last executing test programs:

1m45.890663205s ago: executing program 1 (id=1537):
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)

1m45.830197052s ago: executing program 1 (id=1538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "18b1"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x4008090)

1m45.738050872s ago: executing program 1 (id=1539):
syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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")
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
read(r0, &(0x7f00000006c0)=""/240, 0xf0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d"], 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x200, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x20004001)

1m45.591696851s ago: executing program 1 (id=1540):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0)

1m45.087551727s ago: executing program 1 (id=1541):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x5c, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="f8"], 0xf8}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000fb"], 0x1298}}], 0x2, 0x40400e4)

1m44.30716275s ago: executing program 1 (id=1545):
r0 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x40016002})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"eb9d8988e81b395b45bd0cba3a8483077474dd3dd0c47bc253e5f8e8b4292aac2796001366e4c71f9f35008b53e42578e610c78571ad7fd714bbf1d6fd513c82063c7b62f80247dae47c5c719fcb141465938af815fb5f2695978afaf02bc89e649ba154d25cd9128fa00c4655085aaa52d42552f2b09df1d9bb0e372396aa8bcb1358797975d0f0609075102a2744764709002ff83c2341d3365f98a022a3adb2984c475f59af4129dbfd9a93d73ebd4e3cb4f1e4ab97495820ac3a2091f1a472e09074da690ef8a1271c19fa97898e3be7b5000d91bbc78a0e2415b557a6ac425159469271188e5adbb631ee32f1c01b8aab308dad8548079f00eb770e058ec6480cb78a47d832ff6f7d23348118d2a8a317c1d0cb05299e4541dd566ca584cbe7508ab24fa6fdd1e5fd301a57f7b01f55543d5289911b1040011acfa9247e9f2b08635fc066b8725bc114c59fdbdd3a35903b19613e3f29ce4457a59c64567f1fea4a17185e7edde0ccc64cf9d0086ef292c318c8a56b28406cdcfd091245a8e0fa721e11aa064b642d9afbcf3dd23c79c466e634e84e0ccf866e8bcc03a6e6ac823fe6056a7aa6aa8622969e263eff3fb74ea46e0bd6a1ce08244e39f59df03e6cdd7fdc2811c4c1719099a56f1c5e07ab0e7d6a07192dcc0d03f6bcbc2323f4606b52950e3ebf54b379a97bb4c0c27db1e0824068a353aa025258f16eec23148997eb0f14ade49c1216cfd2ce324f289ddcf0ff8247984c4567692e9b64c2fbbc1272a3e532122e65f97cec13564ece0b7029c2c34ca9c7a9557d487336d849513afaaaa6c1a0388e72dba891750cebb09747cdadd4228b66ce5972f9c67bc4bd795753bc83fd36897edb29a4d9ca5c5cbb0e92dab163d6c980ef76a5f79f6f05f9a7e0e745a129cbbfc12281f9566f656b1f9de9bec23d3a2bec3852430fb7dcbc692e0fcccb69402639a0e1693a70a5983a462b001131a4774e5e3d8bd9a19389ab7e819a77ae145d2ca8e4477215905e8e1dce02ccd3f8942744313a30b68025844e5a68a9a2dd382a3a32042c232459a776d6e1741eec549b4d2867580fc511393281917f5145952997aebd29d8056d4282586ccd91d633a7c1764012e09d7746fef7246eb56640fef2bdd74b78fbcaa32e6b6f4136431a51229956a8a8149de241511e2760f997886e098fc1847adee880f3ae61a1240581e13758be18a33bde20ffad43a0ae9a4f7144a16993858e445c7c5bc83e13dfeb81ae6fc11be70e0ab490ab976106e3d8e627c44df3ac588239fbf885a2439b69e5a121245fd3c42c86555b198452ffcac7168d789ff3f61da76d389b0fc1e6c39df6608824babcb098c509e0def7f1701e67ab7d6c64ab5150eaaadbe38a11673fee8d286d88ae6f39241966fa6df46464166db4f41d67596d9d67382f1069042ee118b0af630a5e12f07d8cfa4183f2c28b27a6105d69804508235f877693cf1f359ffb95b585496b941c2e3f2170d916ded547beee1ae24e1724f17cb85cfcba15e1cbabe44e60b16c2ac4f4afed9506e25bd35a8897de4ae4a4c929b25289f75b2da34a1b65edfc2dd74b74b8f3d74f1387805cf5933a616798fa890718c9ebd6079c26a5f732298f8e8a2e378fccffd7fc3ecc8b10d1cd013a7340b7842c4b1dff0e9f2ea70329fb9c3013151f43fa5bad0dd5f61a92da5a78e68052ab72c38d915136184a49da2a6b6e248e9d106777c1bde4dfc94f8a4a29dfa95fe7681516061a83650c8b39968bd3a7a34b34e93844fc8ed8a84b59f7e657a025592db7a7252491b18695693a68d178564909e5971b8956479e518a1202af31718fe22f4e65c93a9a08e802e07fd274e5a23cb466a7b48cf344a2176d61ef27d348b40a510e8cc8e372693cb6c1c7cfb4e3972fbe4204f0048bc53793e049b0484b3bbe6d3b6a986bc2c95fdb63f60ebfdbea38b48405a8b85ee84568fb6921a75fb54e9026671ed43b923286d64d60c9060a86c2217f98f049259d99d0c5ce4889b165557fa4536a6d5222eb289a6dd83ff235dbde83897d1627f6d85c3e551997007b5219c5b010d53b92879e19951ba21db665f724d7c45da7c635f3a982047a1ebed638dca4f3e97ee036e18ae68d37cd8fda64fac7dce84587311b2e17420c31d50a5da4d052052ea1b4116aa9a0ef20434420c51887cf2d03a1d578925f19e700451f404413f7371693f2e0a622e1ae49daccd12de5ec59d2acbb635d854ce22a418f143c3a637dc731d45c5d1c38adcb770602a92f3de006a4eef1d838b91178476ff168fa639eb5b420da8a343a0ec6e6144cc802eb08d1833beb6ca18ffa1fd7b019bb2d02c97d62963a8a9180769323d8e45639b68aaa56775306bdc6c020678ecd64e751fb92c85dc474bbde8f94c029d92dea48b837c7b5524dc061374e637e299fef6b1355ce23d0f649f0e61402d375bb444a37a22a812821ade48df3be021ecacff6873654bf21e111d079f5bb140568b5c4b77f1aaa22416ab983eb8fe903286fdf114024622f443686078c8318329aebe5df891a9a91bd5512b3aed59557de62d1a9586e10fa07306f815fc10204200d6282813f729c3f8e8af7c450f55037397125ef5e806306a9ba351a6f3e1dede486bc75ae897581b649ef55f19c97b330c5a61a6f76674722429ea894d1c638074cedb0b863514c19166a5c2baf4ee6d1eaeee85155afd10fdd4361c78b3c0d00d01a37df52be0ed3458bc7a1afa0c8c9a2f3406b1e4607e955f57f626c7ed2efac888e72110e0dc0f79cfdd02bc245f0b3a7939bbdc31229ab99ecd36927e1fdd7b17b5037457856fe3f773b6af24af6d67cbd7978e2f127b86b50153e9b0f13f4942006198d6a6ac335cf7560676fd607e6a3a7b518fa815def5eca1372813f97d6ea9d62b848db37015aa648c8426f26776728332fad5f72c919a6f96d1c3b0a97df4c1892ff814e2e57979da7f7098c42b963ca5929765b1ad2284abd2c1f7ef9570b8c97a513da8f4078130e70f31327708619331571d78d3475b6b41e835dc948f0e809c6610942e4c7d515d9303e6281a3980a742dc85f4528fddc34d22bbd9aa4b4b2351df10884f1dbc877717d984b0b3bafda47801103cda459d006a9a9982f5cf67fc0face3def54d579358e623dae4d9b4248cebd82111cf4c431f8852bcf862a65a124ca709cec2454e4c65514128bc2d6f8cc92624f20c02b008081d334cc7fa0b8e8d9d3dfe2a283600e875c7ecb8e4949f958f6f84f8e52b78e3eae58fa02d85bb8ac52ddf3b262ec52eca50d6d590139c24c042e1c040d8da6c9a2e95055dc91ed65881bc4c43c13c240eb9f6ef9a4cffb44e96c9c055cbbc10b5d63850bc3e2fa46aabb2c732c0c31bf1dba3ad1ce2b1b671259aaaef955d39c420b18d78828248563cacd9417ef2cb63859ebef3936e26803e7ccf5233cb3c0a2f440d898ff258cb03a783415a6f81b1b1a07bb5cef530c78c30ec9adfd2df246d581bc662336d5029f65588995adc3190e97a418c15fa3620eb68cdcc6233f1aa0009ab558b22ae9316003c6af1fe0d7807e583943e48692fcd9fa2525fefe3467d099951c83943312f0e889cef4c1ecf17ad469f5ad683b405eb59230e89df96e8dd94e41e5f62822ba957e065f22d96b1c0c2b83f5a57fbb04d5af399ece3ddd52e5afff783a876e2066fbe30963421acb427c95fd3e7bc6b7d3d731a7e347052cd9636805cab94ad40bdb63a264b3127c7f8d21d25810bd2eadb2c3e31b5c807283ad062d750e5b21ec1e20cc3ac5753ac536faf23e2b5c37e9d021870b0350ecea7187643a00a08ec3ffaf7e6c236c4d694ff41af7b5fbf8a554949f5026a8b2adcf377f94848cd17fbcc0249e796008962d3db16b4bb85483dbe75ef5b301175e052203436b38248fbd1a28a5e2b3ab75c77eb8f853e60e95d5f16cb9858b33b3752b4c69776ec4506ba2bd490a6f17aae1152d8762d86cc0ef32788cf149e8fa9464c3ea588f15d8eb2092254c470acf221cfe680845167fc6778b8af1609681ae4f4e65426ce059b9768eb2e0c89f29de7b91db89a72e4c677c65dd980f9a6bfa656ed01d5e683a33e6b80462139476225cc0fcc309d926c36aa250bdad1454db46cd2536046f909a05b08829cad973bc705231a32a5f2e7ac5e96e2315cb175724607a5af02073fc936272aa724990ba6dcc4ea79da6eb7ec0bbdbd0a878114c493bc4b3e26e24b18553bd0a617981d8ea9e91ed2e3bcbd48f5d67aa913790bf52c31435184d6c73079e964e9ef05194e88b072b372d48cb70dbca99238c4474ed0b6932cc1b233bce0c87d48d478fa3c937c42c8637714e9995041f8b2b7dce17eb2f26c730f5559cf5919b88ee00bbf40726f90e1cf29e0f5fadc64de1bf28d447e8996948dc2fe658620b6fb8cfc592d5e0621b66057eb774c31ab16235456210c5ee7990b71b5b3d51cf13e30361a8cdaa107b13fa6a1c84b172efece3b70753e81e7e9e572d228c7bbcdaba40d8d0eb4de13bda1fca38d3ed667bb0897335aadaa0c3905a1283292c89ef5747ad5462db4011c3f8a4a476aa78d74badf8bf3785997ba9824e21256eed4c2805331fa24c81e28f21e895a0b03e7de52787065faded0f1b59eba1c922dce5576e8ab190ef716c021d8dfa13a1e73b8962d9f9238ba8b9fa2cf84addfe37e78cdb398ee4c0642a716fb8db1e332f873a16c6225ebc51fe05f33273380e64272159bb808336e87b4b0cddb492a992b2e7f423bf37725e1d9dda0dc6b4426172c2a93ee1cc9acea7fe1ece9ba0ddee3e232efb11fc4d4e266cd2a83c017e32315c434b73e9729d5a3a7fe993e72f9bb70d78672493263a2653fe1bfd42d1f97cbf0fffb6705b2e35fe65ceb9ad7ddc525b689027352db9c194939559ebb3b505a58e0404103482ce10f7d67761c13b235b52ad1b25803aa94cf7df5ca8d8bd0d4e6d0ab8bcfb8f72a26cecf071e31c02a1034c0144d850f1732926981dca7a18f0a197da3703d74d3e951ed510ed38a8fcae93eb2bebdf92e0feb0f06dbe1331cb43cfa548ca294ea479ecb325aea7aff8d924745298a3d34f23f40b992995a908130165b44beb8cc9da8390dae2a09cb7e1ac7e95b84f35e7be147b4be04883047cdcaec662aa8b66694ae8914e65edb63696494bff66eacb3aecdb23746a36cec7f832d628d38698ba6b3d4020095eae2a5b36a21039ce50901cdf2582b88ab8c86c6f4a8c345618f10d7aab081edb3ce8e4479e0ac476112d4b261cb8ed952221fb660898491fc7134b091c0565173bebf014caffae12852b5314c930d41e27bcfa7bc536fc4da3b714630e1ac7aaf006755da1da792dcad08f796c2ebdd6427ad3374e25132a103d62f98584462aa164d742b4d7c668a85119480199dd90f0a903f6c76cfca28b84a2279ae6965fdec403072be146d2d1f39b122113fbcfb52cf8c7c1d47a32f437b895bcd7a67ad08f196112a15b07e5b57b4db2b7c7f70a42923d6d0625515375b9281d331bd1e5dd75ff3a6e1ca5b75eb328e6c935f2c8f0c57b0aaf2ad85983160b0e53fca44d95e956ef2726d97acb2da34ca4482bb86aabde6d8b8b85da2e44ae89b8359f7edb88a3e2a9aad23125b8c2bd0c7be0847ac9b1e16db2c395e0c9eb040af710c31d32f7b356bfb6f1704f4d884f37c15b865eda87685ae8926fbf3a4465e7e2968ee18ea1ff5d4f4cbfb55634089687b9f0bce5b9cf10779299893cf64980193fd3a1096507e7a8be", 0x1000}}, 0x1006)
io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0)

