altsetting 0
[  334.351145][   T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  334.361768][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.370071][   T23] usb 1-1: Product: syz
[  334.375138][   T23] usb 1-1: Manufacturer: syz
[  334.394718][ T5874] usb 5-1: Using ep0 maxpacket: 16
[  334.410325][   T23] usb 1-1: SerialNumber: syz
[  334.412163][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.450453][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.463410][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  334.493309][ T5874] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  334.522745][T10601] loop6: detected capacity change from 0 to 1024
[  334.530010][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.547719][ T5874] usb 5-1: config 0 descriptor??
[  334.570589][T10601] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  334.647050][   T23] usb 1-1: selecting invalid altsetting 0
[  334.664872][   T23] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  334.687801][   T23] usb 1-1: No valid video chain found.
[  334.723196][   T23] usb 1-1: selecting invalid altsetting 0
[  334.742529][   T23] usbtest: probe of 1-1:220.1 failed with error -22
[  334.768622][   T23] usb 1-1: USB disconnect, device number 17
[  334.912307][T10609] loop6: detected capacity change from 0 to 256
[  334.949246][T10609] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1f7c91f3, utbl_chksum : 0xe619d30d)
[  334.973167][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  334.991728][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.010390][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.028582][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.046553][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.064461][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.074974][    T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  335.093306][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.110292][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.118754][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.127891][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.136175][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.143494][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.152293][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.162532][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.170719][ T5874] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  335.254731][ T5874] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0033/input/input36
[  335.295833][    T8] usb 4-1: Using ep0 maxpacket: 8
[  335.303315][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  335.316733][T10615] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1814'.
[  335.318349][ T5874] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  335.344409][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  335.355974][    T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  335.369788][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  335.400558][T10615] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  335.433449][ T5874] usb 5-1: USB disconnect, device number 17
[  335.442031][    T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  335.478606][    T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  335.490997][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.535822][T10616] fido_id[10616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  335.538250][    T8] usb 4-1: config 0 descriptor??
[  335.592498][T10605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  335.820437][T10620] sock: sock_set_timeout: `syz.4.1817' (pid 10620) tries to set negative timeout
[  335.850380][ T5789] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  336.050553][ T5874] usb 4-1: USB disconnect, device number 24
[  336.059680][ T5798] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  336.275584][T10614] loop0: detected capacity change from 0 to 32768
[  336.297213][T10614] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  336.416326][T10624] loop4: detected capacity change from 0 to 8192
[  336.438238][T10624] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  336.506913][ T6069] udevd[6069]: incorrect xfs checksum on /dev/loop0
[  336.552137][T10624] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  336.625113][T10624] REISERFS (device loop4): using ordered data mode
[  336.631724][T10624] reiserfs: using flush barriers
[  336.665175][T10624] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  336.734965][T10624] REISERFS (device loop4): checking transaction log (loop4)
[  336.784299][T10624] REISERFS (device loop4): Using r5 hash to sort names
[  336.841378][T10624] reiserfs: enabling write barrier flush mode
[  336.885741][T10624] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  336.919504][T10618] loop6: detected capacity change from 0 to 32768
[  336.966313][T10618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1816 (10618)
[  336.979701][T10624] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  337.005159][T10624] REISERFS (device loop4): Remounting filesystem read-only
[  337.012437][T10624] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  337.038764][T10618] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.068990][T10618] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  337.082506][T10624] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  337.108744][T10618] BTRFS info (device loop6): turning off barriers
[  337.119064][T10618] BTRFS info (device loop6): setting nodatasum
[  337.128857][T10624] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  337.141417][T10618] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  337.143527][T10635] loop3: detected capacity change from 0 to 256
[  337.151688][T10624] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error
[  337.177340][T10618] BTRFS info (device loop6): use zstd compression, level 3
[  337.195161][T10635] exfat: Deprecated parameter 'namecase'
[  337.215338][T10618] BTRFS info (device loop6): using free space tree
[  337.225186][T10635] exfat: Deprecated parameter 'utf8'
[  337.234725][T10624] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  337.271205][T10624] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  337.296717][T10624] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  337.299659][T10635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  337.314565][T10624] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  337.428435][T10624] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  337.618100][ T7336] ------------[ cut here ]------------
[  337.623712][ T7336] kernel BUG at fs/reiserfs/journal.c:1916!