1m44.271601791s ago: executing program 32 (id=1545):
r0 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x40016002})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006)
io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0)

5.023955339s ago: executing program 2 (id=2835):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000700)={0x20, 0x10, 0x10, {0x10, 0x7, "3abeee2ae33c529913fa2bf590f0"}}, 0x0, 0x0, 0x0}, 0x0)

3.451993398s ago: executing program 2 (id=2850):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd615"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20)

3.286361712s ago: executing program 2 (id=2851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5}]}}}]}, 0x3c}}, 0x0)

3.13404778s ago: executing program 2 (id=2852):
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

2.417049558s ago: executing program 0 (id=2854):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)

2.350555267s ago: executing program 0 (id=2858):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80)

2.286996363s ago: executing program 0 (id=2860):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000200)='n', 0x1}, {0x0, 0x57}], 0x2)

2.212767811s ago: executing program 0 (id=2862):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2810489, &(0x7f0000000480)=ANY=[@ANYBLOB='lastblock=00000000000000000226,unhide,gid=forget,nostrict,unhide,undelete,shortad,uid=ignore,shortad,uid=', @ANYRESDEC=0x0, @ANYBLOB="4f689e5a0d58742c6164696e6963622c7569643d69676e6f724c2c66696c657365743d303030303030303030303030303030303030423e45e4d8bcb7dbe63aba8c699011"], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x81105a, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

2.171262304s ago: executing program 0 (id=2865):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d", 0x27}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43fc6c358893ae9cb8787f4659b80c54d51815d240ba45b930936aecd07ff84b35954a5a75c1ba4252e11ab09ebfa468f58829bb24aebceb96a9d4a5a856abe", 0x4e}], 0x1}, 0x20048050)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.810498936s ago: executing program 2 (id=2874):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1.753700634s ago: executing program 0 (id=2877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0)

738.842104ms ago: executing program 2 (id=2879):
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
close(0x4)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000)

364.372356ms ago: executing program 3 (id=2882):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x2a)

311.784533ms ago: executing program 3 (id=2883):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x15)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

288.33405ms ago: executing program 3 (id=2884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)

184.042705ms ago: executing program 3 (id=2885):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x84)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080)
sendto$packet(r1, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14)

53.355714ms ago: executing program 3 (id=2886):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

0s ago: executing program 3 (id=2887):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800), 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f0000000100)={0x8a0, 0x800800000000000c, 0x4})

kernel console output (not intermixed with test programs):

 206.756729][T13755] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[  206.761282][T13755] syz.3.1902: attempt to access beyond end of device
[  206.761282][T13755] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[  206.766072][T13755] syz.3.1902: attempt to access beyond end of device
[  206.766072][T13755] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[  206.772201][T13755] syz.3.1902: attempt to access beyond end of device
[  206.772201][T13755] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[  206.776632][T13755] syz.3.1902: attempt to access beyond end of device
[  206.776632][T13755] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[  206.781798][T13755] syz.3.1902: attempt to access beyond end of device
[  206.781798][T13755] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[  206.856548][ T5846] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.073035][  T794] logitech 0003:046D:C295.000D: unbalanced delimiter at end of report description
[  207.077926][  T794] logitech 0003:046D:C295.000D: parse failed
[  207.082494][  T794] logitech 0003:046D:C295.000D: probe with driver logitech failed with error -22
[  207.253505][T13791] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  207.273289][   T47] usb 1-1: USB disconnect, device number 35
[  207.650222][  T794] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  207.802223][  T794] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  207.805735][  T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.809872][  T794] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  207.815809][  T794] usb 4-1: New USB device found, idVendor=1039, idProduct=12b6, bcdDevice=af.00
[  207.819196][  T794] usb 4-1: New USB device strings: Mfr=99, Product=0, SerialNumber=0
[  207.823008][  T794] usb 4-1: Manufacturer: syz
[  207.827124][  T794] usb 4-1: config 0 descriptor??
[  208.006369][T13832] loop2: detected capacity change from 0 to 1024
[  208.017027][T13832] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  208.035101][T13832] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  208.043360][   T47] usb 4-1: USB disconnect, device number 7
[  208.140623][T13847] loop2: detected capacity change from 0 to 2048
[  208.157294][T13847] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576
[  208.163721][T13847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.681977][   T47] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  208.821554][T13882] loop3: detected capacity change from 0 to 512
[  208.833587][   T47] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  208.838737][   T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.844177][T13882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.849187][T13882] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.855530][   T47] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c
[  208.859018][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.861844][   T47] usb 1-1: Product: syz
[  208.863111][   T47] usb 1-1: Manufacturer: syz
[  208.864562][   T47] usb 1-1: SerialNumber: syz
[  208.868723][   T47] usb 1-1: config 0 descriptor??
[  208.873775][   T47] ims_pcu 1-1:0.0: Missing CDC union descriptor
[  208.875762][   T47] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22
[  208.880778][T13882] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  208.892290][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.975817][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1933'.
[  208.979008][T13894] netlink: 'syz.3.1933': attribute type 2 has an invalid length.
[  208.982042][T13894] netlink: 'syz.3.1933': attribute type 2 has an invalid length.
[  208.984987][T13894] netlink: 'syz.3.1933': attribute type 1 has an invalid length.
[  208.987816][T13894] netlink: 'syz.3.1933': attribute type 2 has an invalid length.
[  208.990800][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'.
[  209.063637][T13906] Dead loop on virtual device ip6_vti0, fix it urgently!
[  209.083362][T13908] loop3: detected capacity change from 0 to 64
[  209.092563][  T794] usb 1-1: USB disconnect, device number 36
[  209.321950][T13935] loop3: detected capacity change from 0 to 8192
[  210.267507][  T794] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  210.621421][  T794] usb 1-1: Using ep0 maxpacket: 8
[  210.628961][  T794] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  210.638131][  T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  210.643032][  T794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  210.646906][  T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  210.654032][  T794] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[  210.657765][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.662537][  T794] usb 1-1: Product: syz
[  210.664356][  T794] usb 1-1: Manufacturer: syz
[  210.666328][  T794] usb 1-1: SerialNumber: syz
[  210.669925][  T794] usb 1-1: config 0 descriptor??
[  210.674429][  T794] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  210.879424][  T794] usb 1-1: USB disconnect, device number 37
[  210.898532][T14034] loop3: detected capacity change from 0 to 32768
[  211.479764][T14050] loop2: detected capacity change from 0 to 40427
[  211.481785][T14053] pimreg: entered allmulticast mode
[  211.488409][T14053] pimreg: left allmulticast mode
[  211.489072][T14050] F2FS-fs (loop2): build fault injection rate: 771
[  211.494664][T14050] F2FS-fs (loop2): invalid crc value
[  211.531744][T14050] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  211.535760][T14050] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  211.584092][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  211.584109][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.584115][ T5846] Call Trace:
[  211.584119][ T5846]  <TASK>
[  211.584145][ T5846]  dump_stack_lvl+0x189/0x250
[  211.584178][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.584187][ T5846]  ? __pfx_queue_work_on+0x10/0x10
[  211.584195][ T5846]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  211.584206][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.584217][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[  211.584262][ T5846]  f2fs_write_end_io+0x886/0xb60
[  211.584276][ T5846]  __submit_merged_bio+0x27a/0x6a0
[  211.584288][ T5846]  __submit_merged_write_cond+0x255/0x530
[  211.584299][ T5846]  f2fs_write_data_pages+0x261d/0x3000
[  211.584310][ T5846]  ? lock_release+0x4b/0x3e0
[  211.584320][ T5846]  ? lock_release+0x4b/0x3e0
[  211.584337][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.584350][ T5846]  ? arch_stack_walk+0xfc/0x150
[  211.584365][ T5846]  ? __mod_zone_page_state+0xd7/0x140
[  211.584379][ T5846]  ? folios_put_refs+0x560/0x640
[  211.584389][ T5846]  ? __pfx_folios_put_refs+0x10/0x10
[  211.584397][ T5846]  ? rcu_is_watching+0x15/0xb0
[  211.584405][ T5846]  ? lru_add+0xa2f/0xd80
[  211.584412][ T5846]  ? lru_add+0x198/0xd80
[  211.584420][ T5846]  ? do_raw_spin_lock+0x121/0x290
[  211.584431][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  211.584439][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.584450][ T5846]  do_writepages+0x32e/0x550
[  211.584467][ T5846]  ? rcu_is_watching+0x15/0xb0
[  211.584476][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  211.584486][ T5846]  filemap_fdatawrite+0x199/0x240
[  211.584497][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  211.584515][ T5846]  ? rcu_is_watching+0x15/0xb0
[  211.584523][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  211.584532][ T5846]  f2fs_sync_dirty_inodes+0x31f/0x830
[  211.584543][ T5846]  f2fs_write_checkpoint+0x95a/0x1df0
[  211.584555][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  211.584571][ T5846]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  211.584579][ T5846]  ? kfree+0x18e/0x440
[  211.584588][ T5846]  ? kill_f2fs_super+0x298/0x6c0
[  211.584597][ T5846]  kill_f2fs_super+0x2c3/0x6c0
[  211.584605][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[  211.584612][ T5846]  ? radix_tree_delete_item+0x2b6/0x400
[  211.584624][ T5846]  ? shrinker_free+0x2ce/0x3e0
[  211.584632][ T5846]  deactivate_locked_super+0xbc/0x130
[  211.584642][ T5846]  cleanup_mnt+0x425/0x4c0
[  211.584652][ T5846]  task_work_run+0x1d4/0x260
[  211.584663][ T5846]  ? __pfx_task_work_run+0x10/0x10
[  211.584671][ T5846]  ? __x64_sys_umount+0x122/0x160
[  211.584681][ T5846]  ? __pfx___x64_sys_umount+0x10/0x10
[  211.584691][ T5846]  ? rcu_is_watching+0x15/0xb0
[  211.584698][ T5846]  exit_to_user_mode_loop+0xec/0x110
[  211.584709][ T5846]  do_syscall_64+0x2bd/0x3b0
[  211.584720][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.584728][ T5846]  ? exc_page_fault+0x9f/0xf0
[  211.584737][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.584744][ T5846] RIP: 0033:0x7f320758ff17
[  211.584753][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  211.584760][ T5846] RSP: 002b:00007ffd3d931bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  211.584769][ T5846] RAX: 0000000000000000 RBX: 00007f3207611c05 RCX: 00007f320758ff17
[  211.584775][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3d931cb0
[  211.584779][ T5846] RBP: 00007ffd3d931cb0 R08: 0000000000000000 R09: 0000000000000000
[  211.584784][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3d932d40
[  211.584789][ T5846] R13: 00007f3207611c05 R14: 0000000000033a19 R15: 00007ffd3d932d80
[  211.584798][ T5846]  </TASK>
[  211.589533][ T5846] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  212.165879][T14085] trusted_key: encrypted_key: insufficient parameters specified
[  212.567683][   T33] audit: type=1326 audit(1755906520.913:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14104 comm="syz.0.1988" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb05858ebe9 code=0x0
[  212.634391][T14107] netlink: 'syz.0.1989': attribute type 3 has an invalid length.
[  212.697905][T14101] loop3: detected capacity change from 0 to 32768
[  212.732998][T14101] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  212.748861][T14101] XFS (loop3): Ending clean mount
[  212.755858][T14101] XFS (loop3): Quotacheck needed: Please wait.
[  212.766947][T14101] XFS (loop3): Quotacheck: Done.
[  212.791585][T11882] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.037105][T14143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.070808][ T5233] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  214.365523][T14156] loop3: detected capacity change from 0 to 32768
[  214.378143][T14156] JBD2: Ignoring recovery information on journal
[  214.401130][T14156] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  214.433534][T11882] ocfs2: Unmounting device (7,3) on (node local)
[  214.560203][    T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  214.781061][    T9] usb 1-1: Using ep0 maxpacket: 16
[  214.787882][    T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  214.793197][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.796345][    T9] usb 1-1: Product: syz
[  214.798080][    T9] usb 1-1: Manufacturer: syz
[  214.799965][    T9] usb 1-1: SerialNumber: syz
[  214.814677][    T9] r8152-cfgselector 1-1: Unknown version 0x0000
[  214.817438][    T9] r8152-cfgselector 1-1: config 0 descriptor??
[  215.045990][    T9] r8152-cfgselector 1-1: Needed 2 retries to read version
[  215.050231][    T9] r8152-cfgselector 1-1: Unknown version 0x0000
[  215.055561][    T9] r8152-cfgselector 1-1: bad CDC descriptors
[  215.085251][T14186] loop3: detected capacity change from 0 to 1024
[  215.113991][ T6342] hfsplus: b-tree write err: -5, ino 4
[  215.257763][ T5888] r8152-cfgselector 1-1: USB disconnect, device number 38
[  215.318216][T14216] netlink: 'syz.3.2012': attribute type 21 has an invalid length.
[  215.321552][T14216] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2012'.
[  215.325274][T14216] netlink: 'syz.3.2012': attribute type 5 has an invalid length.
[  215.328337][T14216] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2012'.
[  215.355863][T14219] loop8: detected capacity change from 0 to 16384
[  215.611146][T14221] loop8: detected capacity change from 16384 to 16383
[  215.659778][T14231] loop2: detected capacity change from 0 to 512
[  215.665134][T14231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  215.761603][T14242] loop3: detected capacity change from 0 to 4096
[  215.774685][T14242] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  215.973068][T14254] loop3: detected capacity change from 0 to 4096
[  215.980863][T14254] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.991509][T14254] EXT4-fs (loop3): Test dummy encryption mode enabled
[  215.998636][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.011348][T14254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.061047][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.146477][T14277] loop3: detected capacity change from 0 to 1024
[  216.172648][T14277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  216.176638][T14277] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.197884][T14277] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm syz.3.2027: lblock 8 mapped to illegal pblock 8 (length 8)
[  216.218790][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  216.224184][T14268] loop2: detected capacity change from 0 to 32768
[  216.233306][T14268] find_entry called with index = 0
[  216.235499][T14268] read_mapping_page failed!
[  216.237226][T14268] ERROR: (device loop2): txCommit: 
[  216.237226][T14268] 
[  216.590170][   T47] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  216.741745][   T47] usb 1-1: config 131 has an invalid interface number: 242 but max is 0
[  216.744375][   T47] usb 1-1: config 131 has no interface number 0
[  216.746380][   T47] usb 1-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64
[  216.749687][   T47] usb 1-1: config 131 interface 242 altsetting 13 endpoint 0xC has invalid wMaxPacketSize 0
[  216.753375][   T47] usb 1-1: config 131 interface 242 has no altsetting 0
[  216.757592][   T47] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10
[  216.761202][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[  216.764182][   T47] usb 1-1: Product: syz
[  216.765438][   T47] usb 1-1: Manufacturer: syz
[  216.766859][   T47] usb 1-1: SerialNumber: syz
[  216.770754][T14303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  216.890150][ T5903] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  216.944687][T14319] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  216.948179][T14319] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  216.952104][T14319] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2036'.
[  216.954842][T14319] unsupported nla_type 58
[  216.983414][   T47] kvaser_usb 1-1:131.242: error -ENODEV: Cannot get usb endpoint(s)
[  216.995267][   T47] usb 1-1: USB disconnect, device number 39
[  217.061814][ T5903] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  217.067645][ T5903] usb 4-1: config 1 interface 0 has no altsetting 0
[  217.078712][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  217.082507][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  217.085729][ T5903] usb 4-1: SerialNumber: syz
[  217.201581][T14343] loop2: detected capacity change from 0 to 128
[  217.329016][T14310] loop3: detected capacity change from 0 to 1024
[  217.405905][T14310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  217.414383][T14310] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.425889][ T5903] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  217.447478][ T5903] usb 4-1: USB disconnect, device number 8
[  217.638523][T14371] netlink: 'syz.0.2044': attribute type 1 has an invalid length.
[  217.983167][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  218.233355][T14393] loop3: detected capacity change from 0 to 128
[  218.252982][T14393] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.258365][T14393] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  218.269093][T14400] loop2: detected capacity change from 0 to 1024
[  218.283762][T14400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.298322][T11882] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.298951][T14400] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2052: bg 0: block 88: padding at end of block bitmap is not set
[  218.329432][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.846341][T14425] loop2: detected capacity change from 0 to 32768
[  218.849636][T14425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2058 (14425)
[  218.864854][T14425] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  218.868240][T14425] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  218.932018][T14425] BTRFS info (device loop2): rebuilding free space tree
[  218.949856][T14425] BTRFS info (device loop2): setting nodatasum
[  218.957500][T14425] BTRFS info (device loop2): enabling ssd optimizations
[  218.960437][T14425] BTRFS info (device loop2): enabling free space tree
[  218.962616][T14425] BTRFS info (device loop2): force clearing of disk cache
[  218.964836][T14425] BTRFS info (device loop2): enabling auto defrag
[  218.966948][T14425] BTRFS info (device loop2): force zlib compression, level 3
[  218.989892][ T5846] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.623393][T14463] loop2: detected capacity change from 0 to 40427
[  219.629185][T14463] F2FS-fs: heap/no_heap options were deprecated
[  219.636611][T14463] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  219.641758][T14463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  219.646256][T14463] F2FS-fs (loop2): invalid crc value
[  219.688378][T14463] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  219.693890][T14463] F2FS-fs (loop2): Start checkpoint disabled!
[  219.698948][T14463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  219.703161][T14463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  219.749011][T14496] loop3: detected capacity change from 0 to 4096
[  219.757313][T14496] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  219.766638][T14496] ntfs3(loop3): ino=19, mi_enum_attr
[  219.768500][T14496] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  220.484755][T14523] loop2: detected capacity change from 0 to 32768
[  220.533310][T14523] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  220.558744][T14523] XFS (loop2): Ending clean mount
[  220.589215][ T5846] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  220.941927][T14552] loop3: detected capacity change from 0 to 1024
[  221.238458][T14561] loop2: detected capacity change from 0 to 32768
[  221.250923][T14561] bio_check_eod: 104 callbacks suppressed
[  221.250940][T14561] syz.2.2087: attempt to access beyond end of device
[  221.250940][T14561] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  221.258430][T14561] metapage_write_end_io: I/O error
[  221.272896][T14561] ERROR: (device loop2): release_metapage: metapage_write_one() failed