[  337.632553][T10485] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.653311][ T7336] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  337.659472][ T7336] CPU: 0 PID: 7336 Comm: syz-executor Not tainted syzkaller #0
[  337.667139][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  337.677226][ T7336] RIP: 0010:do_journal_release+0x53a/0x550
[  337.683102][ T7336] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 a0 d0 b6 ff e9 ac fc ff ff e8 d6 76 5f ff <0f> 0b e8 cf 76 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  337.702732][ T7336] RSP: 0018:ffffc90003207b00 EFLAGS: 00010293
[  337.708833][ T7336] RAX: ffffffff822618aa RBX: ffff888024862000 RCX: ffff88802a718000
[  337.716824][ T7336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  337.724805][ T7336] RBP: ffffc90003207bf8 R08: ffffc90003207b77 R09: 0000000000000000
[  337.732786][ T7336] R10: ffffc90003207b40 R11: fffff52000640f6f R12: ffffc9000407b000
[  337.740766][ T7336] R13: 1ffff92000640f64 R14: ffff888024862630 R15: 0000000000000000
[  337.748867][ T7336] FS:  0000555592525500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  337.757821][ T7336] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.764409][ T7336] CR2: 00007fe8e2bf7e9c CR3: 0000000075218000 CR4: 00000000003506f0
[  337.772393][ T7336] Call Trace:
[  337.775681][ T7336]  <TASK>
[  337.778628][ T7336]  ? journal_release+0x30/0x30
[  337.783423][ T7336]  journal_release+0x1f/0x30
[  337.788045][ T7336]  reiserfs_put_super+0x222/0x480
[  337.793079][ T7336]  ? hook_inode_free_security+0xb0/0xb0
[  337.798631][ T7336]  ? reiserfs_dirty_inode+0x240/0x240
[  337.804029][ T7336]  ? fscrypt_destroy_keyring+0x288/0x2a0
[  337.809687][ T7336]  ? reiserfs_dirty_inode+0x240/0x240
[  337.815071][ T7336]  generic_shutdown_super+0x134/0x2b0
[  337.820547][ T7336]  kill_block_super+0x44/0x90
[  337.825232][ T7336]  deactivate_locked_super+0x97/0x100
[  337.830621][ T7336]  cleanup_mnt+0x429/0x4c0
[  337.835050][ T7336]  task_work_run+0x1ce/0x250
[  337.839658][ T7336]  ? task_work_cancel+0x240/0x240
[  337.844701][ T7336]  ? exit_to_user_mode_loop+0x3b/0x110
[  337.850174][ T7336]  exit_to_user_mode_loop+0xe6/0x110
[  337.855470][ T7336]  exit_to_user_mode_prepare+0xf6/0x180
[  337.861034][ T7336]  syscall_exit_to_user_mode+0x1a/0x50
[  337.866506][ T7336]  do_syscall_64+0x61/0xb0
[  337.870934][ T7336]  ? clear_bhb_loop+0x40/0x90
[  337.875621][ T7336]  ? clear_bhb_loop+0x40/0x90
[  337.880310][ T7336]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.886213][ T7336] RIP: 0033:0x7fa7681902f7
[  337.890742][ T7336] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  337.910384][ T7336] RSP: 002b:00007ffca4f817f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  337.918819][ T7336] RAX: 0000000000000000 RBX: 00007fa768211d7d RCX: 00007fa7681902f7
[  337.926896][ T7336] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca4f818b0
[  337.934888][ T7336] RBP: 00007ffca4f818b0 R08: 0000000000000000 R09: 0000000000000000
[  337.942876][ T7336] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca4f82940
[  337.950859][ T7336] R13: 00007fa768211d7d R14: 0000000000052645 R15: 00007ffca4f82980
[  337.958853][ T7336]  </TASK>
[  337.961885][ T7336] Modules linked in:
[  338.026046][T10631] loop0: detected capacity change from 0 to 40427
[  338.033781][ T7336] ---[ end trace 0000000000000000 ]---
[  338.039344][ T7336] RIP: 0010:do_journal_release+0x53a/0x550
[  338.045552][ T7336] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 a0 d0 b6 ff e9 ac fc ff ff e8 d6 76 5f ff <0f> 0b e8 cf 76 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  338.065530][T10631] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  338.073302][T10631] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  338.082258][ T7336] RSP: 0018:ffffc90003207b00 EFLAGS: 00010293
[  338.088743][ T7336] RAX: ffffffff822618aa RBX: ffff888024862000 RCX: ffff88802a718000
[  338.099279][ T7336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  338.108506][ T7336] RBP: ffffc90003207bf8 R08: ffffc90003207b77 R09: 0000000000000000
[  338.116682][ T7336] R10: ffffc90003207b40 R11: fffff52000640f6f R12: ffffc9000407b000
[  338.168213][T10631] F2FS-fs (loop0): Found nat_bits in checkpoint
[  338.175291][ T7336] R13: 1ffff92000640f64 R14: ffff888024862630 R15: 0000000000000000
[  338.183325][ T7336] FS:  0000555592525500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  338.187536][ T6069] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (6069)
[  338.256364][ T7336] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  338.263031][ T7336] CR2: 00007ff89437b000 CR3: 0000000075218000 CR4: 00000000003506e0
[  338.288376][ T7336] Kernel panic - not syncing: Fatal exception
[  338.294772][ T7336] Kernel Offset: disabled
[  338.299111][ T7336] Rebooting in 86400 seconds..