[  221.272896][T14561] 
[  221.277252][T14561] ERROR: (device loop2): remounting filesystem as read-only
[  221.280633][T14561] ERROR: (device loop2): diWrite: ixpxd invalid
[  221.280633][T14561] 
[  221.283921][T14561] ERROR: (device loop2): txCommit: 
[  221.283921][T14561] 
[  221.287352][T14561] blkno = 8f7c0, nblocks = 1
[  221.289306][T14561] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  221.289306][T14561] 
[  221.293713][T14561] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  221.293713][T14561] 
[  221.297401][T14561] ialloc: diAlloc returned -5!
[  221.313778][  T215] kworker/u9:2: attempt to access beyond end of device
[  221.313778][  T215] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768
[  221.325709][  T215] metapage_write_end_io: I/O error
[  221.534434][T14607] loop2: detected capacity change from 0 to 1024
[  221.534638][T14610] loop3: detected capacity change from 0 to 1024
[  221.555135][T14607] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002]
[  221.563941][T14607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.582904][   T33] audit: type=1800 audit(1755906529.933:45): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2100" name="file1" dev="loop2" ino=15 res=0 errno=0
[  221.590690][T14607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2100: bg 0: block 88: padding at end of block bitmap is not set
[  221.610381][   T47] usb 1-1: new low-speed USB device number 40 using dummy_hcd
[  221.613692][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.051433][   T47] usb 1-1: unable to get BOS descriptor or descriptor too short
[  222.054584][   T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.057564][   T47] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  222.066218][   T47] usb 1-1: config 1 interface 0 has no altsetting 0
[  222.072082][   T47] usb 1-1: string descriptor 0 read error: -22
[  222.074259][   T47] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.60
[  222.077472][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.090729][   T47] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18
[  222.289904][ T5277] bcm5974 1-1:1.0: could not read from device
[  222.293629][ T5277] bcm5974 1-1:1.0: could not read from device
[  222.298706][ T5277] bcm5974 1-1:1.0: could not read from device
[  222.304471][   T47] usb 1-1: USB disconnect, device number 40
[  222.315551][ T5910] udevd[5910]: Unable to EVIOCGABS device "/dev/input/event3"
[  222.318569][ T5910] udevd[5910]: Unable to EVIOCGABS device "/dev/input/event3"
[  222.322947][ T5910] udevd[5910]: Unable to EVIOCGABS device "/dev/input/event3"
[  222.325692][ T5910] udevd[5910]: Unable to EVIOCGABS device "/dev/input/event3"
[  222.907787][T14704] netlink: 'syz.3.2122': attribute type 4 has an invalid length.
[  222.913094][T14704] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2122'.
[  222.938223][   T33] audit: type=1326 audit(1755906531.283:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2109" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320758ebe9 code=0x7fc00000
[  223.007740][T14716] loop3: detected capacity change from 0 to 2048
[  223.025344][T14716] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  223.032355][T14716] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh
[  223.037683][T14716] UDF-fs: Scanning with blocksize 512 failed
[  223.047012][T14716] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  223.050101][T14716] UDF-fs: Scanning with blocksize 1024 failed
[  223.056486][T14716] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  223.061730][T14716] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  223.064686][T14716] UDF-fs: Scanning with blocksize 2048 failed
[  223.067688][T14716] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  223.073363][T14716] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  223.080861][T14716] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  223.083783][T14716] UDF-fs: Scanning with blocksize 4096 failed
[  223.086092][T14716] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  223.215938][T14739] loop3: detected capacity change from 0 to 4096
[  223.257641][T14739] ntfs3(loop3): ino=18, mi_enum_attr
[  223.259535][T14739] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  223.263119][T14739] ntfs3(loop3): ino=1a, mi_enum_attr
[  223.370128][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  223.520862][    T9] usb 3-1: Using ep0 maxpacket: 32
[  223.525145][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  223.530168][    T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  223.533079][    T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  223.535609][    T9] usb 3-1: Product: syz
[  223.537285][    T9] usb 3-1: Manufacturer: syz
[  223.541241][T14753] loop3: detected capacity change from 0 to 32768
[  223.549098][    T9] usb 3-1: SerialNumber: syz
[  223.553802][T14753] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  223.561366][    T9] usb 3-1: config 0 descriptor??
[  223.563885][T14753] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  223.564180][T14730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  223.574707][    T9] hub 3-1:0.0: bad descriptor, ignoring hub
[  223.576872][    T9] hub 3-1:0.0: probe with driver hub failed with error -5
[  223.598699][T14753] XFS (loop3): Ending clean mount
[  223.609187][T14753] XFS (loop3): Quotacheck needed: Please wait.
[  223.616830][T14753] XFS (loop3): Quotacheck: Done.
[  223.681172][T11882] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  223.752765][T14782] loop3: detected capacity change from 0 to 512
[  223.761455][T14782] EXT4-fs: Ignoring removed oldalloc option
[  223.763568][T14782] EXT4-fs: inline encryption not supported
[  223.765645][T14782] EXT4-fs: Ignoring removed mblk_io_submit option
[  223.769458][T14782] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  223.803802][T14782] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2138: bg 0: block 64: padding at end of block bitmap is not set
[  223.814575][T14782] Quota error (device loop3): write_blk: dquota write failed
[  223.817122][T14782] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  223.822181][T14782] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2138: Failed to acquire dquot type 0
[  223.827639][T14782] EXT4-fs (loop3): 1 truncate cleaned up
[  223.830652][T14782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.841224][T14782] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5
[  223.864551][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.005222][T14806] loop3: detected capacity change from 0 to 256
[  224.008747][T14806] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  224.012991][T14806] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  224.024147][T14806] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  224.207730][T14819] binder: 14818:14819 ioctl c018620c 2000000000c0 returned -22
[  224.234739][T14821] program syz.0.2151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  224.621613][    T9] raw-gadget.0 gadget.2: failed to queue suspend event
[  224.665553][T14790] raw-gadget.0 gadget.2: failed to queue disconnect event
[  225.552165][T14842] loop3: detected capacity change from 0 to 4096
[  225.567628][T14842] NILFS (loop3): invalid segment: Checksum error in segment payload
[  225.571381][T14842] NILFS (loop3): trying rollback from an earlier position
[  225.581362][T14842] NILFS (loop3): recovery complete
[  225.583867][T14845] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.804356][T14869] loop3: detected capacity change from 0 to 512
[  225.836567][T14869] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2163: bg 0: block 248: padding at end of block bitmap is not set
[  225.844325][T14869] Quota error (device loop3): write_blk: dquota write failed
[  225.846782][T14869] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  225.851892][T14869] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2163: Failed to acquire dquot type 1
[  225.856142][T14869] EXT4-fs (loop3): 1 truncate cleaned up
[  225.858430][T14869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.863002][T14869] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.870804][T14869] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2
[  225.874185][T14869] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074
[  225.877304][T14869] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2163: Failed to acquire dquot type 1
[  225.896142][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.084218][T14881] loop3: detected capacity change from 0 to 32768
[  226.098841][T14881] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  226.226049][T11882] ocfs2: Unmounting device (7,3) on (node local)
[  226.353953][T14896] loop3: detected capacity change from 0 to 128
[  226.450229][   T33] audit: type=1326 audit(1755906534.793:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  226.974332][T14903] loop3: detected capacity change from 0 to 32768
[  226.987573][T14903] read_mapping_page failed!
[  226.989640][T14903] ERROR: (device loop3): txCommit: 
[  226.989640][T14903] 
[  227.124528][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  227.124540][   T33] audit: type=1326 audit(1755906534.823:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.134137][   T33] audit: type=1326 audit(1755906534.823:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.141859][   T33] audit: type=1326 audit(1755906534.833:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.149217][   T33] audit: type=1326 audit(1755906534.833:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.156466][   T33] audit: type=1326 audit(1755906534.833:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.163591][   T33] audit: type=1326 audit(1755906534.833:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.170855][   T33] audit: type=1326 audit(1755906534.833:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.177762][   T33] audit: type=1326 audit(1755906534.833:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  227.191402][   T33] audit: type=1326 audit(1755906534.833:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff24d18d550 code=0x7ffc0000
[  227.201207][   T33] audit: type=1326 audit(1755906534.833:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14901 comm="syz.3.2169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24d18ebe9 code=0x7ffc0000
[  228.052303][ T5888] usb 3-1: USB disconnect, device number 24
[  228.220863][T14941] loop2: detected capacity change from 0 to 32768
[  228.226259][T14941] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  228.238224][T14941] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  228.244612][ T5868] (kworker/u8:3,5868,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  228.267377][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  228.389780][T14966] netlink: 'syz.2.2185': attribute type 4 has an invalid length.
[  228.393570][T14966] netlink: 'syz.2.2185': attribute type 3 has an invalid length.
[  228.396725][T14966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2185'.
[  228.410474][ T5903] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  228.457878][T14972] loop2: detected capacity change from 0 to 1024
[  228.462302][T14972] EXT4-fs: Ignoring removed orlov option
[  228.464515][T14972] EXT4-fs: Ignoring removed nomblk_io_submit option
[  228.474631][T14972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.535001][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.562282][ T5903] usb 1-1: Using ep0 maxpacket: 32
[  228.566037][ T5903] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  228.569186][ T5903] usb 1-1: config 0 has no interface number 0
[  228.572195][ T5903] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  228.576213][ T5903] usb 1-1: config 0 interface 196 has no altsetting 0
[  228.582516][ T5903] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  228.585980][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.589195][ T5903] usb 1-1: Product: syz
[  228.591770][ T5903] usb 1-1: Manufacturer: syz
[  228.593679][ T5903] usb 1-1: SerialNumber: syz
[  228.597246][ T5903] usb 1-1: config 0 descriptor??
[  228.599856][T14949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  228.812669][ T5903] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  228.816556][ T5903] ipheth 1-1:0.196: probe with driver ipheth failed with error -71
[  228.822800][ T5903] usb 1-1: USB disconnect, device number 41
[  229.710158][ T5903] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  229.880153][ T5903] usb 1-1: Using ep0 maxpacket: 32
[  229.883117][ T5903] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  229.885640][ T5903] usb 1-1: config 0 has no interface number 0
[  229.889318][ T5903] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  229.892278][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.894851][ T5903] usb 1-1: Product: syz
[  229.896240][ T5903] usb 1-1: Manufacturer: syz
[  229.897719][ T5903] usb 1-1: SerialNumber: syz
[  229.901192][ T5903] usb 1-1: config 0 descriptor??
[  229.906624][ T5903] smsc95xx v2.0.0
[  231.015002][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  231.019576][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  231.023780][ T5903] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  231.028121][ T5903] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  231.034283][ T5903] usb 1-1: USB disconnect, device number 42
[  231.500214][ T5903] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  231.662237][ T5903] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  231.675194][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.679530][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  231.685460][ T5903] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  231.689098][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.695043][ T5903] usb 3-1: config 0 descriptor??
[  231.766089][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  231.799161][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2206'.
[  231.942650][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.946505][    T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  231.950171][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.955062][    T9] usb 4-1: config 0 descriptor??
[  232.112244][ T5903] hid-led 0003:1294:1320.000E: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0
[  232.121383][ T5903] hid-led 0003:1294:1320.000E: Riso Kagaku Webmail Notifier initialized
[  232.315445][ T5888] usb 3-1: USB disconnect, device number 25
[  232.322130][ T5868] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  232.325989][ T5868] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  232.330151][   T13] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  232.366540][    T9] input: HID 28bd:1903 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:1903.000F/input/input19
[  232.433807][    T9] uclogic 0003:28BD:1903.000F: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:1903] on usb-dummy_hcd.3-1/input0
[  232.563541][ T5888] usb 4-1: USB disconnect, device number 9
[  233.006761][T15142] netlink: 'syz.0.2214': attribute type 2 has an invalid length.
[  233.009389][T15142] netlink: 'syz.0.2214': attribute type 2 has an invalid length.
[  233.013057][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'.
[  233.058228][T15146] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2216'.
[  233.153701][T15140] loop2: detected capacity change from 0 to 32768
[  233.208039][T15167] syz_tun: entered allmulticast mode
[  233.245862][T15140] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  233.245884][T15140]   allowing incompatible features above 0.0: (unknown version)
[  233.245893][T15140]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  233.264679][T15140] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  233.268238][T15140] bcachefs (loop2): initializing new filesystem
[  233.279640][T15140] bcachefs (loop2): going read-write
[  233.285474][T15140] bcachefs (loop2): marking superblocks
[  233.293944][T15140] bcachefs (loop2): initializing freespace
[  233.302837][T15140] bcachefs (loop2): done initializing freespace
[  233.313417][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'.
[  233.314185][T15140] bcachefs (loop2): reading snapshots table
[  233.320451][T15140] bcachefs (loop2): reading snapshots done
[  233.326809][T15183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2223'.
[  233.328691][T15140] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  233.337176][T15140] bcachefs (loop2): done starting filesystem
[  233.521812][ T5846] bcachefs (loop2): shutting down
[  233.524287][ T5846] bcachefs (loop2): going read-only
[  233.526669][ T5846] bcachefs (loop2): finished waiting for writes to stop
[  233.532057][ T5846] bcachefs (loop2): flushing journal and stopping allocators, journal seq 82
[  233.545169][ T5846] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 83
[  233.548672][ T5846] bcachefs (loop2): clean shutdown complete, journal seq 84
[  233.551878][ T5846] bcachefs (loop2): marking filesystem clean
[  233.562120][ T5846] bcachefs (loop2): shutdown complete
[  234.474837][T15226] netlink: 'syz.0.2237': attribute type 2 has an invalid length.
[  234.477862][T15226] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2237'.
[  234.484506][T15226] nbd: must specify at least one socket
[  234.484824][T15229] loop3: detected capacity change from 0 to 1024
[  234.492781][T15229] EXT4-fs: Ignoring removed nobh option
[  234.499569][T15229] EXT4-fs: Ignoring removed bh option
[  234.531639][T15229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.554016][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.610319][ T5888] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  234.650762][T15257] bridge1: entered promiscuous mode
[  234.682495][T15263] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2247'.
[  234.739107][T15269] loop3: detected capacity change from 0 to 128
[  234.745483][T15269] EXT4-fs (loop3): Test dummy encryption mode enabled
[  234.749574][T15269] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.756504][T15269] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.762081][ T5888] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  234.765092][ T5888] usb 3-1: config 0 has no interface number 0
[  234.769584][T15269] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  234.773291][ T5888] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  234.776217][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.778860][ T5888] usb 3-1: Product: syz
[  234.780954][ T5888] usb 3-1: Manufacturer: syz
[  234.783665][ T5888] usb 3-1: SerialNumber: syz
[  234.794286][ T5888] usb 3-1: config 0 descriptor??
[  234.802560][T11882] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.848179][T15277] 8021q: adding VLAN 0 to HW filter on device bond1
[  234.860352][   T47] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  234.866230][T15277] bond_slave_0: entered promiscuous mode
[  234.868533][T15277] bond_slave_1: entered promiscuous mode
[  234.872941][T15277] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  234.877172][T15277] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  235.002777][ T5888] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[  235.007442][ T5888] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[  235.013375][ T5888] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[  235.016846][ T5888] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[  235.017122][ T5233] Bluetooth: hci2: adv larger than maximum supported
[  235.022075][ T5888] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  235.023160][ T5233] Bluetooth: hci2: Malformed LE Event: 0x0d
[  235.031112][   T47] usb 1-1: unable to get BOS descriptor or descriptor too short
[  235.039049][   T47] usb 1-1: unable to read config index 0 descriptor/start: -71
[  235.050736][   T47] usb 1-1: can't read configurations, error -71
[  235.191235][    T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  235.341583][    T9] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  235.344396][    T9] usb 4-1: config 0 has no interface number 0
[  235.346399][    T9] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.350505][    T9] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  235.354939][    T9] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  235.358765][    T9] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  235.361951][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.366005][    T9] usb 4-1: config 0 descriptor??
[  235.375344][   T24] usb 3-1: USB disconnect, device number 26
[  235.377155][    T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input20
[  235.381415][   T24] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  235.382363][   T24] keyspan 3-1:0.133: device disconnected
[  235.576770][    T9] usb 4-1: USB disconnect, device number 10
[  235.890149][   T47] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  235.980131][ T5888] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  236.041649][   T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  236.045674][   T47] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[  236.051164][   T47] usb 1-1: New USB device found, idVendor=0425, idProduct=0000, bcdDevice= 0.00
[  236.055195][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.063275][   T47] usb 1-1: bad CDC descriptors
[  236.130285][ T5888] usb 3-1: Using ep0 maxpacket: 16
[  236.133880][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.137753][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.142525][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[  236.146072][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.150764][ T5888] usb 3-1: config 0 descriptor??
[  236.264986][   T24] usb 1-1: USB disconnect, device number 44
[  236.330264][  T794] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  236.359468][ T5888] usb 3-1: string descriptor 0 read error: -71
[  236.365118][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21
[  236.370543][ T5277] bcm5974 3-1:0.0: could not read from device
[  236.373662][ T5277] bcm5974 3-1:0.0: could not read from device
[  236.386382][ T5888] usb 3-1: USB disconnect, device number 27
[  236.500146][  T794] usb 4-1: Using ep0 maxpacket: 8
[  236.505374][  T794] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f
[  236.508700][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.511809][  T794] usb 4-1: Product: syz
[  236.514363][  T794] usb 4-1: Manufacturer: syz
[  236.516259][  T794] usb 4-1: SerialNumber: syz
[  236.519797][  T794] usb 4-1: config 0 descriptor??
[  236.524882][  T794]  (null): radio-mr800 - initialization failed
[  236.527411][  T794] radio-mr800 4-1:0.0: probe with driver radio-mr800 failed with error -22
[  236.531141][  T794] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  236.729440][  T794] usb 4-1: USB disconnect, device number 11
[  237.060229][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  237.112306][T15422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2257'.
[  237.210149][    T9] usb 1-1: Using ep0 maxpacket: 32
[  237.214480][    T9] usb 1-1: config 0 has an invalid interface number: 83 but max is 0
[  237.217615][    T9] usb 1-1: config 0 has no interface number 0
[  237.232932][    T9] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  237.236675][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.239944][    T9] usb 1-1: Product: syz
[  237.241983][    T9] usb 1-1: Manufacturer: syz
[  237.243848][    T9] usb 1-1: SerialNumber: syz
[  237.247963][    T9] usb 1-1: config 0 descriptor??
[  237.265106][    T9] redrat3 1-1:0.83: Couldn't find all endpoints
[  237.468149][   T24] usb 1-1: USB disconnect, device number 45
[  237.848981][T15461] loop3: detected capacity change from 0 to 32768
[  237.862309][T15461] jfs_mount: Mount Failure: superblock is corrupt!
[  237.864847][T15461] Mount JFS Failure: -22
[  237.866533][T15461] jfs_mount failed w/return code = -22
[  237.971950][T15483] loop3: detected capacity change from 0 to 1024
[  237.980942][T15483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.037058][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.920976][T15538] loop2: detected capacity change from 0 to 512
[  238.944140][T15538] EXT4-fs (loop2): 1 orphan inode deleted
[  238.946780][T15538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.952957][T15538] ext4 filesystem being mounted at /702/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.119846][T15512] loop3: detected capacity change from 0 to 262144
[  239.128597][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.128934][T15512] F2FS-fs (loop3): invalid crc value
[  239.172905][T15512] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  239.176629][T15512] F2FS-fs (loop3): Start checkpoint disabled!
[  239.181768][T15512] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  239.727945][T15588] input: syz1 as /devices/virtual/input/input22
[  239.805333][T15604] loop3: detected capacity change from 0 to 512
[  239.810662][T15604] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  239.832139][T15604] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  239.835241][T15604] FAT-fs (loop3): Filesystem has been set read-only
[  239.866960][T15617] loop3: detected capacity change from 0 to 8
[  239.873248][T15617] SQUASHFS error: lzo decompression failed, data probably corrupt
[  239.877468][T15617] SQUASHFS error: Failed to read block 0x91: -5
[  239.879546][T15617] SQUASHFS error: Unable to read metadata cache entry [8f]
[  239.882238][T15617] SQUASHFS error: Unable to read inode 0x11f
[  239.931264][T15624] loop3: detected capacity change from 0 to 4096
[  239.945094][T15624] ntfs3(loop3): ino=9, attr_set_size
[  240.120174][   T24] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  240.303290][   T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  240.307051][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.312168][   T24] usb 3-1: config 0 descriptor??
[  240.523631][   T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  240.565708][T15651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2318'.
[  240.727170][   T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  240.730788][   T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  240.734031][   T24] asix 3-1:0.0: probe with driver asix failed with error -71
[  240.740140][   T24] usb 3-1: USB disconnect, device number 28
[  240.876064][T15671] loop3: detected capacity change from 0 to 256
[  240.887942][T15671] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  241.272068][T15713] loop3: detected capacity change from 0 to 32768
[  241.280448][T15713] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2336 (15713)
[  241.294679][T15713] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  241.297905][T15713] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  241.310754][   T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  241.315166][T15716] loop2: detected capacity change from 0 to 4096
[  241.325955][T15716] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  241.343703][T15716] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  241.346125][T15716] ntfs3(loop2): ino=1a, mi_enum_attr
[  241.347871][T15716] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  241.401770][T15713] BTRFS info (device loop3): enabling ssd optimizations
[  241.406035][T15713] BTRFS info (device loop3): enabling free space tree
[  241.449796][T11882] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  241.460173][   T24] usb 1-1: Using ep0 maxpacket: 16
[  241.464863][   T24] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[  241.472644][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.476466][   T24] usb 1-1: config 0 has no interface number 0
[  241.491318][   T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e
[  241.494860][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.506590][   T24] usb 1-1: Product: syz
[  241.508308][   T24] usb 1-1: Manufacturer: syz
[  241.517679][   T24] usb 1-1: SerialNumber: syz
[  241.541763][   T24] usb 1-1: config 0 descriptor??
[  241.633648][T15769] loop3: detected capacity change from 0 to 1024
[  241.636523][T15769] EXT4-fs: Ignoring removed bh option
[  241.639617][T15769] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  241.658964][T15769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.692516][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.728765][T15778] loop3: detected capacity change from 0 to 1024
[  241.748148][T15778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.754830][T15698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.756993][T15778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.2346: missing EA_INODE flag
[  241.758597][T15698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.763099][T15778] EXT4-fs (loop3): Remounting filesystem read-only
[  241.777271][   T24] rndis_host 1-1:0.109: More than one union descriptor, skipping ...
[  241.780572][  T794] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  241.786872][   T24] usb 1-1: bad CDC descriptors
[  241.793619][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.808183][   T24] cdc_acm 1-1:0.109: More than one union descriptor, skipping ...
[  241.814652][   T24] usb 1-1: USB disconnect, device number 46
[  241.930057][  T794] usb 3-1: Using ep0 maxpacket: 16
[  241.935854][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.939474][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.943082][  T794] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  241.946183][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.953334][  T794] usb 3-1: config 0 descriptor??
[  241.991136][T15806] loop3: detected capacity change from 0 to 32768
[  241.993898][T15806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2350 (15806)
[  242.001253][T15806] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  242.005173][T15806] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  242.061986][T15806] BTRFS info (device loop3): enabling ssd optimizations
[  242.064386][T15806] BTRFS info (device loop3): enabling free space tree
[  242.090215][T11882] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  242.372761][T15854] netlink: 'syz.3.2359': attribute type 21 has an invalid length.
[  242.375565][T15854] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2359'.
[  242.378647][T15854] netlink: 'syz.3.2359': attribute type 4 has an invalid length.
[  242.398931][T15854] netlink: 'syz.3.2359': attribute type 3 has an invalid length.
[  242.402456][T15854] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2359'.
[  242.476484][T15860] netlink: 'syz.3.2360': attribute type 4 has an invalid length.
[  242.483958][T15860] netlink: 'syz.3.2360': attribute type 4 has an invalid length.
[  242.968203][  T794] letsketch 0003:6161:4D15.0010: Device info: ఁ
[  243.825682][  T794] usb 3-1: Max retries (5) exceeded reading string descriptor 201
[  243.836049][  T794] letsketch 0003:6161:4D15.0010: probe with driver letsketch failed with error -71
[  243.853934][  T794] usb 3-1: USB disconnect, device number 29
[  243.957947][T15917] loop3: detected capacity change from 0 to 40427
[  243.963500][T15917] F2FS-fs (loop3): build fault injection rate: 16
[  243.969110][T15917] F2FS-fs (loop3): build fault injection type: 0x3bfe8e
[  243.973576][T15917] F2FS-fs (loop3): invalid crc value
[  243.976433][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  243.980577][T15917] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-5)
[  244.189680][T15940] loop3: detected capacity change from 0 to 64
[  244.192472][  T794] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  244.340388][  T794] usb 3-1: Using ep0 maxpacket: 32
[  244.349270][  T794] usb 3-1: config 0 interface 0 has no altsetting 0
[  244.354206][  T794] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  244.357894][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.380598][  T794] usb 3-1: config 0 descriptor??
[  244.499353][T15953] loop3: detected capacity change from 0 to 32768
[  244.519312][T15953] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  244.836476][  T794] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[  245.229028][  T794] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -71
[  245.242640][  T794] usb 3-1: USB disconnect, device number 30
[  245.568177][T11882] ocfs2: Unmounting device (7,3) on (node local)
[  245.662103][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2402'.
[  245.736791][T16032] loop3: detected capacity change from 0 to 64
[  245.761711][T16031] Trying to free block not in datazone
[  245.828608][T16043] loop3: detected capacity change from 0 to 2048
[  245.843241][T16048] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.135357][T16079] loop3: detected capacity change from 0 to 32768
[  246.190323][   T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  246.217864][T16079] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  246.217877][T16079]   allowing incompatible features above 0.0: (unknown version)
[  246.217883][T16079]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  246.232429][T16079] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  246.235209][T16079] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  246.237785][T16079] bcachefs (loop3): Version upgrade required:
[  246.237785][T16079] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  246.237785][T16079] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  246.237785][T16079]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  246.262192][T16079] bcachefs (loop3): dropping and reconstructing all alloc info
[  246.271684][T16079] bcachefs (loop3): accounting_read... done
[  246.274082][T16079] bcachefs (loop3): alloc_read... done
[  246.276177][T16079] bcachefs (loop3): snapshots_read... done
[  246.279034][T16079] bcachefs (loop3): check_allocations... done
[  246.289017][T16079] bcachefs (loop3): going read-write
[  246.292884][T16079] bcachefs (loop3): done starting filesystem
[  246.342141][   T24] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  246.344783][   T24] usb 3-1: config 0 has no interface number 0
[  246.350930][   T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  246.367625][T11882] bcachefs (loop3): shutting down
[  246.369708][T11882] bcachefs (loop3): going read-only
[  246.372236][T11882] bcachefs (loop3): finished waiting for writes to stop
[  246.375045][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.378366][   T24] usb 3-1: Product: syz
[  246.381682][T11882] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  246.385492][   T24] usb 3-1: Manufacturer: syz
[  246.387447][   T24] usb 3-1: SerialNumber: syz
[  246.390543][T11882] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10
[  246.397055][   T24] usb 3-1: config 0 descriptor??
[  246.399279][T11882] bcachefs (loop3): unclean shutdown complete, journal seq 11
[  246.407536][T11882] bcachefs (loop3): done going read-only, filesystem not clean
[  246.443289][T11882] bcachefs (loop3): shutdown complete
[  246.808388][   T24] usb 3-1: Firmware: major: 0, minor: 43, hardware type: ATUSB (0)
[  247.009440][   T24] usb 3-1: failed to fetch extended address, random address set
[  247.053010][   T24] usb 3-1: USB disconnect, device number 31
[  247.742191][T16150] loop2: detected capacity change from 0 to 4096
[  247.749789][T16150] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  248.175930][T16166] loop3: detected capacity change from 0 to 128
[  248.271969][T16186] loop2: detected capacity change from 0 to 2048
[  248.276277][T16186] NILFS (loop2): invalid segment: Inconsistency found
[  248.278402][T16186] NILFS (loop2): trying rollback from an earlier position
[  248.285384][T16186] NILFS (loop2): recovery complete
[  248.333350][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'.
[  248.480198][ T5888] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  248.631810][ T5888] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  248.635086][ T5888] usb 4-1: config 0 has no interface number 0
[  248.637577][ T5888] usb 4-1: config 0 interface 41 has no altsetting 0
[  248.643253][ T5888] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  248.646847][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.650124][   T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  248.652994][ T5888] usb 4-1: Product: syz
[  248.654449][ T5888] usb 4-1: Manufacturer: syz
[  248.656160][ T5888] usb 4-1: SerialNumber: syz
[  248.660331][ T5888] usb 4-1: config 0 descriptor??
[  248.690116][  T794] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  248.800090][   T24] usb 3-1: Using ep0 maxpacket: 8
[  248.805104][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  248.808126][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.810890][   T24] usb 3-1: Product: syz
[  248.812279][   T24] usb 3-1: Manufacturer: syz
[  248.813768][   T24] usb 3-1: SerialNumber: syz
[  248.816975][   T24] usb 3-1: config 0 descriptor??
[  248.820810][   T24] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  248.840178][  T794] usb 1-1: Using ep0 maxpacket: 16
[  248.844097][  T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.848401][  T794] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.852811][  T794] usb 1-1: config 0 interface 0 has no altsetting 0
[  248.855432][  T794] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  248.858937][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.863955][  T794] usb 1-1: config 0 descriptor??
[  249.271503][  T794] hid (null): invalid report_size 42190
[  249.273729][  T794] hid (null): report_id 4263223746 is invalid
[  249.275780][  T794] hid (null): unknown global tag 0xe
[  249.277753][  T794] hid (null): global environment stack underflow
[  249.281130][  T794] hid (null): global environment stack underflow
[  249.283746][  T794] hid (null): global environment stack underflow
[  249.286377][  T794] hid (null): report_id 0 is invalid
[  249.288512][  T794] hid (null): unknown global tag 0xc
[  249.291040][  T794] hid (null): unknown global tag 0xd
[  249.294908][  T794] hid (null): unknown global tag 0xc
[  249.297079][  T794] hid (null): global environment stack underflow
[  249.299719][  T794] hid (null): bogus close delimiter
[  249.482081][ T5888] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  249.485619][  T794] usb 1-1: USB disconnect, device number 47
[  249.487364][ T5888] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  249.495181][ T5888] usb 4-1: USB disconnect, device number 12
[  249.825584][   T24] gspca_sonixj: reg_w1 err -71
[  249.860161][   T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  249.864248][   T24] usb 3-1: USB disconnect, device number 32
[  250.473899][T16278] loop3: detected capacity change from 0 to 32768
[  250.487656][T16278] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.501276][T16278] XFS (loop3): Ending clean mount
[  250.627338][T16292] loop2: detected capacity change from 0 to 32768
[  250.662395][T16292] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  250.673171][T16292] XFS (loop2): Ending clean mount
[  250.676219][T16292] XFS (loop2): Quotacheck needed: Please wait.
[  250.683785][T16292] XFS (loop2): Quotacheck: Done.
[  250.701597][T11882] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.719184][ T5846] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  250.854883][T16326] loop3: detected capacity change from 0 to 16
[  250.862844][T16326] erofs (device loop3): mounted with root inode @ nid 36.
[  250.895006][ T6009] erofs (device loop3): failed to decompress -26 in[46, 0] out[9000]
[  250.899248][T16326] erofs (device loop3): failed to decompress -26 in[46, 4050] out[4096]
[  250.902838][T16326] erofs (device loop3): read error -117 @ 0 of nid 89
[  251.131313][T16338] loop3: detected capacity change from 0 to 32768
[  251.180319][T16338] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  251.180334][T16338]   allowing incompatible features above 0.0: (unknown version)
[  251.180340][T16338]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  251.194094][T16338] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  251.196734][T16338] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  251.199309][T16338] bcachefs (loop3): Version upgrade required:
[  251.199309][T16338] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  251.199309][T16338] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  251.199309][T16338]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  251.226218][T16338] bcachefs (loop3): dropping and reconstructing all alloc info
[  251.238909][T16338] bcachefs (loop3): accounting_read... done
[  251.242501][T16338] bcachefs (loop3): alloc_read... done
[  251.245383][T16338] bcachefs (loop3): snapshots_read... done
[  251.247979][T16338] bcachefs (loop3): check_allocations... done
[  251.262137][T16338] bcachefs (loop3): going read-write
[  251.267333][T16338] bcachefs (loop3): done starting filesystem
[  251.321223][ T5903] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  251.548665][T16362] bcachefs (loop3): inode 536870913 truncated to 0 but i_blocks 24 (ondisk 24)
[  251.567779][   T67] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  251.567876][   T67]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[  252.254222][   T67] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  252.254233][   T67]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  252.261148][   T67] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  252.261158][   T67]   u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing
[  252.405474][T11882] bcachefs (loop3): shutting down
[  252.407261][T11882] bcachefs (loop3): going read-only
[  252.407424][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short
[  252.409368][T11882] bcachefs (loop3): finished waiting for writes to stop
[  252.415090][ T5903] usb 1-1: not running at top speed; connect to a high speed hub
[  252.418074][T11882] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  252.422558][ T5903] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=2e.65
[  252.424806][   T27] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  252.426154][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.426173][ T5903] usb 1-1: Product: syz
[  252.426184][ T5903] usb 1-1: Manufacturer: syz
[  252.428722][   T27]   u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing
[  252.432782][ T5903] usb 1-1: SerialNumber: syz
[  252.441231][T11882] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[  252.447476][T11882] bcachefs (loop3): unclean shutdown complete, journal seq 12
[  252.452177][T11882] bcachefs (loop3): done going read-only, filesystem not clean
[  252.460474][T11882] bcachefs (loop3): shutdown complete
[  252.653139][ T5903] legousbtower 1-1:14.0: interrupt endpoints not found
[  252.658341][ T5903] usb 1-1: USB disconnect, device number 48
[  253.244218][T16388] netlink: 'syz.0.2475': attribute type 1 has an invalid length.
[  254.036639][T16404] loop2: detected capacity change from 0 to 512
[  254.039954][T16404] EXT4-fs: Ignoring removed nobh option
[  254.045463][T16404] EXT4-fs: Ignoring removed oldalloc option
[  254.048125][T16404] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  254.052145][T16404] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  254.089875][T16411] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2479'.
[  254.654988][T16447] affs: No valid root block on device nullb0
[  254.874702][T16455] netlink: 'syz.0.2497': attribute type 5 has an invalid length.
[  255.512233][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.654996][T16493] tipc: Started in network mode
[  255.657058][T16493] tipc: Node identity 080211000001, cluster identity 4711
[  255.660329][T16493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.663795][T16493] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  255.666729][T16493] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  255.676627][T16493] tipc: Resetting bearer <eth:syzkaller0>
[  256.038412][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'.
[  256.614986][T16540] nbd: nbd3 already in use
[  256.790317][ T5888] tipc: Node number set to 134418688
[  256.887812][T16556] loop3: detected capacity change from 0 to 32768
[  256.891829][T16556] BTRFS warning: excessive commit interval 2147483647, use with care
[  256.896310][T16556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2529 (16556)
[  256.905531][T16556] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.910263][T16556] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  256.913624][T16556] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  256.936136][T16556] BTRFS info (device loop3): rebuilding free space tree
[  256.942794][T16556] BTRFS info (device loop3): disabling free space tree
[  256.945736][T16556] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  256.949770][T16556] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  256.956231][T16556] BTRFS info (device loop3): setting nodatasum
[  256.958807][T16556] BTRFS info (device loop3): enabling ssd optimizations
[  256.961887][T16556] BTRFS info (device loop3): turning off barriers
[  256.964526][T16556] BTRFS info (device loop3): turning on flush-on-commit
[  256.967134][T16556] BTRFS info (device loop3): enabling disk space caching
[  256.969861][T16556] BTRFS info (device loop3): force clearing of disk cache
[  256.972861][T16556] BTRFS info (device loop3): doing ref verification
[  256.975612][T16556] BTRFS info (device loop3): max_inline set to 0
[  257.020797][T11882] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.443201][T16580] loop3: detected capacity change from 0 to 65536
[  257.476939][T16580] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  257.492803][T16580] XFS (loop3): Ending clean mount
[  257.522003][T11882] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  257.550181][ T5888] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  257.679222][T16608] loop2: detected capacity change from 0 to 32768
[  257.697051][T16608] ERROR: (device loop2): dbAllocAG: allocation request is larger than the allocation group size
[  257.697051][T16608] 
[  257.703392][ T5888] usb 1-1: Using ep0 maxpacket: 16
[  257.706378][T16608] ERROR: (device loop2): dbDiscardAG: -EIO
[  257.706378][T16608] 
[  257.713219][ T5888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.717522][ T5888] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  257.734510][ T5888] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  257.748343][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  257.752715][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  257.755848][ T5888] usb 1-1: SerialNumber: syz
[  257.761659][T16592] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  257.778772][ T5888] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  257.987088][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.993087][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.006435][ T5888] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  258.014804][ T5888] usb 1-1: USB disconnect, device number 49
[  258.061667][   T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  258.255399][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  258.277239][   T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  258.310766][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  258.314402][   T24] usb 4-1: config 1 has no interface number 1
[  258.317350][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  258.326387][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  258.331182][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.334195][   T24] usb 4-1: Product: syz
[  258.335649][   T24] usb 4-1: Manufacturer: syz
[  258.337311][   T24] usb 4-1: SerialNumber: syz
[  258.553458][   T24] usb 4-1: 2:1 : unsupported format bits 0x80
[  258.564419][   T24] usb 4-1: USB disconnect, device number 13
[  258.583122][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  258.695789][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'.
[  258.968718][T16689] loop2: detected capacity change from 0 to 32768
[  259.011301][T16689] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  259.011325][T16689]   allowing incompatible features above 0.0: (unknown version)
[  259.011334][T16689]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  259.030111][T16689] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  259.033421][T16689] bcachefs (loop2): initializing new filesystem
[  259.041613][T16689] bcachefs (loop2): going read-write
[  259.045667][T16689] bcachefs (loop2): marking superblocks
[  259.052498][T16689] bcachefs (loop2): initializing freespace
[  259.057015][T16689] bcachefs (loop2): done initializing freespace
[  259.061220][T16689] bcachefs (loop2): reading snapshots table
[  259.063795][T16689] bcachefs (loop2): reading snapshots done
[  259.076381][T16689] bcachefs (loop2): done starting filesystem
[  259.090949][   T33] kauditd_printk_skb: 44 callbacks suppressed
[  259.090963][   T33] audit: type=1800 audit(1755906823.435:107): pid=16689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2550" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  259.112997][ T5846] bcachefs (loop2): shutting down
[  259.114939][ T5846] bcachefs (loop2): going read-only
[  259.117434][ T5846] bcachefs (loop2): finished waiting for writes to stop
[  259.125095][ T5846] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  259.137433][ T5846] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  259.145967][ T5846] bcachefs (loop2): clean shutdown complete, journal seq 4
[  259.149424][ T5846] bcachefs (loop2): marking filesystem clean
[  259.164236][ T5846] bcachefs (loop2): shutdown complete
[  259.174805][T16717] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  259.233115][T16723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2557'.
[  259.237246][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'.
[  259.530141][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  259.680149][   T24] usb 4-1: Using ep0 maxpacket: 16
[  259.684885][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.689182][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.694101][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  259.699425][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  259.703282][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.707893][   T24] usb 4-1: config 0 descriptor??
[  259.920578][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.923875][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.013372][T16741] loop2: detected capacity change from 0 to 1024
[  260.033004][T16741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.036866][T16741] ext4 filesystem being mounted at /766/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.047353][T16741] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2553: bg 0: block 393: padding at end of block bitmap is not set
[  260.053476][T16741] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28
[  260.057660][T16741] EXT4-fs (loop2): This should not happen!! Data will be lost
[  260.057660][T16741] 
[  260.061692][T16741] EXT4-fs (loop2): Total free blocks count 0
[  260.064168][T16741] EXT4-fs (loop2): Free/Dirty block details
[  260.066453][T16741] EXT4-fs (loop2): free_blocks=0
[  260.068424][T16741] EXT4-fs (loop2): dirty_blocks=16
[  260.070716][T16741] EXT4-fs (loop2): Block reservation details
[  260.073111][T16741] EXT4-fs (loop2): i_reserved_data_blocks=1
[  260.089447][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.134158][   T24] hid_parser_main: 5 callbacks suppressed
[  260.134178][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x2
[  260.139668][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.143089][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.146895][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.149827][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.153061][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.156153][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.159180][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.162490][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.165525][   T24] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  260.171173][   T24] hid-multitouch 0003:045E:9994.0013: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.3-1/input0
[  260.334898][    T9] usb 4-1: USB disconnect, device number 14
[  260.350155][ T5903] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  260.500277][ T5903] usb 3-1: Using ep0 maxpacket: 32
[  260.504347][ T5903] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  260.507512][ T5903] usb 3-1: config 0 has no interface number 0
[  260.509867][ T5903] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  260.516641][ T5903] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  260.520393][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.523585][ T5903] usb 3-1: Product: syz
[  260.525451][ T5903] usb 3-1: Manufacturer: syz
[  260.527621][ T5903] usb 3-1: SerialNumber: syz
[  260.531373][ T5903] usb 3-1: config 0 descriptor??
[  260.536157][ T5903] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  260.542323][ T5903] em28xx 3-1:0.132: Video interface 132 found:
[  260.942760][ T5903] em28xx 3-1:0.132: chip ID is em2884
[  261.338197][T16775] loop3: detected capacity change from 0 to 131072
[  261.342095][T16775] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  261.344815][T16775] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  261.349119][T16775] F2FS-fs (loop3): invalid crc value
[  261.383543][T16775] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.388172][T16775] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  261.391085][T16775] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  261.399260][T16775] F2FS-fs (loop3): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  261.534136][   T33] audit: type=1800 audit(1755906825.885:108): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2561" name="file1" dev="loop3" ino=7 res=0 errno=0
[  261.746223][ T5903] em28xx 3-1:0.132: failed to read eeprom (err=-110)
[  261.749800][ T5903] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  262.010182][ T5903] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  262.013319][ T5903] em28xx 3-1:0.132: analog set to bulk mode.
[  262.015764][  T794] em28xx 3-1:0.132: Registering V4L2 extension
[  262.029325][ T5903] usb 3-1: USB disconnect, device number 33
[  262.033015][ T5903] em28xx 3-1:0.132: Disconnecting em28xx
[  262.056290][T16807] netlink: 'syz.3.2565': attribute type 1 has an invalid length.
[  262.081709][  T794] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  262.092362][  T794] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  262.095907][  T794] em28xx 3-1:0.132: No AC97 audio processor
[  262.099408][  T794] usb 3-1: Decoder not found
[  262.103005][  T794] em28xx 3-1:0.132: failed to create media graph
[  262.109469][  T794] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  262.118607][  T794] em28xx 3-1:0.132: Remote control support is not available for this card.
[  262.127616][ T5903] em28xx 3-1:0.132: Closing input extension
[  262.134224][ T5903] em28xx 3-1:0.132: Freeing device
[  262.160589][   T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  262.260757][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'.
[  262.316771][   T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  262.324521][   T24] usb 1-1: config 0 has no interface number 0
[  262.327363][   T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  262.335552][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.349299][   T24] usb 1-1: config 0 descriptor??
[  262.355909][   T24] cp210x 1-1:0.1: cp210x converter detected
[  262.594829][T16873] loop2: detected capacity change from 0 to 2048
[  262.755681][   T24] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32
[  262.924249][T16898] loop2: detected capacity change from 0 to 32768
[  262.944328][T16898] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=zstd,norecovery,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc
[  262.944343][T16898]   allowing incompatible features above 0.0: (unknown version)
[  262.944348][T16898]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  262.962352][T16898] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  262.965904][T16898] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  262.968430][   T24] usb 1-1: cp210x converter now attached to ttyUSB0
[  262.973556][T16898] bcachefs (loop2): Version upgrade required:
[  262.973556][T16898] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  262.973556][T16898] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  262.973556][T16898]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  263.005767][T16898] bcachefs (loop2): dropping and reconstructing all alloc info
[  263.030928][T16898] bcachefs (loop2): accounting_read... done
[  263.033086][T16898] bcachefs (loop2): alloc_read... done
[  263.035306][T16898] bcachefs (loop2): done starting filesystem
[  263.066386][ T5846] bcachefs (loop2): shutting down
[  263.077885][ T5846] bcachefs (loop2): shutdown complete
[  263.169051][   T24] usb 1-1: USB disconnect, device number 50
[  263.174620][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  263.181459][   T24] cp210x 1-1:0.1: device disconnected
[  264.089585][T16987] tipc: Resetting bearer <eth:syzkaller0>
[  264.124367][T16992] loop2: detected capacity change from 0 to 164
[  264.138198][T16992] iso9660: Corrupted directory entry in block 2 of inode 1920
[  264.216990][T17005] loop2: detected capacity change from 0 to 2048
[  264.226046][T17005] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  264.272259][T17014] loop2: detected capacity change from 0 to 1024
[  265.046602][T17051] loop3: detected capacity change from 0 to 32768
[  265.050695][T17051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2629 (17051)
[  265.063266][T17051] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.072310][T17051] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  265.078631][T17051] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  265.115514][T17051] BTRFS info (device loop3): rebuilding free space tree
[  265.123732][T17051] BTRFS info (device loop3): disabling free space tree
[  265.128168][T17051] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  265.138300][T17051] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  265.144566][T17051] BTRFS info (device loop3): setting nodatasum
[  265.148873][T17051] BTRFS info (device loop3): setting nodatacow
[  265.153128][T17051] BTRFS info (device loop3): enabling ssd optimizations
[  265.157469][T17051] BTRFS info (device loop3): turning off barriers
[  265.161750][T17051] BTRFS info (device loop3): turning on flush-on-commit
[  265.167449][T17051] BTRFS info (device loop3): enabling disk space caching
[  265.172021][T17051] BTRFS info (device loop3): force clearing of disk cache
[  265.176432][T17051] BTRFS info (device loop3): doing ref verification
[  265.180656][T17051] BTRFS info (device loop3): max_inline set to 4096
[  265.314846][T11882] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.327126][T17076] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.331896][T17076] tipc: Resetting bearer <eth:syzkaller0>
[  265.633836][T17102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  265.906959][T17108] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2639' sets config #1
[  266.186014][T17133] gtp0: entered promiscuous mode
[  266.188072][T17133] gtp0: entered allmulticast mode
[  266.688296][T17194] random: crng reseeded on system resumption
[  266.798685][T17203] loop3: detected capacity change from 0 to 256
[  266.802900][T17203] exfat: Deprecated parameter 'utf8'
[  266.805142][T17203] exfat: Deprecated parameter 'utf8'
[  266.817667][T17203] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  266.836887][T17203] exFAT-fs (loop3): error, in sector 160, dentry 12 should be unused, but 0x85
[  267.313250][T17223] loop2: detected capacity change from 0 to 32768
[  267.343152][T17223] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  267.390945][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  267.890102][ T5844] Bluetooth: hci2: command 0x0401 tx timeout
[  268.059944][T17252] loop2: detected capacity change from 0 to 131072
[  268.065882][T17252] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  268.069249][T17252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  268.073820][T17252] F2FS-fs (loop2): invalid crc value
[  268.108854][T17252] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  268.115783][T17252] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  268.118861][T17252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  269.046300][T17329] loop3: detected capacity change from 0 to 1024
[  269.049314][T17329] EXT4-fs: Ignoring removed bh option
[  269.052232][T17329] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  269.056622][T17329] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  269.061932][T17329] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  269.066201][T17329] EXT4-fs (loop3): filesystem has both journal inode and journal device!
[  269.398087][T17339] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  269.969193][T17343] loop2: detected capacity change from 0 to 32768
[  269.979004][T17343] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.991426][T17343] XFS (loop2): Ending clean mount
[  270.159242][T17360] input: syz0 as /devices/virtual/input/input23
[  270.263999][T17343] XFS (loop2): Quotacheck needed: Please wait.
[  270.296501][T17343] XFS (loop2): Quotacheck: Done.
[  270.323617][ T5846] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  270.984890][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2714'.
[  271.278639][T17416] Bluetooth: MGMT ver 1.23
[  271.700537][   T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  271.866699][   T24] usb 3-1: config 0 has an invalid interface number: 241 but max is 1
[  271.871347][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.872611][T17424] loop3: detected capacity change from 0 to 32768
[  271.875485][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  271.885005][   T24] usb 3-1: config 0 has no interface number 0
[  271.885624][T17424] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2718 (17424)
[  271.887516][   T24] usb 3-1: config 0 interface 241 altsetting 5 endpoint 0xD has an invalid bInterval 22, changing to 8
[  271.898611][   T24] usb 3-1: config 0 interface 241 has no altsetting 0
[  271.904582][   T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1608, bcdDevice=bd.4b
[  271.908430][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.917164][   T24] usb 3-1: config 0 descriptor??
[  271.925318][T17424] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  271.935318][T17424] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  272.016421][T17424] BTRFS info (device loop3): enabling ssd optimizations
[  272.018678][T17424] BTRFS info (device loop3): enabling free space tree
[  272.092881][T11882] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  272.202119][   T24] usb 3-1: string descriptor 0 read error: -71
[  272.218119][   T24] f81232 3-1:0.241: f81534a converter detected
[  272.235668][   T24] f81534a ttyUSB0: f81232_set_register failed status: -71
[  272.238562][   T24] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  272.262049][   T24] usb 3-1: USB disconnect, device number 34
[  272.265734][   T24] f81232 3-1:0.241: device disconnected
[  272.515664][T17476] mkiss: ax0: crc mode is auto.
[  272.913868][T17492] loop2: detected capacity change from 0 to 32768
[  272.923606][T17492] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  272.923606][T17492] 
[  272.926971][T17492] ERROR: (device loop2): remounting filesystem as read-only
[  272.994635][T17500] loop2: detected capacity change from 0 to 128
[  272.998069][T17500] EXT4-fs (loop2): Test dummy encryption mode enabled
[  273.010580][T17500] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  273.015531][T17500] ext4 filesystem being mounted at /818/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.043860][ T5846] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  273.305257][T17553] loop3: detected capacity change from 0 to 1024
[  273.369960][ T6330] hfsplus: b-tree write err: -5, ino 4
[  273.493723][T17578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2745'.
[  273.496920][T17578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2745'.
[  273.500817][T17567] netlink: 'syz.3.2741': attribute type 9 has an invalid length.
[  273.631096][T17591] usb usb5: usbfs: process 17591 (syz.2.2740) did not claim interface 0 before use
[  274.220251][  T794] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  274.228899][T17628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2761'.
[  274.370826][  T794] usb 4-1: Using ep0 maxpacket: 16
[  274.374535][  T794] usb 4-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config
[  274.378606][  T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  274.394057][  T794] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.397717][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.410729][  T794] usb 4-1: Product: syz
[  274.412467][  T794] usb 4-1: Manufacturer: syz
[  274.414298][  T794] usb 4-1: SerialNumber: syz
[  274.505606][T17633] loop2: detected capacity change from 0 to 32768
[  274.509122][T17633] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2763 (17633)
[  274.525295][T17633] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  274.528508][T17633] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  274.591493][T17633] BTRFS info (device loop2): enabling ssd optimizations
[  274.593748][T17633] BTRFS info (device loop2): enabling free space tree
[  274.619450][ T5846] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  274.641784][  T794] usb 4-1: 0:2 : does not exist
[  274.643860][  T794] usb 4-1: unit 9 not found!
[  274.661049][  T794] usb 4-1: USB disconnect, device number 15
[  274.684885][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  275.012904][T17695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2771'.
[  275.296505][T17721] loop2: detected capacity change from 0 to 1024
[  275.313406][T17721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  275.318765][T17708] loop3: detected capacity change from 0 to 32768
[  275.321820][T17708] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2775 (17708)
[  275.326845][T17721] ext4 filesystem being mounted at /834/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.335604][T17708] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.339258][T17708] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  275.354461][T17708] BTRFS info (device loop3): rebuilding free space tree
[  275.358392][T17721] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.2777: lblock 3 mapped to illegal pblock 3 (length 3)
[  275.358643][T17708] BTRFS info (device loop3): enabling ssd optimizations
[  275.367577][T17721] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  275.368894][T17708] BTRFS info (device loop3): using spread ssd allocation scheme
[  275.375670][T17708] BTRFS info (device loop3): enabling free space tree
[  275.378027][T17708] BTRFS info (device loop3): force clearing of disk cache
[  275.378105][T17721] EXT4-fs (loop2): This should not happen!! Data will be lost
[  275.378105][T17721] 
[  275.400321][ T5868] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  275.404676][T17721] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.2777: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  275.416378][T17721] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem
[  275.435767][T11882] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.466689][  T215] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  275.483284][  T215] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 16 with error 28
[  275.494189][  T215] EXT4-fs (loop2): This should not happen!! Data will be lost
[  275.494189][  T215] 
[  275.498677][  T215] EXT4-fs (loop2): Total free blocks count 0
[  275.501699][  T215] EXT4-fs (loop2): Free/Dirty block details
[  275.503894][  T215] EXT4-fs (loop2): free_blocks=4293918720
[  275.506064][  T215] EXT4-fs (loop2): dirty_blocks=16
[  275.508071][  T215] EXT4-fs (loop2): Block reservation details
[  275.666726][T17755] loop2: detected capacity change from 0 to 32768
[  275.673674][T17755] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  275.687419][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  275.900201][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  276.050270][    T9] usb 4-1: Using ep0 maxpacket: 32
[  276.055808][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.060137][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  276.064027][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  276.067699][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  276.072887][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26
[  276.079299][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  276.083276][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  276.086402][    T9] usb 4-1: SerialNumber: syz
[  276.091742][T17763] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  276.304831][ T5875] usb 4-1: USB disconnect, device number 16
[  277.320159][   T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  277.485022][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.497410][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.503324][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  277.506865][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.517386][   T24] usb 4-1: config 0 descriptor??
[  277.632534][T17812] loop2: detected capacity change from 0 to 4096
[  277.636456][T17812] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  277.779913][T17825] loop2: detected capacity change from 0 to 1764
[  278.011827][   T24] hid_parser_main: 5 callbacks suppressed
[  278.011847][   T24] logitech 0003:046D:C623.0014: unknown main item tag 0x0
[  278.020282][   T24] logitech 0003:046D:C623.0014: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0
[  278.140282][ T5875] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  278.230958][   T24] usb 4-1: USB disconnect, device number 17
[  278.314882][ T5875] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  278.325715][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.332481][ T5875] usb 3-1: config 0 descriptor??
[  278.341806][ T5875] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  278.796602][ T5875] gp8psk: usb in 128 operation failed.
[  278.800198][ T5875] gp8psk: usb in 137 operation failed.
[  278.802372][ T5875] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  278.806550][ T5875] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  278.819299][ T5875] usb 3-1: USB disconnect, device number 35
[  279.070191][    T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  279.242135][    T9] usb 4-1: config index 0 descriptor too short (expected 149, got 148)
[  279.245576][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.249642][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  279.256782][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  279.261070][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  279.264383][    T9] usb 4-1: SerialNumber: syz
[  279.279374][    T9] usb 4-1: 0:2 : does not exist
[  279.390284][ T5875] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  279.487105][    T9] usb 4-1: USB disconnect, device number 18
[  279.520118][ T5888] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  279.551474][ T5875] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  279.556553][ T5875] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  279.560799][ T5875] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  279.564656][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.572612][T17893] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  279.580530][ T5875] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  279.671045][ T5888] usb 3-1: Using ep0 maxpacket: 16
[  279.674176][ T5888] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  279.677485][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  279.681546][ T5888] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  279.685532][ T5888] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  279.688623][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  279.693933][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  279.696746][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  279.699450][ T5888] usb 3-1: SerialNumber: syz
[  279.705143][T17901] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  279.787034][    T9] usb 1-1: USB disconnect, device number 51
[  279.915459][ T5888] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  279.919294][ T5888] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  279.925704][ T5888] usb 3-1: USB disconnect, device number 36
[  280.060951][T17964] loop3: detected capacity change from 0 to 1764
[  280.201180][T17970] loop3: detected capacity change from 0 to 32768
[  280.232756][T17970] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  280.232770][T17970]   allowing incompatible features above 0.0: (unknown version)
[  280.232775][T17970]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  280.247750][T17970] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  280.250357][T17970] bcachefs (loop3): initializing new filesystem
[  280.257185][T17970] bcachefs (loop3): going read-write
[  280.260739][T17970] bcachefs (loop3): marking superblocks
[  280.266156][T17970] bcachefs (loop3): initializing freespace
[  280.269568][T17970] bcachefs (loop3): done initializing freespace
[  280.274545][T17970] bcachefs (loop3): reading snapshots table
[  280.276942][T17970] bcachefs (loop3): reading snapshots done
[  280.284539][T17970] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[  280.287788][T17970] bcachefs (loop3): done starting filesystem
[  280.374675][T11882] bcachefs (loop3): shutting down
[  280.377325][T11882] bcachefs (loop3): going read-only
[  280.380531][T11882] bcachefs (loop3): finished waiting for writes to stop
[  280.384854][T11882] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  280.397571][T11882] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  280.402051][T11882] bcachefs (loop3): clean shutdown complete, journal seq 4
[  280.405295][T11882] bcachefs (loop3): marking filesystem clean
[  280.408728][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2811'.
[  280.418947][T11882] bcachefs (loop3): shutdown complete
[  280.455166][T17986] netlink: 'syz.0.2811': attribute type 10 has an invalid length.
[  280.462786][T17986] bridge_slave_1: left allmulticast mode
[  280.465359][T17986] bridge_slave_1: left promiscuous mode
[  280.467981][T17986] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.476212][T17986] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  281.343872][T18013] loop3: detected capacity change from 0 to 2048
[  281.350449][T18013] EXT4-fs: Ignoring removed mblk_io_submit option
[  281.355445][T18013] EXT4-fs: Ignoring removed nobh option
[  281.374280][T18013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.399141][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.511065][T18029] loop3: detected capacity change from 0 to 512
[  281.524476][T18029] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2822: casefold flag without casefold feature
[  281.532231][T18029] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2822: couldn't read orphan inode 15 (err -117)
[  281.538104][T18029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.575351][T18038] netlink: 964 bytes leftover after parsing attributes in process `syz.0.2824'.
[  281.585956][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.713973][T18059] loop3: detected capacity change from 0 to 16
[  281.717772][T18059] erofs (device loop3): mounted with root inode @ nid 36.
[  281.768175][T18066] loop3: detected capacity change from 0 to 1024
[  281.806016][T18066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.840930][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.060147][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  282.230293][    T9] usb 3-1: Using ep0 maxpacket: 32
[  282.242344][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.259714][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.270196][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  282.273774][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.286787][    T9] usb 3-1: config 0 descriptor??
[  282.299224][    T9] hub 3-1:0.0: USB hub found
[  282.519363][    T9] hub 3-1:0.0: config failed, hub has too many ports! (err -19)
[  282.705382][T18101] loop3: detected capacity change from 0 to 512
[  282.715031][T18101] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  282.718484][T18101] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  282.735467][T18101] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  282.738776][T18101] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  282.743202][T18101] System zones: 0-2, 18-18, 34-35
[  282.754556][T18101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.756129][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  282.764209][T18101] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2841: corrupted xattr block 33: bad e_name length
[  282.768211][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  282.773705][   T33] audit: type=1800 audit(1755906847.125:109): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2841" name="file1" dev="loop3" ino=15 res=0 errno=0
[  282.801574][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.813832][    T9] usb 3-1: USB disconnect, device number 37
[  282.843648][T18114] netlink: 'syz.3.2842': attribute type 13 has an invalid length.
[  282.846580][T18114] netlink: 'syz.3.2842': attribute type 17 has an invalid length.
[  282.971299][T18114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.153070][T18137] loop3: detected capacity change from 0 to 512
[  283.156719][T18137] EXT4-fs: Ignoring removed oldalloc option
[  283.169400][T18137] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.2848: Parent and EA inode have the same ino 15
[  283.182357][T18137] EXT4-fs (loop3): 1 orphan inode deleted
[  283.186629][T18137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.203751][T18137] EXT4-fs: can't change dax mount option while remounting
[  283.223518][T11882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.310173][    T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  283.330701][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'.
[  283.333984][T18146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.363262][T18146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.488752][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  283.493552][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  283.498049][    T9] usb 1-1: config 129 has an invalid interface number: 135 but max is 1
[  283.502640][    T9] usb 1-1: config 129 has no interface number 1
[  283.506855][    T9] usb 1-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  283.520495][    T9] usb 1-1: config 129 interface 135 has no altsetting 0
[  283.524540][    T9] usb 1-1: config 129 interface 0 has no altsetting 0
[  283.531526][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  283.537441][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.541144][    T9] usb 1-1: Product: syz
[  283.543172][    T9] usb 1-1: Manufacturer: syz
[  283.545269][    T9] usb 1-1: SerialNumber: syz
[  283.789949][    T9] au0828: au0828: Device initialization failed.
[  283.795088][    T9] au0828: au0828: Device must be connected to a high-speed USB 2.0 port.
[  283.801901][    T9] usb 1-1: USB disconnect, device number 52
[  283.980112][ T5888] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  284.150587][ T5888] usb 3-1: Using ep0 maxpacket: 32
[  284.159032][ T5888] usb 3-1: unable to get BOS descriptor or descriptor too short
[  284.169611][ T5888] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  284.177415][ T5888] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  284.181731][ T5888] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  284.185467][ T5888] usb 3-1: config 128 has no interface number 0
[  284.187972][ T5888] usb 3-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  284.193816][ T5888] usb 3-1: config 128 interface 127 has no altsetting 0
[  284.199756][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  284.204010][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.207326][ T5888] usb 3-1: Product: syz
[  284.209097][ T5888] usb 3-1: Manufacturer: syz
[  284.211849][ T5888] usb 3-1: SerialNumber: syz
[  284.369113][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'.
[  284.443214][T18180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  284.445992][T18180] IPv6: NLM_F_CREATE should be set when creating new route
[  284.448559][T18180] IPv6: NLM_F_CREATE should be set when creating new route
[  284.479909][T18190] loop3: detected capacity change from 0 to 8
[  284.485773][T18190] SQUASHFS error: Unable to read inode 0x127
[  284.506063][ T5888] usb 3-1: USB disconnect, device number 38
[  284.540274][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.564527][T18215] loop3: detected capacity change from 0 to 512
[  284.568276][T18215] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  284.572627][T18215] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  284.575158][T18215] EXT4-fs (loop3): failed to initialize system zone (-117)
[  284.577441][T18215] EXT4-fs (loop3): mount failed
[  284.639955][T18227] comedi comedi0: Minor -2147450880 is invalid!
[  284.684938][T18229] loop3: detected capacity change from 0 to 128
[  284.703071][T18229] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  284.711072][T18229] ext4 filesystem being mounted at /552/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  284.723024][T18229] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  284.737614][T11882] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  284.802263][T18242] loop3: detected capacity change from 0 to 256
[  284.808223][T18242] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  284.947544][ T9219] syz_tun (unregistering): left allmulticast mode
[  284.996227][T18264] netlink: 'syz.3.2872': attribute type 1 has an invalid length.
[  285.099934][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.223181][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.299030][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  285.303303][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  285.305677][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  285.308208][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  285.311668][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  285.322530][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.377955][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.528678][T18282] chnl_net:caif_netlink_parms(): no params data found
[  285.541975][   T13] bridge0: port 3(dummy0) entered disabled state
[  285.545217][   T13] bridge_slave_0: left allmulticast mode
[  285.547535][   T13] bridge_slave_0: left promiscuous mode
[  285.553468][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.745064][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.752057][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.756286][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  285.759815][   T13] bond0 (unregistering): Released all slaves
[  285.833178][T18282] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.840601][T18282] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.845480][T18282] bridge_slave_0: entered allmulticast mode
[  285.854074][T18282] bridge_slave_0: entered promiscuous mode
[  285.869169][T18282] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.881431][T18282] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.884748][T18282] bridge_slave_1: entered allmulticast mode
[  285.899556][T18282] bridge_slave_1: entered promiscuous mode
[  285.913473][   T13] tipc: Left network mode
[  285.989258][T18282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.007774][T18282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.054081][T18281] loop3: detected capacity change from 0 to 262144
[  286.058101][T18281] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2878 (18281)
[  286.065528][T18281] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  286.069577][T18281] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  286.110527][T18282] team0: Port device team_slave_0 added
[  286.126074][T18282] team0: Port device team_slave_1 added
[  286.158460][T18281] BTRFS info (device loop3): enabling ssd optimizations
[  286.161290][T18281] BTRFS info (device loop3): using spread ssd allocation scheme
[  286.163948][T18281] BTRFS info (device loop3): enabling free space tree
[  286.177013][   T33] audit: type=1800 audit(1755906850.525:110): pid=18281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2878" name="bus" dev="loop3" ino=263 res=0 errno=0
[  286.208103][   T13] hsr_slave_0: left promiscuous mode
[  286.210852][   T13] hsr_slave_1: left promiscuous mode
[  286.212985][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.217356][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.219924][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.240353][   T33] audit: type=1800 audit(1755906850.585:111): pid=18281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2878" name="file1" dev="loop3" ino=260 res=0 errno=0
[  286.249419][   T13] veth1_macvtap: left promiscuous mode
[  286.261824][   T13] veth0_macvtap: left promiscuous mode
[  286.263856][   T13] veth1_vlan: left promiscuous mode
[  286.265893][   T13] veth0_vlan: left promiscuous mode
[  286.342995][T11882] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  286.496810][   T13] team0 (unregistering): Port device team_slave_1 removed
[  286.508481][   T13] team0 (unregistering): Port device team_slave_0 removed
[  286.639599][T18282] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.667059][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.678215][T18282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.685992][T18282] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.688801][T18282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.699422][T18282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.781064][T18282] hsr_slave_0: entered promiscuous mode
[  286.783718][T18282] hsr_slave_1: entered promiscuous mode
[  286.786488][T18282] debugfs: 'hsr0' already exists in 'hsr'
[  286.788349][T18282] Cannot create hsr debugfs directory
[  286.973469][   T13] IPVS: stop unused estimator thread 0...
[  286.995638][   T13] ------------[ cut here ]------------
[  286.997742][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  287.001521][   T13] Modules linked in:
[  287.004041][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  287.008529][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.012017][   T13] Workqueue: netns cleanup_net
[  287.013465][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  287.015129][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 c0 e1 f7 e8 74 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  287.021894][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  287.023984][   T13] RAX: ffffffff8a2215bc RBX: ffff88801bfcc880 RCX: ffff88801c6f8000
[  287.026399][   T13] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c6f8000
[  287.028755][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  287.031201][   T13] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  287.033644][   T13] R13: 1ffff92000020f40 R14: ffff88801bfcdd00 R15: dffffc0000000000
[  287.038993][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  287.042547][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.045313][   T13] CR2: 00007ff243dff000 CR3: 000000001d6c8000 CR4: 00000000000006f0
[  287.048599][   T13] Call Trace:
[  287.049747][   T13]  <TASK>
[  287.050957][   T13]  xfrm_net_exit+0x2d/0x70
[  287.052345][   T13]  ops_undo_list+0x49a/0x990
[  287.054046][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  287.055645][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  287.057369][   T13]  cleanup_net+0x4c5/0x800
[  287.059064][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  287.060990][   T13]  ? rcu_is_watching+0x15/0xb0
[  287.062453][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  287.064319][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  287.067834][   T13]  process_scheduled_works+0xae1/0x17b0
[  287.070132][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  287.072365][   T13]  worker_thread+0x8a0/0xda0
[  287.074019][   T13]  kthread+0x711/0x8a0
[  287.075490][   T13]  ? __pfx_worker_thread+0x10/0x10
[  287.077331][   T13]  ? __pfx_kthread+0x10/0x10
[  287.078991][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.080945][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.082579][   T13]  ? __pfx_kthread+0x10/0x10
[  287.084337][   T13]  ret_from_fork+0x3fc/0x770
[  287.086142][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  287.088189][   T13]  ? __switch_to_asm+0x39/0x70
[  287.090885][   T13]  ? __switch_to_asm+0x33/0x70
[  287.092722][   T13]  ? __pfx_kthread+0x10/0x10
[  287.094554][   T13]  ret_from_fork_asm+0x1a/0x30
[  287.096477][   T13]  </TASK>
[  287.097715][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  287.100556][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  287.104002][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  287.107821][   T13] Workqueue: netns cleanup_net
[  287.109675][   T13] Call Trace:
[  287.110984][   T13]  <TASK>
[  287.112189][   T13]  dump_stack_lvl+0x99/0x250
[  287.113735][   T13]  ? __asan_memcpy+0x40/0x70
[  287.115520][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.117534][   T13]  ? __pfx__printk+0x10/0x10
[  287.119349][   T13]  vpanic+0x281/0x750
[  287.120908][   T13]  ? __pfx__printk+0x10/0x10
[  287.122741][   T13]  ? __pfx_vpanic+0x10/0x10
[  287.124684][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  287.126728][   T13]  panic+0xb9/0xc0
[  287.128205][   T13]  ? __pfx_panic+0x10/0x10
[  287.129939][   T13]  __warn+0x31b/0x4b0
[  287.131519][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  287.133439][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  287.135375][   T13]  report_bug+0x2be/0x4f0
[  287.137040][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  287.139012][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  287.140940][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  287.142863][   T13]  handle_bug+0x84/0x160
[  287.144524][   T13]  exc_invalid_op+0x1a/0x50
[  287.146373][   T13]  asm_exc_invalid_op+0x1a/0x20
[  287.148312][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  287.150446][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 c0 e1 f7 e8 74 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  287.157208][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  287.159275][   T13] RAX: ffffffff8a2215bc RBX: ffff88801bfcc880 RCX: ffff88801c6f8000
[  287.161651][   T13] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c6f8000
[  287.164225][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  287.166987][   T13] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  287.169952][   T13] R13: 1ffff92000020f40 R14: ffff88801bfcdd00 R15: dffffc0000000000
[  287.172818][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  287.174722][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  287.176495][   T13]  xfrm_net_exit+0x2d/0x70
[  287.178084][   T13]  ops_undo_list+0x49a/0x990
[  287.179652][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  287.181364][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  287.183092][   T13]  cleanup_net+0x4c5/0x800
[  287.184821][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  287.186707][   T13]  ? rcu_is_watching+0x15/0xb0
[  287.188506][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  287.190354][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  287.192204][   T13]  process_scheduled_works+0xae1/0x17b0
[  287.194323][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  287.196315][   T13]  worker_thread+0x8a0/0xda0
[  287.198025][   T13]  kthread+0x711/0x8a0
[  287.199580][   T13]  ? __pfx_worker_thread+0x10/0x10
[  287.201475][   T13]  ? __pfx_kthread+0x10/0x10
[  287.203142][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.205137][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.207072][   T13]  ? __pfx_kthread+0x10/0x10
[  287.208723][   T13]  ret_from_fork+0x3fc/0x770
[  287.210102][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  287.211676][   T13]  ? __switch_to_asm+0x39/0x70
[  287.213289][   T13]  ? __switch_to_asm+0x33/0x70
[  287.214930][   T13]  ? __pfx_kthread+0x10/0x10
[  287.216334][   T13]  ret_from_fork_asm+0x1a/0x30
[  287.217782][   T13]  </TASK>
[  287.219319][   T13] Kernel Offset: disabled
[  287.220552][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:45:39  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81fb07cc RBX=ffffea00010ce1c0 RCX=ffffffff81fb07d9 RDX=0000000000000001
RSI=0000000000000008 RDI=ffffea00010ce1c0 RBP=ffffea00010ce1c8 RSP=ffffc90004577528
R8 =ffffea00010ce1c7 R9 =1ffffd4000219c38 R10=dffffc0000000000 R11=fffff94000219c39
R12=dffffc0000000000 R13=1ffffd4000219c39 R14=0000000000000000 R15=1ffffd4000219c38
RIP=ffffffff8222fc65 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc40ad5ec80 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555580e4a5c8 CR3=0000000105344000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3207612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff888020ac0237 R9 =1ffff11004158046 R10=dffffc0000000000 R11=ffffffff854f1d00
R12=dffffc0000000000 R13=ffffffff99afa8f3 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff243dff000 CR3=000000001d6c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=00000000ff000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
